Extracting prog: 3m34.613637193s Minimizing prog: 45m0.581961511s Simplifying prog options: 0s Extracting C: 2m40.23970503s Simplifying C: 9m48.684390633s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x0, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x0, &(0x7f00000002c0)) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0]) program did not crash extracting C reproducer testing compiled C program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) simplifying C reproducer testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program did not crash testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) validation run: crashed=true testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) validation run: crashed=true testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) validation run: crashed=true reproducing took 1h3m33.078499125s repro crashed as (corrupted=false): panic: running on goroutine 634 (task goroutine for kernel.Task 0xc000ae7208 is 591) goroutine 634 gp=0xc001446fc0 m=21 mp=0xc000ee0808 [running]: panic({0x22cb060?, 0xc000f05100?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x168 fp=0xc000d19738 sp=0xc000d19688 pc=0x4bc308 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc000ae7208) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ee fp=0xc000d197b8 sp=0xc000d19738 pc=0x13961ce gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc000ae7208, 0xc0010a24d0, 0xc0010a2310) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xbd fp=0xc000d198d0 sp=0xc000d197b8 pc=0x135793d gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc000ae7208, 0xc0010a24d0, {0x2812a58, 0xc0000429e0}, {0xc0000429e8?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xfb fp=0xc000d19938 sp=0xc000d198d0 pc=0x135723b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc000ae7208, 0xc0010a24d0, 0x1, {0x0?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x1ba fp=0xc000d19998 sp=0xc000d19938 pc=0x1356b1a gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc0002a9a40, {0x281f6a8, 0xc00106ac70}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x929 fp=0xc000d19af0 sp=0xc000d19998 pc=0x164f349 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x798 fp=0xc000d19c48 sp=0xc000d19af0 pc=0xcef838 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0002a9a40, 0xc001297ce8) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0x104 fp=0xc000d19cd8 sp=0xc000d19c48 pc=0xcfe644 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc0002a9a40, {0x281f6a8, 0xc00106ac70}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xe5 fp=0xc000d19d18 sp=0xc000d19cd8 pc=0xcef065 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x50 fp=0xc000d19d58 sp=0xc000d19d18 pc=0x170c5f0 runtime.deferreturn() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x5e fp=0xc000d19de8 sp=0xc000d19d58 pc=0x47fd3e gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x281f6a8, 0xc00106ac70}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x6bb fp=0xc000d19fa0 sp=0xc000d19de8 pc=0x170c47b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x62 fp=0xc000d19fe0 sp=0xc000d19fa0 pc=0x12c5562 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_amd64.s:1693 +0x1 fp=0xc000d19fe8 sp=0xc000d19fe0 pc=0x4c5b61 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 591 /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2dd final repro crashed as (corrupted=false): panic: running on goroutine 634 (task goroutine for kernel.Task 0xc000ae7208 is 591) goroutine 634 gp=0xc001446fc0 m=21 mp=0xc000ee0808 [running]: panic({0x22cb060?, 0xc000f05100?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x168 fp=0xc000d19738 sp=0xc000d19688 pc=0x4bc308 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc000ae7208) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ee fp=0xc000d197b8 sp=0xc000d19738 pc=0x13961ce gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc000ae7208, 0xc0010a24d0, 0xc0010a2310) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xbd fp=0xc000d198d0 sp=0xc000d197b8 pc=0x135793d gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc000ae7208, 0xc0010a24d0, {0x2812a58, 0xc0000429e0}, {0xc0000429e8?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xfb fp=0xc000d19938 sp=0xc000d198d0 pc=0x135723b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc000ae7208, 0xc0010a24d0, 0x1, {0x0?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x1ba fp=0xc000d19998 sp=0xc000d19938 pc=0x1356b1a gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc0002a9a40, {0x281f6a8, 0xc00106ac70}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x929 fp=0xc000d19af0 sp=0xc000d19998 pc=0x164f349 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x798 fp=0xc000d19c48 sp=0xc000d19af0 pc=0xcef838 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0002a9a40, 0xc001297ce8) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0x104 fp=0xc000d19cd8 sp=0xc000d19c48 pc=0xcfe644 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc0002a9a40, {0x281f6a8, 0xc00106ac70}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xe5 fp=0xc000d19d18 sp=0xc000d19cd8 pc=0xcef065 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x50 fp=0xc000d19d58 sp=0xc000d19d18 pc=0x170c5f0 runtime.deferreturn() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x5e fp=0xc000d19de8 sp=0xc000d19d58 pc=0x47fd3e gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x281f6a8, 0xc00106ac70}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x6bb fp=0xc000d19fa0 sp=0xc000d19de8 pc=0x170c47b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x62 fp=0xc000d19fe0 sp=0xc000d19fa0 pc=0x12c5562 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_amd64.s:1693 +0x1 fp=0xc000d19fe8 sp=0xc000d19fe0 pc=0x4c5b61 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 591 /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2dd