INFO: task kworker/u8:1:13 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:23528 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 __schedule+0x1798/0x4cc0
 schedule+0x165/0x360
 schedule_preempt_disabled+0x13/0x30
 rwsem_down_write_slowpath+0x872/0xfe0
 down_write+0x1ab/0x1f0
 rdma_dev_exit_net+0x8c/0x340
 ops_undo_list+0x49a/0x990
 cleanup_net+0x4c5/0x800
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x439/0x7d0
 ret_from_fork_asm+0x1a/0x30
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/u8:1/13:
 #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90000107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
 #3: ffffffff8f28d730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340
1 lock held by khungtaskd/34:
 #0: ffffffff8e13a160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
1 lock held by klogd/5285:
2 locks held by getty/5673:
 #0: ffff8880289360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc900024c82f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
3 locks held by kworker/u8:5/5882:
 #0: ffff88801bb2f948 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
 #1: ffffc90003acfbc0 ((work_completion)(&ndev_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
 #2: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: ib_enum_all_roce_netdevs+0x8c/0x160
9 locks held by syz.4.575/8229:
2 locks held by syz-executor/10056:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8e13fac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
2 locks held by syz-executor/10057:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8e13fac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
3 locks held by syz-executor/10360:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
 #2: ffffffff8f28d730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
3 locks held by syz-executor/10361:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
 #2: ffffffff8f28d730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
3 locks held by syz.9.1079/10476:
 #0: ffffffff99e718f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
 #1: ffffffff8f29ad90 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x341/0x5a0
 #2: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: ib_register_device+0xb0/0x1380
2 locks held by syz.9.1079/10479:
 #0: ffffffff99e718f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: ib_device_get_by_index+0x7b/0x260
2 locks held by syz-executor/10481:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
2 locks held by syz-executor/10489:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
2 locks held by syz-executor/10494:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
2 locks held by syz-executor/10506:
 #0: ffffffff8f52df10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
 #1: ffffffff8f28d570 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250
 nmi_cpu_backtrace+0x39e/0x3d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 watchdog+0xf93/0xfe0
 kthread+0x711/0x8a0
 ret_from_fork+0x439/0x7d0
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 8229 Comm: syz.4.575 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:kasan_check_range+0x5/0x2c0
Code: ba 8d e8 6e 29 04 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d
RSP: 0018:ffffc900000072b0 EFLAGS: 00000086
RAX: 00000000ffffffff RBX: ffff88804b027a80 RCX: ffffffff819e18e2
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88804b027a80
RBP: ffffc90000007370 R08: 0000000000000000 R09: ffffffff81adbcaa
R10: dffffc0000000000 R11: ffffffff81adbbb0 R12: ffff88804b027a90
R13: ffff88804b027a88 R14: 1ffff11009604f52 R15: 1ffff11009604f51
FS:  00007f5c03a066c0(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f731fc41809 CR3: 000000012381c000 CR4: 00000000000006f0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 do_raw_spin_lock+0x112/0x290
 _raw_spin_lock_irqsave+0xb3/0xf0
 hrtimer_interrupt+0xfa/0xaa0
 __sysvec_apic_timer_interrupt+0x10b/0x410
 sysvec_apic_timer_interrupt+0x52/0xc0
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_acquire+0x175/0x360
Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 7b 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc90000007638 EFLAGS: 00000206
RAX: a5fd86ea6126d400 RBX: 0000000000000000 RCX: a5fd86ea6126d400
RDX: 0000000000000000 RSI: ffffffff8dbaa5db RDI: ffffffff8be34480
RBP: ffffffff8172d195 R08: 0000000000000000 R09: ffffffff8172d195
R10: ffffc900000077f8 R11: ffffffff81ac5140 R12: 0000000000000002
R13: ffffffff8e13a160 R14: 0000000000000000 R15: 0000000000000246
 unwind_next_frame+0xc2/0x2390
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 kasan_save_track+0x3e/0x80
 kasan_save_free_info+0x46/0x50
 __kasan_slab_free+0x5b/0x80
 kfree+0x18e/0x440
 slab_free_after_rcu_debug+0x60/0x2a0
 rcu_core+0xcab/0x1770
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:preempt_schedule_irq+0xb0/0x150
Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 eb ce 13 f6 e8 b6 2b 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
RSP: 0018:ffffc90007145ec0 EFLAGS: 00000282
RAX: a5fd86ea6126d400 RBX: 0000000000000000 RCX: a5fd86ea6126d400
RDX: 0000000000000007 RSI: ffffffff8d9baf27 RDI: 0000000000000001
RBP: ffffc90007145f70 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000e28bd8
 irqentry_exit+0x6f/0x90
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:unwind_next_frame+0x214/0x2390
Code: ef 08 8b 15 1e 5f 4b 0c 8d 42 ff 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 a4 72 e0 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d
RSP: 0018:ffffc90007146038 EFLAGS: 00000a03
RAX: 0000000000000000 RBX: 0000000000000001 RCX: a5fd86ea6126d400
RDX: 00000000000a7ee5 RSI: ffffffff8be34460 RDI: ffffffff8be34420
RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
R10: ffffc90007146158 R11: ffffffff81ac5140 R12: ffffffff82164ae3
R13: ffffffff90e4cbcc R14: ffffc90007146108 R15: 000000000001164a
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 save_stack+0xf5/0x1f0
 __reset_page_owner+0x71/0x1f0
 __free_frozen_pages+0xbc4/0xd30
 __put_partials+0x156/0x1a0
 put_cpu_partial+0x17c/0x250
 __slab_free+0x2d5/0x3c0
 qlist_free_all+0x97/0x140
 kasan_quarantine_reduce+0x148/0x160
 __kasan_slab_alloc+0x22/0x80
 kmem_cache_alloc_noprof+0x1c1/0x3c0
 __kernfs_new_node+0xd7/0x7e0
 kernfs_new_node+0x102/0x210
 __kernfs_create_file+0x4b/0x2e0
 sysfs_add_file_mode_ns+0x238/0x300
 internal_create_group+0x66d/0x1110
 sysfs_create_groups+0x59/0x120
 ib_setup_port_attrs+0x1407/0x2070
 add_one_compat_dev+0x3d6/0x5c0
 enable_device_and_get+0x2a7/0x3d0
 ib_register_device+0x10c3/0x1380
 rxe_register_device+0x1ef/0x310
 rxe_net_add+0x81/0x110
 rxe_newlink+0xdd/0x190
 nldev_newlink+0x4a5/0x5a0
 rdma_nl_rcv+0x6ae/0x980
 netlink_unicast+0x82f/0x9e0
 netlink_sendmsg+0x805/0xb30
 __sock_sendmsg+0x21c/0x270
 ____sys_sendmsg+0x505/0x830
 ___sys_sendmsg+0x21f/0x2a0
 __x64_sys_sendmsg+0x19b/0x260
 do_syscall_64+0xfa/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5c02b8ec29
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5c03a06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f5c02dd5fa0 RCX: 00007f5c02b8ec29
RDX: 0000000000040000 RSI: 0000200000000540 RDI: 0000000000000006
RBP: 00007f5c02c11e41 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5c02dd6038 R14: 00007f5c02dd5fa0 R15: 00007ffefd515a78
 </TASK>
