INFO: task kworker/u8:5:10433 blocked for more than 143 seconds. Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:5 state:D stack:24272 pid:10433 tgid:10433 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xe37/0x5490 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_write_slowpath+0x539/0x12a0 kernel/locking/rwsem.c:1178 __down_write_common kernel/locking/rwsem.c:1306 [inline] __down_write kernel/locking/rwsem.c:1315 [inline] down_write+0x1d8/0x200 kernel/locking/rwsem.c:1580 rdma_dev_exit_net+0x178/0x590 drivers/infiniband/core/device.c:1129 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf20 kernel/workqueue.c:3390 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: task syz-executor:11128 blocked for more than 146 seconds. Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:25520 pid:11128 tgid:11128 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xe37/0x5490 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 rdma_dev_init_net+0x2a7/0x530 drivers/infiniband/core/device.c:1190 ops_init+0xb9/0x650 net/core/net_namespace.c:139 setup_net+0x435/0xb40 net/core/net_namespace.c:343 copy_net_ns+0x2f0/0x670 net/core/net_namespace.c:508 create_new_namespaces+0x3ea/0xb10 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228 ksys_unshare+0x419/0x970 kernel/fork.c:3309 __do_sys_unshare kernel/fork.c:3380 [inline] __se_sys_unshare kernel/fork.c:3378 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3378 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6f4f9789f7 RSP: 002b:00007fffc49be4f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f6f4fb05f40 RCX: 00007f6f4f9789f7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007f6f4fb06a38 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 INFO: task syz-executor:11146 blocked for more than 147 seconds. Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:27072 pid:11146 tgid:11146 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0xe37/0x5490 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6621 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678 rwsem_down_read_slowpath+0x61e/0xb20 kernel/locking/rwsem.c:1086 __down_read_common kernel/locking/rwsem.c:1250 [inline] __down_read kernel/locking/rwsem.c:1263 [inline] down_read+0x124/0x330 kernel/locking/rwsem.c:1528 rdma_dev_init_net+0x2a7/0x530 drivers/infiniband/core/device.c:1190 ops_init+0xb9/0x650 net/core/net_namespace.c:139 setup_net+0x435/0xb40 net/core/net_namespace.c:343 copy_net_ns+0x2f0/0x670 net/core/net_namespace.c:508 create_new_namespaces+0x3ea/0xb10 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228 ksys_unshare+0x419/0x970 kernel/fork.c:3309 __do_sys_unshare kernel/fork.c:3380 [inline] __se_sys_unshare kernel/fork.c:3378 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3378 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe0a83789f7 RSP: 002b:00007ffca4c586e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007fe0a8505f40 RCX: 00007fe0a83789f7 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 RBP: 00007fe0a8506a38 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8ddb5220 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #0: ffffffff8ddb5220 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8ddb5220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6620 3 locks held by kworker/u8:2/35: 3 locks held by kworker/u8:9/2530: #0: ffff888016bc3148 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206 #1: ffffc9000946fd80 ((work_completion)(&work->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207 #2: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: ib_enum_all_roce_netdevs+0x83/0x140 drivers/infiniband/core/device.c:2349 2 locks held by getty/4974: #0: ffff88802b1740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 drivers/tty/n_tty.c:2211 1 lock held by syz.4.15/5348: 1 lock held by syz.2.201/5895: 1 lock held by syz.2.318/6259: 1 lock held by syz.4.1165/8886: 1 lock held by syz.3.1309/9380: 1 lock held by syz.0.1341/9488: 4 locks held by kworker/u8:5/10433: #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 kernel/workqueue.c:3206 #1: ffffc9000359fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 kernel/workqueue.c:3207 #2: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594 #3: ffffffff8f65c130 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x178/0x590 drivers/infiniband/core/device.c:1129 1 lock held by syz.0.1680/10573: 7 locks held by syz.3.1821/11101: 3 locks held by syz-executor/11128: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 #2: ffffffff8f65c130 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 drivers/infiniband/core/device.c:1190 3 locks held by syz-executor/11146: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 #2: ffffffff8f65c130 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 drivers/infiniband/core/device.c:1190 3 locks held by syz.0.1881/11303: #0: ffffffff95225518 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x16a/0x6e0 drivers/infiniband/core/netlink.c:164 #1: ffffffff8f66fc50 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x2d7/0x660 drivers/infiniband/core/nldev.c:1784 #2: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: assign_name drivers/infiniband/core/device.c:1213 [inline] #2: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: ib_register_device+0x88/0xbf0 drivers/infiniband/core/device.c:1377 2 locks held by syz-executor/11348: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 1 lock held by syz.1.1902/11363: #0: ffffffff8ddc0880 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6c0 kernel/rcu/tree.c:4486 2 locks held by syz-executor/11368: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11380: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11384: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11386: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11391: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11394: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11397: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11400: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by syz-executor/11403: #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 net/core/net_namespace.c:504 #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 drivers/infiniband/core/device.c:1185 2 locks held by dhcpcd/11405: #0: ffff888023004258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1607 [inline] #0: ffff888023004258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 net/packet/af_packet.c:3266 #1: ffffffff8ddc09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 kernel/rcu/tree_exp.h:296 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:119 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xf4e/0x1280 kernel/hung_task.c:379 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5895 Comm: syz.2.201 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:123 [inline] RIP: 0010:lock_is_held_type+0x54/0x150 kernel/locking/lockdep.c:5827 Code: 44 f1 74 85 c0 0f 85 ce 00 00 00 65 4c 8b 25 a3 94 f2 74 41 8b 94 24 dc 0a 00 00 85 d2 0f 85 b6 00 00 00 48 89 fd 41 89 f6 9c <8f> 04 24 fa 48 c7 c7 c0 c7 4c 8b 45 31 ff e8 09 17 00 00 4d 8d ac RSP: 0018:ffffc900039d7a90 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 1ffff9200073af5d RCX: 0000000000000001 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ddb5160 RBP: ffffffff8ddb5160 R08: ffffffff8478a8a7 R09: 0000000000000000 R10: ffffc900039d7c98 R11: 0000000000000000 R12: ffff888021a9bc00 R13: 00000000ffffffff R14: 00000000ffffffff R15: 0000000000000000