Extracting prog: 22.366989639s Minimizing prog: 1m24.950537798s Simplifying prog options: 0s Extracting C: 11.32013444s Simplifying C: 1m3.613777037s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$packet-setsockopt$packet_rx_ring-setsockopt$packet_rx_ring detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$packet-setsockopt$packet_rx_ring detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$packet detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-setsockopt$packet_rx_ring detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring detailed listing: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] simplifying C reproducer testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-setsockopt$packet_rx_ring program crashed: panic: runtime error: slice bounds out of range [NUM:NUM] reproducing took 3m2.251449706s repro crashed as (corrupted=false): panic: runtime error: slice bounds out of range [4:0] goroutine 163 gp=0xc000836700 m=15 mp=0xc000101508 [running]: panic({0x12b8e20?, 0xc0003d6030?}) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000733778 sp=0xc0007336c8 pc=0x4740c8 runtime.goPanicSliceB(0x4, 0x0) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x74 fp=0xc0007337b8 sp=0xc000733778 pc=0x438f34 gvisor.dev/gvisor/pkg/abi/linux.(*TpacketReq).UnmarshalBytes(...) bazel-out/k8-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19311 gvisor.dev/gvisor/pkg/sentry/socket/netstack.setSockOptPacket(0x3f27c7e0a410?, {0xc0007338e0?, 0x40e7ff?}, {0x3f27c7e0a410?, 0xc0001fe400?}, 0xa2f101?, {0xc0006d179c?, 0x3?, 0xc0005f4000?}) pkg/sentry/socket/netstack/netstack.go:2724 +0x406 fp=0xc000733898 sp=0xc0007337b8 pc=0xba53e6 gvisor.dev/gvisor/pkg/sentry/socket/netstack.SetSockOpt(0x46e47a?, {0x15df0d8?, 0xc0005f4000?}, {0x3f27c7e0a410?, 0xc0001fe400?}, 0xa3e9c8?, 0xc000733988?, {0xc0006d179c, 0x0, 0x90}) pkg/sentry/socket/netstack/netstack.go:1873 +0x148 fp=0xc0007338f0 sp=0xc000733898 pc=0xba2468 gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).SetSockOpt(0xc0005f4000, 0xc0006d0c88?, 0x107?, 0x5?, {0xc0006d179c, 0x0?, 0x90?}) pkg/sentry/socket/netstack/netstack.go:634 +0x225 fp=0xc000733998 sp=0xc0007338f0 pc=0xb9c8e5 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SetSockOpt(0xc0006d0c88, 0x561cef390000?, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/syscalls/linux/sys_socket.go:551 +0x246 fp=0xc000733a78 sp=0xc000733998 pc=0xc2a546 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0006d0c88, 0x36, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc000733ca8 sp=0xc000733a78 pc=0xa777f7 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0006d0c88, 0x36, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc000733d00 sp=0xc000733ca8 pc=0xa78965 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0006d0c88, 0x36, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc000733d50 sp=0xc000733d00 pc=0xa78665 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0006d40b0?) pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc000733e28 sp=0xc000733d50 pc=0xa783e5 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0005bc000?, 0xc0006d0c88) pkg/sentry/kernel/task_run.go:269 +0xf17 fp=0xc000733f30 sp=0xc000733e28 pc=0xa6dbd7 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0006d0c88, 0xb) pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc000733fc0 sp=0xc000733f30 pc=0xa6c634 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc000733fe0 sp=0xc000733fc0 pc=0xa76205 runtime.goexit({}) src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000733fe8 sp=0xc000733fe0 pc=0x47d1a1 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 105 pkg/sentry/kernel/task_start.go:412 +0xc5 final repro crashed as (corrupted=false): panic: runtime error: slice bounds out of range [4:0] goroutine 163 gp=0xc000836700 m=15 mp=0xc000101508 [running]: panic({0x12b8e20?, 0xc0003d6030?}) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000733778 sp=0xc0007336c8 pc=0x4740c8 runtime.goPanicSliceB(0x4, 0x0) bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:155 +0x74 fp=0xc0007337b8 sp=0xc000733778 pc=0x438f34 gvisor.dev/gvisor/pkg/abi/linux.(*TpacketReq).UnmarshalBytes(...) bazel-out/k8-fastbuild/bin/pkg/abi/linux/linux_abi_autogen_unsafe.go:19311 gvisor.dev/gvisor/pkg/sentry/socket/netstack.setSockOptPacket(0x3f27c7e0a410?, {0xc0007338e0?, 0x40e7ff?}, {0x3f27c7e0a410?, 0xc0001fe400?}, 0xa2f101?, {0xc0006d179c?, 0x3?, 0xc0005f4000?}) pkg/sentry/socket/netstack/netstack.go:2724 +0x406 fp=0xc000733898 sp=0xc0007337b8 pc=0xba53e6 gvisor.dev/gvisor/pkg/sentry/socket/netstack.SetSockOpt(0x46e47a?, {0x15df0d8?, 0xc0005f4000?}, {0x3f27c7e0a410?, 0xc0001fe400?}, 0xa3e9c8?, 0xc000733988?, {0xc0006d179c, 0x0, 0x90}) pkg/sentry/socket/netstack/netstack.go:1873 +0x148 fp=0xc0007338f0 sp=0xc000733898 pc=0xba2468 gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).SetSockOpt(0xc0005f4000, 0xc0006d0c88?, 0x107?, 0x5?, {0xc0006d179c, 0x0?, 0x90?}) pkg/sentry/socket/netstack/netstack.go:634 +0x225 fp=0xc000733998 sp=0xc0007338f0 pc=0xb9c8e5 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SetSockOpt(0xc0006d0c88, 0x561cef390000?, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/syscalls/linux/sys_socket.go:551 +0x246 fp=0xc000733a78 sp=0xc000733998 pc=0xc2a546 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0006d0c88, 0x36, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/kernel/task_syscall.go:143 +0x657 fp=0xc000733ca8 sp=0xc000733a78 pc=0xa777f7 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0006d0c88, 0x36, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/kernel/task_syscall.go:323 +0x45 fp=0xc000733d00 sp=0xc000733ca8 pc=0xa78965 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0006d0c88, 0x36, {{0x3}, {0x107}, {0x5}, {0x0}, {0x0}, {0x7fb6cf40fe58}}) pkg/sentry/kernel/task_syscall.go:283 +0x65 fp=0xc000733d50 sp=0xc000733d00 pc=0xa78665 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0006d40b0?) pkg/sentry/kernel/task_syscall.go:258 +0x2a5 fp=0xc000733e28 sp=0xc000733d50 pc=0xa783e5 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0005bc000?, 0xc0006d0c88) pkg/sentry/kernel/task_run.go:269 +0xf17 fp=0xc000733f30 sp=0xc000733e28 pc=0xa6dbd7 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0006d0c88, 0xb) pkg/sentry/kernel/task_run.go:97 +0x214 fp=0xc000733fc0 sp=0xc000733f30 pc=0xa6c634 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:412 +0x25 fp=0xc000733fe0 sp=0xc000733fc0 pc=0xa76205 runtime.goexit({}) src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000733fe8 sp=0xc000733fe0 pc=0x47d1a1 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 105 pkg/sentry/kernel/task_start.go:412 +0xc5