INFO: task syz-executor.1:31101 blocked for more than 140 seconds. Not tainted 4.14.115+ #64 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.1 D29056 31101 1843 0x10000004 Call Trace: schedule+0x92/0x1c0 kernel/sched/core.c:3498 schedule_timeout+0x736/0xe80 kernel/time/timer.c:1721 do_wait_for_common kernel/sched/completion.c:91 [inline] __wait_for_common kernel/sched/completion.c:112 [inline] wait_for_common+0x29c/0x470 kernel/sched/completion.c:123 __wait_rcu_gp+0x235/0x2f0 kernel/rcu/update.c:413 synchronize_sched+0x150/0x1e0 kernel/rcu/tree.c:3241 tracepoint_synchronize_unregister include/linux/tracepoint.h:80 [inline] perf_trace_event_unreg.isra.0+0xae/0x1d0 kernel/trace/trace_event_perf.c:161 perf_trace_destroy+0xba/0x100 kernel/trace/trace_event_perf.c:236 _free_event+0x293/0xaf0 kernel/events/core.c:4243 put_event+0x20/0x30 kernel/events/core.c:4329 perf_event_release_kernel+0x383/0x870 kernel/events/core.c:4430 perf_release+0x33/0x40 kernel/events/core.c:4440 __fput+0x25e/0x700 fs/file_table.c:210 task_work_run+0x118/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x13b/0x160 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:267 [inline] do_syscall_64+0x372/0x4b0 arch/x86/entry/common.c:294 Showing all locks held in the system: 2 locks held by kworker/u4:0/5: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by khungtaskd/23: #0: (tasklist_lock){.+.+}, at: [<00000000e7b17bff>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4541 2 locks held by kworker/u4:1/64: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by getty/1760: #0: (&tty->ldisc_sem){++++}, at: [<00000000ec7ca2e2>] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000d1e637c7>] n_tty_read+0x1f7/0x1700 drivers/tty/n_tty.c:2156 2 locks held by kworker/u4:5/1859: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:9/4710: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:11/4723: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:13/4746: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/11065: #0: (&mapping->i_mmap_rwsem){++++}, at: [<000000000fccf02e>] i_mmap_lock_read include/linux/fs.h:480 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<000000000fccf02e>] rmap_walk_file+0x2cc/0x3e0 mm/rmap.c:1819 1 lock held by syz-executor.5/11396: #0: (&type->s_umount_key#34){++++}, at: [<0000000000b9357d>] iterate_supers+0xd6/0x240 fs/super.c:611 1 lock held by syz-executor.1/15642: #0: (&sb->s_type->i_mutex_key#8){+.+.}, at: [<00000000ae91c47c>] inode_lock include/linux/fs.h:715 [inline] #0: (&sb->s_type->i_mutex_key#8){+.+.}, at: [<00000000ae91c47c>] __sock_release+0x86/0x2c0 net/socket.c:601 1 lock held by syz-executor.1/19162: #0: (event_mutex){+.+.}, at: [<000000009806b6bd>] perf_trace_destroy+0x23/0x100 kernel/trace/trace_event_perf.c:234 1 lock held by syz-executor.1/20908: #0: (event_mutex){+.+.}, at: [<000000009806b6bd>] perf_trace_destroy+0x23/0x100 kernel/trace/trace_event_perf.c:234 2 locks held by kworker/0:4/26247: #0: ("events"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&ns->proc_work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:2/27093: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/27631: #0: (event_mutex){+.+.}, at: [<000000009806b6bd>] perf_trace_destroy+0x23/0x100 kernel/trace/trace_event_perf.c:234 1 lock held by syz-executor.1/2158: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by kworker/u4:3/2818: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:4/2824: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:6/2827: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:7/2834: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:8/2839: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:10/2852: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:12/2854: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/0:2/10153: #0: ("events"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&ns->proc_work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:14/15559: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:15/15576: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:16/15585: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:17/15592: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:18/15596: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:19/15598: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:20/15616: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:21/15633: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:22/15636: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:23/16186: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:24/16194: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:25/16205: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:26/16207: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:27/16210: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:28/16226: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:29/16251: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/18181: #0: (&sb->s_type->i_mutex_key#8){+.+.}, at: [<00000000ae91c47c>] inode_lock include/linux/fs.h:715 [inline] #0: (&sb->s_type->i_mutex_key#8){+.+.}, at: [<00000000ae91c47c>] __sock_release+0x86/0x2c0 net/socket.c:601 2 locks held by kworker/u4:30/19438: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:31/19441: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:32/19443: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:33/19450: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:34/20973: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:35/20988: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:36/20994: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26344: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/26350: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26362: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26380: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26387: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26390: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26401: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26411: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26416: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26424: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26431: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26434: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26445: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26460: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26463: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/26464: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26478: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26480: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26503: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26511: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26522: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26536: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26538: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26542: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26560: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by kworker/u4:37/26578: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:38/26580: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26593: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/26605: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26609: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26613: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by kworker/u4:39/26618: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:40/26622: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26625: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by kworker/u4:41/26627: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26630: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26636: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26637: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26648: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by kworker/u4:42/26651: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:43/26654: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26659: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26663: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26666: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26678: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26680: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26700: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by kworker/u4:44/26704: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26707: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26711: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26716: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by kworker/u4:45/26730: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26733: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26735: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26739: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by kworker/u4:46/26742: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26743: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26747: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26751: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by kworker/u4:47/26753: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/26760: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26765: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by kworker/u4:48/26772: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by syz-executor.1/26774: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26777: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26784: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26785: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26787: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by kworker/u4:49/26790: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by kworker/u4:50/26792: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by syz-executor.1/26795: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26798: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26804: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26809: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/26812: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by kworker/u4:51/26814: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by syz-executor.1/26822: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26832: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26841: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26845: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26856: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26873: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26891: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26895: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26904: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26913: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26915: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26925: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/26928: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26943: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/26946: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26962: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26972: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26979: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26982: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/26984: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/26987: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/26994: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27005: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27012: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27025: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27028: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27034: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27036: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27049: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27053: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27066: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27068: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27080: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27084: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27085: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27094: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27097: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27104: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27109: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27115: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27124: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27133: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27151: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27154: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27161: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27165: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27169: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27172: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27174: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27175: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27183: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27187: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27192: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27206: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27208: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27210: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27216: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27219: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27225: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27228: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27238: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27245: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27247: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27249: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27258: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27259: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27264: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27276: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27291: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27292: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27294: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27295: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27299: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27305: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27307: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27315: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27320: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27327: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27332: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27338: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27341: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27350: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27357: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27359: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27362: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27363: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27366: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27367: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27374: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27382: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27383: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27386: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27389: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27394: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27397: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27407: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27409: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27412: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27414: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27424: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27432: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27437: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27440: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27442: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27444: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27455: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27458: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27464: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27470: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27476: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27484: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27486: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27495: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27499: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27502: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27506: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27519: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27522: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27524: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27529: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27535: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27538: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27540: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27545: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27546: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27552: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27558: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27561: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27566: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27570: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27574: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27577: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27579: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27593: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27601: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27605: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27615: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27617: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27627: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27633: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27636: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27639: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27640: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27642: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27651: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27655: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27657: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27669: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27672: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27674: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27675: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27682: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27683: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27691: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27695: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27702: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27705: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27713: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27721: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27725: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27737: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27744: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27746: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27752: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27757: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27764: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27771: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27775: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27789: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27798: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27804: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27806: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27810: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27826: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27828: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27830: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27834: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27833: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27840: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27843: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27844: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27848: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27851: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27860: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27862: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/27865: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27867: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27871: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27875: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/27876: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/27889: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27892: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27901: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27902: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/27908: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/27910: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/27915: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by kworker/u4:52/27918: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 1 lock held by syz-executor.1/27920: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by kworker/u4:53/27954: #0: ("events_unbound"){+.+.}, at: [<000000001b7a2efb>] process_one_work+0x6e5/0x1510 kernel/workqueue.c:2105 #1: ((&sub_info->work)){+.+.}, at: [<0000000092c53fd8>] process_one_work+0x71b/0x1510 kernel/workqueue.c:2109 2 locks held by syz-executor.1/28369: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28370: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28371: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28372: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28374: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28375: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28377: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28378: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28379: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28380: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28381: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28383: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28384: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28385: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28386: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28387: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28388: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28389: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28390: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28391: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28394: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28395: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28396: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28397: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28398: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28399: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28400: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28401: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28402: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28404: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28405: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28406: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28407: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28408: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28481: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28482: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28483: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28484: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28485: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28486: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28487: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28488: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28489: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28490: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28491: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28493: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28494: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28495: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28497: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28498: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28500: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28501: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28502: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28503: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28504: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28505: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28506: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28507: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28508: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28509: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28510: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28511: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28513: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28515: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28514: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28516: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28517: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28518: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28519: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28520: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28521: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28523: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28524: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28525: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28526: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28527: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28529: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28530: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28531: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28532: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28533: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28534: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28535: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28537: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28539: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28540: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28541: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28542: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28543: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28544: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28545: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28547: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28549: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28550: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28551: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28552: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28553: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28554: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28556: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28557: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28559: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28558: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28560: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28561: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28563: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28565: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28566: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28567: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28568: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28569: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28570: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28572: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28573: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28574: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28575: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28576: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28577: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28579: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28580: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28581: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28582: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28585: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28586: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28587: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28589: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28591: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28592: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28593: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28594: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28596: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28598: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28599: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28600: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28601: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28602: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28603: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28604: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28605: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28608: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28609: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28610: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28612: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28613: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28614: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28615: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28616: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28617: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28618: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28619: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28620: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28622: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28623: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28624: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 2 locks held by syz-executor.1/28625: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28626: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28627: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 2 locks held by syz-executor.1/28628: #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #0: ((task_exit_notifier).rwsem){++++}, at: [<00000000e5f908ae>] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier drivers/misc/uid_sys_stats.c:633 [inline] #1: (uid_lock){+.+.}, at: [<00000000372c38a1>] process_notifier+0x84/0x633 drivers/misc/uid_sys_stats.c:622 1 lock held by syz-executor.1/28629: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28632: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28633: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28634: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28635: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28636: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28638: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28639: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28640: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 1 lock held by syz-executor.1/28641: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28643: #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] i_mmap_lock_write include/linux/fs.h:470 [inline] #0: (&mapping->i_mmap_rwsem){++++}, at: [<0000000076587e66>] unlink_file_vma+0x6e/0xa0 mm/mmap.c:158 1 lock held by syz-executor.1/28644: #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] lock_anon_vma_root mm/rmap.c:238 [inline] #0: (&anon_vma->rwsem){++++}, at: [<000000009378deea>] unlink_anon_vmas+0x175/0x7d0 mm/rmap.c:388 2 locks held by syz-executor.1/28646: