INFO: task hung in cleanup_net

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 42506d99 Merge 4.14.94 into android-4.14
git tree: android-4.14
console output: https://syzkaller.appspot.com/x/log.txt?x=13bcb4cf400000
kernel config: https://syzkaller.appspot.com/x/.config?x=20694422a3d7714d
dashboard link: https://syzkaller.appspot.com/bug?extid=b63323ce5cc9545d5e95
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=16c80a18c00000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10358940c00000

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+b63323...@syzkaller.appspotmail.com

INFO: task kworker/u4:0:5 blocked for more than 140 seconds.
Not tainted 4.14.94+ #10
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:0 D25632 5 2 0x80000000
Workqueue: netns cleanup_net
Call Trace:
schedule+0x92/0x1c0 kernel/sched/core.c:3490
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x559/0x1430 kernel/locking/mutex.c:893
cleanup_net+0x136/0x860 net/core/net_namespace.c:449
process_one_work+0x7c6/0x14e0 kernel/workqueue.c:2114
worker_thread+0x5d7/0x1080 kernel/workqueue.c:2248
kthread+0x310/0x420 kernel/kthread.c:232
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402

Showing all locks held in the system:
3 locks held by kworker/u4:0/5:
#0: ("%s""netns"){+.+.}, at: [<ffffffffab927dc5>]
process_one_work+0x6e5/0x14e0 kernel/workqueue.c:2085
#1: (net_cleanup_work){+.+.}, at: [<ffffffffab927dfb>]
process_one_work+0x71b/0x14e0 kernel/workqueue.c:2089
#2: (net_mutex){+.+.}, at: [<ffffffffacaeb5d6>] cleanup_net+0x136/0x860
net/core/net_namespace.c:449
1 lock held by khungtaskd/23:
#0: (tasklist_lock){.+.+}, at: [<ffffffffab9ffc0c>]
debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4541
2 locks held by getty/1754:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffffac536a02>]
tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:275
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffffac531e27>]
n_tty_read+0x1f7/0x1700 drivers/tty/n_tty.c:2156
1 lock held by syz-executor383/23375:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/23441:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/23647:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24009:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24022:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24158:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24272:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24344:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24379:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24722:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24831:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25276:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25315:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25427:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25694:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25765:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25808:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25828:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25885:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25956:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26149:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26212:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26343:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26360:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26467:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26525:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26838:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26972:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27107:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27184:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27327:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27411:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27542:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27669:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27740:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27748:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27842:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28234:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28490:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28691:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29377:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29401:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29565:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29603:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29629:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29729:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29795:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29889:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30026:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30040:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30089:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30113:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30149:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30186:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30243:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30274:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30320:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30411:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30442:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30517:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30761:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30809:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30830:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30852:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30994:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31024:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31048:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31258:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31294:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31419:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31467:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31487:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31615:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31677:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31727:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31778:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31801:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31889:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31996:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32045:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32063:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32117:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32136:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32360:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32517:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32599:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32619:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32707:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/433:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/507:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/620:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/729:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/858:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/881:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1065:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1207:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1250:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1494:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1528:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1605:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1757:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1782:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1979:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2507:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2578:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2651:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2722:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2779:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/3157:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/3292:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/3586:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/3824:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/4584:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/4652:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/5550:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/5681:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/5960:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/6006:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/6721:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/7330:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/7461:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/7530:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/8072:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/8148:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/8191:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/9814:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/9948:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/10213:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/10418:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/10574:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/10636:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/11150:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/11910:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/12065:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/12454:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/12508:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/12945:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/13589:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/13723:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/13841:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/13894:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/14510:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/14649:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/14703:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/14812:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/15567:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/16239:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/16512:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/16589:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/17920:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/18905:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19134:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19193:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19501:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19664:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19790:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19937:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20046:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20343:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20472:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20565:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20798:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/21173:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/21382:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/21766:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/21870:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/22350:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/22678:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/22871:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/23185:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/23336:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/23398:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24482:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24861:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25076:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/25641:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/26261:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27488:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27687:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27752:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27820:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28080:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28417:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28949:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29465:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29907:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30179:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30325:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30457:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30777:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30855:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31743:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31813:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31872:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32188:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32250:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32502:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/429:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/817:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1327:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1609:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2515:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/4478:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/4792:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/6801:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/7130:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/8004:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/9252:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/9869:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/10624:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/11226:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/11383:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/12366:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/12953:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/14288:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/14601:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/15503:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/15792:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/16102:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/16290:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/16455:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/17229:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/17439:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/18030:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/18754:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/19880:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20058:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/20928:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/21744:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/22770:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24504:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/24584:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/27277:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28569:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/28720:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29478:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29847:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/29987:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/30545:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31085:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31289:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31661:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/31821:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32034:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32228:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/32763:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/1971:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/2462:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/5937:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/6326:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/8513:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/13128:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409
1 lock held by syz-executor383/3100:
#0: (net_mutex){+.+.}, at: [<ffffffffacaec206>] copy_net_ns+0x156/0x440
net/core/net_namespace.c:409

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 23 Comm: khungtaskd Not tainted 4.14.94+ #10
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0xb9/0x10e lib/dump_stack.c:53
nmi_cpu_backtrace.cold+0x47/0x86 lib/nmi_backtrace.c:101
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at pc 0xffffffffad04f432


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 8683408f Merge 4.9.94 into android-4.9
git tree: android-4.9
console output: https://syzkaller.appspot.com/x/log.txt?x=143bb567800000
kernel config: https://syzkaller.appspot.com/x/.config?x=d5173c3321ce4a3d
dashboard link: https://syzkaller.appspot.com/bug?extid=f3ac9e1a2fbff3875adb
compiler: gcc (GCC) 8.0.1 20180413 (experimental)

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:

Reported-by: syzbot+f3ac9e...@syzkaller.appspotmail.com

INFO: task kworker/u4:0:6 blocked for more than 120 seconds.
Not tainted 4.9.94-g8683408 #3

"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.

kworker/u4:0 D26648 6 2 0x00000000
Workqueue: netns cleanup_net
ffff8801d9b40000 ffff8801cc1c9f80 ffff8801a5326a00 ffff8801cd818000
ffff8801db321b98 ffff8801d9b4f9d8 ffffffff838c040d ffff8801d9b408c8
ffffed003b368118 ffff8801d9b40000 00fffc0000000000 ffff8801db322468
Call Trace:
[<ffffffff838c1a0f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
[<ffffffff838c2393>] schedule_preempt_disabled+0x13/0x20
kernel/sched/core.c:3590
[<ffffffff838c6816>] __mutex_lock_common kernel/locking/mutex.c:582
[inline]
[<ffffffff838c6816>] mutex_lock_nested+0x326/0x870
kernel/locking/mutex.c:621
[<ffffffff82f3596f>] cleanup_net+0x13f/0x630 net/core/net_namespace.c:439
[<ffffffff8118ae01>] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092
[<ffffffff8118bbf6>] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226
[<ffffffff8119ad2d>] kthread+0x26d/0x300 kernel/kthread.c:211
[<ffffffff838d14dc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373

Showing all locks held in the system:

3 locks held by kworker/u4:0/6:
#0: ("%s""netns"){.+.+.+}, at: [<ffffffff8118ad0e>] work_static
include/linux/workqueue.h:186 [inline]
#0: ("%s""netns"){.+.+.+}, at: [<ffffffff8118ad0e>] set_work_data
kernel/workqueue.c:617 [inline]
#0: ("%s""netns"){.+.+.+}, at: [<ffffffff8118ad0e>]
set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
#0: ("%s""netns"){.+.+.+}, at: [<ffffffff8118ad0e>]
process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
#1: (net_cleanup_work){+.+.+.}, at: [<ffffffff8118ad48>]
process_one_work+0x728/0x1500 kernel/workqueue.c:2089
#2: (net_mutex){+.+.+.}, at: [<ffffffff82f3596f>] cleanup_net+0x13f/0x630
net/core/net_namespace.c:439
3 locks held by kworker/0:1/25:
#0: ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad0e>] work_static
include/linux/workqueue.h:186 [inline]
#0: ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad0e>]
set_work_data kernel/workqueue.c:617 [inline]
#0: ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad0e>]
set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
#0: ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad0e>]
process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
#1: ((addr_chk_work).work){+.+...}, at: [<ffffffff8118ad48>]
process_one_work+0x728/0x1500 kernel/workqueue.c:2089
#2: (rtnl_mutex){+.+.+.}, at: [<ffffffff82f8e6a7>] rtnl_lock+0x17/0x20
net/core/rtnetlink.c:70
2 locks held by khungtaskd/515:
#0: (rcu_read_lock){......}, at: [<ffffffff813646bc>]
check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
#0: (rcu_read_lock){......}, at: [<ffffffff813646bc>]
watchdog+0x11c/0xa20 kernel/hung_task.c:239
#1: (tasklist_lock){.+.+..}, at: [<ffffffff81423bb0>]
debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
3 locks held by kworker/1:3/1812:
#0: ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad0e>]
work_static include/linux/workqueue.h:186 [inline]
#0: ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad0e>]
set_work_data kernel/workqueue.c:617 [inline]
#0: ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad0e>]
set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
#0: ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad0e>]
process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
#1: ((reg_check_chans).work){+.+...}, at: [<ffffffff8118ad48>]
process_one_work+0x728/0x1500 kernel/workqueue.c:2089
#2: (rtnl_mutex){+.+.+.}, at: [<ffffffff82f8e6a7>] rtnl_lock+0x17/0x20
net/core/rtnetlink.c:70
1 lock held by rsyslogd/3650:
#0: (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d565c>]
__fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3747:
#0: (&tty->ldisc_sem){++++++}, at: [<ffffffff838cf4b2>]
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
#1: (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff82007082>]
n_tty_read+0x202/0x16b0 drivers/tty/n_tty.c:2133
2 locks held by syz-executor1/8437:
#0: (net_mutex){+.+.+.}, at: [<ffffffff82f35fb5>] copy_net_ns+0x155/0x290
net/core/net_namespace.c:406
#1: (rtnl_mutex){+.+.+.}, at: [<ffffffff82f8e6a7>] rtnl_lock+0x17/0x20
net/core/rtnetlink.c:70
1 lock held by syz-executor1/8620:
#0: (net_mutex){+.+.+.}, at: [<ffffffff82f35fb5>] copy_net_ns+0x155/0x290
net/core/net_namespace.c:406
2 locks held by syz-executor7/8461:
#0: (rtnl_mutex){+.+.+.}, at: [<ffffffff82f8e6a7>] rtnl_lock+0x17/0x20
net/core/rtnetlink.c:70
#1: (ipvs->sync_mutex){+.+.+.}, at: [<ffffffff831bc58d>]
do_ip_vs_set_ctl+0x90d/0xbd0 net/netfilter/ipvs/ip_vs_ctl.c:2397
1 lock held by syz-executor7/8472:
#0: (ipvs->sync_mutex){+.+.+.}, at: [<ffffffff831bc2c5>]
do_ip_vs_set_ctl+0x645/0xbd0 net/netfilter/ipvs/ip_vs_ctl.c:2402
1 lock held by ipvs-b:3:0/8469:
#0: (rtnl_mutex){+.+.+.}, at: [<ffffffff82f8e6a7>] rtnl_lock+0x17/0x20
net/core/rtnetlink.c:70

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 515 Comm: khungtaskd Not tainted 4.9.94-g8683408 #3
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
ffff8801d84b7d08 ffffffff81d9b509 0000000000000000 0000000000000001
0000000000000001 0000000000000001 ffffffff810b7d60 ffff8801d84b7d40
ffffffff81da6837 0000000000000001 0000000000000000 0000000000000002
Call Trace:
[<ffffffff81d9b509>] __dump_stack lib/dump_stack.c:15 [inline]
[<ffffffff81d9b509>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
[<ffffffff81da6837>] nmi_cpu_backtrace.cold.2+0x48/0x87
lib/nmi_backtrace.c:99
[<ffffffff81da67ca>] nmi_trigger_cpumask_backtrace+0x12a/0x14f
lib/nmi_backtrace.c:60
[<ffffffff810b7e64>] arch_trigger_cpumask_backtrace+0x14/0x20
arch/x86/kernel/apic/hw_nmi.c:37
[<ffffffff81364c54>] trigger_all_cpu_backtrace include/linux/nmi.h:58
[inline]
[<ffffffff81364c54>] check_hung_task kernel/hung_task.c:125 [inline]
[<ffffffff81364c54>] check_hung_uninterruptible_tasks
kernel/hung_task.c:182 [inline]
[<ffffffff81364c54>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
[<ffffffff8119ad2d>] kthread+0x26d/0x300 kernel/kthread.c:211
[<ffffffff838d14dc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff838cff16

[syzbot]

Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.