Extracting prog: 1m2.359220048s
Minimizing prog: 29m3.52729581s
Simplifying prog options: 0s
Extracting C: 1m29.914964155s
Simplifying C: 3m18.177091543s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
single: successfully extracted reproducer
found reproducer with 13 syscalls
minimizing guilty program
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
fchdir(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
sendto$inet(0xffffffffffffffff, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
timer_create(0x2, 0x0, &(0x7f0000000040))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000)=@filename='\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), 0x0, 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
simplifying C reproducer
testing compiled C program (duration=1m9.684350343s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program did not crash
testing compiled C program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
validation run: crashed=true
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
validation run: crashed=true
testing program (duration=1m9.684350343s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
validation run: crashed=true
reproducing took 37m3.841923009s
repro crashed as (corrupted=false):
panic: nested locking: kernfs.filesystemRWMutex:
	goroutine 606 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*filesystemRWMutex).Lock(0xc0011ee710)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/kernfs/filesystem_mutex.go:31 +0x4d
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).DecRef(0xc000b8f050, {0x20f3bb0, 0xc001498588})
		pkg/sentry/fsimpl/kernfs/kernfs.go:303 +0x116
	gvisor.dev/gvisor/pkg/sentry/vfs.(*Dentry).DecRef(0xc000b8f050, {0x20f3bb0, 0xc001498588})
		pkg/sentry/vfs/dentry.go:156 +0x68
	gvisor.dev/gvisor/pkg/sentry/vfs.VirtualDentry.DecRef({0xc0006251e0?, 0xc000b8f050?}, {0x20f3bb0, 0xc001498588})
		pkg/sentry/vfs/vfs.go:1105 +0x5b
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
		pkg/sentry/vfs/file_description.go:201 +0x505
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc000934b88, 0xc000e97b80)
		bazel-out/k8-fastbuild/bin/pkg/sentry/vfs/file_description_refs.go:133 +0xb4
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc000934b88, {0x20f3bb0, 0xc001498588})
		pkg/sentry/vfs/file_description.go:161 +0xa5
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).RemoveIf(0xc00070e440, {0x20f3bb0, 0xc001498588}, 0x1f36640)
		pkg/sentry/kernel/fd_table.go:506 +0x1b3
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).DecRef.func1()
		pkg/sentry/kernel/fd_table.go:150 +0x65
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTableRefs).DecRef(0xc00070e440, 0xc000e97d10)
		bazel-out/k8-fastbuild/bin/pkg/sentry/kernel/fd_table_refs.go:133 +0xb4
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).DecRef(0xc00070e440, {0x20f3bb0, 0xc001498588})
		pkg/sentry/kernel/fd_table.go:149 +0xa5
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute(0xc001498588?, 0xc001498588)
		pkg/sentry/kernel/task_exit.go:301 +0x813
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001498588, 0x4f)
		pkg/sentry/kernel/task_run.go:97 +0x402
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 638
		pkg/sentry/kernel/task_start.go:412 +0x17e
	

final repro crashed as (corrupted=false):
panic: nested locking: kernfs.filesystemRWMutex:
	goroutine 606 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*filesystemRWMutex).Lock(0xc0011ee710)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/kernfs/filesystem_mutex.go:31 +0x4d
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).DecRef(0xc000b8f050, {0x20f3bb0, 0xc001498588})
		pkg/sentry/fsimpl/kernfs/kernfs.go:303 +0x116
	gvisor.dev/gvisor/pkg/sentry/vfs.(*Dentry).DecRef(0xc000b8f050, {0x20f3bb0, 0xc001498588})
		pkg/sentry/vfs/dentry.go:156 +0x68
	gvisor.dev/gvisor/pkg/sentry/vfs.VirtualDentry.DecRef({0xc0006251e0?, 0xc000b8f050?}, {0x20f3bb0, 0xc001498588})
		pkg/sentry/vfs/vfs.go:1105 +0x5b
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef.func1()
		pkg/sentry/vfs/file_description.go:201 +0x505
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc000934b88, 0xc000e97b80)
		bazel-out/k8-fastbuild/bin/pkg/sentry/vfs/file_description_refs.go:133 +0xb4
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(0xc000934b88, {0x20f3bb0, 0xc001498588})
		pkg/sentry/vfs/file_description.go:161 +0xa5
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).RemoveIf(0xc00070e440, {0x20f3bb0, 0xc001498588}, 0x1f36640)
		pkg/sentry/kernel/fd_table.go:506 +0x1b3
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).DecRef.func1()
		pkg/sentry/kernel/fd_table.go:150 +0x65
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTableRefs).DecRef(0xc00070e440, 0xc000e97d10)
		bazel-out/k8-fastbuild/bin/pkg/sentry/kernel/fd_table_refs.go:133 +0xb4
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).DecRef(0xc00070e440, {0x20f3bb0, 0xc001498588})
		pkg/sentry/kernel/fd_table.go:149 +0xa5
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute(0xc001498588?, 0xc001498588)
		pkg/sentry/kernel/task_exit.go:301 +0x813
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001498588, 0x4f)
		pkg/sentry/kernel/task_run.go:97 +0x402
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 638
		pkg/sentry/kernel/task_start.go:412 +0x17e