ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
Bluetooth: hci0: command 0x0406 tx timeout
Bluetooth: hci2: command 0x0406 tx timeout
Bluetooth: hci6: command 0x0406 tx timeout
INFO: task kworker/u4:5:8896 blocked for more than 140 seconds.
Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:5 D23968 8896 2 0x80000000
Workqueue: netns cleanup_net
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_timeout+0x92d/0xfe0 kernel/time/timer.c:1794
do_wait_for_common kernel/sched/completion.c:83 [inline]
__wait_for_common kernel/sched/completion.c:104 [inline]
wait_for_common+0x29c/0x470 kernel/sched/completion.c:115
_rcu_barrier+0x279/0x3e0 kernel/rcu/tree.c:3495
netdev_run_todo+0x100/0xab0 net/core/dev.c:8972
ip6gre_exit_batch_net+0x4cd/0x6c0 net/ipv6/ip6_gre.c:1636
ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:554
process_one_work+0x864/0x1570 kernel/workqueue.c:2153
worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Showing all locks held in the system:
1 lock held by khungtaskd/1570:
#0: 0000000027c51e69 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441
1 lock held by khugepaged/1577:
#0: 00000000dd9f7bf3 (pcpu_drain_mutex){+.+.}, at: drain_all_pages+0x4a/0x570 mm/page_alloc.c:2656
1 lock held by in:imklog/7797:
4 locks held by kworker/u4:5/8896:
#0: 00000000a32e2fb8 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124
#1: 000000000b3eb737 (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128
#2: 000000004a352a42 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521
#3: 000000001745d4d0 (rcu_preempt_state.barrier_mutex){+.+.}, at: _rcu_barrier+0x59/0x3e0 kernel/rcu/tree.c:3430
2 locks held by kworker/1:8/26658:
1 lock held by syz-executor.3/6144:
1 lock held by syz-executor.5/6179:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6181:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000d5f035e4 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000d5f035e4 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000d5f035e4 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000d5f035e4 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000000899386d (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000000899386d (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000000899386d (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000000899386d (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6182:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000068a109a6 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000068a109a6 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000068a109a6 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000068a109a6 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000003af2aec7 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000003af2aec7 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000003af2aec7 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000003af2aec7 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6183:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000ba0973a6 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000ba0973a6 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000ba0973a6 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000ba0973a6 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000d190a072 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000d190a072 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000d190a072 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000d190a072 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6184:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6185:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6186:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6187:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000ca68a3eb (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000ca68a3eb (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000ca68a3eb (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000ca68a3eb (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000ab0acf8b (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000ab0acf8b (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000ab0acf8b (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000ab0acf8b (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6188:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000009ea07bfb (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000009ea07bfb (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000009ea07bfb (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000009ea07bfb (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000007737676b (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000007737676b (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000007737676b (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000007737676b (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6189:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000e695a525 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000e695a525 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000e695a525 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000e695a525 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000072f4e016 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000072f4e016 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000072f4e016 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000072f4e016 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6190:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6192:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000f405416a (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000f405416a (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000f405416a (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000f405416a (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000006658ebc1 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000006658ebc1 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000006658ebc1 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000006658ebc1 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6193:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6194:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000cfc5290f (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000cfc5290f (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000cfc5290f (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000cfc5290f (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000b0656b00 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000b0656b00 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000b0656b00 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000b0656b00 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6195:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6197:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6198:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6199:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6200:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000009444678d (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000009444678d (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000009444678d (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000009444678d (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000b0c35226 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000b0c35226 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000b0c35226 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000b0c35226 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6201:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6202:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000043020d97 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000043020d97 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000043020d97 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000043020d97 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000009661604a (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000009661604a (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000009661604a (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000009661604a (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6203:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000d5e9d40b (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000d5e9d40b (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000d5e9d40b (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000d5e9d40b (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000024e25f42 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000024e25f42 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000024e25f42 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000024e25f42 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6204:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6205:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6206:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000058068185 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000058068185 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000058068185 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000058068185 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000003bfcf617 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000003bfcf617 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000003bfcf617 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000003bfcf617 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6207:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6208:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000dcb28fd9 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000dcb28fd9 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000dcb28fd9 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000dcb28fd9 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000070473256 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000070473256 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000070473256 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000070473256 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6209:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6210:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6211:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000a4c885ed (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000a4c885ed (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000a4c885ed (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000a4c885ed (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000030bf0f58 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000030bf0f58 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000030bf0f58 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000030bf0f58 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6213:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6214:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000c0fa93a1 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000c0fa93a1 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000c0fa93a1 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000c0fa93a1 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000037c2b4d8 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000037c2b4d8 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000037c2b4d8 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000037c2b4d8 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6215:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6216:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000b19b7f6e (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000b19b7f6e (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000b19b7f6e (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000b19b7f6e (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000044265570 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000044265570 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000044265570 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000044265570 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6217:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6218:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6219:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6220:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6222:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6224:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6225:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000001747167d (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000001747167d (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000001747167d (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000001747167d (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000ed236906 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000ed236906 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000ed236906 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000ed236906 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6226:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000051da5431 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000051da5431 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000051da5431 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000051da5431 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000ee5ff60d (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000ee5ff60d (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000ee5ff60d (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000ee5ff60d (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6227:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6228:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000cedd5786 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000cedd5786 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000cedd5786 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000cedd5786 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000a04cfb33 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000a04cfb33 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000a04cfb33 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000a04cfb33 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6229:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6230:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6231:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000003dc3b132 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000003dc3b132 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000003dc3b132 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000003dc3b132 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000088cea41f (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000088cea41f (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000088cea41f (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000088cea41f (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6233:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000082658cd6 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000082658cd6 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000082658cd6 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000082658cd6 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000a9c510ac (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000a9c510ac (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000a9c510ac (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000a9c510ac (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6234:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000c3a84703 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000c3a84703 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000c3a84703 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000c3a84703 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000055711413 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000055711413 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000055711413 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000055711413 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6235:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6236:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000974d99ae (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000974d99ae (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000974d99ae (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000974d99ae (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000423bae26 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000423bae26 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000423bae26 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000423bae26 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6237:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6238:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6239:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6240:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6241:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000faa7955c (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000faa7955c (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000faa7955c (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000faa7955c (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000a479b82e (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000a479b82e (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000a479b82e (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000a479b82e (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6243:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000063eb7a58 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000063eb7a58 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000063eb7a58 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000063eb7a58 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000005fcd1cc5 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000005fcd1cc5 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000005fcd1cc5 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000005fcd1cc5 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6244:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000941136e4 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000941136e4 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000941136e4 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000941136e4 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000038176091 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000038176091 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000038176091 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000038176091 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6245:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000e03ec57f (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000e03ec57f (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000e03ec57f (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000e03ec57f (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000111821f4 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000111821f4 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000111821f4 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000111821f4 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6246:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000aa55543a (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000aa55543a (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000aa55543a (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000aa55543a (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000066319378 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000066319378 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000066319378 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000066319378 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6247:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6248:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6249:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000008c501845 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000008c501845 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000008c501845 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000008c501845 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000ddb77b8b (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000ddb77b8b (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000ddb77b8b (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000ddb77b8b (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6250:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6251:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000003b73c6c0 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000003b73c6c0 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000003b73c6c0 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000003b73c6c0 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000008e3f36d (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000008e3f36d (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000008e3f36d (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000008e3f36d (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6252:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000862d4bd7 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000862d4bd7 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000862d4bd7 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000862d4bd7 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000faca5a62 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000faca5a62 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000faca5a62 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000faca5a62 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6253:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6254:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000039845e90 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000039845e90 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000039845e90 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000039845e90 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000038cc48ef (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000038cc48ef (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000038cc48ef (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000038cc48ef (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6255:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000007c3b716f (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000007c3b716f (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000007c3b716f (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000007c3b716f (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000ca293754 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000ca293754 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000ca293754 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000ca293754 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6257:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6259:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6260:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000502ea616 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000502ea616 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000502ea616 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000502ea616 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000f4e80a9b (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000f4e80a9b (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000f4e80a9b (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000f4e80a9b (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6261:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6262:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6264:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000000e895896 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000000e895896 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000000e895896 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000000e895896 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000002322e224 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000002322e224 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000002322e224 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000002322e224 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6265:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6266:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6267:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000089193bbb (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000089193bbb (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000089193bbb (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000089193bbb (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000ffad3b8d (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000ffad3b8d (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000ffad3b8d (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000ffad3b8d (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6269:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6270:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6271:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6272:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6273:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6274:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6275:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000b01aa659 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000b01aa659 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000b01aa659 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000b01aa659 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000001923f5c4 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000001923f5c4 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000001923f5c4 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000001923f5c4 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6276:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6277:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000ac235bab (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000ac235bab (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000ac235bab (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000ac235bab (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000068a76574 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000068a76574 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000068a76574 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000068a76574 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6278:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000269ed281 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000269ed281 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000269ed281 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000269ed281 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000026915197 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000026915197 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000026915197 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000026915197 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6279:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6280:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6281:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6282:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6284:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6285:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6286:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6287:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6288:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6289:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6290:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6291:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6293:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6294:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000057b708e4 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000057b708e4 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000057b708e4 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000057b708e4 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000004d50beff (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000004d50beff (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000004d50beff (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000004d50beff (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6296:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000252965b5 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000252965b5 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000252965b5 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000252965b5 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000c1b4dbec (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000c1b4dbec (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000c1b4dbec (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000c1b4dbec (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6297:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000003518da7f (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000003518da7f (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000003518da7f (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000003518da7f (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000e60e4b37 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000e60e4b37 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000e60e4b37 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000e60e4b37 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6298:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6299:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000063140766 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000063140766 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000063140766 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000063140766 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000002e8764f0 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000002e8764f0 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000002e8764f0 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000002e8764f0 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6300:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6301:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6302:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6303:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6305:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6306:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6307:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6309:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6311:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6312:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6313:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6314:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000009d6a6ff4 (&rq->lock){-.-.}, at: rq_lock kernel/sched/sched.h:1826 [inline]
#1: 000000009d6a6ff4 (&rq->lock){-.-.}, at: __schedule+0x1f9/0x2040 kernel/sched/core.c:3455
#2: 0000000027c51e69 (rcu_read_lock){....}, at: trace_sched_stat_runtime include/trace/events/sched.h:428 [inline]
#2: 0000000027c51e69 (rcu_read_lock){....}, at: update_curr+0x2c3/0x870 kernel/sched/fair.c:857
#3: 0000000009ea2a00 (&mm->context.lock){+.+.}, at: ldt_dup_context+0x38/0x260 arch/x86/kernel/ldt.c:367
1 lock held by syz-executor.5/6315:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6316:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6317:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6318:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6319:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6322:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000004bdbec9c (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000004bdbec9c (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000004bdbec9c (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000004bdbec9c (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000027c688de (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000027c688de (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000027c688de (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000027c688de (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6323:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6324:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6325:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6326:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6327:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6328:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000067fded06 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000067fded06 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000067fded06 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000067fded06 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000bd7e1dc6 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000bd7e1dc6 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000bd7e1dc6 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000bd7e1dc6 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6329:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000ee28e661 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000ee28e661 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000ee28e661 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000ee28e661 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000d97073de (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000d97073de (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000d97073de (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000d97073de (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6330:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6331:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000007bc9b14d (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000007bc9b14d (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000007bc9b14d (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000007bc9b14d (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000bbab5a74 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000bbab5a74 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000bbab5a74 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000bbab5a74 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6332:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6333:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6334:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6335:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000007bf3de49 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000007bf3de49 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000007bf3de49 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000007bf3de49 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000007047aa47 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000007047aa47 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000007047aa47 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000007047aa47 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6336:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6337:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6338:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6339:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6340:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6341:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6342:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6343:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6344:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6345:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6346:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6347:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6348:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6349:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6350:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6352:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000b8a3706e (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000b8a3706e (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000b8a3706e (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000b8a3706e (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000322bfeb1 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000322bfeb1 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000322bfeb1 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000322bfeb1 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6354:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6355:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6356:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000f94bf6c6 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000f94bf6c6 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000f94bf6c6 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000f94bf6c6 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000003ec0710e (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000003ec0710e (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000003ec0710e (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000003ec0710e (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6357:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6358:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6359:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6360:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6361:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6363:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6364:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6366:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6367:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000586c68c1 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000586c68c1 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000586c68c1 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000586c68c1 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000a3c83111 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000a3c83111 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000a3c83111 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000a3c83111 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6368:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6369:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6370:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6372:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6373:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6375:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6376:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6380:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6381:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6382:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000002e518ea (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000002e518ea (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000002e518ea (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000002e518ea (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000005b8c458b (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000005b8c458b (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000005b8c458b (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000005b8c458b (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6383:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000005aaa2628 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000005aaa2628 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000005aaa2628 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000005aaa2628 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000003b39a662 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000003b39a662 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000003b39a662 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000003b39a662 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000747490cc (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6384:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6385:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6386:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000f4c96719 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000f4c96719 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000f4c96719 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000f4c96719 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000618d28ce (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000618d28ce (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000618d28ce (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000618d28ce (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6387:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6389:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000a032cf5c (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000a032cf5c (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000a032cf5c (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000a032cf5c (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000665a23fe (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000665a23fe (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000665a23fe (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000665a23fe (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6390:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6391:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6392:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6393:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6395:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6397:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6398:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6400:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000031f5c9ae (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000031f5c9ae (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000031f5c9ae (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000031f5c9ae (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000cbdf064f (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000cbdf064f (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000cbdf064f (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000cbdf064f (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6401:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6402:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6404:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000000a6765cb (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000000a6765cb (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000000a6765cb (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000000a6765cb (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000b30b6cc3 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000b30b6cc3 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000b30b6cc3 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000b30b6cc3 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6405:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6406:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6410:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6411:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6412:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6413:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6414:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6415:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6416:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6417:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6421:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6422:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000ecb6d5d8 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000ecb6d5d8 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000ecb6d5d8 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000ecb6d5d8 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000b39bc5c5 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000b39bc5c5 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000b39bc5c5 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000b39bc5c5 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6423:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6424:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6426:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6428:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6430:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6431:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000d877d450 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000d877d450 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000d877d450 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000d877d450 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000f9971681 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000f9971681 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000f9971681 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000f9971681 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6432:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6434:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6435:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6437:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6438:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6439:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6441:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000fcc4b43a (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000fcc4b43a (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000fcc4b43a (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000fcc4b43a (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000014f32fc3 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000014f32fc3 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000014f32fc3 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000014f32fc3 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6442:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6443:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6444:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6445:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6446:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000da973301 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000da973301 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000da973301 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000da973301 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000000e49bbd2 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000000e49bbd2 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000000e49bbd2 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000000e49bbd2 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6447:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000057eb873c (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000057eb873c (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000057eb873c (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000057eb873c (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000002f60ec65 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000002f60ec65 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000002f60ec65 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000002f60ec65 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6449:
1 lock held by syz-executor.5/6450:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6451:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6452:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000006160bb9c (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000006160bb9c (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000006160bb9c (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000006160bb9c (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000006daaf875 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000006daaf875 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000006daaf875 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000006daaf875 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6453:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000015649e15 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000015649e15 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000015649e15 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000015649e15 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000000ed8ff00 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000000ed8ff00 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000000ed8ff00 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000000ed8ff00 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6454:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000000fc332 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000000fc332 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000000fc332 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000000fc332 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000eca9b6ef (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000eca9b6ef (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000eca9b6ef (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000eca9b6ef (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6455:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6456:
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000b1452361 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6457:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000002bcb4da6 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000002bcb4da6 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000002bcb4da6 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000002bcb4da6 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000fce3cbc0 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000fce3cbc0 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000fce3cbc0 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000fce3cbc0 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000b1452361 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6458:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6459:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6460:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6461:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000871b0b85 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000871b0b85 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000871b0b85 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000871b0b85 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000256215c8 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000256215c8 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000256215c8 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000256215c8 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6462:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6463:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6464:
1 lock held by syz-executor.5/6465:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6466:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6467:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000d0f0b44d (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000d0f0b44d (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000d0f0b44d (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000d0f0b44d (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000006ca0462c (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000006ca0462c (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000006ca0462c (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000006ca0462c (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6468:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000e935a58a (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000e935a58a (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000e935a58a (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000e935a58a (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000016d607bc (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000016d607bc (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000016d607bc (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000016d607bc (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6469:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000049820140 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000049820140 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000049820140 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000049820140 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000649b61c2 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000649b61c2 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000649b61c2 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000649b61c2 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6470:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6471:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
rcu: INFO: rcu_sched detected stalls on CPUs/tasks:
rcu: 1-...!: (10502 ticks this GP) idle=1aa/1/0x4000000000000000 softirq=94483/94483 fqs=0
rcu: (detected by 0, t=10503 jiffies, g=4633, q=3)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 6200 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__anon_vma_interval_tree_insert mm/interval_tree.c:72 [inline]
RIP: 0010:anon_vma_interval_tree_insert+0x1ea/0x3d0 mm/interval_tree.c:83
Code: 00 0f 85 68 01 00 00 4c 8b 7b e0 49 8d bf 98 00 00 00 48 89 fa 48 c1 ea 03 80 3c 2a 00 0f 85 42 01 00 00 4d 8b bf 98 00 00 00 <4c> 89 ef 4c 89 fe e8 9b e9 d8 ff 4d 39 fd 0f 82 4a ff ff ff e8 7d
RSP: 0018:ffff888094c47ac8 EFLAGS: 00000246
RAX: 1ffff11001d437ce RBX: ffff88800ea1be90 RCX: ffffffff81899c8f
RDX: 1ffff1100520a49f RSI: ffffffff81899ca2 RDI: ffff8880290524f8
RBP: dffffc0000000000 R08: 0000000000000000 R09: 00000007fffffffe
R10: 0000000000000006 R11: 0000000033c50e8b R12: 00000007fffffffe
R13: 00000007ffffffde R14: ffff88801fdf28c0 R15: 00000007ffffffde
FS: 00007f4b4fe07700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4b4fe076bc CR3: 00000000b4fad000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
anon_vma_chain_link mm/rmap.c:144 [inline]
anon_vma_clone+0x23f/0x5e0 mm/rmap.c:279
anon_vma_fork+0x82/0x630 mm/rmap.c:332
dup_mmap kernel/fork.c:504 [inline]
dup_mm kernel/fork.c:1285 [inline]
copy_mm kernel/fork.c:1341 [inline]
copy_process.part.0+0x360f/0x8260 kernel/fork.c:1913
copy_process kernel/fork.c:1710 [inline]
_do_fork+0x22f/0xf30 kernel/fork.c:2219
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f4b514d3e99
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4b4fe07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f4b515e7100 RCX: 00007f4b514d3e99
RDX: 0000000020000880 RSI: 0000000000000000 RDI: 0000000080800000
RBP: 00007f4b5152dff1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc1e3afeff R14: 00007f4b4fe07300 R15: 0000000000022000
rcu: rcu_sched kthread starved for 10504 jiffies! g4633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
rcu: RCU grace-period kthread stack dump:
rcu_sched I29728 11 2 0x80000000
Call Trace:
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
schedule_timeout+0x4cf/0xfe0 kernel/time/timer.c:1818
rcu_gp_kthread+0xdad/0x21c0 kernel/rcu/tree.c:2202
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
1 lock held by syz-executor.5/6472:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6473:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6474:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6475:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6476:
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000747490cc (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6477:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6478:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000002072e101 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000002072e101 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000002072e101 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000002072e101 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000c449eda1 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000c449eda1 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000c449eda1 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000c449eda1 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6479:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000882e40d2 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000882e40d2 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000882e40d2 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000882e40d2 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000005c3bd5e0 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000005c3bd5e0 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000005c3bd5e0 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000005c3bd5e0 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6480:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000994025ff (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000994025ff (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000994025ff (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000994025ff (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000b6b723ce (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000b6b723ce (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000b6b723ce (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000b6b723ce (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6481:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 00000000322a7e1e (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 00000000322a7e1e (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 00000000322a7e1e (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 00000000322a7e1e (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 0000000080a3747a (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 0000000080a3747a (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 0000000080a3747a (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 0000000080a3747a (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6482:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6483:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
1 lock held by syz-executor.5/6484:
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 0000000058d7c61b (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
4 locks held by syz-executor.5/6485:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 000000000ffe2c51 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 000000000ffe2c51 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 000000000ffe2c51 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 000000000ffe2c51 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 00000000af8346dd (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 00000000af8346dd (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 00000000af8346dd (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 00000000af8346dd (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
4 locks held by syz-executor.5/6486:
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mmap kernel/fork.c:435 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#0: 000000006051da80 (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2bb3/0x8260 kernel/fork.c:1913
#1: 0000000018c82bc7 (&mm->mmap_sem){++++}, at: dup_mmap kernel/fork.c:436 [inline]
#1: 0000000018c82bc7 (&mm->mmap_sem){++++}, at: dup_mm kernel/fork.c:1285 [inline]
#1: 0000000018c82bc7 (&mm->mmap_sem){++++}, at: copy_mm kernel/fork.c:1341 [inline]
#1: 0000000018c82bc7 (&mm->mmap_sem){++++}, at: copy_process.part.0+0x2bcf/0x8260 kernel/fork.c:1913
#2: 000000005a0f5af0 (&mm->mmap_sem/1){+.+.}, at: dup_mmap kernel/fork.c:445 [inline]
#2: 000000005a0f5af0 (&mm->mmap_sem/1){+.+.}, at: dup_mm kernel/fork.c:1285 [inline]
#2: 000000005a0f5af0 (&mm->mmap_sem/1){+.+.}, at: copy_mm kernel/fork.c:1341 [inline]
#2: 000000005a0f5af0 (&mm->mmap_sem/1){+.+.}, at: copy_process.part.0+0x2c1c/0x8260 kernel/fork.c:1913
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#3: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: anon_vma_clone+0x145/0x5e0 mm/rmap.c:278
1 lock held by syz-executor.5/6487:
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: lock_anon_vma_root mm/rmap.c:238 [inline]
#0: 00000000abbe52c4 (&anon_vma->rwsem){++++}, at: unlink_anon_vmas+0x178/0x840 mm/rmap.c:388
----------------
Code disassembly (best guess):
0: 00 0f add %cl,(%rdi)
2: 85 68 01 test %ebp,0x1(%rax)
5: 00 00 add %al,(%rax)
7: 4c 8b 7b e0 mov -0x20(%rbx),%r15
b: 49 8d bf 98 00 00 00 lea 0x98(%r15),%rdi
12: 48 89 fa mov %rdi,%rdx
15: 48 c1 ea 03 shr $0x3,%rdx
19: 80 3c 2a 00 cmpb $0x0,(%rdx,%rbp,1)
1d: 0f 85 42 01 00 00 jne 0x165
23: 4d 8b bf 98 00 00 00 mov 0x98(%r15),%r15
* 2a: 4c 89 ef mov %r13,%rdi <-- trapping instruction
2d: 4c 89 fe mov %r15,%rsi
30: e8 9b e9 d8 ff callq 0xffd8e9d0
35: 4d 39 fd cmp %r15,%r13
38: 0f 82 4a ff ff ff jb 0xffffff88
3e: e8 .byte 0xe8
3f: 7d .byte 0x7d