INFO: task syz-executor:16650 blocked for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:25088 pid:16650 tgid:16650 ppid:1 task_flags:0x400140 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7083 __mutex_lock_common kernel/locking/mutex.c:676 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:760 add_one_compat_dev+0xee/0x5c0 drivers/infiniband/core/device.c:979 rdma_dev_init_net+0x1dd/0x270 drivers/infiniband/core/device.c:1221 ops_init+0x35c/0x5c0 net/core/net_namespace.c:137 setup_net+0xfe/0x320 net/core/net_namespace.c:445 copy_net_ns+0x34e/0x4e0 net/core/net_namespace.c:580 create_new_namespaces+0x3f3/0x720 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x11c/0x170 kernel/nsproxy.c:218 ksys_unshare+0x4c8/0x8c0 kernel/fork.c:3132 __do_sys_unshare kernel/fork.c:3203 [inline] __se_sys_unshare kernel/fork.c:3201 [inline] __x64_sys_unshare+0x38/0x50 kernel/fork.c:3201 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd6133906c7 RSP: 002b:00007fffc9e3f848 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fd6135e5f40 RCX: 00007fd6133906c7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007fd6135e67b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5603: #0: ffff88814e0bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 drivers/tty/n_tty.c:2222 1 lock held by kworker/1:7/6715: 6 locks held by kworker/u8:23/8039: #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3238 [inline] #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3346 #1: ffffc9001c3d7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3239 [inline] #1: ffffc9001c3d7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3346 #2: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 net/core/net_namespace.c:669 #3: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 net/mac80211/main.c:1674 #4: ffff888032240788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6358 [inline] #4: ffff888032240788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6e0 net/mac80211/iface.c:2361 #5: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] #5: ffffffff8dd402f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 kernel/rcu/tree_exp.h:957 1 lock held by ipvs-e:2:0/8409: #0: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:638 2 locks held by syz.1.2661/16584: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 net/ipv4/ipmr.c:3276 2 locks held by syz-executor/16607: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8ee199d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 drivers/infiniband/core/device.c:1159 2 locks held by syz-executor/16611: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8ee199d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 drivers/infiniband/core/device.c:1159 2 locks held by syz-executor/16615: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8ee199d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 drivers/infiniband/core/device.c:1159 2 locks held by syz-executor/16617: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8ee199d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 drivers/infiniband/core/device.c:1159 2 locks held by syz.3.2674/16638: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8ee199d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 drivers/infiniband/core/device.c:1159 3 locks held by syz-executor/16646: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576 #1: ffffffff8ee19810 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 drivers/infiniband/core/device.c:1215 #2: ffffffff8ee199d0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 drivers/infiniband/core/device.c:1220 2 locks held by syz-executor/16648: #0: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 net/core/net_namespace.c:576