Extracting prog: 3m14.110390454s
Minimizing prog: 5m23.992726915s
Simplifying prog options: 0s
Extracting C: 23.292224981s
Simplifying C: 10m59.784289356s


30 programs, timeouts [15s 1m40s 6m0s]
extracting reproducer from 30 programs
single: executing 5 programs separately with timeout 15s
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-recvfrom-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route-connect$unix-recvmmsg-bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-socket$inet6_tcp-syz_genetlink_get_family_id$ethtool-ioctl$sock_SIOCGIFINDEX-sendmsg$ETHTOOL_MSG_LINKMODES_GET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-socket$key-sendmsg$key-sendmsg$key-sendmmsg
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xfff, 0x0, 0x2400}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x2000)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$nl_route-socket$nl_route-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-socket$packet-setsockopt$packet_int-socketpair$unix-ioctl$sock_SIOCGIFINDEX-sendto$packet-syz_genetlink_get_family_id$ethtool-socket$can_bcm-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$ETHTOOL_MSG_LINKMODES_GET-bpf$BPF_GET_MAP_INFO-bpf$BPF_GET_PROG_INFO-ioctl$ifreq_SIOCGIFINDEX_team-socket$nl_route-socket$nl_netfilter-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-sendmsg$TEAM_CMD_OPTIONS_GET-mmap-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32, @ANYBLOB="41a00000"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'gretap0\x00', &(0x7f0000000c80)={'gre0\x00', <r5=>0x0, 0x8, 0x700, 0x80, 0x2, {{0x17, 0x4, 0x1, 0x19, 0x5c, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x5e, [@loopback, @multicast1, @private=0xa010102]}, @ssrr={0x89, 0x13, 0x15, [@loopback, @remote, @broadcast, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0x28, [@local]}, @noop, @end, @noop, @lsrr={0x83, 0x13, 0x8a, [@remote, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1]}, @generic={0x44, 0x5, "0700ef"}, @noop]}}}}})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x8009, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'vlan0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088a8ffff", 0x1003c, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
r9 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x5c, r9, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20064804}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0], 0x0, 0xc2, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'team0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r17=>0x0})
sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="450000001000090400"/20, @ANYRES32=r17, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800800030000000000"], 0x44}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001180)={0x9e4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc27}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5d}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3fc0000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r17}}}]}}]}, 0x9e4}, 0x1, 0x0, 0x0, 0x20000441}, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
open(&(0x7f0000000580)='./file2\x00', 0x0, 0x0)

program crashed: kernel BUG in may_delete
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
open(&(0x7f0000000580)='./file2\x00', 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$incfs-open
detailed listing:
executing program 0:
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
open(&(0x7f0000000580)='./file2\x00', 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
open(&(0x7f0000000580)='./file2\x00', 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$eJzs3c9rHG0dAPDvTLJvf+U1qXqoBdtiK2nR7iaNbYOHWkHsqWCt9xqTTQjZZEN20zahSIp3BREVPHnyIvgHCNI/QYSC3qWKItrqwYO6srOztY27TaDbnb7J5wPTeWae3f1+n4admeeZh50ADq1zEXEzIkYi4lJEjOf703y51a6/03ndi+eP5ttLEq3W3b8mkeT7up+V5OsTEbETEUcj4uu3Ir6V/H/cxtb2ylytVt3ItyvN1fVKY2v78vLq3FJ1qbo2MzN9bfb67NXZqYG0cyIibnzljz/83s++euNXn3/w+3t/vvjtdlpjef2r7RikTtNL2f9F12hEbLyLYAUYydelPvXfHRliMgAA7Kl9jf/xiPhMdv0/HiPZ1SkAAABwkLS+NBb/SiJaAAAAwIGVZnNgk7SczwUYizQtlztzeD8Zx9NavdH83GJ9c22hM1d2Ikrp4nKtOpXPFZ6IUtLens7n2Ha3r+zanomIkxHxg/Fj2XZ5vl5bKHrwAwAAAA6JE7v6//8Yz/r/R4rOCwAAABiwiaITAAAAAN45/X8AAAA4+PT/AQAA4ED72u3b7aXVff71wv2tzZX6/csL1cZKeXVzvjxf31gvL9XrS9lv9q3u9Xm1en39C7G2+bDSrDaalcbW9r3V+uZa897ya4/ABgAAAIbo5Nknv0siYueLx7Kl7YOikwKGItmjPntIyLN84w9DSAgYmpGiEwAKM1p0AkBhSkUnABRur3GAvpN3fj34XAAAgHdj8lP97/8bG4CDLe1b0xpqHgDA8Lj/D4dX6fUZgFeLywQoysf2qH+b+/+dkYSWAQUAACjYWLYkaTm/FzgWaVouR3yYPRaglCwu16pTef/gt+OlI+3t6eydyZ5zhgEAAAAAAAAAAAAAAAAAAAAAAACAjlYriRYAAABwoEWkf0qyX/OPmBy/MLZ7fOCD5J/j2ToiHvzk7o8ezjWbG9Pt/X97ub/543z/lSJGMAAAAIDduv30bj8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbpxfNH891lmHH/8uWImOgZ/+zRbHU0ShFx/O9JjL7yviQiRgYQf+dxRJzqFT9ppxUT0cmiV/xjBcZPI+LEAOLDYfakffy52ev7l8a5bN37+zeaL2+r//Evje7xb6TP8efDfcY4/fQXlb7xH0ecHu19/OnGT/rEP7/P+N/8xvZ2v7rWTyMme55/ktdiVZqr65XG1vbl5dW5pepSdW1mZvra7PXZq7NTlcXlWjX/t2eM73/6l/95U/uP94k/sUf7L+yz/f9++vD5JzrFUq/4F8/3Pv+e6hM/zc99n83L7frJbnmnU37VmZ//5syb2r/Qp/0v//49TrTtmBf32f5Ld77zbJ8vBQCGoLG1vTJXq1U3PoqFNN6LNBQGUjjyfqSh0CkUfWQCAAAG7X8X/UVnAgAAAAAAAAAAAAAAAAAAAIfXMH5ObHfMnWKaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRv8NAAD//w4a23g=")
mount$incfs(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x0)
open(&(0x7f0000000580)='./file2\x00', 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000580)='./file2\x00', 0x0, 0x0)

program did not crash
testing program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
open(0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=22.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
simplifying C reproducer
testing compiled C program (duration=22.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program did not crash
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
testing compiled C program (duration=22.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount$incfs-open
program crashed: kernel BUG in may_delete
reproducing took 20m1.179675136s
repro crashed as (corrupted=false):
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
ext4 filesystem being mounted at /file1 supports timestamps until 2038 (0x7fffffff)
------------[ cut here ]------------
kernel BUG at fs/namei.c:2956!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 291 Comm: syz-executor155 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:may_delete+0x6eb/0x6f0 fs/namei.c:2956
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 66 71 f3 ff e9 72 fe ff ff e8 cc 64 ac ff 0f 0b e8 c5 64 ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 b1 64 ac ff 4c 8d
RSP: 0018:ffffc90000f17a58 EFLAGS: 00010293
RAX: ffffffff81c9210b RBX: ffff88811f8aecf0 RCX: ffff8881209e6540
RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
RBP: ffffc90000f17ac0 R08: ffffffff81c91a9f R09: 0000000000000003
R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811f8aebb0
R13: 1ffff11023f15d76 R14: ffff888100569848 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558ed2ab74d8 CR3: 000000010fe73000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vfs_rmdir+0x32/0x500 fs/namei.c:4172
 incfs_kill_sb+0x113/0x230 fs/incfs/vfs.c:1967
 deactivate_locked_super+0xad/0x110 fs/super.c:334
 deactivate_super+0xbe/0xf0 fs/super.c:365
 cleanup_mnt+0x485/0x510 fs/namespace.c:1186
 __cleanup_mnt+0x19/0x20 fs/namespace.c:1193
 task_work_run+0x24d/0x2e0 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xbd5/0x2b80 kernel/exit.c:875
 do_group_exit+0x21a/0x2d0 kernel/exit.c:1025
 __do_sys_exit_group kernel/exit.c:1036 [inline]
 __se_sys_exit_group kernel/exit.c:1034 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1034
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f618ee5fe09
Code: Unable to access opcode bytes at 0x7f618ee5fddf.
RSP: 002b:00007ffed2b8d0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f618ee5fe09
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007f618eedc370 R08: ffffffffffffffb8 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f618eedc370
R13: 0000000000000000 R14: 00007f618eedd0e0 R15: 00007f618ee2e0d0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:may_delete+0x6eb/0x6f0 fs/namei.c:2956
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 66 71 f3 ff e9 72 fe ff ff e8 cc 64 ac ff 0f 0b e8 c5 64 ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 b1 64 ac ff 4c 8d
RSP: 0018:ffffc90000f17a58 EFLAGS: 00010293
RAX: ffffffff81c9210b RBX: ffff88811f8aecf0 RCX: ffff8881209e6540
RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
RBP: ffffc90000f17ac0 R08: ffffffff81c91a9f R09: 0000000000000003
R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811f8aebb0
R13: 1ffff11023f15d76 R14: ffff888100569848 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558ed2ab74d8 CR3: 000000010fe73000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

final repro crashed as (corrupted=false):
EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
ext4 filesystem being mounted at /file1 supports timestamps until 2038 (0x7fffffff)
------------[ cut here ]------------
kernel BUG at fs/namei.c:2956!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 291 Comm: syz-executor155 Not tainted 6.1.84-syzkaller-00005-g96d66062d076 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:may_delete+0x6eb/0x6f0 fs/namei.c:2956
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 66 71 f3 ff e9 72 fe ff ff e8 cc 64 ac ff 0f 0b e8 c5 64 ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 b1 64 ac ff 4c 8d
RSP: 0018:ffffc90000f17a58 EFLAGS: 00010293
RAX: ffffffff81c9210b RBX: ffff88811f8aecf0 RCX: ffff8881209e6540
RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
RBP: ffffc90000f17ac0 R08: ffffffff81c91a9f R09: 0000000000000003
R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811f8aebb0
R13: 1ffff11023f15d76 R14: ffff888100569848 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558ed2ab74d8 CR3: 000000010fe73000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 vfs_rmdir+0x32/0x500 fs/namei.c:4172
 incfs_kill_sb+0x113/0x230 fs/incfs/vfs.c:1967
 deactivate_locked_super+0xad/0x110 fs/super.c:334
 deactivate_super+0xbe/0xf0 fs/super.c:365
 cleanup_mnt+0x485/0x510 fs/namespace.c:1186
 __cleanup_mnt+0x19/0x20 fs/namespace.c:1193
 task_work_run+0x24d/0x2e0 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0xbd5/0x2b80 kernel/exit.c:875
 do_group_exit+0x21a/0x2d0 kernel/exit.c:1025
 __do_sys_exit_group kernel/exit.c:1036 [inline]
 __se_sys_exit_group kernel/exit.c:1034 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1034
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f618ee5fe09
Code: Unable to access opcode bytes at 0x7f618ee5fddf.
RSP: 002b:00007ffed2b8d0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f618ee5fe09
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007f618eedc370 R08: ffffffffffffffb8 R09: 0000000000000006
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f618eedc370
R13: 0000000000000000 R14: 00007f618eedd0e0 R15: 00007f618ee2e0d0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:may_delete+0x6eb/0x6f0 fs/namei.c:2956
Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 66 71 f3 ff e9 72 fe ff ff e8 cc 64 ac ff 0f 0b e8 c5 64 ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 b1 64 ac ff 4c 8d
RSP: 0018:ffffc90000f17a58 EFLAGS: 00010293
RAX: ffffffff81c9210b RBX: ffff88811f8aecf0 RCX: ffff8881209e6540
RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
RBP: ffffc90000f17ac0 R08: ffffffff81c91a9f R09: 0000000000000003
R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811f8aebb0
R13: 1ffff11023f15d76 R14: ffff888100569848 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558ed2ab74d8 CR3: 000000010fe73000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400