INFO: task hung in lock_rename
4 views
Skip to first unread message
syzbot
Apr 13, 2019, 8:00:29 PM4/13/19
to syzkaller-a...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: a4230bea Merge 4.9.109 into android-4.9
git tree: android-4.9
console output: https://syzkaller.appspot.com/x/log.txt?x=106933d8400000
kernel config: https://syzkaller.appspot.com/x/.config?x=12491c13dbc6d8
dashboard link: https://syzkaller.appspot.com/bug?extid=424bc07c69d45d3604d0
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
userspace arch: i386
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=101b25bf800000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1619225f800000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+424bc0...@syzkaller.appspotmail.com
INFO: task syz-executor968:3844 blocked for more than 120 seconds.
Not tainted 4.9.109-ga4230be #2
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor968 D28264 3844 3824 0x20020000
ffff8801d8629800 ffff8801d9196f40 ffff8801d9196f40 ffff8801d7be1800
ffff8801db221c18 ffff8801c3e2f9b8 ffffffff839e8a8d ffffffff812355f7
0000000000000000 ffff8801d862a0c0 0000000600000007 ffff8801db2224e8
Call Trace:
[<ffffffff839ea08f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
[<ffffffff839f56c8>] __rwsem_down_write_failed_common
kernel/locking/rwsem-xadd.c:526 [inline]
[<ffffffff839f56c8>] rwsem_down_write_failed+0x598/0x990
kernel/locking/rwsem-xadd.c:555
[<ffffffff81ee8107>] call_rwsem_down_write_failed+0x17/0x30
arch/x86/lib/rwsem.S:105
[<ffffffff8122c220>] __down_write arch/x86/include/asm/rwsem.h:125 [inline]
[<ffffffff8122c220>] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174
[<ffffffff81593fa6>] inode_lock_nested include/linux/fs.h:801 [inline]
[<ffffffff81593fa6>] lock_rename+0x236/0x290 fs/namei.c:2857
[<ffffffff815aeedd>] SYSC_renameat2 fs/namei.c:4607 [inline]
[<ffffffff815aeedd>] SyS_renameat2 fs/namei.c:4546 [inline]
[<ffffffff815aeedd>] SYSC_rename fs/namei.c:4697 [inline]
[<ffffffff815aeedd>] SyS_rename+0x3bd/0x800 fs/namei.c:4695
[<ffffffff81006da7>] do_syscall_32_irqs_on arch/x86/entry/common.c:325
[inline]
[<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870
arch/x86/entry/common.c:387
[<ffffffff839fb090>] entry_SYSENTER_compat+0x90/0xa2
arch/x86/entry/entry_64_compat.S:137
Showing all locks held in the system:
2 locks held by khungtaskd/519:
#0: (rcu_read_lock){......}, at: [<ffffffff8136662c>]
check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
#0: (rcu_read_lock){......}, at: [<ffffffff8136662c>]
watchdog+0x11c/0xa20 kernel/hung_task.c:239
#1: (tasklist_lock){.+.+..}, at: [<ffffffff81425cb7>]
debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
2 locks held by getty/3740:
#0: (&tty->ldisc_sem){++++++}, at: [<ffffffff839f7b32>]
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
#1: (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff8211fce2>]
n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133
1 lock held by sshd/3815:
#0: (&pipe->mutex/1){+.+.+.}, at: [<ffffffff839e856f>]
__schedule+0x12f/0x1bd0 kernel/sched/core.c:3452
2 locks held by syz-executor968/3836:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3838:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3843:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3844:
#0: (sb_writers#8){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#8){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&sb->s_type->i_mutex_key#13/1){+.+.+.}, at: [<ffffffff81593fa6>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&sb->s_type->i_mutex_key#13/1){+.+.+.}, at: [<ffffffff81593fa6>]
lock_rename+0x236/0x290 fs/namei.c:2857
1 lock held by syz-executor968/3847:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3848:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3854:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3855:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3861:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3862:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3868:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3875:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3876:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3884:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3893:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3841:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3846:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3851:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3857:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3864:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3872:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3880:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3888:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3896:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3903:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3912:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3913:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3920:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3921:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3923:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3931:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3849:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3853:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3860:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3869:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3877:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3885:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3894:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3901:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3908:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3916:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3927:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3928:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3934:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3935:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3939:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3944:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3899:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3907:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3915:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3930:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3938:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3943:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3950:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3956:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3963:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3968:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3971:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3972:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3975:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3976:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3977:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3978:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3886:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3895:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3902:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3911:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3919:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3926:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3933:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3941:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3949:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3955:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3964:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3965:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3969:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3970:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3973:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3974:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3856:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3863:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3870:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3881:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3889:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3897:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3904:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3909:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3917:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3924:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3936:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3940:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3947:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3948:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3957:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3958:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3873:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3882:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3891:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3900:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3906:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3914:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3922:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3929:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3937:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
2 locks held by syz-executor968/3942:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3953:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3954:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3959:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3960:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3966:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3967:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3866:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3871:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3879:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3890:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3898:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3905:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3910:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3918:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3925:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3932:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3945:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3946:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3951:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
2 locks held by syz-executor968/3952:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3961:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3962:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.109-ga4230be #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
ffff8801d8647d08 ffffffff81eb3e29 0000000000000000 0000000000000000
0000000000000000 0000000000000001 ffffffff810b9580 ffff8801d8647d40
ffffffff81ebf127 0000000000000000 0000000000000000 0000000000000002
Call Trace:
[<ffffffff81eb3e29>] __dump_stack lib/dump_stack.c:15 [inline]
[<ffffffff81eb3e29>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
[<ffffffff81ebf127>] nmi_cpu_backtrace.cold.2+0x48/0x87
lib/nmi_backtrace.c:99
[<ffffffff81ebf0ba>] nmi_trigger_cpumask_backtrace+0x12a/0x14f
lib/nmi_backtrace.c:60
[<ffffffff810b9684>] arch_trigger_cpumask_backtrace+0x14/0x20
arch/x86/kernel/apic/hw_nmi.c:37
[<ffffffff81366bc4>] trigger_all_cpu_backtrace include/linux/nmi.h:58
[inline]
[<ffffffff81366bc4>] check_hung_task kernel/hung_task.c:125 [inline]
[<ffffffff81366bc4>] check_hung_uninterruptible_tasks
kernel/hung_task.c:182 [inline]
[<ffffffff81366bc4>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
[<ffffffff8119d04d>] kthread+0x26d/0x300 kernel/kthread.c:211
[<ffffffff839f9b5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3815 Comm: sshd Not tainted 4.9.109-ga4230be #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
task: ffff8801d7846000 task.stack: ffff8801d9a40000
RIP: 0033:[<0000557af6d7901b>] c [<0000557af6d7901b>] 0x557af6d7901b
RSP: 002b:00007ffd10c7b430 EFLAGS: 00000206
RAX: 0000000000000072 RBX: 0000000000000006 RCX: 0000000035c6b89e
RDX: 000000000000001e RSI: 00007ffd10c7b3f8 RDI: 0000000008000000
RBP: 0000557af7797df0 R08: 0000000000000000 R09: 000000000000001f
R10: 000000000ee0c685 R11: 000000000870f4a8 R12: 0000557af7797ee4
R13: 0000000000005a6b R14: 00007fca766aa5c5 R15: 0000557af77d77e5
FS: 00007fca768317c0(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000073d000 CR3: 00000001c314a000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
syzbot found the following crash on:
HEAD commit: a4230bea Merge 4.9.109 into android-4.9
git tree: android-4.9
console output: https://syzkaller.appspot.com/x/log.txt?x=106933d8400000
kernel config: https://syzkaller.appspot.com/x/.config?x=12491c13dbc6d8
dashboard link: https://syzkaller.appspot.com/bug?extid=424bc07c69d45d3604d0
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
userspace arch: i386
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=101b25bf800000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1619225f800000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+424bc0...@syzkaller.appspotmail.com
INFO: task syz-executor968:3844 blocked for more than 120 seconds.
Not tainted 4.9.109-ga4230be #2
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor968 D28264 3844 3824 0x20020000
ffff8801d8629800 ffff8801d9196f40 ffff8801d9196f40 ffff8801d7be1800
ffff8801db221c18 ffff8801c3e2f9b8 ffffffff839e8a8d ffffffff812355f7
0000000000000000 ffff8801d862a0c0 0000000600000007 ffff8801db2224e8
Call Trace:
[<ffffffff839ea08f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
[<ffffffff839f56c8>] __rwsem_down_write_failed_common
kernel/locking/rwsem-xadd.c:526 [inline]
[<ffffffff839f56c8>] rwsem_down_write_failed+0x598/0x990
kernel/locking/rwsem-xadd.c:555
[<ffffffff81ee8107>] call_rwsem_down_write_failed+0x17/0x30
arch/x86/lib/rwsem.S:105
[<ffffffff8122c220>] __down_write arch/x86/include/asm/rwsem.h:125 [inline]
[<ffffffff8122c220>] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174
[<ffffffff81593fa6>] inode_lock_nested include/linux/fs.h:801 [inline]
[<ffffffff81593fa6>] lock_rename+0x236/0x290 fs/namei.c:2857
[<ffffffff815aeedd>] SYSC_renameat2 fs/namei.c:4607 [inline]
[<ffffffff815aeedd>] SyS_renameat2 fs/namei.c:4546 [inline]
[<ffffffff815aeedd>] SYSC_rename fs/namei.c:4697 [inline]
[<ffffffff815aeedd>] SyS_rename+0x3bd/0x800 fs/namei.c:4695
[<ffffffff81006da7>] do_syscall_32_irqs_on arch/x86/entry/common.c:325
[inline]
[<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870
arch/x86/entry/common.c:387
[<ffffffff839fb090>] entry_SYSENTER_compat+0x90/0xa2
arch/x86/entry/entry_64_compat.S:137
Showing all locks held in the system:
2 locks held by khungtaskd/519:
#0: (rcu_read_lock){......}, at: [<ffffffff8136662c>]
check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
#0: (rcu_read_lock){......}, at: [<ffffffff8136662c>]
watchdog+0x11c/0xa20 kernel/hung_task.c:239
#1: (tasklist_lock){.+.+..}, at: [<ffffffff81425cb7>]
debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
2 locks held by getty/3740:
#0: (&tty->ldisc_sem){++++++}, at: [<ffffffff839f7b32>]
ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
#1: (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff8211fce2>]
n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133
1 lock held by sshd/3815:
#0: (&pipe->mutex/1){+.+.+.}, at: [<ffffffff839e856f>]
__schedule+0x12f/0x1bd0 kernel/sched/core.c:3452
2 locks held by syz-executor968/3836:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3838:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3843:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3844:
#0: (sb_writers#8){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#8){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&sb->s_type->i_mutex_key#13/1){+.+.+.}, at: [<ffffffff81593fa6>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&sb->s_type->i_mutex_key#13/1){+.+.+.}, at: [<ffffffff81593fa6>]
lock_rename+0x236/0x290 fs/namei.c:2857
1 lock held by syz-executor968/3847:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3848:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3854:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3855:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3861:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3862:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3868:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3875:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3876:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3884:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3893:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3841:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3846:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3851:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3857:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3864:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3872:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3880:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3888:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3896:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3903:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3912:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3913:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3920:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3921:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3923:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3931:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3849:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3853:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3860:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3869:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3877:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3885:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3894:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3901:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3908:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3916:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3927:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3928:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3934:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3935:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3939:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3944:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3899:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3907:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3915:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3930:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3938:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3943:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3950:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3956:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3963:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3968:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3971:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3972:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3975:
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
inode_lock include/linux/fs.h:766 [inline]
#0: (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3976:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3977:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3978:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3886:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3895:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3902:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3911:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3919:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3926:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3933:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3941:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3949:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3955:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3964:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3965:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3969:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3970:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3973:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3974:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3856:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3863:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3870:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3881:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3889:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3897:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3904:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3909:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3917:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3924:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3936:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3940:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3947:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3948:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3957:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3958:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3873:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3882:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3891:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3900:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3906:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3914:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3922:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3929:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3937:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
2 locks held by syz-executor968/3942:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3953:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3954:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3959:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3960:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3966:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3967:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3866:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3871:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3879:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3890:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3898:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3905:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3910:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3918:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3925:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3932:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3945:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3946:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3951:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock
fs/namespace.c:1423 [inline]
#1: (namespace_sem){+++++.}, at: [<ffffffff815e173a>]
lock_mount+0xca/0x2c0 fs/namespace.c:2082
2 locks held by syz-executor968/3952:
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write
include/linux/fs.h:1573 [inline]
#0: (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>]
mnt_want_write+0x3f/0xb0 fs/namespace.c:391
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
inode_lock_nested include/linux/fs.h:801 [inline]
#1: (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>]
filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3961:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3962:
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock
include/linux/fs.h:766 [inline]
#0: (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>]
lock_mount+0x8c/0x2c0 fs/namespace.c:2077
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.109-ga4230be #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
ffff8801d8647d08 ffffffff81eb3e29 0000000000000000 0000000000000000
0000000000000000 0000000000000001 ffffffff810b9580 ffff8801d8647d40
ffffffff81ebf127 0000000000000000 0000000000000000 0000000000000002
Call Trace:
[<ffffffff81eb3e29>] __dump_stack lib/dump_stack.c:15 [inline]
[<ffffffff81eb3e29>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
[<ffffffff81ebf127>] nmi_cpu_backtrace.cold.2+0x48/0x87
lib/nmi_backtrace.c:99
[<ffffffff81ebf0ba>] nmi_trigger_cpumask_backtrace+0x12a/0x14f
lib/nmi_backtrace.c:60
[<ffffffff810b9684>] arch_trigger_cpumask_backtrace+0x14/0x20
arch/x86/kernel/apic/hw_nmi.c:37
[<ffffffff81366bc4>] trigger_all_cpu_backtrace include/linux/nmi.h:58
[inline]
[<ffffffff81366bc4>] check_hung_task kernel/hung_task.c:125 [inline]
[<ffffffff81366bc4>] check_hung_uninterruptible_tasks
kernel/hung_task.c:182 [inline]
[<ffffffff81366bc4>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
[<ffffffff8119d04d>] kthread+0x26d/0x300 kernel/kthread.c:211
[<ffffffff839f9b5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3815 Comm: sshd Not tainted 4.9.109-ga4230be #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
task: ffff8801d7846000 task.stack: ffff8801d9a40000
RIP: 0033:[<0000557af6d7901b>] c [<0000557af6d7901b>] 0x557af6d7901b
RSP: 002b:00007ffd10c7b430 EFLAGS: 00000206
RAX: 0000000000000072 RBX: 0000000000000006 RCX: 0000000035c6b89e
RDX: 000000000000001e RSI: 00007ffd10c7b3f8 RDI: 0000000008000000
RBP: 0000557af7797df0 R08: 0000000000000000 R09: 000000000000001f
R10: 000000000ee0c685 R11: 000000000870f4a8 R12: 0000557af7797ee4
R13: 0000000000005a6b R14: 00007fca766aa5c5 R15: 0000557af77d77e5
FS: 00007fca768317c0(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000073d000 CR3: 00000001c314a000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
Reply all
Reply to author
Forward
0 new messages