binder: 17431:17489 unknown command 1074062069
binder: 17431:17489 ioctl c0306201 20012000 returned -22
INFO: task kworker/1:0:17 blocked for more than 120 seconds.
Not tainted 4.16.0-rc3+ #242
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:0 D23520 17 2 0x80000000
Workqueue: events proc_cleanup_work
Call Trace:
context_switch kernel/sched/core.c:2862 [inline]
__schedule+0x8fb/0x1ec0 kernel/sched/core.c:3440
schedule+0xf5/0x430 kernel/sched/core.c:3499
schedule_timeout+0x1a3/0x230 kernel/time/timer.c:1777
do_wait_for_common kernel/sched/completion.c:86 [inline]
__wait_for_common kernel/sched/completion.c:107 [inline]
wait_for_common kernel/sched/completion.c:118 [inline]
wait_for_completion+0x415/0x770 kernel/sched/completion.c:139
__wait_rcu_gp+0x221/0x340 kernel/rcu/update.c:414
synchronize_sched.part.64+0xac/0x100 kernel/rcu/tree.c:3212
synchronize_sched+0x76/0xf0 kernel/rcu/tree.c:3213
synchronize_rcu include/linux/rcupdate.h:94 [inline]
kern_unmount+0x57/0xd0 fs/namespace.c:3309
pid_ns_release_proc+0x31/0x40 fs/proc/root.c:232
proc_cleanup_work+0x19/0x20 kernel/pid_namespace.c:80
process_one_work+0xc47/0x1bb0 kernel/workqueue.c:2113
worker_thread+0x223/0x1990 kernel/workqueue.c:2247
kthread+0x33c/0x400 kernel/kthread.c:238
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406
Showing all locks held in the system:
2 locks held by kworker/1:0/17:
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
2 locks held by kworker/1:1/24:
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
6 locks held by kworker/u4:3/88:
#0: ((wq_completion)"writeback"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"writeback"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"writeback"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"writeback"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&(&wb->dwork)->work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
#2: (&type->s_umount_key#42){++++}, at: [<00000000a4d7d525>] trylock_super+0x20/0x100 fs/super.c:395
#3: (&sbi->s_journal_flag_rwsem){.+.+}, at: [<00000000e35c27c8>] do_writepages+0xff/0x170 mm/page-writeback.c:2340
#4: (jbd2_handle){++++}, at: [<00000000400b1ef7>] start_this_handle+0x488/0x1080 fs/jbd2/transaction.c:385
#5: (&ei->i_data_sem){++++}, at: [<0000000023860fc6>] ext4_map_blocks+0x377/0x1830 fs/ext4/inode.c:629
2 locks held by khungtaskd/799:
#0: (rcu_read_lock){....}, at: [<000000003045c308>] check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline]
#0: (rcu_read_lock){....}, at: [<000000003045c308>] watchdog+0x1c5/0xd60 kernel/hung_task.c:249
#1: (tasklist_lock){.+.+}, at: [<000000000dbb87f1>] debug_show_all_locks+0xd3/0x3d0 kernel/locking/lockdep.c:4470
2 locks held by kworker/1:2/1782:
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
2 locks held by getty/4207:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by getty/4208:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by getty/4209:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by getty/4210:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by getty/4211:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by getty/4212:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by getty/4213:
#0: (&tty->ldisc_sem){++++}, at: [<00000000e0ea9c53>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
#1: (&ldata->atomic_read_lock){+.+.}, at: [<000000006650b021>] n_tty_read+0x2ef/0x1a00 drivers/tty/n_tty.c:2131
2 locks held by kworker/1:3/5652:
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
1 lock held by syz-executor3/17446:
#0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000fc32d5f3>] lo_ioctl+0x8b/0x1b70 drivers/block/loop.c:1355
1 lock held by syz-executor1/17420:
#0: (event_mutex){+.+.}, at: [<000000008febbd05>] perf_trace_destroy+0x28/0x100 kernel/trace/trace_event_perf.c:234
3 locks held by syz-executor2/17449:
#0: (&sig->cred_guard_mutex){+.+.}, at: [<00000000f26cc1b0>] SYSC_perf_event_open+0x12ca/0x2e00 kernel/events/core.c:9977
#1: (&pmus_srcu){....}, at: [<000000004d7a975f>] perf_event_alloc+0xf55/0x2b00 kernel/events/core.c:9538
#2: (event_mutex){+.+.}, at: [<0000000046a0db26>] perf_trace_init+0x58/0xab0 kernel/trace/trace_event_perf.c:216
3 locks held by syz-executor7/17432:
#0: (&sig->cred_guard_mutex){+.+.}, at: [<00000000f26cc1b0>] SYSC_perf_event_open+0x12ca/0x2e00 kernel/events/core.c:9977
#1: (&pmus_srcu){....}, at: [<000000004d7a975f>] perf_event_alloc+0xf55/0x2b00 kernel/events/core.c:9538
#2: (event_mutex){+.+.}, at: [<0000000046a0db26>] perf_trace_init+0x58/0xab0 kernel/trace/trace_event_perf.c:216
3 locks held by syz-executor6/17447:
#0: (&sig->cred_guard_mutex){+.+.}, at: [<00000000f26cc1b0>] SYSC_perf_event_open+0x12ca/0x2e00 kernel/events/core.c:9977
#1: (&pmus_srcu){....}, at: [<000000004d7a975f>] perf_event_alloc+0xf55/0x2b00 kernel/events/core.c:9538
#2: (event_mutex){+.+.}, at: [<0000000046a0db26>] perf_trace_init+0x58/0xab0 kernel/trace/trace_event_perf.c:216
3 locks held by syz-executor0/17438:
#0: (&sig->cred_guard_mutex){+.+.}, at: [<00000000f26cc1b0>] SYSC_perf_event_open+0x12ca/0x2e00 kernel/events/core.c:9977
#1: (&pmus_srcu){....}, at: [<000000004d7a975f>] perf_event_alloc+0xf55/0x2b00 kernel/events/core.c:9538
#2: (event_mutex){+.+.}, at: [<0000000046a0db26>] perf_trace_init+0x58/0xab0 kernel/trace/trace_event_perf.c:216
2 locks held by kworker/1:4/17479:
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
2 locks held by kworker/1:5/17485:
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] work_static include/linux/workqueue.h:198 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_data kernel/workqueue.c:619 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline]
#0: ((wq_completion)"events"){+.+.}, at: [<00000000fa7c1bab>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084
#1: ((work_completion)(&ns->proc_work)){+.+.}, at: [<000000008487dcd6>] process_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088
3 locks held by syz-executor5/17491:
#0: (&sig->cred_guard_mutex){+.+.}, at: [<00000000f26cc1b0>] SYSC_perf_event_open+0x12ca/0x2e00 kernel/events/core.c:9977
#1: (&pmus_srcu){....}, at: [<000000004d7a975f>] perf_event_alloc+0xf55/0x2b00 kernel/events/core.c:9538
#2: (event_mutex){+.+.}, at: [<0000000046a0db26>] perf_trace_init+0x58/0xab0 kernel/trace/trace_event_perf.c:216
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 799 Comm: khungtaskd Not tainted 4.16.0-rc3+ #242
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x194/0x24d lib/dump_stack.c:53
nmi_cpu_backtrace+0x1d2/0x210 lib/nmi_backtrace.c:103
nmi_trigger_cpumask_backtrace+0x122/0x180 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline]
check_hung_task kernel/hung_task.c:132 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline]
watchdog+0x90c/0xd60 kernel/hung_task.c:249
kthread+0x33c/0x400 kernel/kthread.c:238
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 17423 Comm: syz-executor3 Not tainted 4.16.0-rc3+ #242
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x50 kernel/kcov.c:106
RSP: 0018:ffff8801b320fbc8 EFLAGS: 00000246
RAX: 0000000000010000 RBX: dffffc0000000000 RCX: ffffffff839aae6b
RDX: 000000000000ffff RSI: ffffc9000294b000 RDI: ffff8801c5a11ca0
RBP: ffff8801b320fbc8 R08: ffffffff86f42980 R09: 1ffff10036641f2c
R10: ffff8801b320f928 R11: 0000000000000001 R12: ffff8801c5a11780
R13: ffff8801d4547240 R14: ffff8801c5a30840 R15: ffff8801d4547390
FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f77eab40
CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000008452798 CR3: 00000001bba49001 CR4: 00000000001606f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
loop_set_fd drivers/block/loop.c:885 [inline]
lo_ioctl+0x5cb/0x1b70 drivers/block/loop.c:1358
lo_compat_ioctl+0xab/0x140 drivers/block/loop.c:1556
compat_blkdev_ioctl+0x3ae/0x1840 block/compat_ioctl.c:406
C_SYSC_ioctl fs/compat_ioctl.c:1461 [inline]
compat_SyS_ioctl+0x151/0x2a30 fs/compat_ioctl.c:1407
do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392
entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7feec99
RSP: 002b:00000000f77ea09c EFLAGS: 00000286 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000004c00
RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: fc f8 90 7e 81 e2 00 01 1f 00 48 8b 4d 08 75 2b 8b 90 b8 12 00 00 83 fa 02 75 20 48 8b b0 c0 12 00 00 8b 80 bc 12 00 00 48 8b 16 <48> 83 c2 01 48 39 d0 76 07 48 89 0c d6 48 89 16 5d c3 0f 1f 00