[ 92.924610][ T30] audit: type=1400 audit(1794116932.477:207): avc: denied { write } for pid=6007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts.
[ 93.037251][ T30] audit: type=1400 audit(1794116932.597:208): avc: denied { write } for pid=6019 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[*] Starting reproducer for WARNING in svc_destroy...
[+] Directory ./mnt_repro ready.
[+] Created AF_INET socket for NFS dummy server.
[+] setsockopt SO_REUSEADDR successful.
[+] Bound nfs_sfd to 127.0.0.1:2049 successfully.
[+] Listening on nfs_sfd port 2049 successfully.
[+] Started dummy NFS RPC server process (pid=6025).
[+] Successfully opened /proc/sys/fs/nfs/nfs_callback_tcpport for writing.
[+] Successfully wrote port 45454 to /proc/sys/fs/nfs/nfs_callback_tcpport.
[+] Successfully closed sysctl fd.
[+] AF_INET6 socket created successfully.
[+] setsockopt IPV6_V6ONLY successful.
[+] Bound AF_INET6 socket to [::]:45454 successfully.
[+] Listening on AF_INET6 socket port 45454 successfully.
[*] Invoking mount with options: addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,sec=sys
[ 93.273090][ T6024] NFS: callback service start failed
[ 93.273170][ T6024] ------------[ cut here ]------------
[ 93.273178][ T6024] SVC: permsocks remain for NFSv4 callback
[ 93.273189][ T6024] WARNING: net/sunrpc/svc.c:532 at svc_destroy+0x299/0x330, CPU#1: syz-executor154/6024
[ 93.302580][ T6024] Modules linked in:
[ 93.307367][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz-executor154 Not tainted syzkaller #0 PREEMPT(full)
[ 93.317782][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 93.328198][ T6024] RIP: 0010:svc_destroy+0x29d/0x330
[ 93.333388][ T6024] Code: 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 00 48 8d 7b 18 48 89 fa 48 c1 ea 03 80 3c 02 00 75 67 48 8d 3d e7 6d 77 07 48 8b 73 18 <67> 48 0f b9 3a e9 d0 fd ff ff 48 8b 7c 24 08 e8 7f 4d 85 f7 e9 a5
[ 93.353779][ T6024] RSP: 0018:ffffc9000393f860 EFLAGS: 00010246
[ 93.360537][ T6024] RAX: dffffc0000000000 RBX: ffffffff9040bf80 RCX: 0000000000000000
[ 93.368834][ T6024] RDX: 1ffffffff20817f3 RSI: ffffffff8c37ebc0 RDI: ffffffff927b0660
[ 93.377203][ T6024] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[ 93.385262][ T6024] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888020bcc000
[ 93.393321][ T6024] R13: ffff8880274a0000 R14: ffff88802c3c4000 R15: ffffffff9cd624c0
[ 93.401328][ T6024] FS: 000055556ff69400(0000) GS:ffff888122575000(0000) knlGS:0000000000000000
[ 93.410293][ T6024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 93.416892][ T6024] CR2: 000055fdb0009fd0 CR3: 00000000377ff000 CR4: 00000000003526f0
[ 93.424855][ T6024] Call Trace:
[ 93.428196][ T6024]
[ 93.431128][ T6024] ? xprt_svc_destroy_nullify_bc+0x14e/0x1a0
[ 93.437165][ T6024] nfs_callback_up+0x511/0xad0
[ 93.441932][ T6024] nfs4_init_client+0x236/0x420
[ 93.446810][ T6024] ? __pfx_nfs4_init_client+0x10/0x10
[ 93.452181][ T6024] nfs_get_client+0xf38/0x1230
[ 93.457001][ T6024] ? rcu_is_watching+0x13/0xc0
[ 93.461765][ T6024] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 93.467713][ T6024] nfs4_set_client+0x3f6/0x640
[ 93.472506][ T6024] nfs4_init_server.isra.0+0x5be/0xf80
[ 93.477985][ T6024] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 93.483789][ T6024] ? __pfx_nfs4_init_server.isra.0+0x10/0x10
[ 93.489826][ T6024] ? __rpc_init_priority_wait_queue+0x38a/0x500
[ 93.496112][ T6024] nfs4_create_server+0x185/0x2b0
[ 93.501137][ T6024] nfs4_try_get_tree+0x93/0x140
[ 93.506007][ T6024] nfs_get_tree+0xa61/0x1440
[ 93.510616][ T6024] vfs_get_tree+0x92/0x320
[ 93.515068][ T6024] path_mount+0x7d0/0x2850
[ 93.519489][ T6024] ? __pfx_path_mount+0x10/0x10
[ 93.524334][ T6024] ? lockdep_hardirqs_on+0x7d/0x110
[ 93.529580][ T6024] ? putname+0xb1/0x110
[ 93.533746][ T6024] ? kmem_cache_free+0x127/0x6c0
[ 93.538722][ T6024] ? __x64_sys_mount+0x293/0x310
[ 93.543681][ T6024] __x64_sys_mount+0x293/0x310
[ 93.548491][ T6024] ? __pfx___x64_sys_mount+0x10/0x10
[ 93.553803][ T6024] do_syscall_64+0x123/0x790
[ 93.558444][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.564331][ T6024] RIP: 0033:0x7fd324de7f1a
[ 93.568830][ T6024] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[ 93.588465][ T6024] RSP: 002b:00007ffca5d506e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 93.596919][ T6024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd324de7f1a
[ 93.604929][ T6024] RDX: 00007fd324e4603f RSI: 00007fd324e45ffe RDI: 00007fd324e46044
[ 93.612892][ T6024] RBP: 0000000000000004 R08: 00007ffca5d50760 R09: 0000000000000000
[ 93.620887][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd324e45ffe
[ 93.628875][ T6024] R13: 0000000000001789 R14: 0000000000000801 R15: 00007ffca5d50760
[ 93.636885][ T6024]
[ 93.639917][ T6024] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 93.647181][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz-executor154 Not tainted syzkaller #0 PREEMPT(full)
[ 93.656875][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 93.666908][ T6024] Call Trace:
[ 93.670165][ T6024]
[ 93.673069][ T6024] dump_stack_lvl+0x100/0x190
[ 93.677760][ T6024] vpanic+0x2dc/0x6f8
[ 93.681744][ T6024] panic+0xd1/0xe0
[ 93.685547][ T6024] ? __pfx_panic+0x10/0x10
[ 93.689951][ T6024] check_panic_on_warn.cold+0x19/0x34
[ 93.695309][ T6024] ? svc_destroy+0x299/0x330
[ 93.699895][ T6024] __warn.cold+0x191/0x321
[ 93.704301][ T6024] __report_bug+0x30f/0x440
[ 93.708794][ T6024] ? svc_destroy+0x299/0x330
[ 93.713373][ T6024] ? __pfx___report_bug+0x10/0x10
[ 93.718397][ T6024] ? __pfx_debug_object_assert_init+0x10/0x10
[ 93.724459][ T6024] ? _raw_spin_lock_irqsave+0x52/0x60
[ 93.729819][ T6024] report_bug_entry+0xe2/0x290
[ 93.734570][ T6024] ? svc_destroy+0x29d/0x330
[ 93.739148][ T6024] handle_bug+0x1cd/0x2a0
[ 93.743467][ T6024] exc_invalid_op+0x17/0x50
[ 93.747965][ T6024] asm_exc_invalid_op+0x1a/0x20
[ 93.752807][ T6024] RIP: 0010:svc_destroy+0x29d/0x330
[ 93.757996][ T6024] Code: 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 00 48 8d 7b 18 48 89 fa 48 c1 ea 03 80 3c 02 00 75 67 48 8d 3d e7 6d 77 07 48 8b 73 18 <67> 48 0f b9 3a e9 d0 fd ff ff 48 8b 7c 24 08 e8 7f 4d 85 f7 e9 a5
[ 93.777615][ T6024] RSP: 0018:ffffc9000393f860 EFLAGS: 00010246
[ 93.783669][ T6024] RAX: dffffc0000000000 RBX: ffffffff9040bf80 RCX: 0000000000000000
[ 93.791621][ T6024] RDX: 1ffffffff20817f3 RSI: ffffffff8c37ebc0 RDI: ffffffff927b0660
[ 93.799600][ T6024] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[ 93.807558][ T6024] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888020bcc000
[ 93.815510][ T6024] R13: ffff8880274a0000 R14: ffff88802c3c4000 R15: ffffffff9cd624c0
[ 93.823489][ T6024] ? xprt_svc_destroy_nullify_bc+0x14e/0x1a0
[ 93.829472][ T6024] nfs_callback_up+0x511/0xad0
[ 93.834248][ T6024] nfs4_init_client+0x236/0x420
[ 93.839088][ T6024] ? __pfx_nfs4_init_client+0x10/0x10
[ 93.844455][ T6024] nfs_get_client+0xf38/0x1230
[ 93.849226][ T6024] ? rcu_is_watching+0x13/0xc0
[ 93.853985][ T6024] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 93.859871][ T6024] nfs4_set_client+0x3f6/0x640
[ 93.864626][ T6024] nfs4_init_server.isra.0+0x5be/0xf80
[ 93.870070][ T6024] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 93.875861][ T6024] ? __pfx_nfs4_init_server.isra.0+0x10/0x10
[ 93.881856][ T6024] ? __rpc_init_priority_wait_queue+0x38a/0x500
[ 93.888090][ T6024] nfs4_create_server+0x185/0x2b0
[ 93.893116][ T6024] nfs4_try_get_tree+0x93/0x140
[ 93.897957][ T6024] nfs_get_tree+0xa61/0x1440
[ 93.902542][ T6024] vfs_get_tree+0x92/0x320
[ 93.906949][ T6024] path_mount+0x7d0/0x2850
[ 93.911362][ T6024] ? __pfx_path_mount+0x10/0x10
[ 93.916202][ T6024] ? lockdep_hardirqs_on+0x7d/0x110
[ 93.921387][ T6024] ? putname+0xb1/0x110
[ 93.925526][ T6024] ? kmem_cache_free+0x127/0x6c0
[ 93.930459][ T6024] ? __x64_sys_mount+0x293/0x310
[ 93.935384][ T6024] __x64_sys_mount+0x293/0x310
[ 93.940139][ T6024] ? __pfx___x64_sys_mount+0x10/0x10
[ 93.945420][ T6024] do_syscall_64+0x123/0x790
[ 93.950001][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.955874][ T6024] RIP: 0033:0x7fd324de7f1a
[ 93.960271][ T6024] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[ 93.979859][ T6024] RSP: 002b:00007ffca5d506e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 93.988253][ T6024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd324de7f1a
[ 93.996203][ T6024] RDX: 00007fd324e4603f RSI: 00007fd324e45ffe RDI: 00007fd324e46044
[ 94.004153][ T6024] RBP: 0000000000000004 R08: 00007ffca5d50760 R09: 0000000000000000
[ 94.012106][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd324e45ffe
[ 94.020056][ T6024] R13: 0000000000001789 R14: 0000000000000801 R15: 00007ffca5d50760
[ 94.028023][ T6024]
[ 94.031237][ T6024] Kernel Offset: disabled
[ 94.035540][ T6024] Rebooting in 86400 seconds..