Extracting prog: 3m45.358694172s Minimizing prog: 36m51.795288653s Simplifying prog options: 5m0.046855763s Extracting C: 5m0.826290988s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink-accept detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) accept(r1, 0x0, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink-accept detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) accept(r1, 0x0, 0x0) program crashed: panic: thread group not visible in its own or an ancestor PID namespace single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program crashed: panic: thread group not visible in its own or an ancestor PID namespace testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route detailed listing: executing program 0: syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4000014}, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000014}, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0), 0x0, 0x4000014}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink program did not crash simplifying guilty program options testing program (duration=5m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program did not crash testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program crashed: panic: thread group not visible in its own or an ancestor PID namespace validation run: crashed=true testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program crashed: panic: thread group not visible in its own or an ancestor PID namespace validation run: crashed=true testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-socket$nl_route-sendmsg$netlink detailed listing: executing program 0: r0 = syz_clone(0x68308000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4000014}, 0x0) program crashed: panic: thread group not visible in its own or an ancestor PID namespace validation run: crashed=true reproducing took 58m26.010041511s repro crashed as (corrupted=false): panic: thread group not visible in its own or an ancestor PID namespace goroutine 106341 gp=0xc001e441e0 m=43 mp=0xc000581808 [running]: panic({0x25d28a0?, 0x2931e20?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/go/src/runtime/panic.go:879 +0x16f fp=0xc002e28dd8 sp=0xc002e28d28 pc=0x4c896f gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).PIDNamespacedIDs(0xc001765c08) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/threads.go:377 +0x2eb fp=0xc002e28e88 sp=0xc002e28dd8 pc=0x15b036b gvisor.dev/gvisor/pkg/sentry/socket/control.NewSCMCredentials(0xc002568008, {{{}}, 0xc7e990?, 0xc0?, 0xc?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/control/control.go:80 +0x3ef fp=0xc002e28f18 sp=0xc002e28e88 pc=0x1644a2f gvisor.dev/gvisor/pkg/sentry/socket/control.Parse(0xc002568008, {0x288f4c0, 0xc0010881e0}, {0xc000c7e960, 0x60, 0x60}, 0x8) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/control/control.go:484 +0xd30 fp=0xc002e29190 sp=0xc002e28f18 pc=0x164afd0 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.sendSingleMsg(0xc002568008, {0x7f9e28174190, 0xc0010881e0}, 0xc0010881e0, 0x200000002b40, 0x0) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_socket.go:1097 +0x5fc fp=0xc002e29590 sp=0xc002e29190 pc=0x19c861c gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SendMsg(0xc002568008, 0xc002e296f0?, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_socket.go:988 +0x6b4 fp=0xc002e29698 sp=0xc002e29590 pc=0x19c6114 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc002568008, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0x1032 fp=0xc002e29948 sp=0xc002e29698 pc=0x159be52 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc002568008, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xc5 fp=0xc002e299f0 sp=0xc002e29948 pc=0x159ee45 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc002568008, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0x108 fp=0xc002e29a60 sp=0xc002e299f0 pc=0x159e2c8 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc002568008) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x908 fp=0xc002e29b88 sp=0xc002e29a60 pc=0x159db88 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc002568008?, 0xc002568008) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x30ec fp=0xc002e29e68 sp=0xc002e29b88 pc=0x157e3cc gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc002568008, 0xbaa) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x6e7 fp=0xc002e29fb0 sp=0xc002e29e68 pc=0x157a9a7 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x39 fp=0xc002e29fe0 sp=0xc002e29fb0 pc=0x1598c39 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0xc002e29fe8 sp=0xc002e29fe0 pc=0x4d1bc1 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 107346 /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x1be final repro crashed as (corrupted=false): panic: thread group not visible in its own or an ancestor PID namespace goroutine 106341 gp=0xc001e441e0 m=43 mp=0xc000581808 [running]: panic({0x25d28a0?, 0x2931e20?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/go/src/runtime/panic.go:879 +0x16f fp=0xc002e28dd8 sp=0xc002e28d28 pc=0x4c896f gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).PIDNamespacedIDs(0xc001765c08) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/threads.go:377 +0x2eb fp=0xc002e28e88 sp=0xc002e28dd8 pc=0x15b036b gvisor.dev/gvisor/pkg/sentry/socket/control.NewSCMCredentials(0xc002568008, {{{}}, 0xc7e990?, 0xc0?, 0xc?}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/control/control.go:80 +0x3ef fp=0xc002e28f18 sp=0xc002e28e88 pc=0x1644a2f gvisor.dev/gvisor/pkg/sentry/socket/control.Parse(0xc002568008, {0x288f4c0, 0xc0010881e0}, {0xc000c7e960, 0x60, 0x60}, 0x8) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/socket/control/control.go:484 +0xd30 fp=0xc002e29190 sp=0xc002e28f18 pc=0x164afd0 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.sendSingleMsg(0xc002568008, {0x7f9e28174190, 0xc0010881e0}, 0xc0010881e0, 0x200000002b40, 0x0) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_socket.go:1097 +0x5fc fp=0xc002e29590 sp=0xc002e29190 pc=0x19c861c gvisor.dev/gvisor/pkg/sentry/syscalls/linux.SendMsg(0xc002568008, 0xc002e296f0?, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_socket.go:988 +0x6b4 fp=0xc002e29698 sp=0xc002e29590 pc=0x19c6114 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc002568008, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0x1032 fp=0xc002e29948 sp=0xc002e29698 pc=0x159be52 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc002568008, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xc5 fp=0xc002e299f0 sp=0xc002e29948 pc=0x159ee45 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc002568008, 0x2e, {{0x3}, {0x200000002b40}, {0x0}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0x108 fp=0xc002e29a60 sp=0xc002e299f0 pc=0x159e2c8 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc002568008) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x908 fp=0xc002e29b88 sp=0xc002e29a60 pc=0x159db88 gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc002568008?, 0xc002568008) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x30ec fp=0xc002e29e68 sp=0xc002e29b88 pc=0x157e3cc gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc002568008, 0xbaa) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x6e7 fp=0xc002e29fb0 sp=0xc002e29e68 pc=0x157a9a7 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x39 fp=0xc002e29fe0 sp=0xc002e29fb0 pc=0x1598c39 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/go/src/runtime/asm_amd64.s:1771 +0x1 fp=0xc002e29fe8 sp=0xc002e29fe0 pc=0x4d1bc1 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 107346 /syzkaller/.cache/bazel/_bazel_root/3cda29e0ad466371615d977190968f26/sandbox/linux-sandbox/53/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x1be