binder: undelivered TRANSACTION_ERROR: 29189 binder: 2637:2641 ioctl 40046207 0 returned -13 binder: 2637:2641 transaction failed 29189/-22, size 104-24 line 3014 binder: undelivered TRANSACTION_ERROR: 29189 ================================= [ INFO: inconsistent lock state ] 4.4.174+ #17 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-W} usage. kswapd0/28 [HC0[0]:SC0[0]:HE1:SE1] takes: (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] shmem_fallocate+0x13b/0x9c0 mm/shmem.c:2078 {RECLAIM_FS-ON-W} state was registered at: [] mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2536 [] __lockdep_trace_alloc kernel/locking/lockdep.c:2758 [inline] [] lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2773 [] __alloc_pages_nodemask+0x13a/0x14b0 mm/page_alloc.c:3266 [] __alloc_pages include/linux/gfp.h:415 [inline] [] __alloc_pages_node include/linux/gfp.h:428 [inline] [] alloc_pages_node include/linux/gfp.h:442 [inline] [] shmem_alloc_page mm/shmem.c:953 [inline] [] shmem_getpage_gfp+0x6a3/0x1120 mm/shmem.c:1191 [] shmem_getpage mm/shmem.c:130 [inline] [] shmem_write_begin+0xeb/0x190 mm/shmem.c:1509 [] generic_perform_write+0x281/0x540 mm/filemap.c:2591 [] __generic_file_write_iter+0x350/0x540 mm/filemap.c:2716 [] generic_file_write_iter+0x3aa/0x740 mm/filemap.c:2744 [] new_sync_write fs/read_write.c:480 [inline] [] __vfs_write+0x2e8/0x3d0 fs/read_write.c:493 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a irq event stamp: 2513 hardirqs last enabled at (2513): [] __mutex_trylock_slowpath kernel/locking/mutex.c:885 [inline] hardirqs last enabled at (2513): [] mutex_trylock+0x28d/0x500 kernel/locking/mutex.c:908 hardirqs last disabled at (2512): [] __mutex_trylock_slowpath kernel/locking/mutex.c:873 [inline] hardirqs last disabled at (2512): [] mutex_trylock+0xaf/0x500 kernel/locking/mutex.c:908 softirqs last enabled at (2416): [] __do_softirq+0x4da/0xa3f kernel/softirq.c:299 softirqs last disabled at (2407): [] invoke_softirq kernel/softirq.c:350 [inline] softirqs last disabled at (2407): [] irq_exit+0x10a/0x150 kernel/softirq.c:391 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&sb->s_type->i_mutex_key#10); lock(&sb->s_type->i_mutex_key#10); *** DEADLOCK *** 2 locks held by kswapd0/28: #0: (shrinker_rwsem){++++..}, at: [] shrink_slab.part.0+0xb2/0xb30 mm/vmscan.c:431 #1: (ashmem_mutex){+.+.+.}, at: [] ashmem_shrink_scan+0x56/0x4c0 drivers/staging/android/ashmem.c:442 stack backtrace: CPU: 0 PID: 28 Comm: kswapd0 Not tainted 4.4.174+ #17 0000000000000000 2c5f4a196a89add6 ffff8800bba67290 ffffffff81aad1a1 00000000000000f0 ffff8801d9ac17c0 ffffffff83abfce0 ffffffff84057a80 ffff8801d9ac20f8 ffff8800bba67308 ffffffff813ad456 0000000000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] print_usage_bug.cold+0x454/0x592 kernel/locking/lockdep.c:2267 [] valid_state kernel/locking/lockdep.c:2280 [inline] [] mark_lock_irq kernel/locking/lockdep.c:2478 [inline] [] mark_lock+0x6fd/0x1440 kernel/locking/lockdep.c:2933 [] mark_irqflags kernel/locking/lockdep.c:2834 [inline] [] __lock_acquire+0xa27/0x4f50 kernel/locking/lockdep.c:3169 [] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592 [] __mutex_lock_common kernel/locking/mutex.c:521 [inline] [] mutex_lock_nested+0xc1/0xb80 kernel/locking/mutex.c:621 [] shmem_fallocate+0x13b/0x9c0 mm/shmem.c:2078 [] ashmem_shrink_scan drivers/staging/android/ashmem.c:449 [inline] [] ashmem_shrink_scan+0x1c3/0x4c0 drivers/staging/android/ashmem.c:433 [] do_shrink_slab mm/vmscan.c:357 [inline] [] shrink_slab.part.0+0x402/0xb30 mm/vmscan.c:455 [] shrink_slab mm/vmscan.c:425 [inline] [] shrink_zone+0x4bc/0x610 mm/vmscan.c:2448 [] kswapd_shrink_zone mm/vmscan.c:3123 [inline] [] balance_pgdat mm/vmscan.c:3298 [inline] [] kswapd+0xaaf/0x1c60 mm/vmscan.c:3506 [] kthread+0x273/0x310 kernel/kthread.c:211 [] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:537 audit_printk_skb: 6 callbacks suppressed audit: type=1400 audit(1574381719.274:4923): avc: denied { create } for pid=2670 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381719.294:4924): avc: denied { create } for pid=2666 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381719.324:4925): avc: denied { create } for pid=2675 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381719.354:4926): avc: denied { create } for pid=2679 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381719.374:4927): avc: denied { create } for pid=2661 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1400 audit(1574381719.424:4928): avc: denied { create } for pid=2683 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381719.534:4929): avc: denied { create } for pid=2662 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 audit: type=1400 audit(1574381719.574:4930): avc: denied { create } for pid=2693 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381719.624:4931): avc: denied { create } for pid=2662 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 audit: type=1400 audit(1574381719.674:4932): avc: denied { create } for pid=2662 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=0 netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev audit_printk_skb: 132 callbacks suppressed audit: type=1400 audit(1574381724.454:4977): avc: denied { create } for pid=2923 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381725.294:4978): avc: denied { create } for pid=2975 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381725.374:4979): avc: denied { create } for pid=2995 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381725.404:4980): avc: denied { create } for pid=2976 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1400 audit(1574381725.534:4981): avc: denied { create } for pid=3012 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev audit: type=1400 audit(1574381725.624:4982): avc: denied { create } for pid=3016 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381725.724:4983): avc: denied { create } for pid=3020 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381725.794:4984): avc: denied { create } for pid=2983 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 audit: type=1400 audit(1574381726.724:4985): avc: denied { create } for pid=3029 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev audit: type=1400 audit(1574381727.024:4986): avc: denied { create } for pid=3035 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=0 netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'.