Extracting prog: 1m15.100998769s
Minimizing prog: 12m31.034706648s
Simplifying prog options: 0s
Extracting C: 35.161553812s
Simplifying C: 2m38.532284032s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000))
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x0, &(0x7f00000002c0))

program did not crash
testing program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0])

program did not crash
extracting C reproducer
testing compiled C program (duration=1m23.40172102s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
simplifying C reproducer
testing compiled C program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
validation run: crashed=true
testing program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
validation run: crashed=true
testing program (duration=1m23.40172102s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit
detailed listing:
executing program 0:
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0])

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
validation run: crashed=true
reproducing took 19m53.169597854s
repro crashed as (corrupted=false):
panic: running on goroutine 501 (task goroutine for kernel.Task 0xc0010f3208 is 499)

goroutine 501 gp=0xc000acd6c0 m=16 mp=0xc000c00808 [running]:
panic({0x19c8300?, 0xc00116d340?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x150 fp=0xc0002bb700 sp=0xc0002bb650 pc=0xc39f0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc0010f3208)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ac fp=0xc0002bb780 sp=0xc0002bb700 pc=0xd1373c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc0010f3208, 0xc0010a7c00, 0xc0010a7ab0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xa0 fp=0xc0002bb8a0 sp=0xc0002bb780 pc=0xce0330
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc0010f3208, 0xc0010a7c00, {0x1f0f498, 0xc000045140}, {0xc0002bb968?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xd8 fp=0xc0002bb910 sp=0xc0002bb8a0 pc=0xcdfd48
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc0010f3208, 0xc0010a7c00, 0x1, {0x882f0?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x19c fp=0xc0002bb970 sp=0xc0002bb910 pc=0xcdf7bc
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc00001b900, {0x1f1bd50, 0xc00116c9c0})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x768 fp=0xc0002bbad0 sp=0xc0002bb970 pc=0xf633e8
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x64c fp=0xc0002bbc30 sp=0xc0002bbad0 pc=0x779d8c
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc00001b900, 0xc000e42cd8)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0xe0 fp=0xc0002bbcc0 sp=0xc0002bbc30 pc=0x7863a0
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc00001b900, {0x1f1bd50, 0xc00116c9c0})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xcc fp=0xc0002bbd00 sp=0xc0002bbcc0 pc=0x77970c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x4c fp=0xc0002bbd40 sp=0xc0002bbd00 pc=0xffe92c
runtime.deferreturn()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x60 fp=0xc0002bbdd0 sp=0xc0002bbd40 pc=0x88300
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x1f1bd50, 0xc00116c9c0})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x4a4 fp=0xc0002bbf90 sp=0xc0002bbdd0 pc=0xffe7f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x60 fp=0xc0002bbfd0 sp=0xc0002bbf90 pc=0xc65890
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_arm64.s:1268 +0x4 fp=0xc0002bbfd0 sp=0xc0002bbfd0 pc=0xcced4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 499
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2bc

final repro crashed as (corrupted=false):
panic: running on goroutine 501 (task goroutine for kernel.Task 0xc0010f3208 is 499)

goroutine 501 gp=0xc000acd6c0 m=16 mp=0xc000c00808 [running]:
panic({0x19c8300?, 0xc00116d340?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x150 fp=0xc0002bb700 sp=0xc0002bb650 pc=0xc39f0
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc0010f3208)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ac fp=0xc0002bb780 sp=0xc0002bb700 pc=0xd1373c
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc0010f3208, 0xc0010a7c00, 0xc0010a7ab0)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xa0 fp=0xc0002bb8a0 sp=0xc0002bb780 pc=0xce0330
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc0010f3208, 0xc0010a7c00, {0x1f0f498, 0xc000045140}, {0xc0002bb968?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xd8 fp=0xc0002bb910 sp=0xc0002bb8a0 pc=0xcdfd48
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc0010f3208, 0xc0010a7c00, 0x1, {0x882f0?})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x19c fp=0xc0002bb970 sp=0xc0002bb910 pc=0xcdf7bc
gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc00001b900, {0x1f1bd50, 0xc00116c9c0})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x768 fp=0xc0002bbad0 sp=0xc0002bb970 pc=0xf633e8
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x64c fp=0xc0002bbc30 sp=0xc0002bbad0 pc=0x779d8c
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc00001b900, 0xc000e42cd8)
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0xe0 fp=0xc0002bbcc0 sp=0xc0002bbc30 pc=0x7863a0
gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc00001b900, {0x1f1bd50, 0xc00116c9c0})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xcc fp=0xc0002bbd00 sp=0xc0002bbcc0 pc=0x77970c
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x4c fp=0xc0002bbd40 sp=0xc0002bbd00 pc=0xffe92c
runtime.deferreturn()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x60 fp=0xc0002bbdd0 sp=0xc0002bbd40 pc=0x88300
gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x1f1bd50, 0xc00116c9c0})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x4a4 fp=0xc0002bbf90 sp=0xc0002bbdd0 pc=0xffe7f4
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1()
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x60 fp=0xc0002bbfd0 sp=0xc0002bbf90 pc=0xc65890
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_arm64.s:1268 +0x4 fp=0xc0002bbfd0 sp=0xc0002bbfd0 pc=0xcced4
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 499
	/syzkaller/.cache/bazel/_bazel_root/ad3a3122cb57ff2980ff7fd3b10b2c4b/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2bc