INFO: task kworker/u4:4:55 blocked for more than 143 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u4:4 state:D stack:26216 pid:55 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_write_slowpath+0x600/0x12e0 kernel/locking/rwsem.c:1190 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_remove_by_name_ns+0x89/0x120 fs/kernfs/dir.c:1621 kernfs_remove_by_name include/linux/kernfs.h:618 [inline] remove_files+0x96/0x1c0 fs/sysfs/group.c:28 sysfs_remove_group+0x8b/0x170 fs/sysfs/group.c:288 sysfs_remove_groups fs/sysfs/group.c:312 [inline] sysfs_remove_groups+0x60/0xa0 fs/sysfs/group.c:304 destroy_port drivers/infiniband/core/sysfs.c:1285 [inline] ib_free_port_attrs+0x166/0x460 drivers/infiniband/core/sysfs.c:1410 remove_one_compat_dev drivers/infiniband/core/device.c:1002 [inline] rdma_dev_exit_net+0x2b6/0x550 drivers/infiniband/core/device.c:1140 ops_exit_list+0xb0/0x170 net/core/net_namespace.c:169 cleanup_net+0x4ee/0xb00 net/core/net_namespace.c:601 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 INFO: task syz-executor.1:3652 blocked for more than 143 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:24360 pid:3652 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x83c/0xe20 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x262/0x2860 fs/namei.c:3709 do_filp_open+0x1ba/0x410 fs/namei.c:3740 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fc0a668b178 RSP: 002b:00007fff144dad00 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000425 RCX: 00007fc0a668b178 RDX: 0000000000090800 RSI: 00007fc0a66e5bd2 RDI: 00000000ffffff9c RBP: 00007fff144dadcc R08: 0000000000090800 R09: 00007fc0a66e5bd2 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000093058 R14: 000000000000001a R15: 00007fff144dae30 INFO: task syz-executor.5:3654 blocked for more than 144 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:23888 pid:3654 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x83c/0xe20 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x262/0x2860 fs/namei.c:3709 do_filp_open+0x1ba/0x410 fs/namei.c:3740 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fef86e8b178 RSP: 002b:00007fff8a9f8f90 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000003f5 RCX: 00007fef86e8b178 RDX: 0000000000090800 RSI: 00007fef86ee5bd2 RDI: 00000000ffffff9c RBP: 00007fff8a9f905c R08: 0000000000090800 R09: 00007fef86ee5bd2 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000091d91 R14: 000000000000001a R15: 00007fff8a9f90c0 INFO: task syz-executor.3:3658 blocked for more than 144 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:24880 pid:3658 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x83c/0xe20 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x262/0x2860 fs/namei.c:3709 do_filp_open+0x1ba/0x410 fs/namei.c:3740 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd32fa8b178 RSP: 002b:00007ffe56fe4280 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000003e9 RCX: 00007fd32fa8b178 RDX: 0000000000090800 RSI: 00007fd32fae5bd2 RDI: 00000000ffffff9c RBP: 00007ffe56fe434c R08: 0000000000090800 R09: 00007fd32fae5bd2 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000093044 R14: 000000000000001a R15: 00007ffe56fe43b0 INFO: task syz-executor.4:3659 blocked for more than 144 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:24616 pid:3659 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x83c/0xe20 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x262/0x2860 fs/namei.c:3709 do_filp_open+0x1ba/0x410 fs/namei.c:3740 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f010528b178 RSP: 002b:00007ffea2246450 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000000003e9 RCX: 00007f010528b178 RDX: 0000000000090800 RSI: 00007f01052e5bd2 RDI: 00000000ffffff9c RBP: 00007ffea224651c R08: 0000000000090800 R09: 00007f01052e5bd2 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000093044 R14: 000000000000001c R15: 00007ffea2246580 INFO: task syz-executor.2:6502 blocked for more than 145 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:25032 pid:6502 ppid:1 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_read_slowpath+0x5a7/0xb20 kernel/locking/rwsem.c:1095 __down_read_common kernel/locking/rwsem.c:1260 [inline] __down_read kernel/locking/rwsem.c:1269 [inline] down_read+0xe6/0x450 kernel/locking/rwsem.c:1511 kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 do_inode_permission fs/namei.c:458 [inline] inode_permission.part.0+0x3d6/0x670 fs/namei.c:525 inode_permission fs/namei.c:506 [inline] may_lookup fs/namei.c:1715 [inline] link_path_walk.part.0+0x83c/0xe20 fs/namei.c:2262 link_path_walk fs/namei.c:2245 [inline] path_openat+0x262/0x2860 fs/namei.c:3709 do_filp_open+0x1ba/0x410 fs/namei.c:3740 do_sys_openat2+0x16d/0x4c0 fs/open.c:1310 do_sys_open fs/open.c:1326 [inline] __do_sys_openat fs/open.c:1342 [inline] __se_sys_openat fs/open.c:1337 [inline] __x64_sys_openat+0x143/0x1f0 fs/open.c:1337 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4f3808b178 RSP: 002b:00007ffe5e8899c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000000000000239 RCX: 00007f4f3808b178 RDX: 0000000000090800 RSI: 00007f4f380e5bd2 RDI: 00000000ffffff9c RBP: 00007ffe5e889a8c R08: 0000000000090800 R09: 00007f4f380e5bd2 R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 R13: 0000000000093b53 R14: 000000000000001c R15: 00007ffe5e889af0 INFO: task syz-executor.4:10428 blocked for more than 145 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:26872 pid:10428 ppid:3659 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_write_slowpath+0x600/0x12e0 kernel/locking/rwsem.c:1190 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:738 __kernfs_create_file+0x2a0/0x350 fs/kernfs/file.c:1072 sysfs_add_file_mode_ns+0x213/0x3f0 fs/sysfs/file.c:294 sysfs_create_file_ns+0x12b/0x1c0 fs/sysfs/file.c:355 class_create_file_ns+0x4e/0x70 drivers/base/class.c:94 bond_create_sysfs+0x13c/0x200 drivers/net/bonding/bond_sysfs.c:813 bond_net_init+0x180/0x300 drivers/net/bonding/bond_main.c:6320 ops_init+0xb9/0x680 net/core/net_namespace.c:135 setup_net+0x5d1/0xc50 net/core/net_namespace.c:332 copy_net_ns+0x31c/0x760 net/core/net_namespace.c:478 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 copy_namespaces+0x395/0x450 kernel/nsproxy.c:178 copy_process+0x306e/0x7190 kernel/fork.c:2256 kernel_clone+0xeb/0x980 kernel/fork.c:2671 __do_sys_clone3+0x1cd/0x2e0 kernel/fork.c:2970 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f010528b639 RSP: 002b:00007f0105f99038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f01053ac050 RCX: 00007f010528b639 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f0105f99050 RBP: 00007f01052e6ae9 R08: 0000000000000000 R09: 0000000000000058 R10: 00007f0105f99050 R11: 0000000000000246 R12: 0000000000000058 R13: 00007ffea224625f R14: 00007f0105f99300 R15: 0000000000022000 INFO: task syz-executor.1:10430 blocked for more than 146 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:26792 pid:10430 ppid:3652 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6638 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 smc_pnet_create_pnetids_list net/smc/smc_pnet.c:805 [inline] smc_pnet_net_init+0x218/0x470 net/smc/smc_pnet.c:874 smc_net_init+0x35/0x50 net/smc/af_smc.c:3342 ops_init+0xb9/0x680 net/core/net_namespace.c:135 setup_net+0x5d1/0xc50 net/core/net_namespace.c:332 copy_net_ns+0x31c/0x760 net/core/net_namespace.c:478 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 copy_namespaces+0x395/0x450 kernel/nsproxy.c:178 copy_process+0x306e/0x7190 kernel/fork.c:2256 kernel_clone+0xeb/0x980 kernel/fork.c:2671 __do_sys_clone3+0x1cd/0x2e0 kernel/fork.c:2970 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fc0a668b639 RSP: 002b:00007fc0a74ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fc0a67ac050 RCX: 00007fc0a668b639 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fc0a74ac050 RBP: 00007fc0a66e6ae9 R08: 0000000000000000 R09: 0000000000000058 R10: 00007fc0a74ac050 R11: 0000000000000246 R12: 0000000000000058 R13: 00007fff144dab0f R14: 00007fc0a74ac300 R15: 0000000000022000 INFO: task syz-executor.3:10431 blocked for more than 146 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:27736 pid:10431 ppid:3658 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6638 __mutex_lock_common kernel/locking/mutex.c:679 [inline] __mutex_lock+0xa48/0x1360 kernel/locking/mutex.c:747 smc_pnet_create_pnetids_list net/smc/smc_pnet.c:805 [inline] smc_pnet_net_init+0x218/0x470 net/smc/smc_pnet.c:874 smc_net_init+0x35/0x50 net/smc/af_smc.c:3342 ops_init+0xb9/0x680 net/core/net_namespace.c:135 setup_net+0x5d1/0xc50 net/core/net_namespace.c:332 copy_net_ns+0x31c/0x760 net/core/net_namespace.c:478 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 copy_namespaces+0x395/0x450 kernel/nsproxy.c:178 copy_process+0x306e/0x7190 kernel/fork.c:2256 kernel_clone+0xeb/0x980 kernel/fork.c:2671 __do_sys_clone3+0x1cd/0x2e0 kernel/fork.c:2970 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd32fa8b639 RSP: 002b:00007fd330798038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fd32fbac050 RCX: 00007fd32fa8b639 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007fd330798050 RBP: 00007fd32fae6ae9 R08: 0000000000000000 R09: 0000000000000058 R10: 00007fd330798050 R11: 0000000000000246 R12: 0000000000000058 R13: 00007ffe56fe408f R14: 00007fd330798300 R15: 0000000000022000 INFO: task syz-executor.2:10436 blocked for more than 147 seconds. Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27624 pid:10436 ppid:6502 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5191 [inline] __schedule+0xae9/0x53f0 kernel/sched/core.c:6503 schedule+0xde/0x1b0 kernel/sched/core.c:6579 rwsem_down_write_slowpath+0x600/0x12e0 kernel/locking/rwsem.c:1190 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:738 kernfs_create_dir_ns+0x18f/0x230 fs/kernfs/dir.c:1021 sysfs_create_dir_ns+0x12b/0x290 fs/sysfs/dir.c:59 create_dir lib/kobject.c:63 [inline] kobject_add_internal+0x2c9/0x8f0 lib/kobject.c:223 kobject_add_varg lib/kobject.c:358 [inline] kobject_init_and_add+0x105/0x160 lib/kobject.c:441 nfs_netns_client_alloc fs/nfs/sysfs.c:163 [inline] nfs_netns_sysfs_setup+0xc8/0x160 fs/nfs/sysfs.c:175 nfs_net_init+0x15/0x20 fs/nfs/inode.c:2338 ops_init+0xb9/0x680 net/core/net_namespace.c:135 setup_net+0x5d1/0xc50 net/core/net_namespace.c:332 copy_net_ns+0x31c/0x760 net/core/net_namespace.c:478 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 copy_namespaces+0x395/0x450 kernel/nsproxy.c:178 copy_process+0x306e/0x7190 kernel/fork.c:2256 kernel_clone+0xeb/0x980 kernel/fork.c:2671 __do_sys_clone3+0x1cd/0x2e0 kernel/fork.c:2970 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4f3808b639 RSP: 002b:00007f4f38d2b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f4f381ac120 RCX: 00007f4f3808b639 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f4f38d2b050 RBP: 00007f4f380e6ae9 R08: 0000000000000000 R09: 0000000000000058 R10: 00007f4f38d2b050 R11: 0000000000000246 R12: 0000000000000058 R13: 00007ffe5e8897cf R14: 00007f4f38d2b300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/11: #0: ffffffff8c58c2f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/12: #0: ffffffff8c58bff0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/27: #0: ffffffff8c58ce40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 4 locks held by kworker/u4:4/55: #0: ffff8880128d2938 ((wq_completion)netns){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8880128d2938 ((wq_completion)netns){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8880128d2938 ((wq_completion)netns){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8880128d2938 ((wq_completion)netns){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff8880128d2938 ((wq_completion)netns){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff8880128d2938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc9000201fda8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 #2: ffffffff8deb33d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb00 net/core/net_namespace.c:563 #3: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x89/0x120 fs/kernfs/dir.c:1621 2 locks held by getty/3310: #0: ffff88814ae19098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900020282f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 1 lock held by syz-executor.1/3652: #0: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 1 lock held by syz-executor.5/3654: #0: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 1 lock held by syz-executor.3/3658: #0: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 1 lock held by syz-executor.4/3659: #0: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 3 locks held by kworker/0:8/3782: #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc9000443fda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 #2: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4624 1 lock held by syz-executor.2/6502: #0: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 3 locks held by kworker/1:32/10347: #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88814a982138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90004defda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 #2: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4624 5 locks held by syz-executor.0/10418: #0: ffffffff8deb33d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f9/0x760 net/core/net_namespace.c:474 #1: ffffffff8dbd04d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x23b/0x4b0 drivers/infiniband/core/device.c:1179 #2: ffffffff8dbd0250 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2ae/0x4b0 drivers/infiniband/core/device.c:1184 #3: ffff888071404f18 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev drivers/infiniband/core/device.c:943 [inline] #3: ffff888071404f18 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0xea/0x830 drivers/infiniband/core/device.c:920 #4: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:738 3 locks held by syz-executor.5/10419: 2 locks held by syz-executor.4/10428: #0: ffffffff8deb33d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f9/0x760 net/core/net_namespace.c:474 #1: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:738 2 locks held by syz-executor.1/10430: #0: ffffffff8deb33d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f9/0x760 net/core/net_namespace.c:474 #1: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:805 [inline] #1: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x218/0x470 net/smc/smc_pnet.c:874 2 locks held by syz-executor.3/10431: #0: ffffffff8deb33d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f9/0x760 net/core/net_namespace.c:474 #1: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:805 [inline] #1: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x218/0x470 net/smc/smc_pnet.c:874 2 locks held by syz-executor.2/10436: #0: ffffffff8deb33d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f9/0x760 net/core/net_namespace.c:474 #1: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:738 1 lock held by syz-executor.0/10443: #0: ffff88814008e548 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_iop_permission+0xc5/0x140 fs/kernfs/inode.c:290 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xc75/0xfc0 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 10418 Comm: syz-executor.0 Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:preempt_count_sub+0x63/0x150 kernel/sched/core.c:5691 Code: 48 10 85 c9 75 1b 65 8b 05 ba 61 ad 7e 89 c2 81 e2 ff ff ff 7f 39 da 7c 13 81 fb fe 00 00 00 76 63 f7 db 65 01 1d 9d 61 ad 7e <5b> c3 e8 96 65 b2 02 85 c0 74 f5 48 c7 c0 a8 d4 52 8e 48 ba 00 00 RSP: 0018:ffffc90005107278 EFLAGS: 00000297 RAX: 0000000080000001 RBX: 00000000ffffffff RCX: 0000000000000000 RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 RBP: ffff88814008e4f0 R08: 0000000000000001 R09: ffffffff91108a4f R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900051971d0 R13: ffff88804c0da000 R14: 0000000000000004 R15: ffff88814008e4f0 FS: 00007f5b749de700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f401a5b1028 CR3: 0000000043bfa000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline] _raw_spin_unlock_irq+0x2e/0x50 kernel/locking/spinlock.c:202 rwsem_down_write_slowpath+0x5af/0x12e0 kernel/locking/rwsem.c:1166 __down_write_common kernel/locking/rwsem.c:1305 [inline] __down_write_common kernel/locking/rwsem.c:1302 [inline] __down_write kernel/locking/rwsem.c:1314 [inline] down_write+0x1e8/0x220 kernel/locking/rwsem.c:1563 kernfs_add_one+0xa7/0x4f0 fs/kernfs/dir.c:738 __kernfs_create_file+0x2a0/0x350 fs/kernfs/file.c:1072 sysfs_add_file_mode_ns+0x213/0x3f0 fs/sysfs/file.c:294 create_files fs/sysfs/group.c:64 [inline] internal_create_group+0x322/0xb10 fs/sysfs/group.c:148 internal_create_groups.part.0+0x90/0x140 fs/sysfs/group.c:188 internal_create_groups fs/sysfs/group.c:184 [inline] sysfs_create_groups+0x29/0x50 fs/sysfs/group.c:214 setup_gid_attrs drivers/infiniband/core/sysfs.c:1169 [inline] ib_setup_port_attrs+0x3eb/0x5b0 drivers/infiniband/core/sysfs.c:1441 add_one_compat_dev drivers/infiniband/core/device.c:969 [inline] add_one_compat_dev+0x54f/0x830 drivers/infiniband/core/device.c:920 rdma_dev_init_net+0x2b9/0x4b0 drivers/infiniband/core/device.c:1185 ops_init+0xb9/0x680 net/core/net_namespace.c:135 setup_net+0x5d1/0xc50 net/core/net_namespace.c:332 copy_net_ns+0x31c/0x760 net/core/net_namespace.c:478 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 copy_namespaces+0x395/0x450 kernel/nsproxy.c:178 copy_process+0x306e/0x7190 kernel/fork.c:2256 kernel_clone+0xeb/0x980 kernel/fork.c:2671 __do_sys_clone3+0x1cd/0x2e0 kernel/fork.c:2970 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5b7568b639 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5b749de038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007f5b757ac120 RCX: 00007f5b7568b639 RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007f5b749de050 RBP: 00007f5b756e6ae9 R08: 0000000000000000 R09: 0000000000000058 R10: 00007f5b749de050 R11: 0000000000000246 R12: 0000000000000058 R13: 00007ffe1d70f95f R14: 00007f5b749de300 R15: 0000000000022000