Extracting prog: 1m13.391489326s
Minimizing prog: 12m25.0325009s
Simplifying prog options: 0s
Extracting C: 33.990673269s
Simplifying C: 2m37.15897713s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000))
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x0, &(0x7f00000002c0))

program did not crash
testing program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0])

program did not crash
extracting C reproducer
testing compiled C program (duration=1m22.735679545s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
simplifying C reproducer
testing compiled C program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
validation run: crashed=true
testing program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
validation run: crashed=true
testing program (duration=1m22.735679545s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
validation run: crashed=true
reproducing took 19m27.562304735s
repro crashed as (corrupted=false):
panic: running on goroutine 491 (task goroutine for kernel.Task 0xc0010f6c88 is 461)

goroutine 491 gp=0xc000b57c00 m=15 mp=0xc000eaa008 [running]:
panic({0x19c8300?, 0xc000cf32c0?})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x150 fp=0xc000ff5700 sp=0xc000ff5650 pc=0xc39f0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc0010f6c88)
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ac fp=0xc000ff5780 sp=0xc000ff5700 pc=0xd1373c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc0010f6c88, 0xc00115a0e0, 0xc000a89730)
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xa0 fp=0xc000ff58a0 sp=0xc000ff5780 pc=0xce0330
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc0010f6c88, 0xc00115a0e0, {0x1f0f498, 0xc000044c40}, {0xc000ff5968?})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xd8 fp=0xc000ff5910 sp=0xc000ff58a0 pc=0xcdfd48
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc0010f6c88, 0xc00115a0e0, 0x1, {0x882f0?})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x19c fp=0xc000ff5970 sp=0xc000ff5910 pc=0xcdf7bc
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc00033fa40, {0x1f1bd50, 0xc000cf2e90})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x768 fp=0xc000ff5ad0 sp=0xc000ff5970 pc=0xf633e8
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x64c fp=0xc000ff5c30 sp=0xc000ff5ad0 pc=0x779d8c
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc00033fa40, 0xc000a8dcd8)
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0xe0 fp=0xc000ff5cc0 sp=0xc000ff5c30 pc=0x7863a0
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc00033fa40, {0x1f1bd50, 0xc000cf2e90})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xcc fp=0xc000ff5d00 sp=0xc000ff5cc0 pc=0x77970c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x4c fp=0xc000ff5d40 sp=0xc000ff5d00 pc=0xffe92c
runtime.deferreturn()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x60 fp=0xc000ff5dd0 sp=0xc000ff5d40 pc=0x88300
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x1f1bd50, 0xc000cf2e90})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x4a4 fp=0xc000ff5f90 sp=0xc000ff5dd0 pc=0xffe7f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x60 fp=0xc000ff5fd0 sp=0xc000ff5f90 pc=0xc65890
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_arm64.s:1268 +0x4 fp=0xc000ff5fd0 sp=0xc000ff5fd0 pc=0xcced4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 461
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2bc

final repro crashed as (corrupted=false):
panic: running on goroutine 491 (task goroutine for kernel.Task 0xc0010f6c88 is 461)

goroutine 491 gp=0xc000b57c00 m=15 mp=0xc000eaa008 [running]:
panic({0x19c8300?, 0xc000cf32c0?})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x150 fp=0xc000ff5700 sp=0xc000ff5650 pc=0xc39f0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc0010f6c88)
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ac fp=0xc000ff5780 sp=0xc000ff5700 pc=0xd1373c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc0010f6c88, 0xc00115a0e0, 0xc000a89730)
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xa0 fp=0xc000ff58a0 sp=0xc000ff5780 pc=0xce0330
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc0010f6c88, 0xc00115a0e0, {0x1f0f498, 0xc000044c40}, {0xc000ff5968?})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xd8 fp=0xc000ff5910 sp=0xc000ff58a0 pc=0xcdfd48
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc0010f6c88, 0xc00115a0e0, 0x1, {0x882f0?})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x19c fp=0xc000ff5970 sp=0xc000ff5910 pc=0xcdf7bc
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc00033fa40, {0x1f1bd50, 0xc000cf2e90})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x768 fp=0xc000ff5ad0 sp=0xc000ff5970 pc=0xf633e8
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x64c fp=0xc000ff5c30 sp=0xc000ff5ad0 pc=0x779d8c
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc00033fa40, 0xc000a8dcd8)
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0xe0 fp=0xc000ff5cc0 sp=0xc000ff5c30 pc=0x7863a0
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc00033fa40, {0x1f1bd50, 0xc000cf2e90})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xcc fp=0xc000ff5d00 sp=0xc000ff5cc0 pc=0x77970c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x4c fp=0xc000ff5d40 sp=0xc000ff5d00 pc=0xffe92c
runtime.deferreturn()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x60 fp=0xc000ff5dd0 sp=0xc000ff5d40 pc=0x88300
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x1f1bd50, 0xc000cf2e90})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x4a4 fp=0xc000ff5f90 sp=0xc000ff5dd0 pc=0xffe7f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1()
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x60 fp=0xc000ff5fd0 sp=0xc000ff5f90 pc=0xc65890
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_arm64.s:1268 +0x4 fp=0xc000ff5fd0 sp=0xc000ff5fd0 pc=0xcced4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 461
	/syzkaller/.cache/bazel/_bazel_root/667291253eecc7994147822c94d52fd6/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2bc