Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts.
[*] Starting reproducer for WARNING in svc_destroy...
[+] Directory ./mnt_repro ready.
[+] Created AF_INET socket for NFS dummy server.
[+] setsockopt SO_REUSEADDR successful.
[+] Bound nfs_sfd to 127.0.0.1:2049 successfully.
[+] Listening on nfs_sfd port 2049 successfully.
[+] Started dummy NFS RPC server process (pid=6033).
[+] Successfully opened /proc/sys/fs/nfs/nfs_callback_tcpport for writing.
[+] Successfully wrote port 45454 to /proc/sys/fs/nfs/nfs_callback_tcpport.
[+] Successfully closed sysctl fd.
[+] AF_INET6 socket created successfully.
[+] setsockopt IPV6_V6ONLY successful.
[+] Bound AF_INET6 socket to [::]:45454 successfully.
[+] Listening on AF_INET6 socket port 45454 successfully.
[*] Invoking mount with options: addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,sec=sys
[ 94.568327][ T6032] NFS: callback service start failed
[ 94.568474][ T6032] ------------[ cut here ]------------
[ 94.568487][ T6032] SVC: permsocks remain for NFSv4 callback
[ 94.568500][ T6032] WARNING: net/sunrpc/svc.c:532 at svc_destroy+0x299/0x330, CPU#0: syz-executor281/6032
[ 94.594899][ T6032] Modules linked in:
[ 94.598902][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz-executor281 Not tainted syzkaller #0 PREEMPT(full)
[ 94.608650][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 94.619106][ T6032] RIP: 0010:svc_destroy+0x29d/0x330
[ 94.624331][ T6032] Code: 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 00 48 8d 7b 18 48 89 fa 48 c1 ea 03 80 3c 02 00 75 67 48 8d 3d 07 5e 77 07 48 8b 73 18 <67> 48 0f b9 3a e9 d0 fd ff ff 48 8b 7c 24 08 e8 8f 2c 85 f7 e9 a5
[ 94.644080][ T6032] RSP: 0018:ffffc9000259f858 EFLAGS: 00010246
[ 94.650199][ T6032] RAX: dffffc0000000000 RBX: ffffffff9040bf80 RCX: 0000000000000000
[ 94.658294][ T6032] RDX: 1ffffffff20817f3 RSI: ffffffff8c37ebc0 RDI: ffffffff927b0770
[ 94.666299][ T6032] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[ 94.674281][ T6032] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888020340000
[ 94.682315][ T6032] R13: ffff888027daec00 R14: ffff88807b8b4000 R15: ffffffff9cd624c0
[ 94.690312][ T6032] FS: 0000555576b41400(0000) GS:ffff888122475000(0000) knlGS:0000000000000000
[ 94.699271][ T6032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.705925][ T6032] CR2: 00007ffdf9156de4 CR3: 0000000075178000 CR4: 00000000003526f0
[ 94.713898][ T6032] Call Trace:
[ 94.717237][ T6032]
[ 94.720174][ T6032] ? xprt_svc_destroy_nullify_bc+0x14e/0x1a0
[ 94.726193][ T6032] nfs_callback_up+0x511/0xb50
[ 94.730967][ T6032] nfs4_init_client+0x236/0x420
[ 94.735875][ T6032] ? __pfx_nfs4_init_client+0x10/0x10
[ 94.741257][ T6032] nfs_get_client+0xf38/0x1230
[ 94.746044][ T6032] ? rcu_is_watching+0x13/0xc0
[ 94.750810][ T6032] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 94.756762][ T6032] nfs4_set_client+0x3f6/0x640
[ 94.761540][ T6032] nfs4_init_server.isra.0+0x5be/0xf80
[ 94.767043][ T6032] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 94.772850][ T6032] ? __pfx_nfs4_init_server.isra.0+0x10/0x10
[ 94.778890][ T6032] ? __rpc_init_priority_wait_queue+0x38a/0x500
[ 94.785144][ T6032] nfs4_create_server+0x185/0x2b0
[ 94.790244][ T6032] nfs4_try_get_tree+0x93/0x140
[ 94.795101][ T6032] nfs_get_tree+0xa61/0x1440
[ 94.799782][ T6032] vfs_get_tree+0x92/0x320
[ 94.804204][ T6032] path_mount+0x7d0/0x2850
[ 94.808710][ T6032] ? __pfx_path_mount+0x10/0x10
[ 94.813579][ T6032] ? lockdep_hardirqs_on+0x7d/0x110
[ 94.818807][ T6032] ? putname+0xb1/0x110
[ 94.822973][ T6032] ? kmem_cache_free+0x127/0x6c0
[ 94.827961][ T6032] ? __x64_sys_mount+0x293/0x310
[ 94.832923][ T6032] __x64_sys_mount+0x293/0x310
[ 94.837727][ T6032] ? __pfx___x64_sys_mount+0x10/0x10
[ 94.843027][ T6032] do_syscall_64+0x123/0x790
[ 94.847665][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.853561][ T6032] RIP: 0033:0x7f754c860f1a
[ 94.858106][ T6032] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[ 94.877757][ T6032] RSP: 002b:00007ffdb5c8cd48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 94.886191][ T6032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f754c860f1a
[ 94.894156][ T6032] RDX: 00007f754c8bf03f RSI: 00007f754c8beffe RDI: 00007f754c8bf044
[ 94.902178][ T6032] RBP: 0000000000000004 R08: 00007ffdb5c8cdc0 R09: 0000000000000000
[ 94.910173][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f754c8beffe
[ 94.918197][ T6032] R13: 0000000000001791 R14: 0000000000000801 R15: 00007ffdb5c8cdc0
[ 94.926218][ T6032]
[ 94.929235][ T6032] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.936502][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz-executor281 Not tainted syzkaller #0 PREEMPT(full)
[ 94.946198][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 94.956254][ T6032] Call Trace:
[ 94.959515][ T6032]
[ 94.962428][ T6032] dump_stack_lvl+0x100/0x190
[ 94.967103][ T6032] vpanic+0x2dc/0x6f8
[ 94.971069][ T6032] panic+0xd1/0xe0
[ 94.974770][ T6032] ? __pfx_panic+0x10/0x10
[ 94.979177][ T6032] check_panic_on_warn.cold+0x19/0x34
[ 94.984533][ T6032] ? svc_destroy+0x299/0x330
[ 94.989110][ T6032] __warn.cold+0x191/0x321
[ 94.993525][ T6032] __report_bug+0x30f/0x440
[ 94.998014][ T6032] ? svc_destroy+0x299/0x330
[ 95.002590][ T6032] ? __pfx___report_bug+0x10/0x10
[ 95.007617][ T6032] ? _raw_spin_lock_irqsave+0x52/0x60
[ 95.012980][ T6032] report_bug_entry+0xe2/0x290
[ 95.017730][ T6032] ? svc_destroy+0x29d/0x330
[ 95.022302][ T6032] handle_bug+0x1cd/0x2a0
[ 95.026618][ T6032] exc_invalid_op+0x17/0x50
[ 95.031108][ T6032] asm_exc_invalid_op+0x1a/0x20
[ 95.035942][ T6032] RIP: 0010:svc_destroy+0x29d/0x330
[ 95.041128][ T6032] Code: 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 00 48 8d 7b 18 48 89 fa 48 c1 ea 03 80 3c 02 00 75 67 48 8d 3d 07 5e 77 07 48 8b 73 18 <67> 48 0f b9 3a e9 d0 fd ff ff 48 8b 7c 24 08 e8 8f 2c 85 f7 e9 a5
[ 95.060720][ T6032] RSP: 0018:ffffc9000259f858 EFLAGS: 00010246
[ 95.066770][ T6032] RAX: dffffc0000000000 RBX: ffffffff9040bf80 RCX: 0000000000000000
[ 95.074721][ T6032] RDX: 1ffffffff20817f3 RSI: ffffffff8c37ebc0 RDI: ffffffff927b0770
[ 95.082671][ T6032] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[ 95.090623][ T6032] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888020340000
[ 95.098575][ T6032] R13: ffff888027daec00 R14: ffff88807b8b4000 R15: ffffffff9cd624c0
[ 95.106544][ T6032] ? svc_destroy+0x258/0x330
[ 95.111123][ T6032] ? xprt_svc_destroy_nullify_bc+0x14e/0x1a0
[ 95.117094][ T6032] nfs_callback_up+0x511/0xb50
[ 95.121848][ T6032] nfs4_init_client+0x236/0x420
[ 95.126683][ T6032] ? __pfx_nfs4_init_client+0x10/0x10
[ 95.132047][ T6032] nfs_get_client+0xf38/0x1230
[ 95.136813][ T6032] ? rcu_is_watching+0x13/0xc0
[ 95.141574][ T6032] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 95.147461][ T6032] nfs4_set_client+0x3f6/0x640
[ 95.152215][ T6032] nfs4_init_server.isra.0+0x5be/0xf80
[ 95.157659][ T6032] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 95.163449][ T6032] ? __pfx_nfs4_init_server.isra.0+0x10/0x10
[ 95.169434][ T6032] ? __rpc_init_priority_wait_queue+0x38a/0x500
[ 95.175666][ T6032] nfs4_create_server+0x185/0x2b0
[ 95.180682][ T6032] nfs4_try_get_tree+0x93/0x140
[ 95.185519][ T6032] nfs_get_tree+0xa61/0x1440
[ 95.190100][ T6032] vfs_get_tree+0x92/0x320
[ 95.194510][ T6032] path_mount+0x7d0/0x2850
[ 95.198920][ T6032] ? __pfx_path_mount+0x10/0x10
[ 95.203760][ T6032] ? lockdep_hardirqs_on+0x7d/0x110
[ 95.208956][ T6032] ? putname+0xb1/0x110
[ 95.213111][ T6032] ? kmem_cache_free+0x127/0x6c0
[ 95.218063][ T6032] ? __x64_sys_mount+0x293/0x310
[ 95.222998][ T6032] __x64_sys_mount+0x293/0x310
[ 95.227755][ T6032] ? __pfx___x64_sys_mount+0x10/0x10
[ 95.233041][ T6032] do_syscall_64+0x123/0x790
[ 95.237621][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.243502][ T6032] RIP: 0033:0x7f754c860f1a
[ 95.247901][ T6032] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[ 95.267492][ T6032] RSP: 002b:00007ffdb5c8cd48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 95.275892][ T6032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f754c860f1a
[ 95.283846][ T6032] RDX: 00007f754c8bf03f RSI: 00007f754c8beffe RDI: 00007f754c8bf044
[ 95.291809][ T6032] RBP: 0000000000000004 R08: 00007ffdb5c8cdc0 R09: 0000000000000000
[ 95.299771][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f754c8beffe
[ 95.307725][ T6032] R13: 0000000000001791 R14: 0000000000000801 R15: 00007ffdb5c8cdc0
[ 95.315694][ T6032]
[ 95.318911][ T6032] Kernel Offset: disabled
[ 95.323213][ T6032] Rebooting in 86400 seconds..