binder: 21968:21968 transaction failed 29189/-22, size 0-0 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 binder: 21970:21970 transaction failed 29189/-22, size 0-0 line 2856 binder: 21973:21973 transaction failed 29189/-22, size 0-0 line 2856 binder: 21974:21974 transaction failed 29189/-22, size 0-0 line 2856 INFO: task kworker/u4:2:50 blocked for more than 120 seconds. Not tainted 4.17.0-rc7+ #81 binder: undelivered TRANSACTION_ERROR: 29189 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:2 D12840 50 2 0x80000000 Workqueue: events_unbound fsnotify_mark_destroy_workfn Call Trace: context_switch kernel/sched/core.c:2876 [inline] __schedule+0x801/0x1e30 kernel/sched/core.c:3518 binder: 21976:21976 transaction failed 29189/-22, size 0-0 line 2856 binder: 21977:21977 transaction failed 29189/-22, size 0-0 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 schedule+0xef/0x430 kernel/sched/core.c:3562 binder: 21978:21978 transaction failed 29189/-22, size 0-0 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 schedule_timeout+0x1b5/0x240 kernel/time/timer.c:1777 binder: 21979:21979 transaction failed 29189/-22, size 0-0 line 2856 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x3e7/0x870 kernel/sched/completion.c:136 __synchronize_srcu+0x189/0x240 kernel/rcu/srcutree.c:924 binder: undelivered TRANSACTION_ERROR: 29189 synchronize_srcu_expedited kernel/rcu/srcutree.c:949 [inline] synchronize_srcu+0x32d/0x54f kernel/rcu/srcutree.c:1000 binder: 21980:21980 transaction failed 29189/-22, size 0-0 line 2856 binder: 21987:21987 transaction failed 29189/-22, size 0-0 line 2856 fsnotify_mark_destroy_workfn+0x1aa/0x530 fs/notify/mark.c:759 binder: 21988:21988 transaction failed 29189/-22, size 0-0 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 process_one_work+0xc1e/0x1b50 kernel/workqueue.c:2145 binder: 21989:21989 transaction failed 29189/-22, size 0-0 line 2856 binder: 21991:21991 transaction failed 29189/-22, size 0-0 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 worker_thread+0x1cc/0x1440 kernel/workqueue.c:2279 binder: 21994:21994 transaction failed 29189/-22, size 0-0 line 2856 binder: 21993:21993 transaction failed 29189/-22, size 0-0 line 2856 binder: undelivered TRANSACTION_ERROR: 29189 binder: 21995:21995 transaction failed 29189/-22, size 0-0 line 2856 binder: 21996:21996 transaction failed 29189/-22, size 0-0 line 2856 binder: 21997:21997 transaction failed 29189/-22, size 0-0 line 2856 kthread+0x345/0x410 kernel/kthread.c:240 binder: undelivered TRANSACTION_ERROR: 29189 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Showing all locks held in the system: 2 locks held by kworker/u4:2/50: #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:57 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xaef/0x1b50 kernel/workqueue.c:2116 #1: 00000000aa6705b6 ((reaper_work).work){+.+.}, at: process_one_work+0xb46/0x1b50 kernel/workqueue.c:2120 2 locks held by khungtaskd/892: #0: 000000007a61b90c (rcu_read_lock){....}, at: check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline] #0: 000000007a61b90c (rcu_read_lock){....}, at: watchdog+0x1ff/0xf60 kernel/hung_task.c:249 #1: 00000000611f1d18 (tasklist_lock){.+.+}, at: debug_show_all_locks+0xde/0x34a kernel/locking/lockdep.c:4470 2 locks held by getty/4471: #0: 00000000275201a5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000088aa17d2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4472: #0: 000000000e701812 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000020aa501e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4473: #0: 000000003eb7b2e3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000006071d9f3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4474: #0: 000000001fb95364 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000006c5a0c02 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4475: #0: 00000000af20e9ad (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000eb1daff8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4476: #0: 000000007dd50725 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000d4048cbb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by getty/4477: #0: 00000000f4d033fa (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000013a5a2e6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 drivers/tty/n_tty.c:2131 2 locks held by kworker/u4:1/4766: #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:57 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] #0: 00000000bcfb7a8f ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xaef/0x1b50 kernel/workqueue.c:2116 #1: 000000004305f856 (connector_reaper_work){+.+.}, at: process_one_work+0xb46/0x1b50 kernel/workqueue.c:2120 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 892 Comm: khungtaskd Not tainted 4.17.0-rc7+ #81 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 binder: undelivered TRANSACTION_ERROR: 29189 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 nmi_cpu_backtrace.cold.4+0x19/0xce lib/nmi_backtrace.c:103 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_task kernel/hung_task.c:132 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline] watchdog+0xc10/0xf60 kernel/hung_task.c:249 binder: undelivered TRANSACTION_ERROR: 29189 kthread+0x345/0x410 kernel/kthread.c:240 binder: undelivered TRANSACTION_ERROR: 29189 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 binder: undelivered TRANSACTION_ERROR: 29189 Sending NMI from CPU 1 to CPUs 0: binder: 21984:21984 transaction failed 29189/-22, size 0-0 line 2856 NMI backtrace for cpu 0 CPU: 0 PID: 21984 Comm: syz-executor7 Not tainted 4.17.0-rc7+ #81 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:cpus_share_cache+0x5a/0x110 kernel/sched/core.c:1841 RSP: 0018:ffff8801dae06ed0 EFLAGS: 00000806 RAX: dffffc0000000000 RBX: 000000000001f5d8 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88adce68 RBP: ffff8801dae06ef0 R08: ffff8801dae07570 R09: ffff8801d9a9e240 R10: 0000000000000000 R11: ffff8801dae23693 R12: ffff8801daf1f5d8 R13: 0000000000000001 R14: 0000000000000001 R15: 000000000002c700 FS: 00000000011ab940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000006f7740 CR3: 00000001d692f000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: select_idle_sibling+0x121/0xd70 kernel/sched/fair.c:6384 select_task_rq_fair+0x1f63/0x35d0 kernel/sched/fair.c:6614 select_task_rq kernel/sched/core.c:1549 [inline] try_to_wake_up+0x4c1/0x1280 kernel/sched/core.c:2058 wake_up_process+0x10/0x20 kernel/sched/core.c:2146 process_timeout+0x31/0x40 kernel/time/timer.c:1730 call_timer_fn+0x230/0x940 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0x79e/0xc50 kernel/time/timer.c:1666 run_timer_softirq+0x4c/0x70 kernel/time/timer.c:1692 __do_softirq+0x2e0/0xaf5 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1d1/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:525 [inline] smp_apic_timer_interrupt+0x17e/0x710 arch/x86/kernel/apic/apic.c:1052 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline] RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1678 [inline] RIP: 0010:vprintk_emit+0xbd0/0xdd0 kernel/printk/printk.c:1906 RSP: 0018:ffff8801c9c6e8a0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8801afae6640 RBX: 0000000000000200 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8160d4c7 RDI: 0000000000000293 RBP: ffff8801c9c6ea30 R08: ffff8801afae6640 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 1ffffffff11a31ad R13: 0000000000000044 R14: ffffed003938dd31 R15: ffffffff8a6d3360 vprintk_default+0x28/0x30 kernel/printk/printk.c:1947 vprintk_func+0x7a/0xe7 kernel/printk/printk_safe.c:379 printk+0x9e/0xba kernel/printk/printk.c:1980 binder_transaction.cold.75+0xcaf/0x1b11 drivers/android/binder.c:3264 binder_thread_write+0xdbb/0x2c30 drivers/android/binder.c:3521 binder_ioctl_write_read.isra.41+0x2be/0xaf0 drivers/android/binder.c:4459 binder_ioctl+0xcbe/0x13fd drivers/android/binder.c:4599 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x1cf/0x16a0 fs/ioctl.c:684 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701 __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455a09 RSP: 002b:00007ffd1684a098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00000000011ab914 RCX: 0000000000455a09 RDX: 0000000020000180 RSI: 00000000c0306201 RDI: 0000000000000003 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 000000000000019c R14: 00000000006f7740 R15: 00000000000f0a5f Code: 48 83 ec 08 80 3c 02 00 0f 85 bc 00 00 00 4e 03 24 ed 60 ce ad 88 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 0f b6 14 02 <4c> 89 e0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 6f 48 63 f6 45