================================= [ INFO: inconsistent lock state ] 4.9.141+ #23 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-W} usage. kswapd0/33 [HC0[0]:SC0[0]:HE1:SE1] takes: (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] inode_lock include/linux/fs.h:766 [inline] (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] shmem_fallocate+0x13c/0xb10 mm/shmem.c:2676 mark_held_locks+0xc7/0x130 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18e/0x2a0 kernel/locking/lockdep.c:2897 __alloc_pages_nodemask+0x14a/0x1bd0 mm/page_alloc.c:3804 __alloc_pages include/linux/gfp.h:433 [inline] __alloc_pages_node include/linux/gfp.h:446 [inline] alloc_pages_node include/linux/gfp.h:460 [inline] shmem_alloc_page mm/shmem.c:1420 [inline] shmem_alloc_and_acct_page mm/shmem.c:1450 [inline] shmem_getpage_gfp+0xc7c/0x18f0 mm/shmem.c:1724 shmem_getpage mm/shmem.c:123 [inline] shmem_write_begin+0xf4/0x1a0 mm/shmem.c:2205 generic_perform_write+0x28a/0x500 mm/filemap.c:2753 __generic_file_write_iter+0x352/0x540 mm/filemap.c:2878 generic_file_write_iter+0x37a/0x620 mm/filemap.c:2906 new_sync_write fs/read_write.c:496 [inline] __vfs_write+0x3d7/0x580 fs/read_write.c:509 vfs_write+0x187/0x520 fs/read_write.c:557 SYSC_write fs/read_write.c:604 [inline] SyS_write+0xd9/0x1c0 fs/read_write.c:596 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb irq event stamp: 455857 hardirqs last enabled at (455857): [] __mutex_trylock_slowpath kernel/locking/mutex.c:885 [inline] hardirqs last enabled at (455857): [] mutex_trylock+0x258/0x3e0 kernel/locking/mutex.c:908 hardirqs last disabled at (455856): [] __mutex_trylock_slowpath kernel/locking/mutex.c:873 [inline] hardirqs last disabled at (455856): [] mutex_trylock+0xaf/0x3e0 kernel/locking/mutex.c:908 softirqs last enabled at (455264): [] __do_softirq+0x46d/0x964 kernel/softirq.c:314 softirqs last disabled at (455257): [] invoke_softirq kernel/softirq.c:368 [inline] softirqs last disabled at (455257): [] irq_exit+0x11c/0x150 kernel/softirq.c:409 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&sb->s_type->i_mutex_key#10); lock(&sb->s_type->i_mutex_key#10); *** DEADLOCK *** 2 locks held by kswapd0/33: #0: (shrinker_rwsem){++++..}, at: [] shrink_slab.part.8+0xb2/0xa00 mm/vmscan.c:471 #1: (ashmem_mutex){+.+.+.}, at: [] ashmem_shrink_scan+0x55/0x4c0 drivers/staging/android/ashmem.c:455 stack backtrace: CPU: 1 PID: 33 Comm: kswapd0 Not tainted 4.9.141+ #23 ffff8801d842f380 ffffffff81b42e79 ffff8801d8420000 ffffffff83cacb10 ffff8801d8420900 ffff8801d8420920 ffffffff84244d40 ffff8801d842f3f8 ffffffff81400780 0000000000000000 ffffffff00000001 0000000000000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_usage_bug.cold.40+0x44e/0x57e kernel/locking/lockdep.c:2387 [] valid_state kernel/locking/lockdep.c:2400 [inline] [] mark_lock_irq kernel/locking/lockdep.c:2602 [inline] [] mark_lock+0x2f2/0x1290 kernel/locking/lockdep.c:3065 [] mark_irqflags kernel/locking/lockdep.c:2958 [inline] [] __lock_acquire+0x632/0x4a10 kernel/locking/lockdep.c:3302 [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] down_write+0x41/0xa0 kernel/locking/rwsem.c:52 [] inode_lock include/linux/fs.h:766 [inline] [] shmem_fallocate+0x13c/0xb10 mm/shmem.c:2676 [] ashmem_shrink_scan+0x1b9/0x4c0 drivers/staging/android/ashmem.c:462 [] do_shrink_slab mm/vmscan.c:398 [inline] [] shrink_slab.part.8+0x3c6/0xa00 mm/vmscan.c:501 [] shrink_slab mm/vmscan.c:465 [inline] [] shrink_node+0x1ed/0x740 mm/vmscan.c:2602 [] kswapd_shrink_node mm/vmscan.c:3202 [inline] [] balance_pgdat mm/vmscan.c:3319 [inline] [] kswapd+0x7e9/0x13b0 mm/vmscan.c:3512 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! : renamed from eql lowmemorykiller: Killing 'syz-executor.2' (27806) (tgid 27806), adj 1000, to free 52212kB on behalf of 'kswapd0' (33) because cache 9804kB is below limit 65536kB for oom_score_adj 12 Free memory is 19908kB above reserved lowmemorykiller: Killing 'syz-executor.2' (27806) (tgid 27806), adj 1000, to free 52212kB on behalf of 'syz-executor.2' (11342) because cache 9804kB is below limit 65536kB for oom_score_adj 12 Free memory is 19908kB above reserved lowmemorykiller: Killing 'syz-executor.2' (16696) (tgid 16696), adj 1000, to free 52208kB on behalf of 'syz-executor.2' (11342) because cache 9704kB is below limit 65536kB for oom_score_adj 12 Free memory is 19908kB above reserved lowmemorykiller: Killing 'syz-executor.2' (16783) (tgid 16783), adj 1000, to free 52208kB on behalf of 'syz-executor.2' (11342) because cache 9704kB is below limit 65536kB for oom_score_adj 12 Free memory is 36096kB above reserved lowmemorykiller: Killing 'syz-executor.2' (16863) (tgid 16863), adj 1000, to free 52208kB on behalf of 'syz-executor.2' (11342) because cache 9604kB is below limit 65536kB for oom_score_adj 12 Free memory is 44648kB above reserved lowmemorykiller: Killing 'syz-executor.2' (8332) (tgid 8332), adj 1000, to free 52208kB on behalf of 'syz-executor.2' (11342) because cache 9604kB is below limit 65536kB for oom_score_adj 12 Free memory is 59748kB above reserved : renamed from eql : renamed from eql audit: type=1400 audit(1573832459.725:139): avc: denied { validate_trans } for pid=11368 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 lowmemorykiller: Killing 'syz-executor.2' (8397) (tgid 8397), adj 1000, to free 52208kB on behalf of 'syz-executor.4' (11533) because cache 13524kB is below limit 65536kB for oom_score_adj 12 Free memory is 18660kB above reserved lowmemorykiller: Killing 'syz-executor.2' (8397) (tgid 8397), adj 1000, to free 52208kB on behalf of 'syz-executor.3' (11507) because cache 13524kB is below limit 16384kB for oom_score_adj 6 Free memory is 14440kB above reserved lowmemorykiller: Killing 'syz-executor.2' (26229) (tgid 26229), adj 1000, to free 52204kB on behalf of 'syz-executor.5' (11522) because cache 13524kB is below limit 65536kB for oom_score_adj 12 Free memory is 23868kB above reserved lowmemorykiller: Killing 'syz-executor.2' (26288) (tgid 26288), adj 1000, to free 52204kB on behalf of 'syz-executor.5' (11522) because cache 13524kB is below limit 65536kB for oom_score_adj 12 Free memory is 23868kB above reserved lowmemorykiller: Killing 'syz-executor.2' (7858) (tgid 7858), adj 1000, to free 52196kB on behalf of 'syz-executor.5' (11522) because cache 13524kB is below limit 65536kB for oom_score_adj 12 Free memory is 26644kB above reserved lowmemorykiller: Killing 'syz-executor.2' (26337) (tgid 26337), adj 1000, to free 52196kB on behalf of 'syz-executor.5' (11522) because cache 13524kB is below limit 65536kB for oom_score_adj 12 Free memory is 56040kB above reserved lowmemorykiller: Killing 'syz-executor.2' (29023) (tgid 29023), adj 1000, to free 52196kB on behalf of 'syz-executor.5' (11522) because cache 13524kB is below limit 65536kB for oom_score_adj 12 Free memory is 65464kB above reserved lowmemorykiller: Killing 'syz-executor.2' (7858) (tgid 7858), adj 1000, to free 52200kB on behalf of 'syz-executor.3' (11507) because cache 13524kB is below limit 16384kB for oom_score_adj 6 Free memory is 14440kB above reserved lowmemorykiller: Killing 'syz-executor.2' (8278) (tgid 8278), adj 1000, to free 52196kB on behalf of 'kswapd0' (33) because cache 13420kB is below limit 16384kB for oom_score_adj 6 Free memory is -1000kB above reserved lowmemorykiller: Killing 'syz-executor.2' (8278) (tgid 8278), adj 1000, to free 52196kB on behalf of 'syz-executor.3' (2063) because cache 13420kB is below limit 16384kB for oom_score_adj 6 Free memory is -1000kB above reserved lowmemorykiller: Killing 'syz-executor.2' (24519) (tgid 24519), adj 1000, to free 52192kB on behalf of 'syz-executor.3' (2063) because cache 13420kB is below limit 16384kB for oom_score_adj 6 Free memory is 10376kB above reserved lowmemorykiller: Killing 'syz-executor.2' (11544) (tgid 11544), adj 1000, to free 52192kB on behalf of 'syz-executor.3' (2063) because cache 13420kB is below limit 65536kB for oom_score_adj 12 Free memory is 18160kB above reserved lowmemorykiller: Killing 'syz-executor.2' (3583) (tgid 3583), adj 1000, to free 52188kB on behalf of 'syz-executor.3' (2063) because cache 13420kB is below limit 65536kB for oom_score_adj 12 Free memory is 26340kB above reserved lowmemorykiller: Killing 'syz-executor.2' (3648) (tgid 3648), adj 1000, to free 52188kB on behalf of 'syz-executor.3' (2063) because cache 13220kB is below limit 65536kB for oom_score_adj 12 Free memory is 59360kB above reserved lowmemorykiller: Killing 'syz-executor.0' (11564) (tgid 11564), adj 1000, to free 52200kB on behalf of 'syz-executor.3' (11628) because cache 13276kB is below limit 16384kB for oom_score_adj 6 Free memory is -3568kB above reserved lowmemorykiller: Killing 'syz-executor.0' (11564) (tgid 11564), adj 1000, to free 52200kB on behalf of 'kswapd0' (33) because cache 13276kB is below limit 16384kB for oom_score_adj 6 Free memory is -3568kB above reserved lowmemorykiller: Killing 'syz-executor.2' (11585) (tgid 11585), adj 1000, to free 52192kB on behalf of 'syz-executor.1' (11624) because cache 13276kB is below limit 16384kB for oom_score_adj 6 Free memory is -3568kB above reserved lowmemorykiller: Killing 'syz-executor.2' (19482) (tgid 19482), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 13276kB is below limit 16384kB for oom_score_adj 6 Free memory is -3568kB above reserved lowmemorykiller: Killing 'syz-executor.2' (8025) (tgid 8025), adj 1000, to free 52188kB on behalf of 'syz-executor.1' (11624) because cache 13276kB is below limit 16384kB for oom_score_adj 6 Free memory is -868kB above reserved lowmemorykiller: Killing 'syz-executor.2' (19554) (tgid 19554), adj 1000, to free 52188kB on behalf of 'syz-executor.1' (11624) because cache 13276kB is below limit 65536kB for oom_score_adj 12 Free memory is 19120kB above reserved lowmemorykiller: Killing 'syz-executor.2' (19579) (tgid 19579), adj 1000, to free 52188kB on behalf of 'syz-executor.1' (11624) because cache 13276kB is below limit 65536kB for oom_score_adj 12 Free memory is 38920kB above reserved lowmemorykiller: Killing 'syz-executor.2' (19949) (tgid 19949), adj 1000, to free 52188kB on behalf of 'syz-executor.1' (11624) because cache 13176kB is below limit 65536kB for oom_score_adj 12 Free memory is 63340kB above reserved lowmemorykiller: Killing 'syz-executor.2' (19985) (tgid 19985), adj 1000, to free 52188kB on behalf of 'syz-executor.1' (11624) because cache 13176kB is below limit 65536kB for oom_score_adj 12 Free memory is 62844kB above reserved lowmemorykiller: Killing 'syz-executor.2' (24252) (tgid 24252), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 14352kB is below limit 16384kB for oom_score_adj 6 Free memory is -6808kB above reserved lowmemorykiller: Killing 'syz-executor.2' (24280) (tgid 24280), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 14352kB is below limit 16384kB for oom_score_adj 6 Free memory is -2600kB above reserved lowmemorykiller: Killing 'syz-executor.2' (24330) (tgid 24330), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 14648kB is below limit 16384kB for oom_score_adj 6 Free memory is 8384kB above reserved lowmemorykiller: Killing 'syz-executor.2' (24533) (tgid 24533), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 14648kB is below limit 65536kB for oom_score_adj 12 Free memory is 30584kB above reserved lowmemorykiller: Killing 'syz-executor.2' (24579) (tgid 24579), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 14648kB is below limit 65536kB for oom_score_adj 12 Free memory is 43992kB above reserved lowmemorykiller: Killing 'syz-executor.2' (31044) (tgid 31044), adj 1000, to free 52188kB on behalf of 'kswapd0' (33) because cache 14648kB is below limit 65536kB for oom_score_adj 12 Free memory is 65240kB above reserved