binder: 10684:10691 transaction failed 29189/-3, size 65535-0 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 10701:10710 ioctl 40046207 0 returned -16 binder_alloc: 2160: binder_alloc_buf, no vma binder: 10701:10710 transaction failed 29189/-3, size 65535-0 line 3136 INFO: task kworker/u4:4:2096 blocked for more than 140 seconds. Not tainted 4.9.141+ #23 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:4 D24840 2096 2 0x80000000 Workqueue: events_unbound fsnotify_mark_destroy_workfn ffff8801d785c740 0000000000000000 ffff8801d3b0b180 ffff8801da6797c0 ffff8801db721018 ffff8801ad9f77c0 ffffffff828075c2 0000000000000096 ffffffff83cdf6c0 ffffffff830d2c20 00000000000078e9 ffff8801db7218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] schedule_timeout+0x735/0xe20 kernel/time/timer.c:1771 [] do_wait_for_common kernel/sched/completion.c:75 [inline] [] __wait_for_common kernel/sched/completion.c:93 [inline] [] wait_for_common+0x3ef/0x5d0 kernel/sched/completion.c:101 [] wait_for_completion+0x18/0x20 kernel/sched/completion.c:122 [] __synchronize_srcu+0x254/0x3b0 kernel/rcu/srcu.c:448 [] synchronize_srcu+0x1e/0x40 kernel/rcu/srcu.c:492 [] fsnotify_mark_destroy_list+0x10f/0x390 fs/notify/mark.c:551 [] fsnotify_mark_destroy_workfn+0xe/0x10 fs/notify/mark.c:561 [] process_one_work+0x831/0x15f0 kernel/workqueue.c:2092 [] worker_thread+0xd6/0x1140 kernel/workqueue.c:2226 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1890: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/2018: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 2 locks held by kworker/u4:4/2096: #0: ("events_unbound"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 kernel/workqueue.c:2085 #1: ((reaper_work).work){+.+...}, at: [] process_one_work+0x774/0x15f0 kernel/workqueue.c:2089 1 lock held by init/8361: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 1 lock held by init/9419: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 1 lock held by init/10559: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 1 lock held by init/10561: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 1 lock held by init/10563: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 1 lock held by init/10564: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #23 ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000003 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 10725 Comm: syz-executor.2 Not tainted 4.9.141+ #23 task: ffff8801cdc397c0 task.stack: ffff8801c5bc0000 RIP: 0010:[] c [] __schedule+0x17/0x1b10 kernel/sched/core.c:3431 RSP: 0018:ffff8801c5bc7c60 EFLAGS: 00000246 RAX: 0000000000000007 RBX: 0000000000000246 RCX: 1ffff10039b87412 RDX: 0000000000000000 RSI: ffff8801cdc3a070 RDI: 0000000000000001 RBP: ffff8801c5bc7c88 R08: ffff8801cdc3a090 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: 0000000000021000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:0000000009673900 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 0000000009674194 CR3: 00000001d3b59000 CR4: 00000000001606b0 Stack: 0000000000000246c dffffc0000000000c 0000000000000000c 0000000000000000c 0000000000000000c ffff8801c5bc7ca8c ffffffff828094fbc 0000000000000246c ffff8801cdc397c0c ffff8801c5bc7dc8c ffffffff82818214c 0000000000000000c Call Trace: [] preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:3711 [] retint_kernel+0x1b/0x2d [] down_write_killable+0x44/0xc0 kernel/locking/rwsem.c:66 [] do_mprotect_pkey+0x189/0x650 mm/mprotect.c:437 [] SYSC_mprotect mm/mprotect.c:534 [inline] [] SyS_mprotect+0x2a/0x40 mm/mprotect.c:531 [] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline] [] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390 [] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137 Code: cfe ce9 ca8 cfd cff cff c0f c1f c40 c00 c66 c2e c0f c1f c84 c00 c00 c00 c00 c00 c55 c48 c89 ce5 c41 c57 c41 c56 c41 c55 c49 cc7 cc5 c00 c10 c02 c00 c41 c54 c41 c89 cfc c53 c<4c> c89 ceb c48 c83 cec c50 c40 c88 c7d ca7 ce8 cb9 c0f c3a cff c48 cba c00 c00 c00 c