INFO: task jbd2/sda1-8:4404 blocked for more than 143 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8 state:D stack:25872 pid:4404 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
jbd2_journal_wait_updates+0x120/0x240 fs/jbd2/transaction.c:862
jbd2_journal_commit_transaction+0x7ad/0x6d70 fs/jbd2/commit.c:458
kjournald2+0x1d4/0x890 fs/jbd2/journal.c:209
kthread+0x2e8/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
INFO: task syz-executor.1:5120 blocked for more than 143 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:24512 pid:5120 ppid:1 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
jbd2_log_wait_commit+0x2d6/0x430 fs/jbd2/journal.c:708
jbd2_journal_stop+0x5f5/0xfd0 fs/jbd2/transaction.c:1959
__ext4_journal_stop+0xe2/0x1f0 fs/ext4/ext4_jbd2.c:133
ext4_ioctl_setflags fs/ext4/ioctl.c:670 [inline]
ext4_fileattr_set+0xdcd/0x1a50 fs/ext4/ioctl.c:1001
vfs_fileattr_set+0x7ff/0xc40 fs/ioctl.c:696
ioctl_fssetxattr fs/ioctl.c:758 [inline]
do_vfs_ioctl+0xfa8/0x1670 fs/ioctl.c:845
__do_sys_ioctl fs/ioctl.c:868 [inline]
__se_sys_ioctl fs/ioctl.c:856 [inline]
__x64_sys_ioctl+0x10c/0x210 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd03d08bee7
RSP: 002b:00007ffc53397978 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000064 RCX: 00007fd03d08bee7
RDX: 00007ffc53397a40 RSI: 0000000040086602 RDI: 0000000000000005
RBP: 00007ffc53397a40 R08: 0000000000000000 R09: 00007fd03d188640
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd03d0e6b24
R13: 00007ffc53398b40 R14: 00005555568653b8 R15: 00007ffc53399c40
INFO: task syz-executor.4:13595 blocked for more than 143 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:24328 pid:13595 ppid:1 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
wait_transaction_locked+0x1cc/0x250 fs/jbd2/transaction.c:178
add_transaction_credits+0x10f/0xb70 fs/jbd2/transaction.c:241
start_this_handle+0x3ae/0x14e0 fs/jbd2/transaction.c:422
jbd2__journal_start+0x39d/0x9d0 fs/jbd2/transaction.c:520
__ext4_journal_start_sb+0x706/0x890 fs/ext4/ext4_jbd2.c:111
__ext4_journal_start fs/ext4/ext4_jbd2.h:326 [inline]
__ext4_unlink+0x41c/0xcd0 fs/ext4/namei.c:3240
ext4_unlink+0x1e6/0x850 fs/ext4/namei.c:3299
vfs_unlink+0x355/0x930 fs/namei.c:4250
do_unlinkat+0x3df/0x670 fs/namei.c:4316
__do_sys_unlink fs/namei.c:4364 [inline]
__se_sys_unlink fs/namei.c:4362 [inline]
__x64_sys_unlink+0xca/0x110 fs/namei.c:4362
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f395148ba67
RSP: 002b:00007ffc336772c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f395148ba67
RDX: 00007ffc33677300 RSI: 00007ffc33677300 RDI: 00007ffc33677390
RBP: 00007ffc33677390 R08: 0000000000000001 R09: 00007ffc33677160
R10: 0000555556e98943 R11: 0000000000000206 R12: 00007f39514e6b24
R13: 00007ffc33678450 R14: 0000555556e98810 R15: 00007ffc33678490
INFO: task syz-executor.5:18066 blocked for more than 144 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5 state:D stack:26376 pid:18066 ppid:5112 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0xa3b/0x1350 kernel/locking/mutex.c:747
lock_rename+0x58/0x280 fs/namei.c:2995
ovl_copy_up_workdir fs/overlayfs/copy_up.c:710 [inline]
ovl_do_copy_up fs/overlayfs/copy_up.c:879 [inline]
ovl_copy_up_one+0x956/0x2cc0 fs/overlayfs/copy_up.c:1049
ovl_copy_up_flags+0x150/0x1d0 fs/overlayfs/copy_up.c:1095
ovl_fileattr_set+0xe9/0x2c0 fs/overlayfs/inode.c:774
vfs_fileattr_set+0x7ff/0xc40 fs/ioctl.c:696
ioctl_fssetxattr fs/ioctl.c:758 [inline]
do_vfs_ioctl+0xfa8/0x1670 fs/ioctl.c:845
__do_sys_ioctl fs/ioctl.c:868 [inline]
__se_sys_ioctl fs/ioctl.c:856 [inline]
__x64_sys_ioctl+0x10c/0x210 fs/ioctl.c:856
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f1b9e08c0f9
RSP: 002b:00007f1b9ed29168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f1b9e1abf80 RCX: 00007f1b9e08c0f9
RDX: 0000000020000100 RSI: 00000000401c5820 RDI: 0000000000000004
RBP: 00007f1b9e0e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc48fff92f R14: 00007f1b9ed29300 R15: 0000000000022000
INFO: task syz-executor.3:18070 blocked for more than 144 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27792 pid:18070 ppid:5116 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
rwsem_down_write_slowpath+0x3e2/0x1220 kernel/locking/rwsem.c:1178
__down_write_common kernel/locking/rwsem.c:1306 [inline]
__down_write kernel/locking/rwsem.c:1315 [inline]
down_write_nested+0x1d6/0x200 kernel/locking/rwsem.c:1690
inode_lock_nested include/linux/fs.h:793 [inline]
lock_rename+0x1e4/0x280 fs/namei.c:3012
ovl_workdir_ok fs/overlayfs/super.c:981 [inline]
ovl_get_workdir fs/overlayfs/super.c:1424 [inline]
ovl_fill_super+0x1aba/0x7270 fs/overlayfs/super.c:2000
mount_nodev+0x64/0x120 fs/super.c:1417
legacy_get_tree+0x109/0x220 fs/fs_context.c:610
vfs_get_tree+0x8d/0x350 fs/super.c:1501
do_new_mount fs/namespace.c:3042 [inline]
path_mount+0x1342/0x1e40 fs/namespace.c:3372
do_mount fs/namespace.c:3385 [inline]
__do_sys_mount fs/namespace.c:3594 [inline]
__se_sys_mount fs/namespace.c:3571 [inline]
__x64_sys_mount+0x283/0x300 fs/namespace.c:3571
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fdfe448c0f9
RSP: 002b:00007fdfe516d168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fdfe45ac050 RCX: 00007fdfe448c0f9
RDX: 00000000200002c0 RSI: 0000000020000040 RDI: 0000000000000000
RBP: 00007fdfe44e7ae9 R08: 00000000200001c0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcd0d4599f R14: 00007fdfe516d300 R15: 0000000000022000
INFO: task syz-executor.3:18071 blocked for more than 144 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:27792 pid:18071 ppid:5116 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
rwsem_down_write_slowpath+0x3e2/0x1220 kernel/locking/rwsem.c:1178
__down_write_common kernel/locking/rwsem.c:1306 [inline]
__down_write kernel/locking/rwsem.c:1315 [inline]
down_write_nested+0x1d6/0x200 kernel/locking/rwsem.c:1690
inode_lock_nested include/linux/fs.h:793 [inline]
ext4_rename+0x1924/0x26d0 fs/ext4/namei.c:3879
ext4_rename2+0x1c7/0x270 fs/ext4/namei.c:4193
vfs_rename+0xef6/0x17a0 fs/namei.c:4772
do_renameat2+0xb62/0xc90 fs/namei.c:4923
__do_sys_rename fs/namei.c:4969 [inline]
__se_sys_rename fs/namei.c:4967 [inline]
__x64_sys_rename+0x81/0xa0 fs/namei.c:4967
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fdfe448c0f9
RSP: 002b:00007fdfe514c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007fdfe45ac120 RCX: 00007fdfe448c0f9
RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000380
RBP: 00007fdfe44e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcd0d4599f R14: 00007fdfe514c300 R15: 0000000000022000
INFO: task syz-executor.2:18088 blocked for more than 144 seconds.
Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:28360 pid:18088 ppid:5124 flags:0x00000004
Call Trace:
context_switch kernel/sched/core.c:5304 [inline]
__schedule+0xcce/0x5b20 kernel/sched/core.c:6622
schedule+0xde/0x1a0 kernel/sched/core.c:6698
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
__mutex_lock_common kernel/locking/mutex.c:679 [inline]
__mutex_lock+0xa3b/0x1350 kernel/locking/mutex.c:747
lock_rename+0x58/0x280 fs/namei.c:2995
ovl_workdir_ok fs/overlayfs/super.c:981 [inline]
ovl_get_workdir fs/overlayfs/super.c:1424 [inline]
ovl_fill_super+0x1aba/0x7270 fs/overlayfs/super.c:2000
mount_nodev+0x64/0x120 fs/super.c:1417
legacy_get_tree+0x109/0x220 fs/fs_context.c:610
vfs_get_tree+0x8d/0x350 fs/super.c:1501
do_new_mount fs/namespace.c:3042 [inline]
path_mount+0x1342/0x1e40 fs/namespace.c:3372
do_mount fs/namespace.c:3385 [inline]
__do_sys_mount fs/namespace.c:3594 [inline]
__se_sys_mount fs/namespace.c:3571 [inline]
__x64_sys_mount+0x283/0x300 fs/namespace.c:3571
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f2c1e48c0f9
RSP: 002b:00007f2c1f203168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f2c1e5ac120 RCX: 00007f2c1e48c0f9
RDX: 00000000200002c0 RSI: 0000000020000040 RDI: 0000000000000000
RBP: 00007f2c1e4e7ae9 R08: 0000000020000080 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff1c91f73f R14: 00007f2c1f203300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
#0: ffffffff8c7957f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510
1 lock held by rcu_tasks_trace/13:
#0: ffffffff8c7954f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510
1 lock held by khungtaskd/28:
#0: ffffffff8c796340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 kernel/locking/lockdep.c:6495
2 locks held by getty/4751:
#0: ffff88802790c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244
#1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177
3 locks held by syz-fuzzer/5067:
#0: ffff88802890d768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046
#1: ffff888076672218 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0xd1/0x6f0 fs/readdir.c:55
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2181 [inline]
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: iterate_dir+0x45d/0x6f0 fs/readdir.c:70
3 locks held by syz-fuzzer/5106:
#0: ffff88801d089768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046
#1: ffff888076671810 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0xd1/0x6f0 fs/readdir.c:55
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2181 [inline]
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: iterate_dir+0x45d/0x6f0 fs/readdir.c:70
3 locks held by syz-fuzzer/5534:
#0: ffff88801d0885e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046
#1: ffff888076670e08 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0xd1/0x6f0 fs/readdir.c:55
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: file_accessed include/linux/fs.h:2181 [inline]
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: iterate_dir+0x45d/0x6f0 fs/readdir.c:70
2 locks held by syz-executor.1/5120:
#0: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: ioctl_setflags fs/ioctl.c:725 [inline]
#0: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: do_vfs_ioctl+0xf6d/0x1670 fs/ioctl.c:839
#1: ffff8880b4bbc030 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff8880b4bbc030 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xc40 fs/ioctl.c:681
2 locks held by kworker/u4:8/5300:
#0: ffff8880b993c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 kernel/sched/core.c:539
#1: ffff8880b9928808 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x216/0x950 kernel/sched/psi.c:964
3 locks held by syz-executor.4/13595:
#0: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: do_unlinkat+0x18c/0x670 fs/namei.c:4297
#1: ffff8880b49ad440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#1: ffff8880b49ad440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x27c/0x670 fs/namei.c:4301
#2: ffff8880b49a8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#2: ffff8880b49a8e08 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xd9/0x930 fs/namei.c:4239
5 locks held by syz-executor.5/18066:
#0: ffff88801fd12460 (sb_writers#19){.+.+}-{0:0}, at: ioctl_fssetxattr fs/ioctl.c:756 [inline]
#0: ffff88801fd12460 (sb_writers#19){.+.+}-{0:0}, at: do_vfs_ioctl+0x1168/0x1670 fs/ioctl.c:845
#1: ffff8880ad5d12f8 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#1: ffff8880ad5d12f8 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xc40 fs/ioctl.c:681
#2: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: ovl_fileattr_set+0x8e/0x2c0 fs/overlayfs/inode.c:770
#3: ffff8880ad5d16b8 (&ovl_i_lock_key[depth]){+.+.}-{3:3}, at: ovl_inode_lock_interruptible fs/overlayfs/overlayfs.h:516 [inline]
#3: ffff8880ad5d16b8 (&ovl_i_lock_key[depth]){+.+.}-{3:3}, at: ovl_copy_up_start+0x4d/0x1f0 fs/overlayfs/util.c:565
#4: ffff88814bac6748 (&type->s_vfs_rename_key){+.+.}-{3:3}, at: lock_rename+0x58/0x280 fs/namei.c:2995
4 locks held by syz-executor.3/18070:
#0: ffff8880799e20e0 (&type->s_umount_key#54/1){+.+.}-{3:3}, at: alloc_super+0x22e/0xb60 fs/super.c:228
#1: ffff88814bac6748 (&type->s_vfs_rename_key){+.+.}-{3:3}, at: lock_rename+0x58/0x280 fs/namei.c:2995
#2: ffff8880b4848400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#2: ffff8880b4848400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: lock_rename+0x1b0/0x280 fs/namei.c:3011
#3: ffff88803f346850 (&type->i_mutex_dir_key#3/5){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#3: ffff88803f346850 (&type->i_mutex_dir_key#3/5){+.+.}-{3:3}, at: lock_rename+0x1e4/0x280 fs/namei.c:3012
5 locks held by syz-executor.3/18071:
#0: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: do_renameat2+0x37f/0xc90 fs/namei.c:4859
#1: ffff8880b48e5440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#1: ffff8880b48e5440 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: lock_rename+0x229/0x280 fs/namei.c:2991
#2: ffff88803f346850 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
#2: ffff88803f346850 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_rename+0x4f9/0x17a0 fs/namei.c:4744
#3: ffff88814baca990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14e0 fs/jbd2/transaction.c:461
#4: ffff8880b4848400 (&type->i_mutex_dir_key#3/4){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#4: ffff8880b4848400 (&type->i_mutex_dir_key#3/4){+.+.}-{3:3}, at: ext4_rename+0x1924/0x26d0 fs/ext4/namei.c:3879
2 locks held by syz-executor.2/18088:
#0: ffff888038b220e0 (&type->s_umount_key#54/1){+.+.}-{3:3}, at: alloc_super+0x22e/0xb60 fs/super.c:228
#1: ffff88814bac6748 (&type->s_vfs_rename_key){+.+.}-{3:3}, at: lock_rename+0x58/0x280 fs/namei.c:2995
2 locks held by syz-executor.0/18090:
#0: ffff88814bac6460 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0xf1/0x4a0 fs/namei.c:3801
#1: ffff888082668400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: inode_lock_nested include/linux/fs.h:793 [inline]
#1: ffff888082668400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x1aa/0x4a0 fs/namei.c:3808
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106
nmi_cpu_backtrace+0x316/0x3e0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x33f/0x460 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xe94/0x11e0 kernel/hung_task.c:379
kthread+0x2e8/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 5488 Comm: kworker/u4:13 Not tainted 6.2.0-syzkaller-12998-gc0927a7a5391 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Workqueue: bat_events batadv_nc_worker
RIP: 0010:check_preemption_disabled+0x3e/0x170 lib/smp_processor_id.c:56
Code: 44 8b 25 91 97 eb 75 65 8b 1d 86 97 eb 75 81 e3 ff ff ff 7f 31 ff 89 de 0f 1f 44 00 00 85 db 74 11 0f 1f 44 00 00 44 89 e0 5b <5d> 41 5c 41 5d 41 5e c3 0f 1f 44 00 00 9c 5b 81 e3 00 02 00 00 31
RSP: 0018:ffffc900057a7b70 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 0000000000000003 RCX: ffffffff81665659
RDX: dffffc0000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffffff8aa723c0 R08: 0000000000000000 R09: ffffffff8e785717
R10: fffffbfff1cf0ae2 R11: 0000000000000000 R12: 0000000000000001
R13: ffffffff8aa72380 R14: 0000000000000001 R15: 0000000000000033
FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbeb0d1e990 CR3: 000000000c571000 CR4: 0000000000350ee0
Call Trace:
rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:121 [inline]
rcu_is_watching+0x12/0xb0 kernel/rcu/tree.c:694
rcu_read_lock_held_common kernel/rcu/update.c:108 [inline]
rcu_read_lock_sched_held+0x20/0x70 kernel/rcu/update.c:123
trace_lock_release include/trace/events/lock.h:69 [inline]
lock_release+0x5b3/0x780 kernel/locking/lockdep.c:5680
rcu_lock_release include/linux/rcupdate.h:332 [inline]
rcu_read_unlock include/linux/rcupdate.h:806 [inline]
batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
batadv_nc_worker+0x86c/0xfe0 net/batman-adv/network-coding.c:719
process_one_work+0x9bf/0x1820 kernel/workqueue.c:2390
worker_thread+0x669/0x1090 kernel/workqueue.c:2537
kthread+0x2e8/0x3a0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308