Extracting prog: 5h0m41.856130611s Minimizing prog: 1h28m35.867157878s Simplifying prog options: 0s Extracting C: 3m31.985543405s Simplifying C: 28m20.002731191s extracting reproducer from 67 programs testing a last program of every proc single: executing 17 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-socket$inet-bind-listen-openat-write-close-openat-write-close-mkdirat-mount-openat-write-close-mkdirat-mount$nfs4-openat-close detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='proc\x00', &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='127.0.0.1 / 2147483647 0 0 0\n\x00', 0x1d) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r4) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet-bind$inet-listen-openat-write-write-openat-write-mkdirat-mount-openat-write-socket$inet-connect$inet-write-nanosleep detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) write(r0, &(0x7f0000000380)='+4\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61) r5 = socket$inet(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10) write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-socket$inet_tcp-bind$inet-listen-openat-write-close-openat-write-close detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-bind$inet-listen-syz_clone-accept4$inet-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-openat-write-close-openat-write-openat-openat-openat-write-close-openat-write-close-socket$inet-connect$inet-write-nanosleep-read-read-read detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-write-socket$inet-connect$inet-nanosleep-socket$inet-connect$inet-nanosleep detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f00000000f0)='/tmp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-socket$inet_tcp-bind$inet-listen-openat-write-openat-write-openat-write-socket$inet_tcp-connect$inet-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-mkdirat-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-openat-write-openat-write-write-socket$inet-connect$inet-nanosleep-socket$inet-connect$inet-nanosleep detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f00000000f0)='/tmp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-bind$inet6-mkdirat-mount-openat-write detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write-mkdirat-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-mkdirat-mount-socket$inet_tcp-bind$inet-listen-openat-write-openat-write-openat-write-socket$inet_tcp-connect$inet-write-mkdirat-mount-openat-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-sched_setaffinity-recvmmsg-mkdirat-mount-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-setns-bpf$PROG_LOAD-open_tree detailed listing: executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): epoll_create1-prctl$PR_SCHED_CORE-ioctl$UDMABUF_CREATE_LIST-setsockopt$inet_sctp6_SCTP_INITMSG-prctl$PR_SCHED_CORE-sched_setattr-syz_ublk_setup_io_uring-syz_ublk_add_dev-socket$inet6_tcp-dup-syz_ublk_setup_queues detailed listing: executing program 0: epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 67 programs with base timeout 6m0s testing program (duration=6m16s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 20, 23, 3, 3, 16, 15, 4, 7, 3, 6, 2, 15, 2, 20, 33, 8, 2, 11, 6, 8, 4, 8, 10, 7, 2, 11, 10, 8, 6, 3, 17, 11, 6, 20, 17, 6, 2, 8, 2, 9, 25, 3, 9, 8, 26, 24, 8, 9, 10, 3, 3, 3, 2, 14, 2, 8, 5, 2, 6, 20, 5, 2, 8, 6, 6, 20] detailed listing: executing program 32: epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) executing program 33: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000500)='./nfs_mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @u32=0x1}]}}], 0x1}, 0x0) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, 0x1234, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x2, 0x0, 0x2}, [@algo_auth={0x68, 0x1, {{'sha256\x00'}, 0x100, '\x00'/32}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x17, [{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x32, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='port\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/256, 0x100) write(r2, &(0x7f0000000400)="80000028", 0x4) write(r2, &(0x7f0000000404)='\x00\x00\x00\x00', 0x4) write(r2, &(0x7f0000000500)="0000000100"/36, 0x24) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "03", '\x00', 0x800, 'o\x00\x00\x00'}}}}}, 0x0) executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x5, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@remote, 0x1234, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x49, 0x1, {{'digest_null\x00'}, 0x8, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x44, 0x3a, 0x40, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @local, @remote, [], "3b020000123400"/16}}}}}}}, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1f90, @loopback}}, {0x14, 0x2, @in={0x2, 0x1f90, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) recvfrom$inet(r2, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) (async) executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1\n', 0x2) executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) read(r2, &(0x7f0000000300)=""/100, 0x64) write(r2, &(0x7f0000000200)='world', 0x5) read(r1, &(0x7f0000000300)=""/100, 0x64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1\n', 0x2) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 6: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080008000000012c"], 0x94}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x8b88) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newsa={0x168, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x5c, 0x12, {{'cbc(aes)\x00'}, 0x80, 0x0, '\x00'/16}}, @encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x168}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0xfc, 0x10, 0x13, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) accept(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000900)='testpayload', 0xb, 0x0, 0x0, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x400, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}], {0x14, 0x401, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) write(r2, &(0x7f0000000400)="009c00011a2b3c4d0001000001000000", 0x10) write(r3, &(0x7f0000000500)="009c00021a2b3c4d000100000100000000010100", 0x14) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='1\n', 0x2) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x15c, 0x10, 0x32, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x4d2, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x1234, 0x1234, @in=@loopback}}, @tfcpad={0x8, 0x22, 0xa}]}, 0x15c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f00000000f0)='/tmp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 35: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 37: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f00000000f0)='/tmp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 38: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) executing program 7: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) executing program 7: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x1c) listen(r0, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="12345678000000000000000100000001000000010101000000010000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendto$inet(r1, &(0x7f0000000100)="12345678000000000000000000000000000000020701000000010000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000), 0x0) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x18, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x0, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x6, [{0x6, 0x2}]}}]}}]}, 0x44}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0x83, 0x1}]}, 0x38}}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x12, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x13, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x1c, 0x14, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, 0x15, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, 0x16, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x17, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, 0x1b, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x1c, 0x1f, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000ec0)={'\x00', 0x1001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/ioam6_enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff66778899aabb86dd6000000000180040fe800000000000000000000000000001ff02000000000000000000000000000100020100310e00"/76], 0x0) executing program 7: r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)='\x00\x00\x00') sendto(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)=@generic={0x2d, "000001010800"}, 0x10) executing program 7: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x5, "0100000000000000"}], 0x18}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)=""/100, 0x64}], 0x1}, 0x40) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendto(r3, &(0x7f0000000500)="12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0xc8, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0xc8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000800), 0x4) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0 1 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x24}}, 0x0) executing program 8: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c01000010000500000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000012345678320000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0004000100123412340000000000000000000000000000000000000800220001000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 8: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) (async) executing program 8: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x100, 0x200, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x0}}}}, 0x430) sendto$inet6(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) executing program 8: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a00000000000000000000108000600", 0x34) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) executing program 9: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 9: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0073797a30300800450000300000400040117e0610000002ac14000112341234001c0000450000140000400040043ce47f0000017f000001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) executing program 9: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) write(r0, &(0x7f0000000380)='+4\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61) r5 = socket$inet(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10) write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@empty}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x10000}]}, 0x10) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1d000000100001000000000000000000030100000d0002006f76735f666174617061746800"], 0x1d}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1900000010000100000000000000000003010000090002006f76735f666c6f7700"], 0x19}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='ovs-system\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000130001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000010001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='proc\x00', &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='127.0.0.1 / 2147483647 0 0 0\n\x00', 0x1d) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r4) program crashed: INFO: task hung in nfsd_umount bisect: bisecting 67 programs bisect: split chunks (needed=false): <67> bisect: split chunk #0 of len 67 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m11s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 7, 2, 11, 10, 8, 6, 3, 17, 11, 6, 20, 17, 6, 2, 8, 2, 9, 25, 3, 9, 8, 26, 24, 8, 9, 10, 3, 3, 3, 2, 14, 2, 8, 5, 2, 6, 20, 5, 2, 8, 6, 6, 20] detailed listing: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x2, &(0x7f0000000280)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380)='\x00\x00\x00\x00', &(0x7f00000003c0)=@udp=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='hello\x00', 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/10, 0xa}], 0x1}, 0x0) executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68) executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newsa={0x168, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x5c, 0x12, {{'cbc(aes)\x00'}, 0x80, 0x0, '\x00'/16}}, @encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x168}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0xfc, 0x10, 0x13, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) accept(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000900)='testpayload', 0xb, 0x0, 0x0, 0x0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x400, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}], {0x14, 0x401, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x6bb, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x6bb, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) write(r2, &(0x7f0000000400)="009c00011a2b3c4d0001000001000000", 0x10) write(r3, &(0x7f0000000500)="009c00021a2b3c4d000100000100000000010100", 0x14) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='1\n', 0x2) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x15c, 0x10, 0x32, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x4d2, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x1234, 0x1234, @in=@loopback}}, @tfcpad={0x8, 0x22, 0xa}]}, 0x15c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f00000000f0)='/tmp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 34: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 35: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 37: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r0, &(0x7f00000000f0)='/tmp\n\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 38: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x2) executing program 7: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) executing program 7: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x1c) listen(r0, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="12345678000000000000000100000001000000010101000000010000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) sendto$inet(r1, &(0x7f0000000100)="12345678000000000000000000000000000000020701000000010000", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000), 0x0) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x18, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x0, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x6, [{0x6, 0x2}]}}]}}]}, 0x44}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000), 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0x83, 0x1}]}, 0x38}}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x12, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x13, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x1c, 0x14, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, 0x15, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, 0x16, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x17, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, 0x1b, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x1c, 0x1f, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x1}, [@generic="060001000001"]}, 0x1c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000ec0)={'\x00', 0x1001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/ioam6_enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff66778899aabb86dd6000000000180040fe800000000000000000000000000001ff02000000000000000000000000000100020100310e00"/76], 0x0) executing program 7: r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)='\x00\x00\x00') sendto(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)=@generic={0x2d, "000001010800"}, 0x10) executing program 7: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x5, "0100000000000000"}], 0x18}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00\x00\x00\x00', 0x4}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0xbebc200}, 0x0) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)=""/100, 0x64}], 0x1}, 0x40) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) r4 = accept(r2, 0x0, 0x0) sendto(r3, &(0x7f0000000500)="12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0xc8, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0xc8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000800), 0x4) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0 1 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x24}}, 0x0) executing program 8: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c01000010000500000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000012345678320000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0004000100123412340000000000000000000000000000000000000800220001000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 8: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) (async) executing program 8: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x100, 0x200, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x0}}}}, 0x430) sendto$inet6(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) executing program 8: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a00000000000000000000108000600", 0x34) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) executing program 9: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 9: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0073797a30300800450000300000400040117e0610000002ac14000112341234001c0000450000140000400040043ce47f0000017f000001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) executing program 9: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) write(r0, &(0x7f0000000380)='+4\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61) r5 = socket$inet(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10) write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@empty}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x10000}]}, 0x10) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1d000000100001000000000000000000030100000d0002006f76735f666174617061746800"], 0x1d}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1900000010000100000000000000000003010000090002006f76735f666c6f7700"], 0x19}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='ovs-system\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000130001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000010001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='proc\x00', &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='127.0.0.1 / 2147483647 0 0 0\n\x00', 0x1d) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r4) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=6m11s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 20, 23, 3, 3, 16, 15, 4, 7, 3, 6, 2, 15, 2, 20, 33, 8, 2, 11, 6, 8, 4, 8, 24, 8, 9, 10, 3, 3, 3, 2, 14, 2, 8, 5, 2, 6, 20, 5, 2, 8, 6, 6, 20] detailed listing: executing program 32: epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) executing program 33: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000500)='./nfs_mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @u32=0x1}]}}], 0x1}, 0x0) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, 0x1234, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x2, 0x0, 0x2}, [@algo_auth={0x68, 0x1, {{'sha256\x00'}, 0x100, '\x00'/32}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x17, [{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x32, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='port\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/256, 0x100) write(r2, &(0x7f0000000400)="80000028", 0x4) write(r2, &(0x7f0000000404)='\x00\x00\x00\x00', 0x4) write(r2, &(0x7f0000000500)="0000000100"/36, 0x24) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "03", '\x00', 0x800, 'o\x00\x00\x00'}}}}}, 0x0) executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x5, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@remote, 0x1234, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x49, 0x1, {{'digest_null\x00'}, 0x8, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x44, 0x3a, 0x40, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @local, @remote, [], "3b020000123400"/16}}}}}}}, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1f90, @loopback}}, {0x14, 0x2, @in={0x2, 0x1f90, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) recvfrom$inet(r2, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) (async) executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1\n', 0x2) executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) read(r2, &(0x7f0000000300)=""/100, 0x64) write(r2, &(0x7f0000000200)='world', 0x5) read(r1, &(0x7f0000000300)=""/100, 0x64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1\n', 0x2) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 6: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080008000000012c"], 0x94}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x8b88) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='-3 +4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000008c0)='nfsd 127.0.0.1 2000000000 domain\n\x00', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f00000009c0)='udp 2049\n\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='1\n\x00', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f0000000a80)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(r2, &(0x7f0000000200)=""/1000, 0x3e8) read(r3, &(0x7f0000000300)=""/1000, 0x3e8) read(r1, &(0x7f0000000400)=""/1000, 0x3e8) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='nfsd\x00', &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='tcp 2049\x00', 0x9) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0 1 1\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x24}}, 0x0) executing program 8: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c01000010000500000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000012345678320000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0004000100123412340000000000000000000000000000000000000800220001000000"], 0x15c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 8: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) (async) executing program 8: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x100, 0x200, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x0}}}}, 0x430) sendto$inet6(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) executing program 8: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a00000000000000000000108000600", 0x34) executing program 8: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) listen(r1, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) close(r3) executing program 9: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) executing program 9: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) executing program 9: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}]}, 0x34}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0073797a30300800450000300000400040117e0610000002ac14000112341234001c0000450000140000400040043ce47f0000017f000001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) executing program 9: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) executing program 9: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-2 -3 -4\n\x00', 0x9) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) listen(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='4\n\x00', 0x2) write(r0, &(0x7f0000000380)='+4\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='\\x01000000 2147483647 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 root\n\x00', 0x61) r5 = socket$inet(0x2, 0x1, 0x6) connect$inet(r5, &(0x7f0000000800)={0x2, 0x0, @empty}, 0x10) write(r5, &(0x7f0000000900)="123456780000000000000002000186a300000003000000000000000600000018000000010000000200000000000000010000000401000000000000060000001c040400ffffffffff00"/92, 0x54) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@empty}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x10000}]}, 0x10) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1d000000100001000000000000000000030100000d0002006f76735f666174617061746800"], 0x1d}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1900000010000100000000000000000003010000090002006f76735f666c6f7700"], 0x19}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000100000000000000000001020000000000000f0001006f76732d73797374656d000800020000000000"], 0x28}], 0x1}, 0x0) ioctl(r0, 0x8933, &(0x7f0000000200)='ovs-system\x00') sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="48000000130001000000000000000000010100000300000020000100100004000102030405060708090a0b0c0600060008000c000200000000000800020004000000"], 0x48}], 0x1}, 0x0) executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00000001000000010000000100000001000000010101000000010001", 0x1c, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$rxrpc(r0, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='nfsd\x00', &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000100)=@in={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3\n\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='proc\x00', &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='127.0.0.1 / 2147483647 0 0 0\n\x00', 0x1d) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/file0\x00', 0x0, 0x0) close(r4) program crashed: INFO: task hung in nfsd_umount bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 20, 23, 3, 3, 16, 15, 4, 7, 3, 6, 2, 15, 2, 20, 33, 8, 2, 11, 6, 8, 4, 8] detailed listing: executing program 32: epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) executing program 33: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./export_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd_mnt/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='localhost ./export_dir 2147483647 0 0 0 0\n', 0x2a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='localhost 1 \\x00000000 2147483647 ./export_dir\n', 0x2f) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000500)='./nfs_mnt\x00', &(0x7f0000000540)='nfs\x00', 0x0, &(0x7f0000000580)='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,vers=3,nolock\x00') setxattr(&(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @u32=0x1}]}}], 0x1}, 0x0) executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, 0x1234, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x2, 0x0, 0x2}, [@algo_auth={0x68, 0x1, {{'sha256\x00'}, 0x100, '\x00'/32}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x17, [{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x32, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='port\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000400)=""/256, 0x100) write(r2, &(0x7f0000000400)="80000028", 0x4) write(r2, &(0x7f0000000404)='\x00\x00\x00\x00', 0x4) write(r2, &(0x7f0000000500)="0000000100"/36, 0x24) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000100)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "03", '\x00', 0x800, 'o\x00\x00\x00'}}}}}, 0x0) executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x5, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@remote, 0x1234, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x49, 0x1, {{'digest_null\x00'}, 0x8, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x44, 0x3a, 0x40, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @local, @remote, [], "3b020000123400"/16}}}}}}}, 0x0) executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1f90, @loopback}}, {0x14, 0x2, @in={0x2, 0x1f90, @loopback}}}}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) recvfrom$inet(r2, &(0x7f0000000300), 0x100, 0x0, 0x0, 0x0) (async) executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1\n', 0x2) executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) read(r2, &(0x7f0000000300)=""/100, 0x64) write(r2, &(0x7f0000000200)='world', 0x5) read(r1, &(0x7f0000000300)=""/100, 0x64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1\n', 0x2) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 6: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080008000000012c"], 0x94}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x8b88) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) program crashed: INFO: task hung in write_threads bisect: the chunk can be dropped bisect: split chunks (needed=true): <23> bisect: split chunk #0 of len 23 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 2, 20, 33, 8, 2, 11, 6, 8, 4, 8] detailed listing: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) read(r2, &(0x7f0000000300)=""/100, 0x64) write(r2, &(0x7f0000000200)='world', 0x5) read(r1, &(0x7f0000000300)=""/100, 0x64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1\n', 0x2) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 6: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080008000000012c"], 0x94}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x8b88) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) program crashed: INFO: task hung in write_threads bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <11> bisect: split chunk #0 of len 11 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 6, 8, 4, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='tcp 2049\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) r2 = fsopen(&(0x7f0000000300)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='addr\x00', &(0x7f0000000400)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) executing program 6: r0 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x8007, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='tcp 2049\x00', 0x9) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="94000000000105060100000000000000020000003200018014000180080001007f000001080002007f0000011a0002800500010006000000060002003039000006000300001500003200028014000180080001007f000001080002007f0000011a0002800500010006000000060002000015000006000300303900000c0005800800010066747000080008000000012c"], 0x94}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x8b88) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 2, 20, 33, 8, 2] detailed listing: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) read(r2, &(0x7f0000000300)=""/100, 0x64) write(r2, &(0x7f0000000200)='world', 0x5) read(r1, &(0x7f0000000300)=""/100, 0x64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1\n', 0x2) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) program crashed: INFO: task hung in nfsd_umount bisect: the chunk can be dropped bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [33, 8, 2] detailed listing: executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 2, 20] detailed listing: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) read(r2, &(0x7f0000000300)=""/100, 0x64) write(r2, &(0x7f0000000200)='world', 0x5) read(r1, &(0x7f0000000300)=""/100, 0x64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x8}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='1\n', 0x2) executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) program did not crash bisect: split chunks (needed=true): <3>, <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 33, 8, 2] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) program crashed: INFO: task hung in write_threads bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 2] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read(r0, &(0x7f0000000100)=""/200, 0x200) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 33, 8] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x18) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in nfsd_umount bisect: the chunk can be dropped bisect: split chunks (needed=true): <1>, <2> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 8] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in nfsd_umount bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1, final>, <1> bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='nfsd 127.0.0.1 999999999 anonymous\n\x00', 0x23) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_threads testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./proc\x00', &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in nfsd_umount testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_threads testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000480)="80000040000000010000000000000002000186a30000000400000001000000010000001400000001000000000000000000000000000000000000000000000000000000000000000100000018", 0x44) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_threads testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000440)={0x2, 0x801, @loopback}, 0x10) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in nfsd_umount testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_threads testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_threads testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/threads\x00', 0x1, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_versions testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_versions testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='-2 -3\n\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/versions\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x801, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in nfsd_umount testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./rpc_pipefs\x00', &(0x7f0000000100)='./rpc_pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./rpc_pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports minimized 20 calls -> 4 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) sendto$inet(r1, &(0x7f0000000000)="12345678", 0x8, 0x0, &(0x7f0000000020)={0x2, 0x1234, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, 0xffffffff, 0x0, 0x70, 0xe0, 0xffffffff, 0xffffffff, 0x150, 0x150, 0x150, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'lo\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'lo\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x50, 0x70}, @common=@unspec=@NFQUEUE0={0x20}}], {{'\x00', 0x0, 0x50, 0x70}, {0x20, '\x00', 0x0, 0xfffffffd}}}}, 0x2b8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2] detailed listing: executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports minimized 8 calls -> 2 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports bisect: concatenation succeeded found reproducer with 6 syscalls minimizing guilty program testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='4\n\x00', 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000001c0)=@filename='./nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program did not crash testing program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m9.023213104s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports simplifying C reproducer testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports testing compiled C program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS program crashed: INFO: task hung in write_ports testing program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports validation run: crashed=true testing program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports validation run: crashed=true testing program (duration=6m9.023213104s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-socket$inet_udp-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='4\n\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) program crashed: INFO: task hung in write_ports validation run: crashed=true reproducing took 7h13m1.079496492s repro crashed as (corrupted=false): INFO: task syz.2.23:5984 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.23 state:D stack:27944 pid:5984 tgid:5984 ppid:5747 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f38dd99de99 RSP: 002b:00007ffe64fd74f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f38ddc25fa0 RCX: 00007f38dd99de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007f38dda33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f38ddc25fac R14: 00007f38ddc25fa0 R15: 00007f38ddc25fa0 INFO: task syz.1.18:5986 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:27592 pid:5986 tgid:5986 ppid:5750 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faaafb9de99 RSP: 002b:00007ffec6dd42d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007faaafe25fa0 RCX: 00007faaafb9de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007faaafc33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007faaafe25fac R14: 00007faaafe25fa0 R15: 00007faaafe25fa0 INFO: task syz.4.21:5987 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:27592 pid:5987 tgid:5987 ppid:5764 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdcc0d9de99 RSP: 002b:00007fff0f4c8258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fdcc1025fa0 RCX: 00007fdcc0d9de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007fdcc0e33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fdcc1025fac R14: 00007fdcc1025fa0 R15: 00007fdcc1025fa0 INFO: task syz.0.17:5988 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:28008 pid:5988 tgid:5988 ppid:5751 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fabd279de99 RSP: 002b:00007ffee0bde368 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fabd2a25fa0 RCX: 00007fabd279de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007fabd2833eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fabd2a25fac R14: 00007fabd2a25fa0 R15: 00007fabd2a25fa0 Showing all locks held in the system: 3 locks held by kworker/u8:1/13: #0: ffff888033b26940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc90000127d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 net/ipv6/addrconf.c:4229 1 lock held by khungtaskd/31: #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 2 locks held by getty/5372: #0: ffff88803849c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211 2 locks held by syz.2.23/5984: #0: ffff88802c738450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.22/5985: #0: ffff888037bca450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.18/5986: #0: ffff8880378b8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.21/5987: #0: ffff88803308c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.17/5988: #0: ffff8880799de450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 3 locks held by kworker/0:6/5989: #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:667 #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:218 [inline] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 kernel/sched/core.c:7228 #2: ffff8880b8426298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 kernel/time/timer.c:1004 2 locks held by syz.6.25/6204: #0: ffff88807f20c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.5.24/6206: #0: ffff88807cecc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.7.26/6207: #0: ffff888020fbe450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.27/6208: #0: ffff88807c732450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.9.28/6209: #0: ffff88807be92450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.29/6323: #0: ffff888054196450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.32/6394: #0: ffff88807bff2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4} , at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.30/6395: #0: ffff88802ce4e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.2.31/6396: #0: ffff88807ba86450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.33/6397: #0: ffff888026ab4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.6.34/6439: #0: ffff888055d20450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.37/6575: #0: ffff88807c9cc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.7.36/6586: #0: ffff88807ab06450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.5.35/6605: #0: ffff888055850450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.9.38/6606: #0: ffff888055e4c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.39/6642: #0: ffff888068e84450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.40/6746: #0: ffff8880798e4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.42/6776: #0: ffff88805106a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.2.41/6796: #0: ffff8880543c2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.43/6797: #0: ffff888054a1a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.6.44/6839: #0: ffff888034ada450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.45/6942: #0: ffff88804833c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.5.46/6987: #0: ffff888046c7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.9.48/7001: #0: ffff888050e62450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.7.47/7005: #0: ffff888048ebc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.49/7040: #0: ffff88802c656450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.50/7141: #0: ffff888042ba2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.51/7158: #0: ffff888041630450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.2.52/7202: #0: ffff88804df78450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.53/7210: #0: ffff88802b1de450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.6.54/7233: #0: ffff88805060e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.55/7283: #0: ffff888039a50450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 1 lock held by syz-executor/7298: #0: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 7 locks held by syz-executor/7330: #0: ffff888035cca450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffff888055751c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336 #2: ffff88802a978b48 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a978b48 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337 #3: ffffffff9000ca40 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 #4: ffff888048342128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline] #4: ffff888048342128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff888048342128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1369 #5: ffff88804ebd4258 (&devlink->lock_key#30){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 drivers/net/netdevsim/dev.c:1799 #6: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311 2 locks held by syz-executor/7353: #0: ffffffff8fe24d68 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline] #0: ffffffff8fe24d68 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline] #0: ffffffff8fe24d68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 net/core/rtnetlink.c:574 #1: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 net/core/rtnetlink.c:4158 2 locks held by syz.5.56/7375: #0: ffff8880275ac450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 1 lock held by dhcpcd/7385: #0: ffff888046d36260 (sk_lock-AF_PACKET){+.+.}-{0:0} , at: lock_sock include/net/sock.h:1713 [inline] , at: packet_do_bind+0x2c/0xf50 net/packet/af_packet.c:3204 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x21c/0x2a0 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 7353 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] RIP: 0010:rcu_is_watching+0xd/0xc0 kernel/rcu/tree.c:752 Code: 81 e8 67 83 8c 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 33 dc 75 12 3e c7 cc 09 48 c7 c3 68 7c 65 94 89 c5 83 f8 07 0f 87 82 00 00 RSP: 0018:ffffc9000710edc0 EFLAGS: 00000083 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8212b101 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff912273d0 RBP: ffffffff8bbe0462 R08: 0000000000000000 R09: fffffbfff2244e7a R10: ffffffff912273d7 R11: 0000000000000000 R12: ffff888039abc000 R13: ffff88813fe229c0 R14: 0000000800040000 R15: ffffea0000e6ae00 FS: 00005555558da500(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055729df2d168 CR3: 00000000558d8000 CR4: 00000000003526f0 Call Trace: trace_irq_disable include/trace/events/preemptirq.h:36 [inline] trace_hardirqs_off_finish kernel/trace/trace_preemptirq.c:95 [inline] trace_hardirqs_off+0x70/0x170 kernel/trace/trace_preemptirq.c:90 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:130 [inline] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:166 __slab_free+0x1bd/0x460 mm/slub.c:5687 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4584 [inline] slab_alloc_node mm/slub.c:4917 [inline] kmem_cache_alloc_noprof+0x26b/0x6a0 mm/slub.c:4931 __kernfs_new_node+0xd2/0xa10 fs/kernfs/dir.c:665 kernfs_new_node+0x117/0x150 fs/kernfs/dir.c:751 __kernfs_create_file+0x53/0x350 fs/kernfs/file.c:1050 sysfs_add_file_mode_ns+0x207/0x3c0 fs/sysfs/file.c:316 create_files fs/sysfs/group.c:82 [inline] internal_create_group+0x593/0xfb0 fs/sysfs/group.c:189 internal_create_groups+0x9d/0x150 fs/sysfs/group.c:229 device_add_groups drivers/base/core.c:2907 [inline] device_add_attrs drivers/base/core.c:2982 [inline] device_add+0xf60/0x1970 drivers/base/core.c:3711 netdev_register_kobject+0x1a9/0x3d0 net/core/net-sysfs.c:2337 register_netdevice+0x15b6/0x25a0 net/core/dev.c:11446 macvlan_common_newlink+0xf70/0x18b0 drivers/net/macvlan.c:1554 macvtap_newlink drivers/net/macvtap.c:109 [inline] macvtap_newlink+0x17a/0x240 drivers/net/macvtap.c:81 rtnl_newlink_create net/core/rtnetlink.c:3913 [inline] __rtnl_newlink net/core/rtnetlink.c:4044 [inline] rtnl_newlink+0x1499/0x2380 net/core/rtnetlink.c:4159 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:775 [inline] __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x48b/0x4e0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdccfd5e6ce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007ffd561d37a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555558da500 RCX: 00007fdccfd5e6ce RDX: 0000000000000054 RSI: 00007fdcd0b54670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffd561d3824 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fdcd0b54670 R15: 0000000000000000 final repro crashed as (corrupted=false): INFO: task syz.2.23:5984 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.23 state:D stack:27944 pid:5984 tgid:5984 ppid:5747 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f38dd99de99 RSP: 002b:00007ffe64fd74f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f38ddc25fa0 RCX: 00007f38dd99de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007f38dda33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f38ddc25fac R14: 00007f38ddc25fa0 R15: 00007f38ddc25fa0 INFO: task syz.1.18:5986 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.18 state:D stack:27592 pid:5986 tgid:5986 ppid:5750 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faaafb9de99 RSP: 002b:00007ffec6dd42d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007faaafe25fa0 RCX: 00007faaafb9de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007faaafc33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007faaafe25fac R14: 00007faaafe25fa0 R15: 00007faaafe25fa0 INFO: task syz.4.21:5987 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.21 state:D stack:27592 pid:5987 tgid:5987 ppid:5764 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdcc0d9de99 RSP: 002b:00007fff0f4c8258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fdcc1025fa0 RCX: 00007fdcc0d9de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007fdcc0e33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fdcc1025fac R14: 00007fdcc1025fa0 R15: 00007fdcc1025fa0 INFO: task syz.0.17:5988 blocked for more than 144 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.17 state:D stack:28008 pid:5988 tgid:5988 ppid:5751 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xccc/0x1bd0 kernel/locking/mutex.c:821 write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 nfsctl_transaction_write+0x106/0x1a0 fs/nfsd/nfsctl.c:112 vfs_write+0x2aa/0x1050 fs/read_write.c:685 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fabd279de99 RSP: 002b:00007ffee0bde368 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fabd2a25fa0 RCX: 00007fabd279de99 RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 RBP: 00007fabd2833eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fabd2a25fac R14: 00007fabd2a25fa0 R15: 00007fabd2a25fa0 Showing all locks held in the system: 3 locks held by kworker/u8:1/13: #0: ffff888033b26940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc90000127d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 net/ipv6/addrconf.c:4229 1 lock held by khungtaskd/31: #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 2 locks held by getty/5372: #0: ffff88803849c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211 2 locks held by syz.2.23/5984: #0: ffff88802c738450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.22/5985: #0: ffff888037bca450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.18/5986: #0: ffff8880378b8450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.21/5987: #0: ffff88803308c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.17/5988: #0: ffff8880799de450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 3 locks held by kworker/0:6/5989: #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:667 #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:218 [inline] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 kernel/sched/core.c:7228 #2: ffff8880b8426298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 kernel/time/timer.c:1004 2 locks held by syz.6.25/6204: #0: ffff88807f20c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.5.24/6206: #0: ffff88807cecc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.7.26/6207: #0: ffff888020fbe450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.27/6208: #0: ffff88807c732450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.9.28/6209: #0: ffff88807be92450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.29/6323: #0: ffff888054196450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.32/6394: #0: ffff88807bff2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4} , at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.30/6395: #0: ffff88802ce4e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.2.31/6396: #0: ffff88807ba86450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.33/6397: #0: ffff888026ab4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.6.34/6439: #0: ffff888055d20450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.37/6575: #0: ffff88807c9cc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.7.36/6586: #0: ffff88807ab06450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.5.35/6605: #0: ffff888055850450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.9.38/6606: #0: ffff888055e4c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.39/6642: #0: ffff888068e84450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.40/6746: #0: ffff8880798e4450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.42/6776: #0: ffff88805106a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.2.41/6796: #0: ffff8880543c2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.43/6797: #0: ffff888054a1a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.6.44/6839: #0: ffff888034ada450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.45/6942: #0: ffff88804833c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.5.46/6987: #0: ffff888046c7c450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.9.48/7001: #0: ffff888050e62450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.7.47/7005: #0: ffff888048ebc450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.0.49/7040: #0: ffff88802c656450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.1.50/7141: #0: ffff888042ba2450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.3.51/7158: #0: ffff888041630450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.2.52/7202: #0: ffff88804df78450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.4.53/7210: #0: ffff88802b1de450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.6.54/7233: #0: ffff88805060e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 2 locks held by syz.8.55/7283: #0: ffff888039a50450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 1 lock held by syz-executor/7298: #0: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 7 locks held by syz-executor/7330: #0: ffff888035cca450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffff888055751c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 fs/kernfs/file.c:336 #2: ffff88802a978b48 (kn->active#58){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:73 [inline] #2: ffff88802a978b48 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 fs/kernfs/file.c:337 #3: ffffffff9000ca40 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 drivers/net/netdevsim/bus.c:234 #4: ffff888048342128 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline] #4: ffff888048342128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1171 [inline] #4: ffff888048342128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1369 #5: ffff88804ebd4258 (&devlink->lock_key#30){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 drivers/net/netdevsim/dev.c:1799 #6: ffffffff8ebf3c28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311 2 locks held by syz-executor/7353: #0: ffffffff8fe24d68 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:187 [inline] #0: ffffffff8fe24d68 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:294 [inline] #0: ffffffff8fe24d68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 net/core/rtnetlink.c:574 #1: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #1: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #1: ffffffff90a9f380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 net/core/rtnetlink.c:4158 2 locks held by syz.5.56/7375: #0: ffff8880275ac450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 fs/read_write.c:739 #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 fs/nfsd/nfsctl.c:860 1 lock held by dhcpcd/7385: #0: ffff888046d36260 (sk_lock-AF_PACKET){+.+.}-{0:0} , at: lock_sock include/net/sock.h:1713 [inline] , at: packet_do_bind+0x2c/0xf50 net/packet/af_packet.c:3204 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x21c/0x2a0 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 7353 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] RIP: 0010:rcu_is_watching+0xd/0xc0 kernel/rcu/tree.c:752 Code: 81 e8 67 83 8c 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 33 dc 75 12 3e c7 cc 09 48 c7 c3 68 7c 65 94 89 c5 83 f8 07 0f 87 82 00 00 RSP: 0018:ffffc9000710edc0 EFLAGS: 00000083 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8212b101 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff912273d0 RBP: ffffffff8bbe0462 R08: 0000000000000000 R09: fffffbfff2244e7a R10: ffffffff912273d7 R11: 0000000000000000 R12: ffff888039abc000 R13: ffff88813fe229c0 R14: 0000000800040000 R15: ffffea0000e6ae00 FS: 00005555558da500(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055729df2d168 CR3: 00000000558d8000 CR4: 00000000003526f0 Call Trace: trace_irq_disable include/trace/events/preemptirq.h:36 [inline] trace_hardirqs_off_finish kernel/trace/trace_preemptirq.c:95 [inline] trace_hardirqs_off+0x70/0x170 kernel/trace/trace_preemptirq.c:90 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:130 [inline] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:166 __slab_free+0x1bd/0x460 mm/slub.c:5687 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4584 [inline] slab_alloc_node mm/slub.c:4917 [inline] kmem_cache_alloc_noprof+0x26b/0x6a0 mm/slub.c:4931 __kernfs_new_node+0xd2/0xa10 fs/kernfs/dir.c:665 kernfs_new_node+0x117/0x150 fs/kernfs/dir.c:751 __kernfs_create_file+0x53/0x350 fs/kernfs/file.c:1050 sysfs_add_file_mode_ns+0x207/0x3c0 fs/sysfs/file.c:316 create_files fs/sysfs/group.c:82 [inline] internal_create_group+0x593/0xfb0 fs/sysfs/group.c:189 internal_create_groups+0x9d/0x150 fs/sysfs/group.c:229 device_add_groups drivers/base/core.c:2907 [inline] device_add_attrs drivers/base/core.c:2982 [inline] device_add+0xf60/0x1970 drivers/base/core.c:3711 netdev_register_kobject+0x1a9/0x3d0 net/core/net-sysfs.c:2337 register_netdevice+0x15b6/0x25a0 net/core/dev.c:11446 macvlan_common_newlink+0xf70/0x18b0 drivers/net/macvlan.c:1554 macvtap_newlink drivers/net/macvtap.c:109 [inline] macvtap_newlink+0x17a/0x240 drivers/net/macvtap.c:81 rtnl_newlink_create net/core/rtnetlink.c:3913 [inline] __rtnl_newlink net/core/rtnetlink.c:4044 [inline] rtnl_newlink+0x1499/0x2380 net/core/rtnetlink.c:4159 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:775 [inline] __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x48b/0x4e0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdccfd5e6ce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007ffd561d37a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00005555558da500 RCX: 00007fdccfd5e6ce RDX: 0000000000000054 RSI: 00007fdcd0b54670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffd561d3824 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 00007fdcd0b54670 R15: 0000000000000000