Extracting prog: 2m19.483622813s
Minimizing prog: 47m47.791630141s
Simplifying prog options: 0s
Extracting C: 39.191528307s
Simplifying C: 2m16.819129655s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
single: successfully extracted reproducer
found reproducer with 13 syscalls
minimizing guilty program
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-syz_open_procfs$userns-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
fchdir(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-sendto$inet-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-socket$inet_udp-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
sendto$inet(0xffffffffffffffff, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0xffa3, 0x90, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000)=@filename='\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), 0x0, 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

program did not crash
testing program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, 0x0, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
extracting C reproducer
testing compiled C program (duration=2m7.289303881s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
simplifying C reproducer
testing compiled C program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing compiled C program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
program crashed: panic: nested locking: kernfs.filesystemRWMutex:
testing program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, 0x0, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
validation run: crashed=true
testing program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, 0x0, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
validation run: crashed=true
testing program (duration=2m7.289303881s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-socket$inet_udp-sendto$inet-syz_open_procfs$userns-openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$tmpfs-openat$sysfs-rt_sigreturn-timer_settime
detailed listing:
executing program 0:
gettid()
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x90, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x90c031, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup\x00', 0x82282, 0x1)
rt_sigreturn()
timer_settime(0x0, 0x0, 0x0, 0x0)

program crashed: panic: nested locking: kernfs.filesystemRWMutex:
validation run: crashed=true
reproducing took 57m27.349245164s
repro crashed as (corrupted=false):
panic: nested locking: kernfs.filesystemRWMutex:
	goroutine 476 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*filesystemRWMutex).Lock(0xc0011e2dd0)
		bazel-out/aarch64-fastbuild/bin/pkg/sentry/fsimpl/kernfs/filesystem_mutex.go:31 +0x40
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).DecRef(0xc000701b90, {0x1be5138, 0xc000af9208})
		pkg/sentry/fsimpl/kernfs/kernfs.go:303 +0x94
	gvisor.dev/gvisor/pkg/sentry/vfs.(*Dentry).DecRef(...)
		pkg/sentry/vfs/dentry.go:156
	gvisor.dev/gvisor/pkg/sentry/vfs.VirtualDentry.DecRef({0xc0004c1550?, 0xc000701b90?}, {0x1be5138, 0xc000af9208})
		pkg/sentry/vfs/vfs.go:1105 +0x6c
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).RemoveIf.(*FileDescription).DecRef.func2()
		pkg/sentry/vfs/file_description.go:201 +0x300
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0004b7488, 0xc00054fb88)
		bazel-out/aarch64-fastbuild/bin/pkg/sentry/vfs/file_description_refs.go:133 +0x58
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(...)
		pkg/sentry/vfs/file_description.go:161
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).RemoveIf(0xc000fefa80, {0x1be5138, 0xc000af9208}, 0x19f9950)
		pkg/sentry/kernel/fd_table.go:506 +0x160
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute.(*FDTable).DecRef.func3()
		pkg/sentry/kernel/fd_table.go:150 +0x50
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTableRefs).DecRef(0xc000fefa80, 0xc00054fd70)
		bazel-out/aarch64-fastbuild/bin/pkg/sentry/kernel/fd_table_refs.go:133 +0x58
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).DecRef(...)
		pkg/sentry/kernel/fd_table.go:149
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute(0xc000af9208?, 0xc000af9208)
		pkg/sentry/kernel/task_exit.go:301 +0x63c
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000af9208, 0x3e)
		pkg/sentry/kernel/task_run.go:97 +0x394
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 447
		pkg/sentry/kernel/task_start.go:412 +0x13c
	

final repro crashed as (corrupted=false):
panic: nested locking: kernfs.filesystemRWMutex:
	goroutine 476 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*filesystemRWMutex).Lock(0xc0011e2dd0)
		bazel-out/aarch64-fastbuild/bin/pkg/sentry/fsimpl/kernfs/filesystem_mutex.go:31 +0x40
	gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).DecRef(0xc000701b90, {0x1be5138, 0xc000af9208})
		pkg/sentry/fsimpl/kernfs/kernfs.go:303 +0x94
	gvisor.dev/gvisor/pkg/sentry/vfs.(*Dentry).DecRef(...)
		pkg/sentry/vfs/dentry.go:156
	gvisor.dev/gvisor/pkg/sentry/vfs.VirtualDentry.DecRef({0xc0004c1550?, 0xc000701b90?}, {0x1be5138, 0xc000af9208})
		pkg/sentry/vfs/vfs.go:1105 +0x6c
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).RemoveIf.(*FileDescription).DecRef.func2()
		pkg/sentry/vfs/file_description.go:201 +0x300
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescriptionRefs).DecRef(0xc0004b7488, 0xc00054fb88)
		bazel-out/aarch64-fastbuild/bin/pkg/sentry/vfs/file_description_refs.go:133 +0x58
	gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).DecRef(...)
		pkg/sentry/vfs/file_description.go:161
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).RemoveIf(0xc000fefa80, {0x1be5138, 0xc000af9208}, 0x19f9950)
		pkg/sentry/kernel/fd_table.go:506 +0x160
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute.(*FDTable).DecRef.func3()
		pkg/sentry/kernel/fd_table.go:150 +0x50
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTableRefs).DecRef(0xc000fefa80, 0xc00054fd70)
		bazel-out/aarch64-fastbuild/bin/pkg/sentry/kernel/fd_table_refs.go:133 +0x58
	gvisor.dev/gvisor/pkg/sentry/kernel.(*FDTable).DecRef(...)
		pkg/sentry/kernel/fd_table.go:149
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute(0xc000af9208?, 0xc000af9208)
		pkg/sentry/kernel/task_exit.go:301 +0x63c
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000af9208, 0x3e)
		pkg/sentry/kernel/task_run.go:97 +0x394
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 447
		pkg/sentry/kernel/task_start.go:412 +0x13c