INFO: task syz-executor.2:10221 blocked for more than 143 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27472 pid:10221 ppid:  9112 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10224 blocked for more than 143 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27200 pid:10224 ppid:  9112 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10226 blocked for more than 144 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27600 pid:10226 ppid: 10221 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10234 blocked for more than 144 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27200 pid:10234 ppid:  9112 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10237 blocked for more than 144 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27136 pid:10237 ppid: 10221 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10240 blocked for more than 144 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27688 pid:10240 ppid: 10226 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10245 blocked for more than 145 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27280 pid:10245 ppid: 10224 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10246 blocked for more than 145 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:28160 pid:10246 ppid: 10221 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10247 blocked for more than 145 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27552 pid:10247 ppid:  9112 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.2:10249 blocked for more than 146 seconds.
      Not tainted 5.16.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2  state:D stack:27120 pid:10249 ppid: 10226 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xa9a/0x4900 kernel/sched/core.c:6253
 schedule+0xd2/0x260 kernel/sched/core.c:6326
 rwsem_down_write_slowpath+0x634/0x1110 kernel/locking/rwsem.c:1151
 __down_write_common kernel/locking/rwsem.c:1268 [inline]
 __down_write_common kernel/locking/rwsem.c:1265 [inline]
 __down_write kernel/locking/rwsem.c:1277 [inline]
 down_write+0x135/0x150 kernel/locking/rwsem.c:1524
 namespace_lock fs/namespace.c:1458 [inline]
 copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
 create_new_namespaces+0xd6/0xb20 kernel/nsproxy.c:78
 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178
 copy_process+0x2da7/0x75a0 kernel/fork.c:2194
 kernel_clone+0xe7/0xab0 kernel/fork.c:2582
 __do_sys_clone+0xc8/0x110 kernel/fork.c:2699
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6a16492e99
RSP: 002b:00007f6a14de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f6a165a6030 RCX: 00007f6a16492e99
RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000
RBP: 00007f6a164ecff1 R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4a1375f R14: 00007f6a14de7300 R15: 0000000000022000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff8bb812a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458
2 locks held by kworker/u4:3/54:
 #0: ffff8880b9d39b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:478
 #1: ffff8880b9d279c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x173/0x490 kernel/sched/psi.c:871
2 locks held by getty/3279:
 #0: ffff88814ae80098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:252
 #1: ffffc90002b8e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcf0/0x1230 drivers/tty/n_tty.c:2113
4 locks held by kworker/0:3/9064:
 #0: ffff8880b9c39b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:478
 #1: ffff8880b9c279c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x173/0x490 kernel/sched/psi.c:871
 #2: ffff8880b9c28298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0 kernel/time/timer.c:946
 #3: ffffffff9070b0b8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x12e/0x3e0 lib/debugobjects.c:661
1 lock held by syz-executor.2/10221:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10224:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10226:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10234:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10236:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807abd72e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807abd72e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807abd72e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083d708a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083d708a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083d708a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10237:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10240:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10245:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10246:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10247:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10249:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10250:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10251:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807ae2b1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807ae2b1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807ae2b1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803d9492a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803d9492a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803d9492a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10252:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10254:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10255:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10258:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880195ae868 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880195ae868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880195ae868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803daa29a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803daa29a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803daa29a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10260:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888026cb7168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888026cb7168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888026cb7168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e4f9a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e4f9a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e4f9a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10262:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801f91d968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801f91d968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801f91d968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b0aa868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b0aa868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b0aa868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10263:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10265:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10266:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10267:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10268:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807784c2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807784c2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807784c2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a003168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a003168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a003168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10269:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807980b1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807980b1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807980b1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a28b1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a28b1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a28b1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10270:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888071174968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888071174968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888071174968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b35c8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b35c8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b35c8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10271:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10272:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888012d9a1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888012d9a1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888012d9a1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803ed398a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803ed398a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803ed398a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10276:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10280:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888084997828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888084997828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888084997828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b3f72e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b3f72e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b3f72e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10281:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10282:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10283:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807cac4868 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807cac4868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807cac4868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880910d0928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880910d0928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880910d0928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10285:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10286:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10287:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10288:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801df1e8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801df1e8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801df1e8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f9608e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f9608e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f9608e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10289:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88803833f828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88803833f828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88803833f828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a1041e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a1041e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a1041e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10290:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10291:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10292:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10293:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88803818a268 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88803818a268 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88803818a268 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b2d6828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b2d6828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b2d6828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10295:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10297:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10298:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10300:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10301:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10302:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801958f1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801958f1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801958f1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fb2d1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fb2d1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fb2d1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10303:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10305:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10307:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10310:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10312:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888079a93968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888079a93968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888079a93968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88809136e128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88809136e128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88809136e128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10313:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10315:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801e1f5228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801e1f5228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801e1f5228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803de4f828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803de4f828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803de4f828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10316:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880944e88a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880944e88a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880944e88a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b2061a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b2061a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b2061a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10317:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88803526d9a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88803526d9a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88803526d9a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e89128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e89128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e89128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10318:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807b04c8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807b04c8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807b04c8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803daa22a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803daa22a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803daa22a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10319:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880713522e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880713522e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880713522e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a4488a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a4488a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a4488a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10320:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10321:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10322:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10323:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807c7272a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807c7272a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807c7272a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a358928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a358928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a358928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10324:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10325:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10327:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888076b581a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888076b581a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888076b581a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083f0d8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083f0d8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083f0d8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10328:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802d129168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802d129168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802d129168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b0872e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b0872e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b0872e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10329:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10330:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10331:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10333:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880309bf128 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880309bf128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880309bf128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808faf4868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808faf4868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808faf4868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10334:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801ceb7268 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801ceb7268 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801ceb7268 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f82f2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f82f2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f82f2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10335:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10336:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880141f4828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880141f4828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880141f4828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a1a19e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a1a19e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a1a19e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10337:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10338:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10342:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10344:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801ef551e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801ef551e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801ef551e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e0c2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e0c2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e0c2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10343:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807e061168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807e061168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807e061168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fa0a268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fa0a268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fa0a268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10346:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10350:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10351:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10352:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10353:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10354:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801a773128 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801a773128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801a773128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e0c9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e0c9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e0c9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10355:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807f491228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807f491228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807f491228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a358228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a358228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a358228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10357:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10379:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801f0029e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801f0029e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801f0029e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b0879e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b0879e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b0879e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10382:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10383:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10385:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10387:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10389:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10390:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10391:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10393:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10396:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888077fd98a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888077fd98a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888077fd98a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f9d92a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f9d92a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f9d92a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10397:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880799c42e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880799c42e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880799c42e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b0d91a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b0d91a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b0d91a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10398:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10401:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807ac1b2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807ac1b2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807ac1b2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fb588e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fb588e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fb588e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10403:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10404:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10406:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10408:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888076e149e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888076e149e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888076e149e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b18d2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b18d2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b18d2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10409:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10410:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10413:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10414:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801dcab968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801dcab968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801dcab968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a620228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a620228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a620228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10415:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10417:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807790c2e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807790c2e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807790c2e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e1e268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e1e268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e1e268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10418:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880345bd828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880345bd828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880345bd828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a003868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a003868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a003868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10419:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10422:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10424:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10427:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10429:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10430:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10432:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10433:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10434:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10435:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10436:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888028187868 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888028187868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888028187868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a3a29a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a3a29a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a3a29a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10437:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10438:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880765538a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880765538a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880765538a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a28b8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a28b8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a28b8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10439:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802ade78a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802ade78a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802ade78a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a63e968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a63e968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a63e968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10440:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880230d89a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880230d89a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880230d89a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fbb1968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fbb1968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fbb1968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10441:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807cac4168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807cac4168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807cac4168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a1048e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a1048e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a1048e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10442:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10443:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10444:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10445:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10446:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801bcbe9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801bcbe9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801bcbe9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fabf828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fabf828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fabf828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10447:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10448:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807a7bc1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807a7bc1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807a7bc1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a1ff128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a1ff128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a1ff128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10449:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10450:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807e061868 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807e061868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807e061868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803ed9d1e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803ed9d1e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803ed9d1e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10451:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10453:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880944e71a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880944e71a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880944e71a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a4481a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a4481a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a4481a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10454:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10455:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10457:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10460:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880351b81a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880351b81a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880351b81a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803db7c928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803db7c928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803db7c928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10461:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10462:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10463:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10464:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888029d19228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888029d19228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888029d19228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b3748e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b3748e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b3748e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10466:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807747e968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807747e968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807747e968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f991228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f991228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f991228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10467:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880351b88a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880351b88a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880351b88a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f9118a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f9118a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f9118a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10468:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807a2f99e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807a2f99e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807a2f99e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f85d168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f85d168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f85d168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10469:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801ad9b2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801ad9b2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801ad9b2a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a0621a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a0621a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a0621a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10470:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10471:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10472:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10473:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10477:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10478:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10479:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880836661e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880836661e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880836661e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fb581e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fb581e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fb581e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10480:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801ae5d228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801ae5d228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801ae5d228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888089e9f128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888089e9f128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888089e9f128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10481:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10483:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10484:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10485:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10486:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10488:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10489:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10490:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802cbeb928 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802cbeb928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802cbeb928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b3aa968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b3aa968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b3aa968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10491:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10493:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10492:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880191f6968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880191f6968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880191f6968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a3a22a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a3a22a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a3a22a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10494:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888079405828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888079405828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888079405828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fabf128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fabf128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fabf128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10495:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10496:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801d692228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801d692228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801d692228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a51f9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a51f9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a51f9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10497:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10498:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10499:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10500:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10507:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801eccb228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801eccb228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801eccb228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803dac8128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803dac8128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803dac8128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10509:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802f16d168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802f16d168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802f16d168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880914a82a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880914a82a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880914a82a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10512:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10514:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10515:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10516:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10517:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10518:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10520:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10521:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10522:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10524:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10527:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10529:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10534:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880754c9128 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880754c9128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880754c9128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88807a7e41e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88807a7e41e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88807a7e41e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10536:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888026af19e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888026af19e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888026af19e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083ee1868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083ee1868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083ee1868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10538:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802aa0c968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802aa0c968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802aa0c968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b342868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b342868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b342868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10546:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802da9b2e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802da9b2e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802da9b2e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083f0d1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083f0d1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083f0d1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10547:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10548:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880360d6968 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880360d6968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880360d6968 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fb74928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fb74928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fb74928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10549:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802aa0c268 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802aa0c268 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802aa0c268 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f8b9128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f8b9128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f8b9128 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10550:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10551:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880754c9828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880754c9828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880754c9828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a620928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a620928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a620928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10554:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10555:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888029e68128 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888029e68128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888029e68128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803db7c228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803db7c228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803db7c228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10556:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10553:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10557:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888026af12e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888026af12e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888026af12e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fb2d8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fb2d8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fb2d8a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10558:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888029e68828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888029e68828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888029e68828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b35c1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b35c1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b35c1a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10559:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880785c1168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880785c1168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880785c1168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803dac8828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803dac8828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803dac8828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10561:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10562:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802d21a228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802d21a228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802d21a228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e1e968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e1e968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e1e968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10563:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802e15b8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802e15b8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802e15b8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f991928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f991928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f991928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10564:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10565:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10566:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10567:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10568:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802e15b1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802e15b1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802e15b1a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fb74228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fb74228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fb74228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10569:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888086690828 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888086690828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888086690828 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a0628a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a0628a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a0628a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10576:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10578:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10583:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880349821e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880349821e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880349821e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803d9499a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803d9499a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803d9499a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10584:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10585:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880363e79e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880363e79e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880363e79e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b176168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b176168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b176168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10586:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10587:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807aca99a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807aca99a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807aca99a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803b24d2a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803b24d2a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803b24d2a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10588:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10589:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802f7a2928 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802f7a2928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802f7a2928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803ed391a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803ed391a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803ed391a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10592:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880349828e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880349828e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880349828e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083f118e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083f118e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083f118e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10593:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880795c31e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880795c31e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880795c31e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888020db6268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888020db6268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888020db6268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10594:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880275ac9a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880275ac9a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880275ac9a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888089f1f868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888089f1f868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888089f1f868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10595:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10596:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88807ae2b8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88807ae2b8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88807ae2b8a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f82f9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f82f9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f82f9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10597:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801caf9168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801caf9168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801caf9168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083df4928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083df4928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083df4928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10598:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10599:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880829651e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880829651e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880829651e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880910d0228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880910d0228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880910d0228 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10600:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10601:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88808504d868 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88808504d868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88808504d868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880899cd968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880899cd968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880899cd968 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10602:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880851dc928 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880851dc928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880851dc928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f9111a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f9111a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f9111a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10603:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888084a15168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888084a15168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888084a15168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a2cf8e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a2cf8e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a2cf8e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10604:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88801f1db868 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88801f1db868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88801f1db868 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a2cf1e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a2cf1e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a2cf1e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10606:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88808d6bf168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88808d6bf168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88808d6bf168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808f9601e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808f9601e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808f9601e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10607:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880854192a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880854192a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880854192a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083f199a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083f199a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083f199a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10608:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10609:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880836f4128 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880836f4128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880836f4128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e4f2a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e4f2a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e4f2a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10610:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888084ca59a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888084ca59a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888084ca59a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083e89828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083e89828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083e89828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10611:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10612:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888084ca52a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888084ca52a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888084ca52a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff888083f111e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff888083f111e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff888083f111e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10613:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10614:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802eda7228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802eda7228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802eda7228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a63e268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a63e268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a63e268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10615:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10616:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880851dc228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880851dc228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880851dc228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803ed9d8e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803ed9d8e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803ed9d8e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10617:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880740611a8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880740611a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880740611a8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803d9f19e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803d9f19e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803d9f19e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10618:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88802ec6b9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88802ec6b9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88802ec6b9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803d9f12e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803d9f12e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803d9f12e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10619:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888084cdf168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888084cdf168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888084cdf168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a580828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a580828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a580828 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10620:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10621:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10622:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88808504d168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88808504d168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88808504d168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fa5c9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fa5c9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fa5c9e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10623:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880367dd9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880367dd9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880367dd9e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880916c6268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880916c6268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880916c6268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10624:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10625:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10626:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10627:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88803a34f1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88803a34f1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88803a34f1e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fbb1268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fbb1268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fbb1268 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10628:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10629:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff88806efac128 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff88806efac128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff88806efac128 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880917a6928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880917a6928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880917a6928 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10630:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10631:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10632:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10633:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10634:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10635:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10636:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10637:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10638:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10639:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888028187168 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888028187168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888028187168 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808a242868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808a242868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808a242868 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
3 locks held by syz-executor.2/10640:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff888029d19928 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff888029d19928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff888029d19928 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88803bf39168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88803bf39168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88803bf39168 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10641:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10642:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880747c6228 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880747c6228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880747c6228 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff88808fa5c2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff88808fa5c2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff88808fa5c2e8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10643:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10644:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
1 lock held by syz-executor.2/10645:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10646:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450
 #1: ffff8880861088e8 (&mm->mmap_lock#2){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:87 [inline]
 #1: ffff8880861088e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mmap kernel/fork.c:498 [inline]
 #1: ffff8880861088e8 (&mm->mmap_lock#2){++++}-{3:3}, at: dup_mm+0x12e/0x13e0 kernel/fork.c:1450
 #2: ffff8880916832a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: mmap_write_lock_nested include/linux/mmap_lock.h:78 [inline]
 #2: ffff8880916832a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mmap kernel/fork.c:507 [inline]
 #2: ffff8880916832a8 (&mm->mmap_lock/1){+.+.}-{3:3}, at: dup_mm+0x18a/0x13e0 kernel/fork.c:1450
1 lock held by syz-executor.2/10647:
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: namespace_lock fs/namespace.c:1458 [inline]
 #0: ffffffff8bcfb4d0 (namespace_sem){++++}-{3:3}, at: copy_mnt_ns+0x13d/0xae0 fs/namespace.c:3423
3 locks held by syz-executor.2/10648:
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mmap kernel/fork.c:497 [inline]
 #0: ffffffff8bc535d0 (dup_mmap_sem){++++}-{0:0}, at: dup_mm+0x108/0x13e0 kernel/fork.c:1450