INFO: task syz.0.9:5879 blocked for more than 154 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.9 state:D stack:27912 pid:5879 ppid:5775 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 write_threads+0x393/0x510 fs/nfsd/nfsctl.c:417 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f9f88f9de99 RSP: 002b:00007f9f89ef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f9f89226090 RCX: 00007f9f88f9de99 RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000004 RBP: 00007f9f89033eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9f89226128 R14: 00007f9f89226090 R15: 00007ffeaf300b68 INFO: task syz.1.23:5924 blocked for more than 155 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.23 state:D stack:27912 pid:5924 ppid:5774 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fb92499de99 RSP: 002b:00007fb922bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fb924c25fa0 RCX: 00007fb92499de99 RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007fb924a33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb924c26038 R14: 00007fb924c25fa0 R15: 00007ffd0f2b6dc8 INFO: task syz.1.23:5927 blocked for more than 156 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.23 state:D stack:27912 pid:5927 ppid:5774 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 write_threads+0x393/0x510 fs/nfsd/nfsctl.c:417 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fb92499de99 RSP: 002b:00007fb922bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fb924c26090 RCX: 00007fb92499de99 RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000004 RBP: 00007fb924a33eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb924c26128 R14: 00007fb924c26090 R15: 00007ffd0f2b6dc8 INFO: task syz.2.24:5931 blocked for more than 156 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.24 state:D stack:27016 pid:5931 ppid:5776 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7ff88e19de99 RSP: 002b:00007ff88f0cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ff88e425fa0 RCX: 00007ff88e19de99 RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000003 RBP: 00007ff88e233eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff88e426038 R14: 00007ff88e425fa0 R15: 00007ffefb4f4868 INFO: task syz.2.24:5933 blocked for more than 156 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.24 state:D stack:27016 pid:5933 ppid:5776 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7ff88e19de99 RSP: 002b:00007ff88f0ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ff88e426090 RCX: 00007ff88e19de99 RDX: 0000000000000009 RSI: 0000200000000500 RDI: 0000000000000004 RBP: 00007ff88e233eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff88e426128 R14: 00007ff88e426090 R15: 00007ffefb4f4868 INFO: task syz.2.24:5934 blocked for more than 157 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.24 state:D stack:27016 pid:5934 ppid:5776 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 write_threads+0x393/0x510 fs/nfsd/nfsctl.c:417 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7ff88e19de99 RSP: 002b:00007ff88f08a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007ff88e426180 RCX: 00007ff88e19de99 RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000005 RBP: 00007ff88e233eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff88e426218 R14: 00007ff88e426180 R15: 00007ffefb4f4868 INFO: task syz.3.26:5939 blocked for more than 157 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.26 state:D stack:27912 pid:5939 ppid:5773 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f0d8359de99 RSP: 002b:00007f0d844b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f0d83825fa0 RCX: 00007f0d8359de99 RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 RBP: 00007f0d83633eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f0d83826038 R14: 00007f0d83825fa0 R15: 00007ffdb530eaf8 INFO: task syz.3.26:5940 blocked for more than 158 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.26 state:D stack:27912 pid:5940 ppid:5773 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f0d8359de99 RSP: 002b:00007f0d8448f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f0d83826090 RCX: 00007f0d8359de99 RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 RBP: 00007f0d83633eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f0d83826128 R14: 00007f0d83826090 R15: 00007ffdb530eaf8 INFO: task syz.3.26:5941 blocked for more than 158 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.26 state:D stack:27912 pid:5941 ppid:5773 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x15ae/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6834 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0x673/0xc80 kernel/locking/mutex.c:747 nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 write_threads+0x393/0x510 fs/nfsd/nfsctl.c:417 nfsctl_transaction_write+0x10c/0x150 fs/nfsd/nfsctl.c:113 vfs_write+0x299/0x9a0 fs/read_write.c:582 ksys_write+0x151/0x260 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f0d8359de99 RSP: 002b:00007f0d8446e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f0d83826180 RCX: 00007f0d8359de99 RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 RBP: 00007f0d83633eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f0d83826218 R14: 00007f0d83826180 R15: 00007ffdb530eaf8 Showing all locks held in the system: 1 lock held by khungtaskd/28: #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 kernel/locking/lockdep.c:6633 2 locks held by kworker/0:2/147: #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #1: ffffc90002ec7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #1: ffffc90002ec7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 2 locks held by kworker/u4:6/1133: 2 locks held by getty/5531: #0: ffff88802dcd90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 drivers/tty/n_tty.c:2217 3 locks held by kworker/1:4/5824: #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #1: ffffc9000496fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #1: ffffc9000496fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #2: ffff888027062240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x285/0x32c0 drivers/net/netdevsim/fib.c:1491 3 locks held by syz.0.9/5873: #0: ffff88802c098fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805bc62418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.0.9/5879: #0: ffff88802e4414c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805bc62418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.1.23/5924: #0: ffff8880311f2ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802cdb8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.1.23/5927: #0: ffff88807cd360c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802cdb8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.2.24/5931: #0: ffff88802fb6cfc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802d76c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.2.24/5933: #0: ffff8880219c19c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802d76c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.2.24/5934: #0: ffff8880219c14c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802d76c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.3.26/5939: #0: ffff88802c4a0fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888027a48418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.3.26/5940: #0: ffff888021057248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888027a48418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.3.26/5941: #0: ffff8880210560c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888027a48418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.4.27/5966: #0: ffff888030ed54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807e2d8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 1 lock held by syz.4.27/5968: #0: ffff888030ed54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 1 lock held by syz.4.27/5969: #0: ffff888030ed54c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 3 locks held by syz.4.27/5970: #0: ffff88802492d248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807e2d8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.5.28/6011: #0: ffff88802fdb4d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807a77a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.5.28/6014: #0: ffff88802f109248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807a77a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.5.28/6017: #0: ffff88807cd36848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807a77a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.6.32/6026: #0: ffff888077552848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802d76a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.6.32/6027: #0: ffff888077552ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802d76a418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.8.86/6224: #0: ffff888018ac0848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805c6a2418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.8.86/6226: #0: ffff888030ec0348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805c6a2418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by kworker/u4:10/6238: #0: ffff88802cfb3538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #0: ffff88802cfb3538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #1: ffffc9000c5c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #1: ffffc9000c5c7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 net/ipv6/addrconf.c:4188 3 locks held by syz.7.112/6318: #0: ffff888030009248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802f00e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.7.112/6319: #0: ffff88803061f4c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802f00e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.7.112/6320: #0: ffff88803061f748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802f00e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.0.130/6366: #0: ffff8880275234c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802f024418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.0.130/6367: #0: ffff888027522848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802f024418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.9.149/6426: #0: ffff88802f9d39c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807c006418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.1.158/6452: #0: ffff88802c4a19c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802ff1e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.1.158/6453: #0: ffff88802b5ec348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802ff1e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.1.158/6454: #0: ffff88802b5ecfc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88802ff1e418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.6.232/6894: #0: ffff88803036a5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807db54418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.5.249/6959: #0: ffff88803bebcd48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805ac0c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.5.249/6965: #0: ffff88803bebc348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805ac0c418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.4.255/7002: #0: ffff888022582ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807d7e6418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.4.255/7003: #0: ffff88802fcd6848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807d7e6418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.4.255/7006: #0: ffff888027522ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88807d7e6418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by kworker/u4:12/7238: #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #1: ffffc90004b9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline] #1: ffffc90004b9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730 #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:286 3 locks held by syz.8.281/7272: #0: ffff8880219c7248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805ce68418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.8.281/7273: #0: ffff8880396a0ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805ce68418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.8.281/7274: #0: ffff8880396a1c48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff88805ce68418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 3 locks held by syz.0.290/7432: #0: ffff8880296999c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_recoverydir+0xfe/0x550 fs/nfsd/nfsctl.c:1088 3 locks held by syz.0.290/7435: #0: ffff8880367325c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0x96/0xe00 fs/nfsd/nfsctl.c:676 3 locks held by syz.0.290/7438: #0: ffff8880315a45c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.0.290/7441: #0: ffff88802fe42848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888039fe8418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 1 lock held by syz.0.290/7442: #0: ffff88802fe42848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 2 locks held by syz-executor/7538: #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 drivers/net/tun.c:3514 #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:324 [inline] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 kernel/rcu/tree_exp.h:1004 3 locks held by syz.9.314/7613: #0: ffff88806cd6e5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888047550418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 fs/nfsd/nfsctl.c:843 3 locks held by syz.9.314/7617: #0: ffff888085904d48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 fs/file.c:1040 #1: ffff888047550418 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 fs/read_write.c:580 #2: ffffffff8d3e17a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x65/0xab0 fs/nfsd/nfssvc.c:788 1 lock held by syz.7.316/7631: #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_detach drivers/net/tun.c:698 [inline] #0: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 drivers/net/tun.c:3514 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 nmi_cpu_backtrace+0x3a6/0x3e0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x2f0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline] watchdog+0xf59/0xfa0 kernel/hung_task.c:379 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 7240 Comm: kworker/u4:14 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: bat_events batadv_nc_worker RIP: 0010:__lock_release kernel/locking/lockdep.c:5458 [inline] RIP: 0010:lock_release+0x2b4/0x8c0 kernel/locking/lockdep.c:5774 Code: 04 33 84 c0 0f 85 b5 04 00 00 45 89 2e 45 85 ff 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 08 0f 85 86 02 00 00 48 8b 44 24 20 <42> 0f b6 04 28 84 c0 0f 85 62 04 00 00 48 8b 04 24 89 10 4c 89 e0 RSP: 0018:ffffc90004c2fa40 EFLAGS: 00000087 RAX: 1ffff110048f151b RBX: 1ffff110048f152a RCX: 0000000000000001 RDX: 0000000000000002 RSI: ffffffff8d131da0 RDI: ffff88802478a930 RBP: ffffc90004c2fb50 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88802478a930 R13: dffffc0000000000 R14: ffff88802478a950 R15: 1ffff92000985f54 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ba6ea56660 CR3: 000000000cf32000 CR4: 00000000003506f0 Call Trace: rcu_lock_release include/linux/rcupdate.h:344 [inline] rcu_read_unlock include/linux/rcupdate.h:819 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x28b/0x600 net/batman-adv/network-coding.c:719 process_one_work kernel/workqueue.c:2653 [inline] process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730 worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293