INFO: task syz-executor:14162 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:21672 pid:14162 tgid:14162 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 nfsd_umount+0x3b/0x60 fs/nfsd/nfsctl.c:1353 deactivate_locked_super+0xc1/0x1b0 fs/super.c:474 deactivate_super fs/super.c:507 [inline] deactivate_super+0xe7/0x110 fs/super.c:503 cleanup_mnt+0x21f/0x450 fs/namespace.c:1318 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x100/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1fc899c117 RSP: 002b:00007ffd87650e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f1fc8a0471f RCX: 00007f1fc899c117 RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffd87651fb0 RBP: 00007ffd87651f9c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd87651fb0 R13: 00007f1fc8a0471f R14: 00000000001089fc R15: 00007ffd87651ff0 INFO: task syz-executor:14438 blocked for more than 144 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23608 pid:14438 tgid:14438 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 nfsd_umount+0x3b/0x60 fs/nfsd/nfsctl.c:1353 deactivate_locked_super+0xc1/0x1b0 fs/super.c:474 deactivate_super fs/super.c:507 [inline] deactivate_super+0xe7/0x110 fs/super.c:503 cleanup_mnt+0x21f/0x450 fs/namespace.c:1318 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x100/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2bd4b9c117 RSP: 002b:00007fffc868d048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f2bd4c0471f RCX: 00007f2bd4b9c117 RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007fffc868e190 RBP: 00007fffc868e17c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc868e190 R13: 00007f2bd4c0471f R14: 0000000000104684 R15: 00007fffc868e1d0 INFO: task syz-executor:17991 blocked for more than 144 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23928 pid:17991 tgid:17991 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 nfsd_umount+0x3b/0x60 fs/nfsd/nfsctl.c:1353 deactivate_locked_super+0xc1/0x1b0 fs/super.c:474 deactivate_super fs/super.c:507 [inline] deactivate_super+0xe7/0x110 fs/super.c:503 cleanup_mnt+0x21f/0x450 fs/namespace.c:1318 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x100/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f596359c117 RSP: 002b:00007ffc428a88c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f596360471f RCX: 00007f596359c117 RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffc428a9a10 RBP: 00007ffc428a99fc R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc428a9a10 R13: 00007f596360471f R14: 00000000001053fd R15: 00007ffc428a9a50 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 1 lock held by kcompactd0/34: 2 locks held by kworker/1:1/43: #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:647 [inline] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 kernel/sched/core.c:632 #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:225 [inline] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b6f/0x5e10 kernel/sched/core.c:6861 3 locks held by kworker/0:4/5882: #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 kernel/workqueue.c:3232 #1: ffffc9000435fc98 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 kernel/workqueue.c:3233 #2: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 kernel/rcu/tree.c:3816 2 locks held by kworker/1:6/5918: #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 kernel/workqueue.c:3232 #1: ffffc90004d07c98 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 kernel/workqueue.c:3233 2 locks held by syz-executor/14162: #0: ffff88805d85a0e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff88805d85a0e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff88805d85a0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff88805d85a0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/14438: #0: ffff88804f1c00e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff88804f1c00e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff88804f1c00e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff88804f1c00e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/17991: #0: ffff888028a620e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff888028a620e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff888028a620e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff888028a620e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 4 locks held by kworker/u10:61/20661: #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 kernel/workqueue.c:3232 #1: ffffc90003e7fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 kernel/workqueue.c:3233 #2: ffffffff903dcf30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 net/core/net_namespace.c:670 #3: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 drivers/net/wireguard/device.c:419 2 locks held by getty/22257: #0: ffff888035c380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900034dd2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 drivers/tty/n_tty.c:2211 3 locks held by kworker/u11:1/24216: #0: ffff8880867ee148 ((wq_completion)hci17){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 kernel/workqueue.c:3232 #1: ffffc9000c837c98 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 kernel/workqueue.c:3233 #2: ffff88803bfc8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 net/bluetooth/hci_core.c:428 2 locks held by syz.1.3846/24672: #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 fs/nfsd/nfsctl.c:1596 2 locks held by syz-executor/24879: #0: ffff88805d0080e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff88805d0080e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff88805d0080e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff88805d0080e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25039: #0: ffff888030dcc0e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff888030dcc0e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff888030dcc0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff888030dcc0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25086: #0: ffff888053d180e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff888053d180e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff888053d180e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff888053d180e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25288: #0: ffff8880936ce0e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff8880936ce0e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff8880936ce0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff8880936ce0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25396: #0: ffff8880920320e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff8880920320e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff8880920320e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff8880920320e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25543: #0: ffff888069bd80e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff888069bd80e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff888069bd80e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff888069bd80e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25569: #0: ffff888035b280e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff888035b280e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff888035b280e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff888035b280e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/25614: #0: ffff888029e900e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff888029e900e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff888029e900e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff888029e900e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 2 locks held by syz-executor/26150: #0: ffff88807ba360e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock fs/super.c:57 [inline] #0: ffff88807ba360e0 (&type->s_umount_key#53){++++}-{4:4}, at: __super_lock_excl fs/super.c:72 [inline] #0: ffff88807ba360e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super fs/super.c:506 [inline] #0: ffff88807ba360e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 fs/super.c:503 #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 5 locks held by syz.4.4156/26753: #0: ffff88803397cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 net/bluetooth/hci_core.c:499 #1: ffff88803397c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 net/bluetooth/hci_sync.c:5315 #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2143 [inline] #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 net/bluetooth/hci_conn.c:2637 #3: ffff88807b66ab38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 net/bluetooth/l2cap_core.c:1763 #4: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343 3 locks held by syz.6.4257/27266: #0: ffff88814e4dcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 net/bluetooth/hci_core.c:499 #1: ffff88814e4dc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 net/bluetooth/hci_sync.c:5315 #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2143 [inline] #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 net/bluetooth/hci_conn.c:2637 3 locks held by syz.8.4273/27344: #0: ffff8880366d4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 net/bluetooth/hci_core.c:499 #1: ffff8880366d40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 net/bluetooth/hci_sync.c:5315 #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_cfm include/net/bluetooth/hci_core.h:2143 [inline] #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 net/bluetooth/hci_conn.c:2637 3 locks held by syz.9.4277/27353: #0: ffffffff903dcf30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 net/core/net_namespace.c:577 #1: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 #2: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline] watchdog+0xcc3/0xfe0 kernel/hung_task.c:515 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_hrtimeout_range_clock+0x2d8/0x320 kernel/time/sleep_timeout.c:207 ep_poll fs/eventpoll.c:2028 [inline] do_epoll_wait+0xdc3/0x1020 fs/eventpoll.c:2461 __do_sys_epoll_wait fs/eventpoll.c:2469 [inline] __se_sys_epoll_wait fs/eventpoll.c:2464 [inline] __x64_sys_epoll_wait+0x194/0x290 fs/eventpoll.c:2464 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdc896a7407 RSP: 002b:00007ffdb7f31c70 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 00007fdc89d93880 RCX: 00007fdc896a7407 RDX: 0000000000000004 RSI: 00007ffdb7f31d00 RDI: 0000000000000004 RBP: 0000556ab1883910 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000202 R12: 0000556ab18973b0 R13: 00007ffdb7f31d00 R14: 0000000000000000 R15: 0000000000000000 task:krxrpcio/7001 state:S stack:30456 pid:25399 tgid:25399 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rxrpc_io_thread+0x18c1/0x38b0 net/rxrpc/io_thread.c:593 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-bond0 state:I stack:31000 pid:25400 tgid:25400 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25402 tgid:25402 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31032 pid:25403 tgid:25403 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25404 tgid:25404 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:udevd state:S stack:27480 pid:25414 tgid:25414 ppid:5193 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_hrtimeout_range_clock+0x2d8/0x320 kernel/time/sleep_timeout.c:207 ep_poll fs/eventpoll.c:2028 [inline] do_epoll_wait+0xdc3/0x1020 fs/eventpoll.c:2461 __do_sys_epoll_wait fs/eventpoll.c:2469 [inline] __se_sys_epoll_wait fs/eventpoll.c:2464 [inline] __x64_sys_epoll_wait+0x194/0x290 fs/eventpoll.c:2464 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdc896a7407 RSP: 002b:00007ffdb7f31c70 EFLAGS: 00000202 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 00007fdc89d93880 RCX: 00007fdc896a7407 RDX: 0000000000000004 RSI: 00007ffdb7f31d00 RDI: 0000000000000004 RBP: 0000556ab1883910 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffffffffffff R11: 0000000000000202 R12: 0000556ab18a9a40 R13: 00007ffdb7f31d00 R14: 0000000000000000 R15: 0000000000000000 task:napi/wg0-0 state:S stack:29448 pid:25425 tgid:25425 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg0-0 state:S stack:29448 pid:25426 tgid:25426 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg1-0 state:S stack:29448 pid:25427 tgid:25427 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg1-0 state:S stack:29448 pid:25428 tgid:25428 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg2-0 state:S stack:29448 pid:25429 tgid:25429 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg2-0 state:S stack:27064 pid:25430 tgid:25430 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz-executor state:D stack:24024 pid:25543 tgid:25543 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 nfsd_umount+0x3b/0x60 fs/nfsd/nfsctl.c:1353 deactivate_locked_super+0xc1/0x1b0 fs/super.c:474 deactivate_super fs/super.c:507 [inline] deactivate_super+0xe7/0x110 fs/super.c:503 cleanup_mnt+0x21f/0x450 fs/namespace.c:1318 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x100/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff5d019c117 RSP: 002b:00007fff500f6588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007ff5d020471f RCX: 00007ff5d019c117 RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007fff500f76d0 RBP: 00007fff500f76bc R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff500f76d0 R13: 00007ff5d020471f R14: 00000000001185cc R15: 00007fff500f7710 task:krxrpcio/7001 state:S stack:30456 pid:25550 tgid:25550 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rxrpc_io_thread+0x18c1/0x38b0 net/rxrpc/io_thread.c:593 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-bond0 state:I stack:31048 pid:25552 tgid:25552 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25557 tgid:25557 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25558 tgid:25558 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25559 tgid:25559 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz-executor state:D stack:23256 pid:25569 tgid:25569 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 nfsd_umount+0x3b/0x60 fs/nfsd/nfsctl.c:1353 deactivate_locked_super+0xc1/0x1b0 fs/super.c:474 deactivate_super fs/super.c:507 [inline] deactivate_super+0xe7/0x110 fs/super.c:503 cleanup_mnt+0x21f/0x450 fs/namespace.c:1318 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x100/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdf8e39c117 RSP: 002b:00007fffb51b96f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007fdf8e40471f RCX: 00007fdf8e39c117 RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007fffb51ba840 RBP: 00007fffb51ba82c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb51ba840 R13: 00007fdf8e40471f R14: 0000000000114df5 R15: 00007fffb51ba880 task:krxrpcio/7001 state:S stack:30456 pid:25576 tgid:25576 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rxrpc_io_thread+0x18c1/0x38b0 net/rxrpc/io_thread.c:593 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-bond0 state:I stack:31000 pid:25585 tgid:25585 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25595 tgid:25595 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25597 tgid:25597 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25603 tgid:25603 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz-executor state:D stack:23352 pid:25614 tgid:25614 ppid:1 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7021 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0xc9a/0x1b90 kernel/locking/mutex.c:776 nfsd_shutdown_threads+0x5b/0xf0 fs/nfsd/nfssvc.c:575 nfsd_umount+0x3b/0x60 fs/nfsd/nfsctl.c:1353 deactivate_locked_super+0xc1/0x1b0 fs/super.c:474 deactivate_super fs/super.c:507 [inline] deactivate_super+0xe7/0x110 fs/super.c:503 cleanup_mnt+0x21f/0x450 fs/namespace.c:1318 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0x100/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7feae039c117 RSP: 002b:00007ffd8911a108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007feae040471f RCX: 00007feae039c117 RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffd8911b250 RBP: 00007ffd8911b23c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8911b250 R13: 00007feae040471f R14: 000000000011a40f R15: 00007ffd8911b290 task:napi/wg0-0 state:S stack:29448 pid:25633 tgid:25633 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg0-0 state:S stack:29448 pid:25634 tgid:25634 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg1-0 state:S stack:29448 pid:25635 tgid:25635 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg1-0 state:S stack:27064 pid:25636 tgid:25636 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg2-0 state:S stack:29448 pid:25637 tgid:25637 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg2-0 state:S stack:27064 pid:25638 tgid:25638 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:krxrpcio/7001 state:S stack:30456 pid:25644 tgid:25644 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rxrpc_io_thread+0x18c1/0x38b0 net/rxrpc/io_thread.c:593 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-bond0 state:I stack:31000 pid:25652 tgid:25652 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25661 tgid:25661 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25662 tgid:25662 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:kworker/R-wg-cr state:I stack:31000 pid:25663 tgid:25663 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 rescuer_thread+0x803/0xf40 kernel/workqueue.c:3581 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz.0.3998 state:T stack:28856 pid:25678 tgid:25678 ppid:25396 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 do_signal_stop+0x502/0x6d0 kernel/signal.c:2641 get_signal+0x727/0x21e0 kernel/signal.c:2985 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x86/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f52e095b78e RSP: 002b:00007f52e1860f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f52e18616c0 RCX: 00007f52e095b78e RDX: 00007f52e1860fb0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f52e0a08c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f52e0c16218 R14: 00007f52e0c16180 R15: 00007ffd130d7da8 task:napi/wg0-0 state:S stack:29448 pid:25689 tgid:25689 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg0-0 state:S stack:29448 pid:25690 tgid:25690 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg1-0 state:S stack:29448 pid:25691 tgid:25691 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg1-0 state:S stack:27064 pid:25692 tgid:25692 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg2-0 state:S stack:29448 pid:25693 tgid:25693 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg2-0 state:S stack:27064 pid:25694 tgid:25694 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz.0.3999 state:T stack:28856 pid:25705 tgid:25705 ppid:25396 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 do_signal_stop+0x502/0x6d0 kernel/signal.c:2641 get_signal+0x727/0x21e0 kernel/signal.c:2985 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x86/0x4b0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ea/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f52e095b78e RSP: 002b:00007f52e1860f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: fffffffffffffdfc RBX: 00007f52e18616c0 RCX: 00007f52e095b78e RDX: 00007f52e1860fb0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007f52e0a08c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f52e0c16218 R14: 00007f52e0c16180 R15: 00007ffd130d7da8 task:kworker/0:5 state:I stack:31120 pid:25733 tgid:25733 ppid:2 task_flags:0x4208060 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 worker_thread+0x526/0xe40 kernel/workqueue.c:3436 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg0-0 state:S stack:29448 pid:25746 tgid:25746 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 __schedule_loop kernel/sched/core.c:6949 [inline] schedule+0xdd/0x390 kernel/sched/core.c:6964 napi_thread_wait net/core/dev.c:7775 [inline] napi_threaded_poll+0xf1/0x3f0 net/core/dev.c:7838 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:napi/wg0-0 state:S stack:29448 pid:25747 tgid:25747 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867