Extracting prog: 58.126139856s
Minimizing prog: 10m28.686171118s
Simplifying prog options: 0s
Extracting C: 32.160513709s
Simplifying C: 3m7.283532808s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(0x0, 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0), 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

program did not crash
testing program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
detailed listing:
executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0xffffff64, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$perf(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x8, 0x12, r1, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=57.08068269s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
simplifying C reproducer
testing compiled C program (duration=57.08068269s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=57.08068269s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=57.08068269s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=57.08068269s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
testing compiled C program (duration=57.08068269s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program did not crash
testing compiled C program (duration=57.08068269s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-pwrite64-openat$zero-mmap$perf-syz_mount_image$fuse-openat$fuse
program crashed: panic: nested locking: tmpfs.filesystemRWMutex:
reproducing took 15m6.256377241s
repro crashed as (corrupted=false):
panic: nested locking: tmpfs.filesystemRWMutex:
	goroutine 137 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc0009b7998)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x4d
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).OpenAt(0xc0009b7930, {0x2061a40, 0xc000d17908}, 0xc000249b08, {0x8002, 0x0, 0x0})
		pkg/sentry/fsimpl/tmpfs/filesystem.go:348 +0xea
	gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).OpenAt(0xc0002471e0, {0x2061a40, 0xc000d17908}, 0xc0008a0f00, 0xc0008d9568, 0xc0008d949c)
		pkg/sentry/vfs/vfs.go:475 +0x686
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.openat(0xc000d17908, 0xffffff9c, 0x20000280, 0x2, 0x0)
		pkg/sentry/syscalls/linux/sys_file.go:112 +0x41d
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Openat(0xc000d17908, 0x0?, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/syscalls/linux/sys_file.go:91 +0xc6
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000d17908, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/kernel/task_syscall.go:143 +0xb9f
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000d17908, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/kernel/task_syscall.go:323 +0x85
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000d17908, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/kernel/task_syscall.go:283 +0xc7
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000d17908)
		pkg/sentry/kernel/task_syscall.go:258 +0x54a
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000d17908?, 0xc000d17908)
		pkg/sentry/kernel/task_run.go:269 +0x2295
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000d17908, 0x7)
		pkg/sentry/kernel/task_run.go:97 +0x41b
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 180
		pkg/sentry/kernel/task_start.go:400 +0x185
	

final repro crashed as (corrupted=false):
panic: nested locking: tmpfs.filesystemRWMutex:
	goroutine 137 [running]:
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystemRWMutex).RLock(0xc0009b7998)
		bazel-out/k8-fastbuild/bin/pkg/sentry/fsimpl/tmpfs/filesystem_mutex.go:59 +0x4d
	gvisor.dev/gvisor/pkg/sentry/fsimpl/tmpfs.(*filesystem).OpenAt(0xc0009b7930, {0x2061a40, 0xc000d17908}, 0xc000249b08, {0x8002, 0x0, 0x0})
		pkg/sentry/fsimpl/tmpfs/filesystem.go:348 +0xea
	gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).OpenAt(0xc0002471e0, {0x2061a40, 0xc000d17908}, 0xc0008a0f00, 0xc0008d9568, 0xc0008d949c)
		pkg/sentry/vfs/vfs.go:475 +0x686
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.openat(0xc000d17908, 0xffffff9c, 0x20000280, 0x2, 0x0)
		pkg/sentry/syscalls/linux/sys_file.go:112 +0x41d
	gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Openat(0xc000d17908, 0x0?, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/syscalls/linux/sys_file.go:91 +0xc6
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000d17908, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/kernel/task_syscall.go:143 +0xb9f
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000d17908, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/kernel/task_syscall.go:323 +0x85
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000d17908, 0x101, {{0xffffffffffffff9c}, {0x20000280}, {0x2}, {0x0}, {0x7f3f94429c08}, {0x55a5a82e0a50}})
		pkg/sentry/kernel/task_syscall.go:283 +0xc7
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000d17908)
		pkg/sentry/kernel/task_syscall.go:258 +0x54a
	gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000d17908?, 0xc000d17908)
		pkg/sentry/kernel/task_run.go:269 +0x2295
	gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000d17908, 0x7)
		pkg/sentry/kernel/task_run.go:97 +0x41b
	created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 180
		pkg/sentry/kernel/task_start.go:400 +0x185