Extracting prog: 2m5.143947854s
Minimizing prog: 35m0.344661495s
Simplifying prog options: 5m0.04712936s
Extracting C: 5m1.007381359s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 5m0s
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(0x0, 0x0) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(0x0, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
program did not crash
simplifying guilty program options
testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program did not crash
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
validation run: crashed=true
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
validation run: crashed=true
testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal
detailed listing:
executing program 0:
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
validation run: crashed=true
reproducing took 51m4.293632066s
repro crashed as (corrupted=false):
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe1eea0]

goroutine 773 gp=0xc0005e0b40 m=14 mp=0xc000101008 [running]:
panic({0x1ba6ec0?, 0x5a383f0?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/panic.go:879 +0x15c fp=0xc00136b1c0 sp=0xc00136b110 pc=0xcda1c
runtime.panicmem(...)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/panic.go:336
runtime.sigpanic()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/signal_unix.go:931 +0x2f0 fp=0xc00136b220 sp=0xc00136b1c0 pc=0xd0a10
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Debugf(0xc0014f9908, {0x1defccf, 0x15}, {0xc001521ad0, 0x1, 0x1})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_log.go:54 +0xc0 fp=0xc00136b280 sp=0xc00136b230 pc=0xe1eea0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalTimerLocked(0xc0014f9908, 0xc00151ac80, 0x1, 0x0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:464 +0x814 fp=0xc00136b3a0 sp=0xc00136b280 pc=0xe2ed94
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalLocked(...)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:400
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).SendGroupSignal(0xc0014f9908, 0xc00151ac80)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:385 +0x13c fp=0xc00136b440 sp=0xc00136b3a0 pc=0xe2e1ac
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).PIDFDSendSignal(0xc0014f8008, 0xc0011af980, 0x21, 0x0, 0x0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/pidfd.go:390 +0xbdc fp=0xc00136b570 sp=0xc00136b440 pc=0xdc9aec
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.PIDFDSendSignal(0xc0014f8008, 0x62?, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_signal.go:567 +0x4d0 fp=0xc00136b680 sp=0xc00136b570 pc=0x1192870
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0xcd4 fp=0xc00136b940 sp=0xc00136b680 pc=0xe3e2f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xa0 fp=0xc00136b9f0 sp=0xc00136b940 pc=0xe40a50
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0xe8 fp=0xc00136ba60 sp=0xc00136b9f0 pc=0xe40078
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0014f8008)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x7dc fp=0xc00136bb90 sp=0xc00136ba60 pc=0xe3fa6c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0014f8008?, 0xc0014f8008)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x264c fp=0xc00136be50 sp=0xc00136bb90 pc=0xe25eec
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0014f8008, 0xa7)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x57c fp=0xc00136bfa0 sp=0xc00136be50 pc=0xe231bc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:479 +0x38 fp=0xc00136bfd0 sp=0xc00136bfa0 pc=0xe3b908
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0xc00136bfd0 sp=0xc00136bfd0 pc=0xd67e4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 750
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:479 +0x19c

final repro crashed as (corrupted=false):
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe1eea0]

goroutine 773 gp=0xc0005e0b40 m=14 mp=0xc000101008 [running]:
panic({0x1ba6ec0?, 0x5a383f0?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/panic.go:879 +0x15c fp=0xc00136b1c0 sp=0xc00136b110 pc=0xcda1c
runtime.panicmem(...)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/panic.go:336
runtime.sigpanic()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/signal_unix.go:931 +0x2f0 fp=0xc00136b220 sp=0xc00136b1c0 pc=0xd0a10
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Debugf(0xc0014f9908, {0x1defccf, 0x15}, {0xc001521ad0, 0x1, 0x1})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_log.go:54 +0xc0 fp=0xc00136b280 sp=0xc00136b230 pc=0xe1eea0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalTimerLocked(0xc0014f9908, 0xc00151ac80, 0x1, 0x0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:464 +0x814 fp=0xc00136b3a0 sp=0xc00136b280 pc=0xe2ed94
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalLocked(...)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:400
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).SendGroupSignal(0xc0014f9908, 0xc00151ac80)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_signals.go:385 +0x13c fp=0xc00136b440 sp=0xc00136b3a0 pc=0xe2e1ac
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).PIDFDSendSignal(0xc0014f8008, 0xc0011af980, 0x21, 0x0, 0x0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/pidfd.go:390 +0xbdc fp=0xc00136b570 sp=0xc00136b440 pc=0xdc9aec
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.PIDFDSendSignal(0xc0014f8008, 0x62?, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_signal.go:567 +0x4d0 fp=0xc00136b680 sp=0xc00136b570 pc=0x1192870
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0xcd4 fp=0xc00136b940 sp=0xc00136b680 pc=0xe3e2f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xa0 fp=0xc00136b9f0 sp=0xc00136b940 pc=0xe40a50
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0014f8008, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0xe8 fp=0xc00136ba60 sp=0xc00136b9f0 pc=0xe40078
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0014f8008)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x7dc fp=0xc00136bb90 sp=0xc00136ba60 pc=0xe3fa6c
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0014f8008?, 0xc0014f8008)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x264c fp=0xc00136be50 sp=0xc00136bb90 pc=0xe25eec
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0014f8008, 0xa7)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x57c fp=0xc00136bfa0 sp=0xc00136be50 pc=0xe231bc
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:479 +0x38 fp=0xc00136bfd0 sp=0xc00136bfa0 pc=0xe3b908
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0xc00136bfd0 sp=0xc00136bfd0 pc=0xd67e4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 750
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/10/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:479 +0x19c