Extracting prog: 29.314549993s
Minimizing prog: 5m30.820027852s
Simplifying prog options: 0s
Extracting C: 13.035396968s
Simplifying C: 1m17.129360574s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(0x0, 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0), 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
reproducing took 7m30.299353588s
repro crashed as (corrupted=false):
panic: nested locking: tmpfs.filesystemRWMutex:
	goroutine 263 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc00087a2d8)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x3c
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).OpenAt(0xc00087a270, {0x1f8d8c0, 0xc000270588}, 0xc00024bb08, {0x8002, 0x0, 0x0})
		pkg/sentry/fsimpl/tmpfs/filesystem.go:348 +0xb0
	gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).OpenAt(0xc0001cf1e0, {0x1f8d8c0, 0xc000270588}, 0xc00064cd20, 0xc000bdf560, 0xc000bdf4b0)
		pkg/sentry/vfs/vfs.go:475 +0x4ff
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.openat(0xc000270588, 0xffffff9c, 0x20000280, 0x2, 0x0)
		pkg/sentry/syscalls/linux/sys_file.go:112 +0x34f
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Openat(0xc000270588, 0x0?, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/syscalls/linux/sys_file.go:91 +0x46
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000270588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/kernel/task_syscall.go:143 +0x995
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000270588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/kernel/task_syscall.go:323 +0x72
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000270588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/kernel/task_syscall.go:283 +0x94
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000270588)
		pkg/sentry/kernel/task_syscall.go:258 +0x4b0
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000270588?, 0xc000270588)
		pkg/sentry/kernel/task_run.go:269 +0x1fae
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000270588, 0x7)
		pkg/sentry/kernel/task_run.go:97 +0x4fb
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 277
		pkg/sentry/kernel/task_start.go:400 +0x165
	

final repro crashed as (corrupted=false):
panic: nested locking: tmpfs.filesystemRWMutex:
	goroutine 263 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc00087a2d8)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x3c
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).OpenAt(0xc00087a270, {0x1f8d8c0, 0xc000270588}, 0xc00024bb08, {0x8002, 0x0, 0x0})
		pkg/sentry/fsimpl/tmpfs/filesystem.go:348 +0xb0
	gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).OpenAt(0xc0001cf1e0, {0x1f8d8c0, 0xc000270588}, 0xc00064cd20, 0xc000bdf560, 0xc000bdf4b0)
		pkg/sentry/vfs/vfs.go:475 +0x4ff
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.openat(0xc000270588, 0xffffff9c, 0x20000280, 0x2, 0x0)
		pkg/sentry/syscalls/linux/sys_file.go:112 +0x34f
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Openat(0xc000270588, 0x0?, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/syscalls/linux/sys_file.go:91 +0x46
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000270588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/kernel/task_syscall.go:143 +0x995
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000270588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/kernel/task_syscall.go:323 +0x72
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000270588, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f7f2491ac08}, {0x55ddd0238a50}})
		pkg/sentry/kernel/task_syscall.go:283 +0x94
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000270588)
		pkg/sentry/kernel/task_syscall.go:258 +0x4b0
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000270588?, 0xc000270588)
		pkg/sentry/kernel/task_run.go:269 +0x1fae
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000270588, 0x7)
		pkg/sentry/kernel/task_run.go:97 +0x4fb
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 277
		pkg/sentry/kernel/task_start.go:400 +0x165