INFO: task syz-executor.1:6675 blocked for more than 143 seconds. Not tainted 6.2.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:24904 pid:6675 ppid:3310 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5293 [inline] __schedule+0xb8a/0x5450 kernel/sched/core.c:6606 schedule+0xde/0x1b0 kernel/sched/core.c:6682 wb_wait_for_completion+0x182/0x240 fs/fs-writeback.c:192 __writeback_inodes_sb_nr+0x1d7/0x280 fs/fs-writeback.c:2639 try_to_writeback_inodes_sb+0x98/0xc0 fs/fs-writeback.c:2687 ext4_nonda_switch+0x1aa/0x1f0 fs/ext4/inode.c:3029 ext4_da_write_begin+0x170/0xb50 fs/ext4/inode.c:3056 generic_perform_write+0x256/0x570 mm/filemap.c:3772 ext4_buffered_write_iter+0x15b/0x460 fs/ext4/file.c:285 ext4_file_write_iter+0x8bf/0x1710 fs/ext4/file.c:700 __kernel_write_iter+0x262/0x730 fs/read_write.c:517 dump_emit_page fs/coredump.c:864 [inline] dump_user_range+0x234/0x700 fs/coredump.c:915 elf_core_dump+0x2718/0x3590 fs/binfmt_elf.c:2137 do_coredump+0x2764/0x3c50 fs/coredump.c:762 get_signal+0x1c03/0x2450 kernel/signal.c:2845 arch_do_signal_or_restart+0x79/0x5c0 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203 irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:309 exc_page_fault+0xc0/0x170 arch/x86/mm/fault.c:1578 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x0 RSP: 002b:0000000020000208 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007ff1cedabf80 RCX: 00007ff1cec8c0c9 RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 RBP: 00007ff1cece7ae9 R08: 00000000200002c0 R09: 00000000200002c0 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffaf32a39f R14: 00007ff1cfa96300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/12: #0: ffffffff8c790fb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/13: #0: ffffffff8c790cb0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/28: #0: ffffffff8c791b00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 kernel/locking/lockdep.c:6494 3 locks held by kworker/u4:6/2398: 2 locks held by getty/4748: #0: ffff88814a5c1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244 #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177 3 locks held by kworker/u4:7/5302: #0: ffff8881451e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff8881451e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff8881451e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff8881451e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff8881451e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff8881451e8138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffffc90004e4fda8 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 kernel/workqueue.c:2264 #2: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 4 locks held by kworker/u4:8/31948: #0: ffff88814b724938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88814b724938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88814b724938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88814b724938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88814b724938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88814b724938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 kernel/workqueue.c:2260 #1: ffff8880b98287c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2de/0x930 kernel/sched/psi.c:976 #2: ffff888066625058 (key#16){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:355 [inline] #2: ffff888066625058 (key#16){+...}-{2:2}, at: batadv_tt_local_purge+0x114/0x370 net/batman-adv/translation-table.c:1355 #3: ffffffff91e6d680 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x132/0x3e0 lib/debugobjects.c:665 5 locks held by syz-executor.1/3310: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 fs/namei.c:4299 #1: ffff888084a4de48 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888084a4de48 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 fs/namei.c:4303 #2: ffff88803ff9d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #2: ffff88803ff9d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xd9/0x930 fs/namei.c:4241 #3: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 #4: ffff88814b8403f0 (&sbi->s_orphan_lock){+.+.}-{3:3}, at: ext4_orphan_add+0x8df/0x1440 fs/ext4/orphan.c:148 3 locks held by syz-executor.1/6675: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ca2de48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ca2de48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b83e0e0 (&type->s_umount_key#31){++++}-{3:3}, at: try_to_writeback_inodes_sb+0x21/0xc0 fs/fs-writeback.c:2684 2 locks held by syz-executor.5/8451: #0: ffff88814b83e650 (sb_internal){.+.+}-{0:0}, at: evict+0x2ed/0x6b0 fs/inode.c:664 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.0/8486: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.4/9169: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.0/9237: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.4/9833: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.1/9849: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.1/10170: #0: ffff88814b83e650 (sb_internal){.+.+}-{0:0}, at: evict+0x2ed/0x6b0 fs/inode.c:664 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.0/10437: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 4 locks held by syz-executor.2/11291: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 fs/namei.c:4299 #1: ffff888084998400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888084998400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 fs/namei.c:4303 #2: ffff888052bd3628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #2: ffff888052bd3628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xd9/0x930 fs/namei.c:4241 #3: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11366: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e680400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e680400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.5/11372: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88808781de48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88808781de48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.1/11380: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888087818400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888087818400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 2 locks held by syz-executor.0/11381: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11385: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ff9f258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ff9f258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.0/11386: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803e504030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803e504030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.4/11387: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.5/11390: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803e501810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803e501810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.0/11406: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803c9e4a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803c9e4a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.0/11413: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11421: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888043e40e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888043e40e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.5/11422: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888043e47258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888043e47258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.0/11435: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888052b05e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888052b05e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11432: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888073b90400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888073b90400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11441: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888052b02c20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888052b02c20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11445: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888081e6f258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888081e6f258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.5/11447: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888052b03628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888052b03628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 4 locks held by syz-executor.3/11450: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 fs/namei.c:4299 #1: ffff888081e6d440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888081e6d440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 fs/namei.c:4303 #2: ffff888039a83628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #2: ffff888039a83628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xd9/0x930 fs/namei.c:4241 #3: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11564: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888083fbac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888083fbac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11565: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888083fbca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888083fbca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11566: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888083f6d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888083f6d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/11567: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888052bd5e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888052bd5e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.0/11570: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/11584: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888081d89810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888081d89810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11599: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88808499e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88808499e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11603: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888081d6d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888081d6d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.0/11608: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88808499de48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88808499de48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/11614: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888081d6b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888081d6b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.5/11622: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e599810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e599810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11647: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e685e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e685e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.5/11668: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888084afa218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888084afa218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11670: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ca2ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ca2ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/11671: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ca2a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ca2a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.5/11675: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/11682: 4 locks held by syz-executor.3/11694: 4 locks held by syz-executor.3/11698: 3 locks held by syz-executor.3/11699: 4 locks held by syz-executor.3/11704: 4 locks held by syz-executor.3/11711: 3 locks held by syz-executor.4/11899: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff8880307df258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff8880307df258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/11902: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff8880307dd440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff8880307dd440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.3/11952: 2 locks held by syz-executor.2/11954: 5 locks held by syz-executor.3/11958: 3 locks held by syz-executor.5/11970: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888076214030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888076214030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/12085: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803f8f6850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803f8f6850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/12089: 2 locks held by syz-executor.2/12095: 4 locks held by syz-executor.3/12096: 1 lock held by syz-executor.0/12101: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 3 locks held by syz-executor.5/12106: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803cafa218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803cafa218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/12110: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803cafac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803cafac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 4 locks held by syz-executor.5/12111: 2 locks held by syz-executor.1/12115: 2 locks held by syz-executor.3/12114: 4 locks held by syz-executor.4/12127: 1 lock held by syz-executor.0/12130: 2 locks held by syz-executor.3/12131: 4 locks held by syz-executor.5/12134: 4 locks held by syz-executor.1/12135: 2 locks held by syz-executor.5/12136: 2 locks held by syz-executor.5/12151: 4 locks held by syz-executor.3/12156: 3 locks held by syz-executor.4/12161: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888083f6c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888083f6c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.1/12166: 2 locks held by syz-executor.2/12222: 3 locks held by syz-executor.2/12234: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e658e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e658e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.2/12248: 2 locks held by syz-executor.2/12259: #0: ffff88814b840b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0x1af/0x690 mm/page-writeback.c:2581 #1: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 4 locks held by syz-executor.3/12358: 4 locks held by syz-executor.1/12449: 2 locks held by syz-executor.1/12453: 2 locks held by syz-executor.5/12468: 3 locks held by syz-executor.3/12491: 3 locks held by syz-executor.3/12492: 3 locks held by syz-executor.2/12495: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803fb6ac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803fb6ac20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 4 locks held by syz-executor.1/12499: 4 locks held by syz-executor.4/12507: 3 locks held by syz-executor.5/12567: 3 locks held by syz-executor.2/12578: 5 locks held by syz-executor.5/12580: 2 locks held by syz-executor.1/12609: 2 locks held by syz-executor.1/12608: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88805d1f8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88805d1f8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 2 locks held by syz-executor.5/12619: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888081e68e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888081e68e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 4 locks held by syz-executor.2/12622: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88805d1fc030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88805d1fc030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 #3: ffff88805d1fbeb8 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x707/0x18d0 fs/ext4/inode.c:644 4 locks held by syz-executor.3/12624: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888039a84030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888039a84030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 #3: ffff888039a83eb8 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x707/0x18d0 fs/ext4/inode.c:644 3 locks held by syz-executor.5/12628: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88805d1fa218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88805d1fa218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.3/12632: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88805d1fd440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88805d1fd440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.4/12635: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888039a82218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888039a82218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.1/12648: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803f8f4030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803f8f4030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 4 locks held by syz-executor.2/12775: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e658400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e658400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 #3: ffff88804e658288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x707/0x18d0 fs/ext4/inode.c:644 3 locks held by syz-executor.1/12780: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88808781a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88808781a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 4 locks held by syz-executor.3/12777: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e65ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e65ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 #3: ffff88804e65c8c0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x707/0x18d0 fs/ext4/inode.c:644 3 locks held by syz-executor.0/12798: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888084af9810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888084af9810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.5/12801: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888084aff258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888084aff258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.4/12803: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ff9ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ff9ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.4/12804: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ff9b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ff9b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.5/12807: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88805d0e8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88805d0e8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.4/12809: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888084a4b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888084a4b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 4 locks held by syz-executor.0/12816: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ca2d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ca2d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 #3: ffff88803ca2d2c8 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x707/0x18d0 fs/ext4/inode.c:644 3 locks held by syz-executor.4/12817: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88805d0ef258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88805d0ef258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 3 locks held by syz-executor.4/12818: 2 locks held by syz-executor.5/12823: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888047034a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888047034a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 3 locks held by syz-executor.5/12824: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff8880849a4030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff8880849a4030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/12832: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff8880849a7258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff8880849a7258 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 4 locks held by syz-executor.3/12840: 3 locks held by syz-executor.1/12846: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888073b96850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888073b96850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/12847: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888083c3d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888083c3d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/12848: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888073994a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888073994a38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/12862: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e59e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e59e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/12867: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88804e59b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88804e59b628 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/12876: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88808499ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88808499ca38 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.3/12885: 4 locks held by syz-executor.0/12886: 3 locks held by syz-executor.3/12889: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff888043f82c20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888043f82c20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.2/12891: 3 locks held by syz-executor.1/12899: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ff9c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ff9c030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 4 locks held by syz-executor.5/12904: 3 locks held by syz-executor.0/12909: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803ca28400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803ca28400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.4/12920: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: get_signal+0x1c03/0x2450 kernel/signal.c:2845 #1: ffff88803fb32218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff88803fb32218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 fs/ext4/file.c:279 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.3/12922: 4 locks held by syz-executor.2/12924: 3 locks held by syz-executor.5/12927: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800 #1: ffff888052b05440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888052b05440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.2/12928: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800 #1: ffff888083fbe850 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888083fbe850 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 3 locks held by syz-executor.1/12933: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3470 [inline] #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x2a25/0x2a50 fs/namei.c:3711 #1: ffff888083f6b628 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888083f6b628 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: open_last_lookups fs/namei.c:3478 [inline] #1: ffff888083f6b628 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x90f/0x2a50 fs/namei.c:3711 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.1/12934: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 fs/namei.c:4299 #1: ffff888083f6b628 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888083f6b628 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 fs/namei.c:4303 3 locks held by syz-executor.4/12935: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3470 [inline] #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x2a25/0x2a50 fs/namei.c:3711 #1: ffff888043e42218 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888043e42218 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: open_last_lookups fs/namei.c:3478 [inline] #1: ffff888043e42218 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x90f/0x2a50 fs/namei.c:3711 #2: ffff88814b8423f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x238/0x460 fs/jbd2/checkpoint.c:110 2 locks held by syz-executor.3/12940: #0: ffff8880b983b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 kernel/sched/core.c:537 #1: ffff8880b98287c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2de/0x930 kernel/sched/psi.c:976 3 locks held by syz-executor.3/12941: 2 locks held by syz-executor.3/12942: 1 lock held by syz-executor.0/12946: #0: ffff888055d82458 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline] #0: ffff888055d82458 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 arch/x86/mm/fault.c:1379 3 locks held by syz-executor.0/12947: #0: ffff8880b993b598 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 kernel/sched/core.c:537 #1: ffff8880b99287c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2de/0x930 kernel/sched/psi.c:976 #2: ffff8880258f0fa8 (&(&sig->stats_lock)->lock){....}-{2:2}, at: spin_lock include/linux/spinlock.h:350 [inline] #2: ffff8880258f0fa8 (&(&sig->stats_lock)->lock){....}-{2:2}, at: write_seqlock include/linux/seqlock.h:886 [inline] #2: ffff8880258f0fa8 (&(&sig->stats_lock)->lock){....}-{2:2}, at: __exit_signal kernel/exit.c:185 [inline] #2: ffff8880258f0fa8 (&(&sig->stats_lock)->lock){....}-{2:2}, at: release_task+0x52f/0x17c0 kernel/exit.c:255 3 locks held by syz-executor.3/12949: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3800 #1: ffff88804422de48 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff88804422de48 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3807 #2: ffff88814b842990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 fs/jbd2/transaction.c:461 2 locks held by syz-executor.0/12951: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: open_last_lookups fs/namei.c:3470 [inline] #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x2a25/0x2a50 fs/namei.c:3711 #1: ffff888081ec4a38 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #1: ffff888081ec4a38 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: open_last_lookups fs/namei.c:3478 [inline] #1: ffff888081ec4a38 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x90f/0x2a50 fs/namei.c:3711 2 locks held by syz-executor.0/12952: #0: ffff88814b83e460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x183/0x640 fs/namei.c:4299 #1: ffff888081ec4a38 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:791 [inline] #1: ffff888081ec4a38 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x270/0x640 fs/namei.c:4303 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x24/0x18a lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x333/0x3c0 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline] watchdog+0xc75/0xfc0 kernel/hung_task.c:377 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 46 Comm: kworker/u4:3 Not tainted 6.2.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: bat_events batadv_nc_worker RIP: 0010:__lock_is_held kernel/locking/lockdep.c:5409 [inline] RIP: 0010:lock_is_held_type+0x97/0x140 kernel/locking/lockdep.c:5711 Code: 00 00 4d 8d ac 24 38 0a 00 00 65 ff 05 5a 4d fc 75 85 c0 7f 12 e9 8a 00 00 00 83 c3 01 41 3b 9c 24 30 0a 00 00 7d 7d 48 63 c3 <48> 89 ee 48 8d 04 80 4d 8d 7c c5 00 4c 89 ff e8 95 fe ff ff 85 c0 RSP: 0018:ffffc90000b77b70 EFLAGS: 00000097 RAX: 0000000000000002 RBX: 0000000000000002 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff8c791a40 RDI: ffff888017fe0a60 RBP: ffffffff8c791a40 R08: 0000000000000000 R09: ffffffff8e72f557 R10: fffffbfff1ce5eaa R11: 0000000000000000 R12: ffff888017fe0000 R13: ffff888017fe0a38 R14: 00000000ffffffff R15: ffff888017fe0a60 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555557e5848 CR3: 0000000029769000 CR4: 0000000000350ee0 Call Trace: lock_is_held include/linux/lockdep.h:283 [inline] rcu_read_lock_sched_held+0x3e/0x70 kernel/rcu/update.c:125 trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0x5cf/0x810 kernel/locking/lockdep.c:5679 rcu_lock_release include/linux/rcupdate.h:330 [inline] rcu_read_unlock include/linux/rcupdate.h:797 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x86f/0xfa0 net/batman-adv/network-coding.c:719 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308