Extracting prog: 2m59.950685995s Minimizing prog: 45m0.579302384s Simplifying prog options: 0s Extracting C: 1m13.336913252s Simplifying C: 9m46.137564717s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x0, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x0, &(0x7f00000002c0)) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0]) program did not crash extracting C reproducer testing compiled C program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) simplifying C reproducer testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program did not crash testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing compiled C program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) validation run: crashed=true testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) validation run: crashed=true testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-socket-setsockopt$sock_linger-io_submit detailed listing: executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x3}, 0x8) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0}, 0x0, 0x0]) program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM) validation run: crashed=true reproducing took 1h1m25.164084598s repro crashed as (corrupted=false): panic: running on goroutine 884 (task goroutine for kernel.Task 0xc0010f6008 is 832) goroutine 884 gp=0xc000811880 m=24 mp=0xc000e16808 [running]: panic({0x22cb060?, 0xc001218050?}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x168 fp=0xc000b19738 sp=0xc000b19688 pc=0x4bc308 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc0010f6008) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ee fp=0xc000b197b8 sp=0xc000b19738 pc=0x13961ce gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc0010f6008, 0xc000d978f0, 0xc000d97810) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xbd fp=0xc000b198d0 sp=0xc000b197b8 pc=0x135793d gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc0010f6008, 0xc000d978f0, {0x2812a58, 0xc0004719f0}, {0xc0004719f8?}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xfb fp=0xc000b19938 sp=0xc000b198d0 pc=0x135723b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc0010f6008, 0xc000d978f0, 0x1, {0x0?}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x1ba fp=0xc000b19998 sp=0xc000b19938 pc=0x1356b1a gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc00150d2c0, {0x281f6a8, 0xc000e13e80}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x929 fp=0xc000b19af0 sp=0xc000b19998 pc=0x164f349 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x798 fp=0xc000b19c48 sp=0xc000b19af0 pc=0xcef838 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc00150d2c0, 0xc000b0dce8) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0x104 fp=0xc000b19cd8 sp=0xc000b19c48 pc=0xcfe644 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc00150d2c0, {0x281f6a8, 0xc000e13e80}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xe5 fp=0xc000b19d18 sp=0xc000b19cd8 pc=0xcef065 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x50 fp=0xc000b19d58 sp=0xc000b19d18 pc=0x170c5f0 runtime.deferreturn() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x5e fp=0xc000b19de8 sp=0xc000b19d58 pc=0x47fd3e gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x281f6a8, 0xc000e13e80}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x6bb fp=0xc000b19fa0 sp=0xc000b19de8 pc=0x170c47b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x62 fp=0xc000b19fe0 sp=0xc000b19fa0 pc=0x12c5562 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_amd64.s:1693 +0x1 fp=0xc000b19fe8 sp=0xc000b19fe0 pc=0x4c5b61 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 832 /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2dd final repro crashed as (corrupted=false): panic: running on goroutine 884 (task goroutine for kernel.Task 0xc0010f6008 is 832) goroutine 884 gp=0xc000811880 m=24 mp=0xc000e16808 [running]: panic({0x22cb060?, 0xc001218050?}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:802 +0x168 fp=0xc000b19738 sp=0xc000b19688 pc=0x4bc308 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc0010f6008) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:378 +0x1ee fp=0xc000b197b8 sp=0xc000b19738 pc=0x13961ce gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).block(0xc0010f6008, 0xc000d978f0, 0xc000d97810) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:169 +0xbd fp=0xc000b198d0 sp=0xc000b197b8 pc=0x135793d gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).blockWithDeadlineFromSampledClock(0xc0010f6008, 0xc000d978f0, {0x2812a58, 0xc0004719f0}, {0xc0004719f8?}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:134 +0xfb fp=0xc000b19938 sp=0xc000b198d0 pc=0x135723b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).BlockWithDeadline(0xc0010f6008, 0xc000d978f0, 0x1, {0x0?}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_block.go:87 +0x1ba fp=0xc000b19998 sp=0xc000b19938 pc=0x1356b1a gvisor.dev/gvisor/pkg/sentry/socket/netstack.(*sock).Release(0xc00150d2c0, {0x281f6a8, 0xc000e13e80}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/netstack/netstack.go:497 +0x929 fp=0xc000b19af0 sp=0xc000b19998 pc=0x164f349 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:205 +0x798 fp=0xc000b19c48 sp=0xc000b19af0 pc=0xcef838 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc00150d2c0, 0xc000b0dce8) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description_refs.go:133 +0x104 fp=0xc000b19cd8 sp=0xc000b19c48 pc=0xcfe644 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc00150d2c0, {0x281f6a8, 0xc000e13e80}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:161 +0xe5 fp=0xc000b19d18 sp=0xc000b19cd8 pc=0xcef065 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1.deferwrap1() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:344 +0x50 fp=0xc000b19d58 sp=0xc000b19d18 pc=0x170c5f0 runtime.deferreturn() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/panic.go:589 +0x5e fp=0xc000b19de8 sp=0xc000b19d58 pc=0x47fd3e gvisor.dev/gvisor/pkg/sentry/syscalls/linux.submitCallback.getAIOCallback.func1({0x281f6a8, 0xc000e13e80}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_aio.go:383 +0x6bb fp=0xc000b19fa0 sp=0xc000b19de8 pc=0x170c47b gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO.func1() /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:30 +0x62 fp=0xc000b19fe0 sp=0xc000b19fa0 pc=0x12c5562 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/go/src/runtime/asm_amd64.s:1693 +0x1 fp=0xc000b19fe8 sp=0xc000b19fe0 pc=0x4c5b61 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).QueueAIO in goroutine 832 /syzkaller/.cache/bazel/_bazel_root/f7703b114ac438908ec6c9b5d03b6a0a/sandbox/linux-sandbox/3/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/aio.go:29 +0x2dd