binder: undelivered TRANSACTION_ERROR: 29189 binder: 4195:4197 transaction failed 29189/-22, size 40-8 line 2856 binder: 4192:4196 transaction failed 29189/-22, size 40-8 line 2856 binder: 4198:4203 transaction failed 29189/-22, size 40-8 line 2856 binder: 4201:4202 transaction failed 29189/-22, size 40-8 line 2856 INFO: task kworker/u4:0:6 blocked for more than 120 seconds. binder: undelivered TRANSACTION_ERROR: 29189 Not tainted 4.17.0-rc3+ #33 binder: undelivered TRANSACTION_ERROR: 29189 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:0 D20216 6 2 0x80000000 Workqueue: events_unbound fsnotify_mark_destroy_workfn binder: 4206:4209 transaction failed 29189/-22, size 40-8 line 2856 Call Trace: context_switch kernel/sched/core.c:2848 [inline] __schedule+0x801/0x1e30 kernel/sched/core.c:3490 binder: undelivered TRANSACTION_ERROR: 29189 binder: 4211:4212 transaction failed 29189/-22, size 40-8 line 2856 schedule+0xef/0x430 kernel/sched/core.c:3549 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 schedule_timeout+0x1b5/0x240 kernel/time/timer.c:1777 binder: 4213:4214 transaction failed 29189/-22, size 40-8 line 2856 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x3e7/0x870 kernel/sched/completion.c:136 binder: 4216:4221 transaction failed 29189/-22, size 40-8 line 2856 binder: 4219:4222 transaction failed 29189/-22, size 40-8 line 2856 __synchronize_srcu+0x189/0x240 kernel/rcu/srcutree.c:924 binder: 4220:4223 transaction failed 29189/-22, size 40-8 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 synchronize_srcu+0x408/0x54f kernel/rcu/srcutree.c:1002 fsnotify_mark_destroy_workfn+0x1aa/0x530 fs/notify/mark.c:759 binder: undelivered TRANSACTION_ERROR: 29189 process_one_work+0xc1e/0x1b50 kernel/workqueue.c:2145 binder: 4205:4208 transaction failed 29189/-22, size 40-8 line 2856 binder: 4225:4230 transaction failed 29189/-22, size 40-8 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 worker_thread+0x1cc/0x1440 kernel/workqueue.c:2279 binder: 4231:4233 transaction failed 29189/-22, size 40-8 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 binder: 4234:4236 transaction failed 29189/-22, size 40-8 line 2856 binder: 4237:4239 transaction failed 29189/-22, size 40-8 line 2856 kthread+0x345/0x410 kernel/kthread.c:238 binder: undelivered TRANSACTION_ERROR: 29189 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Showing all locks held in the system: binder: 4241:4243 transaction failed 29189/-22, size 40-8 line 2856 2 locks held by kworker/u4:0/6: #0: 0000000005569108 binder: 4242:4244 transaction failed 29189/-22, size 40-8 line 2856 ((wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] ((wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] ((wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] ((wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:57 [inline] ((wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] ((wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xaef/0x1b50 kernel/workqueue.c:2116 #1: 000000000161af67 ((reaper_work).work){+.+.}, at: process_one_work+0xb46/0x1b50 kernel/workqueue.c:2120 2 locks held by kworker/u4:1/22: #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:57 [inline] #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 0000000005569108 ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xaef/0x1b50 kernel/workqueue.c:2116 #1: 0000000007f93204 (connector_reaper_work){+.+.}, at: process_one_work+0xb46/0x1b50 kernel/workqueue.c:2120 2 locks held by khungtaskd/892: #0: 00000000f35cb1ea (rcu_read_lock){....}, at: check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline] #0: 00000000f35cb1ea (rcu_read_lock){....}, at: watchdog+0x1ff/0xf60 kernel/hung_task.c:249 #1: 000000009b7bef26 (tasklist_lock){.+.+}, at: debug_show_all_locks+0xde/0x34a kernel/locking/lockdep.c:4470 2 locks held by getty/4475: #0: 00000000d7153641 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000fa779fd9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4476: #0: 000000006304357c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000008162028f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4477: #0: 000000005384c202 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000001aaa777e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4478: #0: 00000000ecb01425 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000007784432 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4479: #0: 00000000b0530bcf (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000a62c1b59 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4480: #0: 00000000567b2950 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000007a029577 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4481: #0: 000000003592fa26 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000b22de156 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 892 Comm: khungtaskd Not tainted 4.17.0-rc3+ #33 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 binder: undelivered TRANSACTION_ERROR: 29189 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 nmi_cpu_backtrace.cold.4+0x19/0xce lib/nmi_backtrace.c:103 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 binder: 4246:4247 transaction failed 29189/-22, size 40-8 line 2856 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_task kernel/hung_task.c:132 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline] watchdog+0xc10/0xf60 kernel/hung_task.c:249 binder: 4250:4251 transaction failed 29189/-22, size 40-8 line 2856 kthread+0x345/0x410 kernel/kthread.c:238 binder: 4252:4254 transaction failed 29189/-22, size 40-8 line 2856 binder: 4253:4255 transaction failed 29189/-22, size 40-8 line 2856 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Sending NMI from CPU 1 to CPUs 0: binder: 4227:4258 transaction failed 29189/-22, size 40-8 line 2856 NMI backtrace for cpu 0 CPU: 0 PID: 4258 Comm: syz-executor6 Not tainted 4.17.0-rc3+ #33 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rq_clock_task kernel/sched/sched.h:976 [inline] RIP: 0010:cfs_rq_clock_task kernel/sched/fair.c:4577 [inline] RIP: 0010:update_load_avg+0x236/0x2570 kernel/sched/fair.c:3797 RSP: 0018:ffff8801dae07478 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff8801ca8dd500 RCX: 0000000000000000 RDX: 1ffff1003b5c5a1b RSI: ffff8801dae2c698 RDI: ffff8801dae2d0d8 RBP: ffff8801dae07990 R08: 0000000000000000 R09: ffffed003b5c46c2 R10: 0000000000000003 R11: 0000000000000001 R12: ffff8801b0c3c780 R13: ffff8801dae07968 R14: ffff8801dae2c680 R15: ffff8801b0c3c780 FS: 00007ffbe82a7700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000204edf8a CR3: 00000001d6d6d000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: entity_tick kernel/sched/fair.c:4475 [inline] task_tick_fair+0xeb/0x320 kernel/sched/fair.c:9948 scheduler_tick+0x183/0x420 kernel/sched/core.c:3073 update_process_times+0x51/0x70 kernel/time/timer.c:1641 tick_sched_handle+0x9f/0x180 kernel/time/tick-sched.c:164 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1274 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0x3e3/0x10a0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x2f3/0x750 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline] smp_apic_timer_interrupt+0x15d/0x710 arch/x86/kernel/apic/apic.c:1050 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline] RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1678 [inline] RIP: 0010:vprintk_emit+0xbd0/0xdd0 kernel/printk/printk.c:1906 RSP: 0018:ffff8801a58868a0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8801b0c3c700 RBX: 0000000000000200 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8160be97 RDI: 0000000000000293 RBP: ffff8801a5886a30 R08: ffff8801b0c3c700 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 1ffffffff11a316d R13: 0000000000000043 R14: ffffed0034b10d31 R15: ffffffff8a6d3360 vprintk_default+0x28/0x30 kernel/printk/printk.c:1947 vprintk_func+0x7a/0xe7 kernel/printk/printk_safe.c:379 printk+0x9e/0xba kernel/printk/printk.c:1980 binder_transaction.cold.75+0xcaf/0x1b11 drivers/android/binder.c:3264 binder_thread_write+0x858/0x2c30 drivers/android/binder.c:3532 binder_ioctl_write_read.isra.41+0x2be/0xaf0 drivers/android/binder.c:4459 binder_ioctl+0xcbe/0x13fd drivers/android/binder.c:4599 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x1cf/0x16a0 fs/ioctl.c:684 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701 __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455979 RSP: 002b:00007ffbe82a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ffbe82a76d4 RCX: 0000000000455979 RDX: 0000000020008000 RSI: 00000000c0306201 RDI: 0000000000000003 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 000000000000019c R14: 00000000006f6740 R15: 0000000000000000 Code: 07 85 ff 0f 85 4e 12 00 00 49 8d be 58 0a 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 39 15 00 00 <48> 8d bb c0 01 00 00 49 8b 8e 58 0a 00 00 48 b8 00 00 00 00 00