Extracting prog: 56.734644364s
Minimizing prog: 9m54.641746105s
Simplifying prog options: 0s
Extracting C: 32.218819651s
Simplifying C: 2m35.439918452s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-epoll_ctl$EPOLL_CTL_ADD-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r3)

program crashed: panic: nested locking: kernel.taskSetRWMutex:
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-epoll_ctl$EPOLL_CTL_ADD-fcntl$setstatus-syz_clone
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-epoll_ctl$EPOLL_CTL_ADD-fcntl$setstatus-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240))

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-epoll_ctl$EPOLL_CTL_ADD-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r3)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r2)

program crashed: panic: nested locking: kernel.taskSetRWMutex:
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
getpid()
fcntl$setstatus(r0, 0x4, 0x2c00)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r1)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
syz_pidfd_open(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r1)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r2)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
close(0xffffffffffffffff)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000240)=r1)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
close(r0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r2)

program did not crash
testing program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m1.391275092s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
program crashed: panic: nested locking: kernel.taskSetRWMutex:
simplifying C reproducer
testing compiled C program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
program crashed: panic: nested locking: kernel.taskSetRWMutex:
testing compiled C program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
program crashed: panic: nested locking: kernel.taskSetRWMutex:
testing compiled C program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
program crashed: panic: nested locking: kernel.taskSetRWMutex:
testing compiled C program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
program crashed: panic: nested locking: kernel.taskSetRWMutex:
testing compiled C program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
program crashed: panic: nested locking: kernel.taskSetRWMutex:
testing program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r2)

program crashed: panic: nested locking: kernel.taskSetRWMutex:
validation run: crashed=true
testing program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r2)

program crashed: panic: nested locking: kernel.taskSetRWMutex:
validation run: crashed=true
testing program (duration=1m1.391275092s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd-close-getpid-syz_pidfd_open-fcntl$setstatus-syz_clone-ioctl$sock_FIOSETOWN
detailed listing:
executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r2)

program crashed: panic: nested locking: kernel.taskSetRWMutex:
validation run: crashed=true
reproducing took 16m6.241290687s
repro crashed as (corrupted=false):
panic: nested locking: kernel.taskSetRWMutex:
	goroutine 445 [running]:
	gvisor.dev/gvisor/pkg/sentry/kernel.(*taskSetRWMutex).RLock(0xc000018320)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/taskset_mutex.go:59 +0x98
	gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).Leader(0xc0012b9808)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/threads.go:484 +0xb4
	gvisor.dev/gvisor/pkg/sentry/kernel/fasync.(*FileAsync).NotifyEvent(0xc0002ca9a0, 0x41)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/fasync/fasync.go:107 +0x2b2
	gvisor.dev/gvisor/pkg/waiter.(*Queue).Notify(0xc001063bd0, 0x41)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/waiter/waiter.go:253 +0x13d
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).notifyPIDFDsLocked(0xc001314c88)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/pidfd.go:281 +0xed
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).exitNotifyLocked(0xc001314c88, 0x0)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_exit.go:655 +0x19b
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitNotify).execute(0xc001314c88?, 0xc001314c88)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_exit.go:634 +0x3bd
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001314c88, 0x4d)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x6e7
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 546
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:416 +0x1be
	

final repro crashed as (corrupted=false):
panic: nested locking: kernel.taskSetRWMutex:
	goroutine 445 [running]:
	gvisor.dev/gvisor/pkg/sentry/kernel.(*taskSetRWMutex).RLock(0xc000018320)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/taskset_mutex.go:59 +0x98
	gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).Leader(0xc0012b9808)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/threads.go:484 +0xb4
	gvisor.dev/gvisor/pkg/sentry/kernel/fasync.(*FileAsync).NotifyEvent(0xc0002ca9a0, 0x41)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/fasync/fasync.go:107 +0x2b2
	gvisor.dev/gvisor/pkg/waiter.(*Queue).Notify(0xc001063bd0, 0x41)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/waiter/waiter.go:253 +0x13d
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).notifyPIDFDsLocked(0xc001314c88)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/pidfd.go:281 +0xed
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).exitNotifyLocked(0xc001314c88, 0x0)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_exit.go:655 +0x19b
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitNotify).execute(0xc001314c88?, 0xc001314c88)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_exit.go:634 +0x3bd
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001314c88, 0x4d)
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x6e7
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 546
		/syzkaller/.cache/bazel/_bazel_root/a13edd57d9dad04937e1fb5843ea1532/sandbox/linux-sandbox/9/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:416 +0x1be