syzbot


INFO: task hung in lock_rename

Status: public: reported C repro on 2019/04/14 00:00
Reported-by: syzbot+424bc07c69d45d3604d0@syzkaller.appspotmail.com
First crash: 2138d, last: 2067d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in lock_rename (3) fs 1 1025d 1025d 0/26 auto-closed as invalid on 2021/10/02 18:08
linux-5.15 INFO: task hung in lock_rename 2 360d 391d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:02
upstream INFO: task hung in lock_rename exfat 53 1972d 2106d 0/26 auto-closed as invalid on 2019/05/30 13:09
linux-6.1 INFO: task hung in lock_rename 3 215d 329d 0/3 auto-obsoleted due to no activity on 2024/01/01 05:54
upstream INFO: task hung in lock_rename (4) fs 3 814d 908d 0/26 closed as invalid on 2022/02/08 09:40
linux-4.19 INFO: task hung in lock_rename 1 838d 838d 0/1 auto-closed as invalid on 2022/05/08 10:15
upstream INFO: task hung in lock_rename (5) fs 2 770d 799d 0/26 auto-closed as invalid on 2022/06/15 04:15
upstream INFO: task hung in lock_rename (2) fs 7 1176d 1200d 0/26 auto-closed as invalid on 2021/05/17 09:31
linux-4.14 INFO: task hung in lock_rename 1 683d 683d 0/1 auto-obsoleted due to no activity on 2022/10/10 13:20
upstream INFO: task hung in lock_rename (6) ext4 18 361d 610d 0/26 auto-obsoleted due to no activity on 2023/07/28 16:10

Sample crash report:
INFO: task syz-executor968:3844 blocked for more than 120 seconds.
      Not tainted 4.9.109-ga4230be #2
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor968 D28264  3844   3824 0x20020000
 ffff8801d8629800 ffff8801d9196f40 ffff8801d9196f40 ffff8801d7be1800
 ffff8801db221c18 ffff8801c3e2f9b8 ffffffff839e8a8d ffffffff812355f7
 0000000000000000 ffff8801d862a0c0 0000000600000007 ffff8801db2224e8
Call Trace:
 [<ffffffff839ea08f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
 [<ffffffff839f56c8>] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline]
 [<ffffffff839f56c8>] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555
 [<ffffffff81ee8107>] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105
 [<ffffffff8122c220>] __down_write arch/x86/include/asm/rwsem.h:125 [inline]
 [<ffffffff8122c220>] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174
 [<ffffffff81593fa6>] inode_lock_nested include/linux/fs.h:801 [inline]
 [<ffffffff81593fa6>] lock_rename+0x236/0x290 fs/namei.c:2857
 [<ffffffff815aeedd>] SYSC_renameat2 fs/namei.c:4607 [inline]
 [<ffffffff815aeedd>] SyS_renameat2 fs/namei.c:4546 [inline]
 [<ffffffff815aeedd>] SYSC_rename fs/namei.c:4697 [inline]
 [<ffffffff815aeedd>] SyS_rename+0x3bd/0x800 fs/namei.c:4695
 [<ffffffff81006da7>] do_syscall_32_irqs_on arch/x86/entry/common.c:325 [inline]
 [<ffffffff81006da7>] do_fast_syscall_32+0x2f7/0x870 arch/x86/entry/common.c:387
 [<ffffffff839fb090>] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137

Showing all locks held in the system:
2 locks held by khungtaskd/519:
 #0:  (rcu_read_lock){......}, at: [<ffffffff8136662c>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8136662c>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81425cb7>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
2 locks held by getty/3740:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839f7b32>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff8211fce2>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133
1 lock held by sshd/3815:
 #0:  (&pipe->mutex/1){+.+.+.}, at: [<ffffffff839e856f>] __schedule+0x12f/0x1bd0 kernel/sched/core.c:3452
2 locks held by syz-executor968/3836:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3838:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3843:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3844:
 #0:  (sb_writers#8){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#8){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&sb->s_type->i_mutex_key#13/1){+.+.+.}, at: [<ffffffff81593fa6>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&sb->s_type->i_mutex_key#13/1){+.+.+.}, at: [<ffffffff81593fa6>] lock_rename+0x236/0x290 fs/namei.c:2857
1 lock held by syz-executor968/3847:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3848:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3854:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3855:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3861:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3862:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3868:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3875:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3876:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3884:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3893:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3841:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3846:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3851:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3857:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3864:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3872:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3880:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3888:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3896:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3903:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3912:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3913:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3920:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3921:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3923:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3931:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3849:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3853:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3860:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3869:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3877:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3885:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3894:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3901:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3908:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3916:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3927:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3928:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3934:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3935:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3939:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3944:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3899:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3907:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3915:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3930:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3938:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3943:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3950:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3956:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3963:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3968:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3971:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3972:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3975:
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#13){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3976:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3977:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3978:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3886:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3895:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3902:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3911:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3919:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3926:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3933:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3941:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3949:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3955:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3964:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3965:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3969:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3970:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3973:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3974:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3856:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3863:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3870:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3881:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3889:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3897:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3904:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3909:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3917:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3924:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3936:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3940:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3947:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3948:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3957:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3958:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3873:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3882:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3891:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3900:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3906:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3914:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3922:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3929:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3937:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
2 locks held by syz-executor968/3942:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3953:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3954:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
1 lock held by syz-executor968/3959:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3960:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3966:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3967:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3866:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3871:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3879:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3890:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3898:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3905:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3910:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3918:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3925:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3932:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3945:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3946:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
2 locks held by syz-executor968/3951:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] namespace_lock fs/namespace.c:1423 [inline]
 #1:  (namespace_sem){+++++.}, at: [<ffffffff815e173a>] lock_mount+0xca/0x2c0 fs/namespace.c:2082
2 locks held by syz-executor968/3952:
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#3){.+.+.+}, at: [<ffffffff815e08df>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key/1){+.+.+.}, at: [<ffffffff815a9eca>] filename_create+0x17a/0x490 fs/namei.c:3639
1 lock held by syz-executor968/3961:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor968/3962:
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&type->i_mutex_dir_key){++++++}, at: [<ffffffff815e16fc>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.109-ga4230be #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d8647d08 ffffffff81eb3e29 0000000000000000 0000000000000000
 0000000000000000 0000000000000001 ffffffff810b9580 ffff8801d8647d40
 ffffffff81ebf127 0000000000000000 0000000000000000 0000000000000002
Call Trace:
 [<ffffffff81eb3e29>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb3e29>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ebf127>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ebf0ba>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810b9684>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81366bc4>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81366bc4>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81366bc4>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81366bc4>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119d04d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839f9b5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3815 Comm: sshd Not tainted 4.9.109-ga4230be #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d7846000 task.stack: ffff8801d9a40000
RIP: 0033:[<0000557af6d7901b>] c [<0000557af6d7901b>] 0x557af6d7901b
RSP: 002b:00007ffd10c7b430  EFLAGS: 00000206
RAX: 0000000000000072 RBX: 0000000000000006 RCX: 0000000035c6b89e
RDX: 000000000000001e RSI: 00007ffd10c7b3f8 RDI: 0000000008000000
RBP: 0000557af7797df0 R08: 0000000000000000 R09: 000000000000001f
R10: 000000000ee0c685 R11: 000000000870f4a8 R12: 0000557af7797ee4
R13: 0000000000005a6b R14: 00007fca766aa5c5 R15: 0000557af77d77e5
FS:  00007fca768317c0(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000073d000 CR3: 00000001c314a000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/06/18 05:11 https://android.googlesource.com/kernel/common android-4.9 a4230beab30a 27c5f59f .config console log report syz C ci-android-49-kasan-gce-386
2018/08/27 19:50 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 758cd203 .config console log report ci-android-49-kasan-gce-root
2018/08/19 21:06 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/10 15:37 https://android.googlesource.com/kernel/common android-4.9 92e87041ed2d 1fb62d58 .config console log report ci-android-49-kasan-gce-root
2018/08/08 04:16 https://android.googlesource.com/kernel/common android-4.9 47b77b8d01c4 1beb8136 .config console log report ci-android-49-kasan-gce-root
2018/08/04 20:04 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 3476a2df .config console log report ci-android-49-kasan-gce-root
2018/07/19 00:17 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report ci-android-49-kasan-gce-root
2018/07/03 23:40 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 317fc8ea .config console log report ci-android-49-kasan-gce-root
2018/06/30 22:55 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 dba0b50e .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.