Extracting prog: 2h14m3.209028425s
Minimizing prog: 30m17.468986872s
Simplifying prog options: 0s
Extracting C: 1m1.751296493s
Simplifying C: 11m48.683046416s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 3, 23, 13, 17, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program crashed: WARNING in svc_destroy
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <23>
bisect: split chunk #0 of len 23 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 23, 13, 17, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 3, 23, 13, 17, 8, 26, 11, 9, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
bisect: split chunks (needed=true): <8>, <8>, <7>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 27, 20, 3, 3, 23, 13, 17, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 3, 23, 13, 17, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: split chunk #1 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 8, 26, 11, 9, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 8, 26, 11, 9, 27, 6, 2, 2, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)

program did not crash
bisect: split chunks (needed=true): <4>, <4>, <4>, <4>, <3>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 7, 8, 27, 20, 3, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 8, 27, 20, 3, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 20, 3, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: split chunk #2 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 8, 26, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: split chunk #3 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 8, 26, 11, 9, 6, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #4 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 8, 26, 11, 9, 6, 2, 6, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 8, 26, 11, 9, 6, 2, 6, 12, 12]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: too many guilty chunks, aborting
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 1m40s
testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 3, 23, 13, 17, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program crashed: WARNING in svc_destroy
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <23>
bisect: split chunk #0 of len 23 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 23, 13, 17, 8, 26, 11, 9, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 2/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 27, 6, 2, 2, 6, 12, 12, 13]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}}}]}, 0x64}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)='\x00\x00\x00\x00', &(0x7f0000000200)=@udp=r1}, 0x20)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r2, &(0x7f0000000500)='3\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r3, &(0x7f00000005c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x1]}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1, 0x4, "1234"}, 0xc)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x1]}, 0x8)
connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 6, 24, 7, 8, 27, 20, 3, 3, 23, 13, 17, 8, 26, 11, 9, 6]
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/self/fail-nth\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00')
write(r0, &(0x7f0000000100)='1\x00', 0x2)
write(r0, &(0x7f0000000100)='2\x00', 0x2)
write(r0, &(0x7f0000000100)='3\x00', 0x2)
write(r0, &(0x7f0000000100)='4\x00', 0x2)
write(r0, &(0x7f0000000100)='5\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
write(r0, &(0x7f0000000100)='6\x00', 0x2)
read(r1, &(0x7f0000000180)=""/512, 0x200)
executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x202})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd00, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{}, {0x0, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0x70bd0000ff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5i\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0)
shutdown(r0, 0x2)
close(r0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <8>, <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 27, 20, 3, 3, 23, 13, 17, 8, 26, 11, 9, 6]
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000010)=0x1, 0x4)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\x00', 0x1)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x80}, 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x80}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r2, 0x5)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0x90}], 0x1, 0x0, 0x0, 0x8000}, 0x8000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000900), 0x4)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/addip_noauth_enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x2345, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1234, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x2345, @loopback}, 0x10)
accept4$inet(r2, 0x0, 0x0, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10)
listen(r1, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='3\x00', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
close(r3)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 27, 20, 3, 8, 26, 11, 9, 6]
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000106000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000106000000000000000000000000000000000a000300766574683000080013000100000014001200090001007665746800000700020000000000"], 0x38}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000330000000160a01030000e6ff00000000020000000900010073797a30000000000900020073797a300000000014000380080001000000000008000200000000000c0003800800010062726964676530002c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xf8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000001000000005002200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015010200000000000"], 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000108004500002800004000400600000a0101010a0101021234567800000002000000015018200000000000"], 0x0)
executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000})
r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581})
mq_notify(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$mtd(0x0, 0x260c, 0xa02)
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>, <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 3, 8, 26, 11, 9, 6]
detailed listing:
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 3, 11, 9, 6]
detailed listing:
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)=@in={0x2, 0x6f00, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10)
executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1\n', 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x0, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x84, 0x0, @loopback, @loopback}, "4e214e20123456780000000006000400"}}}}, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 3, 8, 26, 6]
detailed listing:
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000020)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
close(r1)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
listen(r2, 0x5)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000120)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: split chunks (needed=true): <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 8, 26, 6]
detailed listing:
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r1, &(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10)
connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='hello', 0x5}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 26, 6]
detailed listing:
executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 3 programs left: 

executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0x94, 0x29, 0x1, 0x0, 0x0, "", [@generic="0a01010000000000000000000000000012340000020032000a0101010000000000000000000000000a01010100000000000000000000000000000000000000000a010100000000000000000000000000a0101000000000000000000000000000000000000000000002002020000000000000000000000000000000000200000002000000"]}, 0x94}], 0x1}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)


bisect: trying to concatenate
bisect: concatenate 3 entries
minimizing program #0 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26, 6]
detailed listing:
executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)={0xe4, 0x10, 0x1, 0x0, 0x0, "", [@generic="0a010100000000000000000000000000a010100000000000000000000000000000000000000000020020200000000000000000000000000a01010000000000000000000000000012340000320000000a000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000"]}, 0xe4}], 0x1}, 0x0)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 26, 6]
detailed listing:
executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 26, 6]
detailed listing:
executing program 0:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
setxattr(&(0x7f0000000640)='./nfs_mnt\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
minimized 3 calls -> 0 calls
minimizing program #1 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 25, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/\x00', &(0x7f0000000580)='./nfs_mnt\x00', &(0x7f00000005c0)='nfs4\x00', 0x0, &(0x7f0000000600)='addr=127.0.0.1,clientaddr=127.0.0.1\x00')
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 24, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 23, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
close(r5)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 23, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 23, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd_mnt/threads\x00', 0x1, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 22, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(r4)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 21, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000440)='localhost 1 \\x00 2147483647 /\n', 0x1e)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 20, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 19, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(r3)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 18, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f00000003c0)='localhost / 2147483647 0 0 0 0\n', 0x1f)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 17, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 16, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(r2)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 15, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 14, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 13, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(r1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 12, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
close(r0)
write(0xffffffffffffffff, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 11, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 10, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/versions\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 9, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./export_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 8, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: KASAN: slab-use-after-free Read in nfsd_svc
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 7, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 6]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='1\n', 0x2)

program crashed: WARNING in svc_destroy
minimized 26 calls -> 6 calls
minimizing program #2 before concatenation
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 5]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 4]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2049\n', 0x5)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 3]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/ports\x00', 0x1, 0x0)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 2]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 1]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)

program crashed: WARNING in svc_destroy
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 6, 0]
detailed listing:
executing program 3:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)
executing program 0:

program crashed: WARNING in svc_destroy
minimized 6 calls -> 0 calls
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close-mkdirat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./nfs_mnt\x00', 0x1ff)

program crashed: WARNING in svc_destroy
bisect: concatenation succeeded
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-close
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)
close(0xffffffffffffffff)

program crashed: WARNING in svc_destroy
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program crashed: WARNING in svc_destroy
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-openat-write
detailed listing:
executing program 0:
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program crashed: WARNING in svc_destroy
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0), 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m15.174288198s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
simplifying C reproducer
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program did not crash
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
testing compiled C program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
program crashed: WARNING in svc_destroy
testing program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program crashed: WARNING in svc_destroy
validation run: crashed=true
testing program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program crashed: WARNING in svc_destroy
validation run: crashed=true
testing program (duration=1m15.174288198s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd_mnt/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='tcp 2049\n', 0x9)

program crashed: WARNING in svc_destroy
validation run: crashed=true
reproducing took 3h3m15.93401212s
repro crashed as (corrupted=false):
------------[ cut here ]------------
SVC: permsocks remain for nfsd
WARNING: CPU: 1 PID: 5931 at net/sunrpc/svc.c:583 svc_destroy+0x2ed/0x390 net/sunrpc/svc.c:582
Modules linked in:
CPU: 1 PID: 5931 Comm: syz.0.18 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:svc_destroy+0x2ed/0x390 net/sunrpc/svc.c:582
Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f2 a2 35 f8 49 8b 37 48 c7 c7 80 22 d9 8b e8 a3 f5 a6 f7 <0f> 0b e9 78 fd ff ff e8 87 25 dd f7 c6 05 84 bc cc 04 01 4c 89 e0
RSP: 0018:ffffc900044e7ae0 EFLAGS: 00010246
RAX: 44841a77a1f76800 RBX: ffff88802c185050 RCX: ffff88802d09bc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc900044e7cb8 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88802c185000
R13: dffffc0000000000 R14: ffff88802c185050 R15: ffffffff8d3e1960
FS:  0000555589d7a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0b7d5da08 CR3: 0000000075e89000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 kref_put include/linux/kref.h:65 [inline]
 svc_put include/linux/sunrpc/svc.h:124 [inline]
 __write_ports_addxprt fs/nfsd/nfsctl.c:765 [inline]
 __write_ports fs/nfsd/nfsctl.c:791 [inline]
 write_ports+0xb99/0xfa0 fs/nfsd/nfsctl.c:844
 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113
 vfs_write+0x299/0x9a0 fs/read_write.c:582
 ksys_write+0x151/0x260 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fc0b6f9e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffec04896d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fc0b7225fa0 RCX: 00007fc0b6f9e019
RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000003
RBP: 00007fc0b703500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc0b7225fac R14: 00007fc0b7225fa0 R15: 00007fc0b7225fa0
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
SVC: permsocks remain for nfsd
WARNING: CPU: 1 PID: 5931 at net/sunrpc/svc.c:583 svc_destroy+0x2ed/0x390 net/sunrpc/svc.c:582
Modules linked in:
CPU: 1 PID: 5931 Comm: syz.0.18 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:svc_destroy+0x2ed/0x390 net/sunrpc/svc.c:582
Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f2 a2 35 f8 49 8b 37 48 c7 c7 80 22 d9 8b e8 a3 f5 a6 f7 <0f> 0b e9 78 fd ff ff e8 87 25 dd f7 c6 05 84 bc cc 04 01 4c 89 e0
RSP: 0018:ffffc900044e7ae0 EFLAGS: 00010246
RAX: 44841a77a1f76800 RBX: ffff88802c185050 RCX: ffff88802d09bc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: ffffc900044e7cb8 R08: ffff8880b8e28c53 R09: 1ffff110171c518a
R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88802c185000
R13: dffffc0000000000 R14: ffff88802c185050 R15: ffffffff8d3e1960
FS:  0000555589d7a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0b7d5da08 CR3: 0000000075e89000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 kref_put include/linux/kref.h:65 [inline]
 svc_put include/linux/sunrpc/svc.h:124 [inline]
 __write_ports_addxprt fs/nfsd/nfsctl.c:765 [inline]
 __write_ports fs/nfsd/nfsctl.c:791 [inline]
 write_ports+0xb99/0xfa0 fs/nfsd/nfsctl.c:844
 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113
 vfs_write+0x299/0x9a0 fs/read_write.c:582
 ksys_write+0x151/0x260 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fc0b6f9e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffec04896d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fc0b7225fa0 RCX: 00007fc0b6f9e019
RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000003
RBP: 00007fc0b703500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fc0b7225fac R14: 00007fc0b7225fa0 R15: 00007fc0b7225fa0
 </TASK>