Extracting prog: 1m15.867846836s
Minimizing prog: 9m39.029887109s
Simplifying prog options: 0s
Extracting C: 34.32779536s
Simplifying C: 2m11.33511734s


extracting reproducer from 805 programs
testing a last program of every proc
single: executing 755 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-fsetxattr$trusted_overlay_nlink-ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL-ioctl$BTRFS_IOC_WAIT_SYNC-accept$unix-setsockopt$SO_ATTACH_FILTER-openat$fuse-write$FUSE_NOTIFY_INVAL_ENTRY-socket$nl_route-tee-dup3-ioctl$BTRFS_IOC_QUOTA_CTL-open$dir-epoll_ctl$EPOLL_CTL_MOD-ioctl$FIOCLEX-syz_clone3-fcntl$lock-getsockopt$sock_timeval-lstat-lstat-sendmsg$unix-ioctl$BTRFS_IOC_SUBVOL_GETFLAGS-ioctl$PERF_EVENT_IOC_PERIOD-mount$9p_fd-ioctl$sock_inet_SIOCGIFBRDADDR-epoll_ctl$EPOLL_CTL_DEL-syz_open_procfs$namespace-ioctl$F2FS_IOC_GARBAGE_COLLECT-fchown-flock
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x3}, 0x16, 0x2)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"1f924e716eed1433d5ed5c713d0c018a", 0x0, <r1=>0x0, {0x3, 0x4}, {0x800, 0x7}, 0x101, [0x8, 0xcc, 0x3, 0x5, 0x8, 0x5, 0x3, 0x41f7, 0x7fff, 0x0, 0x3ff, 0x2, 0xff, 0xcc2, 0x5, 0xa17b]})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r1)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x10, 0x0, 0x81, 0x8}, {0x5, 0x1, 0x5, 0x6}, {0x8979, 0x2, 0x1, 0x9}]}, 0x10)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000380)={0x24, 0x3, 0x0, {0x6, 0x3, 0x0, ',\\$'}}, 0x24)
r4 = socket$nl_route(0x10, 0x3, 0x0)
tee(r4, r3, 0x38a, 0xd)
r5 = dup3(r3, r3, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000003c0)={0x1, 0x131})
r6 = open$dir(&(0x7f0000000400)='./file0\x00', 0x40, 0x100)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000440)={0x80000000})
ioctl$FIOCLEX(r3, 0x5451)
r7 = syz_clone3(&(0x7f0000001600)={0x20008200, &(0x7f0000000480)=<r8=>0xffffffffffffffff, &(0x7f00000004c0)=<r9=>0x0, &(0x7f0000000500)=<r10=>0x0, {0x12}, &(0x7f0000000540)=""/104, 0x68, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r5}}, 0x58)
fcntl$lock(r5, 0x5, &(0x7f0000001680)={0x0, 0x2, 0x7, 0xf06, r9})
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000016c0), &(0x7f0000001700)=0x10)
lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0, <r12=>0x0})
lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r13=>0x0, <r14=>0x0})
sendmsg$unix(r2, &(0x7f0000001d40)={&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000017c0)="d8628c93446b345a47f71edd45bf60d82489405d30f063a4794c30d926d928960fc8d4a5e5865e89121deb210b78b628b121c15d1ddf9e37cd43f50fe25adeba89672a5892de579ac5162f19", 0x4c}, {&(0x7f0000001840)="5046a558e7f99550f12c306922121611d718704c957362eecb7cf12c0472a0f7c1d370a0bce8bcee84deda066cefa97349b77d781d889bdf654d7f1da2c522503abe8d2406257c7b8f71828d6f0876eabc2e6891bc0f8a42b5887bf572472b824a6fec2935e5715a4fbd98025350ceaa13805155c6b94bac2c54ff0ff13ff9dbbab45aca44b7d3a5ba406dea58d4d4a124ae672d9850cf164183f1eac1808b3084d15d80cc5fffdadf09ab2d6de87d8c20f55721061a0a8c91f9da7e626af741a9cf64888f8d037fb0cdbf1cde2b334522a8e822e170c6d01aa1075a90a81629db276f57d7fc2d", 0xe7}, {&(0x7f0000001940)="b2657b88b0f048b2c4f31ec9824d2d456a8a5fecb723048051ffea5457a0fae9e705682ac87ee464f3763f95bdd1ffee3f10ec3f4eaf6ca92e6c62f38648be9a471028f9a05b7dbea09fad09ea8b12e89e4bf35d94ff0586b39e186922d6b8d781f6a89cac4872ebb4", 0x69}, {&(0x7f00000019c0)="4cc5f341d104bfc7a472d7714e2fa59b51c8b662d71678599c048619e90cd4605ac6806a56736513864dc69d11e791666d1c2b8edb414ac35aaa4bbc4370064bbf8e99bba864a62ca32422a4d1a97abeaf39915d577e7337613f478e468483e2d7807a2619d0a61979024ad2c71af0a3d931d5b51d99002e6b2488d5f58caf1f946211e26808d21becf905b7be54b11000d87b4ae2cf8fc8710255d7a0bbc2cd3b32f76f193f76318e2faa0d7b87750cfcabb2bd89a0b61d3503fc660c", 0xbd}, {&(0x7f0000001a80)="88b2e7f108c54a278ba1a36ea551a630f8614b4c1e1936c668e5be357ed351e852105bdc85691ca0b0c90d9e7ffebc8da8215956ddae2d4d3b4f896db00c30f7c0bd9bce069b6dc284fc8e18449b74f80e3df223ab", 0x55}], 0x5, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r7, r11, r14}}}], 0x38}, 0x10040)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000001d80))
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001dc0)=0x1)
mount$9p_fd(0x0, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40), 0x19007, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x800}}, {@dfltgid={'dfltgid', 0x3d, r12}}, {@privport}, {@directio}, {@noxattr}, {@cache_none}, {@afid={'afid', 0x3d, 0x8}}, {@access_uid={'access', 0x3d, r13}}, {@cache_loose}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r11}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x3d, 0x35, 0x39, 0x5, 0x65, 0x38, 0x32], 0x2d, [0x30, 0x37, 0x38, 0x61], 0x2d, [0x33, 0xd, 0x32, 0x61], 0x2d, [0x33, 0x33, 0x30, 0x63], 0x2d, [0x65, 0x49, 0x36, 0x0, 0x32, 0x32, 0x34, 0x63]}}}, {@uid_eq={'uid', 0x3d, r13}}, {@smackfsroot={'smackfsroot', 0x3d, '+:s'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.nlink\x00'}}]}})
ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000002040)={'macsec0\x00', {0x2, 0x0, @multicast2}})
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3)
r15 = syz_open_procfs$namespace(r10, &(0x7f0000002080)='ns/pid\x00')
ioctl$F2FS_IOC_GARBAGE_COLLECT(r15, 0x4004f506, &(0x7f00000020c0))
fchown(r2, r13, r12)
flock(r15, 0x4)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe2$9p-openat$dir-openat$incfs-ioctl$BTRFS_IOC_SCRUB-socket$unix-openat$tcp_congestion-pwritev-socket$unix-dup3-ioctl$TIOCGPTLCK-openat$ptmx-openat$null-dup-write$binfmt_elf64-openat-ioctl$BTRFS_IOC_WAIT_SYNC-msgget$private-msgrcv-msgctl$IPC_RMID-syz_mount_image$fuse-syz_clone-openat$cgroup_ro-pipe2-openat$zero-mprotect-openat$cgroup_devices-sched_setparam-openat$zero-ioctl$GIO_SCRNMAP-ioctl$FS_IOC_SETVERSION
detailed listing:
executing program 0:
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa80, 0x83)
openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x12)
ioctl$BTRFS_IOC_SCRUB(r0, 0x5451, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwritev(r3, 0x0, 0x0, 0x7f, 0x8)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = dup3(r4, r2, 0x0)
ioctl$TIOCGPTLCK(r5, 0x541b, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001200), 0x40081, 0x0)
dup(r2)
write$binfmt_elf64(r7, 0x0, 0x26)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x404080, 0x1dc)
ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x5450, 0x0)
r9 = msgget$private(0x0, 0x0)
msgrcv(r9, 0x0, 0x0, 0x3, 0x0)
msgctl$IPC_RMID(r9, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000808, 0x0, 0x0, 0x8, 0x0)
syz_clone(0x40400, 0x0, 0xfffffebd, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x800)
r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_devices(r10, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
sched_setparam(0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$GIO_SCRNMAP(r6, 0x5421, &(0x7f0000000400)=""/186)
ioctl$FS_IOC_SETVERSION(r11, 0x40087602, &(0x7f0000000140)=0x100)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close-execveat$binfmt-ioctl$AUTOFS_IOC_SETTIMEOUT-semget$private-pipe-getsockopt$SO_BINDTODEVICE-fsetxattr$trusted_overlay_origin
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x5451, 0x0) (async)
semget$private(0x0, 0x1, 0x428)
pipe(&(0x7f0000000180)={<r9=>0xffffffffffffffff})
getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x2)

program crashed: DATA RACE in kernel.(*Task).Unshare
single: successfully extracted reproducer
found reproducer with 25 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close-execveat$binfmt-ioctl$AUTOFS_IOC_SETTIMEOUT-semget$private-pipe-getsockopt$SO_BINDTODEVICE
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x5451, 0x0) (async)
semget$private(0x0, 0x1, 0x428)
pipe(&(0x7f0000000180)={<r9=>0xffffffffffffffff})
getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close-execveat$binfmt-ioctl$AUTOFS_IOC_SETTIMEOUT-semget$private-pipe
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x5451, 0x0) (async)
semget$private(0x0, 0x1, 0x428)
pipe(&(0x7f0000000180))

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close-execveat$binfmt-ioctl$AUTOFS_IOC_SETTIMEOUT-semget$private
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x5451, 0x0) (async)
semget$private(0x0, 0x1, 0x428)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close-execveat$binfmt-ioctl$AUTOFS_IOC_SETTIMEOUT
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x5451, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-close
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
close(r8) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-ioctl$EXT4_IOC_CLEAR_ES_CACHE-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-write$binfmt_script-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-openat$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-bind$unix-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-socket$unix-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
socket$unix(0x1, 0x2, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-ioctl$int_in-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = fcntl$dupfd(r2, 0x406, r4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x7)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-fcntl$dupfd-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
fcntl$dupfd(r2, 0x406, r4)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-sendto$unix-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000000), 0x0, 0x24004885, 0x0, 0x0) (async)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-socketpair$unix-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-ioctl$FS_IOC_GETFSUUID-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r1, 0x0, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) (async)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-getsockopt$sock_int-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r0, 0x0, 0x0) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
unshare(0xc000680) (async, rerun: 64)
getsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 64)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r0, 0x0, 0x0) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)
unshare(0xc000680) (async, rerun: 64)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-dup3-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r0, 0x0, 0x0) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-openat$full-unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r0, 0x0, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
unshare(0xc000680) (async, rerun: 64)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-flistxattr-unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
flistxattr(r0, 0x0, 0x0) (async)
unshare(0xc000680) (async, rerun: 64)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-openat-unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x80c0, 0x0)
unshare(0xc000680) (async, rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs_ctrl-unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0)
unshare(0xc000680) (async, rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*Task).Unshare
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (async, rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(0x0) (rerun: 32)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program crashed: DATA RACE in kernel.(*Task).Unshare
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program did not crash
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program did not crash
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program did not crash
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program crashed: DATA RACE in kernel.(*Task).Unshare
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
program crashed: DATA RACE in kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

program crashed: DATA RACE in kernel.(*Task).Unshare
validation run: crashed=true
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

program crashed: DATA RACE in kernel.(*Task).Unshare
validation run: crashed=true
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-syz_create_resource$binfmt-execveat$binfmt
detailed listing:
executing program 0:
unshare(0xc000680) (rerun: 64)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

program crashed: DATA RACE in kernel.(*Task).Unshare
validation run: crashed=true
reproducing took 14m59.713265706s
repro crashed as (corrupted=false):
WARNING: DATA RACE
Write at 0x00c000f4f658 by goroutine 5716:
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Unshare()
      pkg/sentry/kernel/task_clone.go:705 +0x12f9
  gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Unshare()
      pkg/sentry/syscalls/linux/sys_thread.go:453 +0x4e
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall()
      pkg/sentry/kernel/task_syscall.go:143 +0x94b
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke()
      pkg/sentry/kernel/task_syscall.go:323 +0x71
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter()
      pkg/sentry/kernel/task_syscall.go:283 +0x93
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall()
      pkg/sentry/kernel/task_syscall.go:258 +0x48f
  gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute()
      pkg/sentry/kernel/task_run.go:269 +0x1ec8
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run()
      pkg/sentry/kernel/task_run.go:97 +0x4c9
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
      pkg/sentry/kernel/task_start.go:416 +0x44

Previous read at 0x00c000f4f658 by goroutine 5727:
  gvisor.dev/gvisor/pkg/sentry/kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1()
      pkg/sentry/kernel/fs_context.go:205 +0x44
  gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).ForEachTask()
      pkg/sentry/kernel/threads.go:520 +0x10c
  gvisor.dev/gvisor/pkg/sentry/kernel.(*FSContext).checkAndPreventSharingOutsideTG()
      pkg/sentry/kernel/fs_context.go:204 +0x124
  gvisor.dev/gvisor/pkg/sentry/kernel.(*runExecveAfterExecveCredsLock).execute()
      pkg/sentry/kernel/task_exec.go:155 +0x3c4
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run()
      pkg/sentry/kernel/task_run.go:97 +0x4c9
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
      pkg/sentry/kernel/task_start.go:416 +0x44

final repro crashed as (corrupted=false):
WARNING: DATA RACE
Write at 0x00c000f4f658 by goroutine 5716:
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Unshare()
      pkg/sentry/kernel/task_clone.go:705 +0x12f9
  gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Unshare()
      pkg/sentry/syscalls/linux/sys_thread.go:453 +0x4e
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall()
      pkg/sentry/kernel/task_syscall.go:143 +0x94b
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke()
      pkg/sentry/kernel/task_syscall.go:323 +0x71
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter()
      pkg/sentry/kernel/task_syscall.go:283 +0x93
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall()
      pkg/sentry/kernel/task_syscall.go:258 +0x48f
  gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute()
      pkg/sentry/kernel/task_run.go:269 +0x1ec8
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run()
      pkg/sentry/kernel/task_run.go:97 +0x4c9
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
      pkg/sentry/kernel/task_start.go:416 +0x44

Previous read at 0x00c000f4f658 by goroutine 5727:
  gvisor.dev/gvisor/pkg/sentry/kernel.(*FSContext).checkAndPreventSharingOutsideTG.func1()
      pkg/sentry/kernel/fs_context.go:205 +0x44
  gvisor.dev/gvisor/pkg/sentry/kernel.(*ThreadGroup).ForEachTask()
      pkg/sentry/kernel/threads.go:520 +0x10c
  gvisor.dev/gvisor/pkg/sentry/kernel.(*FSContext).checkAndPreventSharingOutsideTG()
      pkg/sentry/kernel/fs_context.go:204 +0x124
  gvisor.dev/gvisor/pkg/sentry/kernel.(*runExecveAfterExecveCredsLock).execute()
      pkg/sentry/kernel/task_exec.go:155 +0x3c4
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run()
      pkg/sentry/kernel/task_run.go:97 +0x4c9
  gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
      pkg/sentry/kernel/task_start.go:416 +0x44