Extracting prog: 26.516469656s
Minimizing prog: 5m30.699370528s
Simplifying prog options: 0s
Extracting C: 11.603496011s
Simplifying C: 1m14.03376258s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(0x0, 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0), 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
reproducing took 7m22.853111075s
repro crashed as (corrupted=false):
panic: nested locking: tmpfs.filesystemRWMutex:
	goroutine 113 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc00060a888)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x3c
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).OpenAt(0xc00060a820, {0x1f8d8c0, 0xc0001ca588}, 0xc000822908, {0x8002, 0x0, 0x0})
		pkg/sentry/fsimpl/tmpfs/filesystem.go:348 +0xb0
	gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).OpenAt(0xc0002cf1e0, {0x1f8d8c0, 0xc0001ca588}, 0xc00097eae0, 0xc000833560, 0xc0008334b0)
		pkg/sentry/vfs/vfs.go:475 +0x4ff
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.openat(0xc0001ca588, 0xffffff9c, 0x20000280, 0x2, 0x0)
		pkg/sentry/syscalls/linux/sys_file.go:112 +0x34f
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Openat(0xc0001ca588, 0x0?, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/syscalls/linux/sys_file.go:91 +0x46
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0001ca588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/kernel/task_syscall.go:143 +0x995
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0001ca588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/kernel/task_syscall.go:323 +0x72
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0001ca588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/kernel/task_syscall.go:283 +0x94
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0001ca588)
		pkg/sentry/kernel/task_syscall.go:258 +0x4b0
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0001ca588?, 0xc0001ca588)
		pkg/sentry/kernel/task_run.go:269 +0x1fae
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0001ca588, 0x7)
		pkg/sentry/kernel/task_run.go:97 +0x4fb
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 32
		pkg/sentry/kernel/task_start.go:400 +0x165
	

final repro crashed as (corrupted=false):
panic: nested locking: tmpfs.filesystemRWMutex:
	goroutine 113 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc00060a888)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x3c
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).OpenAt(0xc00060a820, {0x1f8d8c0, 0xc0001ca588}, 0xc000822908, {0x8002, 0x0, 0x0})
		pkg/sentry/fsimpl/tmpfs/filesystem.go:348 +0xb0
	gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).OpenAt(0xc0002cf1e0, {0x1f8d8c0, 0xc0001ca588}, 0xc00097eae0, 0xc000833560, 0xc0008334b0)
		pkg/sentry/vfs/vfs.go:475 +0x4ff
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.openat(0xc0001ca588, 0xffffff9c, 0x20000280, 0x2, 0x0)
		pkg/sentry/syscalls/linux/sys_file.go:112 +0x34f
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Openat(0xc0001ca588, 0x0?, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/syscalls/linux/sys_file.go:91 +0x46
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc0001ca588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/kernel/task_syscall.go:143 +0x995
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc0001ca588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/kernel/task_syscall.go:323 +0x72
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc0001ca588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f37252c9c08}, {0x55fb1f7f4a50}})
		pkg/sentry/kernel/task_syscall.go:283 +0x94
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc0001ca588)
		pkg/sentry/kernel/task_syscall.go:258 +0x4b0
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc0001ca588?, 0xc0001ca588)
		pkg/sentry/kernel/task_run.go:269 +0x1fae
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc0001ca588, 0x7)
		pkg/sentry/kernel/task_run.go:97 +0x4fb
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 32
		pkg/sentry/kernel/task_start.go:400 +0x165