binder: 15574:15574 BC_DEAD_BINDER_DONE 0000000000000000 not found binder: 15574:15574 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15574:15574 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29189 INFO: task kworker/u4:1:23 blocked for more than 120 seconds. binder: 15565:15565 transaction failed 29189/-22, size 0-0 line 2852 Not tainted 4.18.0-rc2+ #21 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:1 D21832 23 2 0x80000000 binder: undelivered TRANSACTION_ERROR: 29189 Workqueue: events_unbound fsnotify_mark_destroy_workfn binder: 15561:15561 transaction failed 29189/-22, size 0-0 line 2852 Call Trace: context_switch kernel/sched/core.c:2862 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3504 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15577:15577 BC_DEAD_BINDER_DONE 0000000000000000 not found schedule+0xfb/0x450 kernel/sched/core.c:3548 binder: 15577:15577 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15577:15577 DecRefs 0 refcount change on invalid ref 0 ret -22 schedule_timeout+0x1cc/0x260 kernel/time/timer.c:1777 binder: 15579:15579 BC_DEAD_BINDER_DONE 0000000000000000 not found binder: 15579:15579 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15579:15579 DecRefs 0 refcount change on invalid ref 0 ret -22 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x430/0x8d0 kernel/sched/completion.c:136 binder: 15572:15572 transaction failed 29189/-22, size 0-0 line 2852 binder: 15569:15569 transaction failed 29189/-22, size 0-0 line 2852 binder: 15578:15578 BC_DEAD_BINDER_DONE 0000000000000000 not found __synchronize_srcu+0x189/0x240 kernel/rcu/srcutree.c:928 binder: 15578:15578 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15578:15578 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29189 synchronize_srcu+0x41c/0x56f kernel/rcu/srcutree.c:1006 binder: 15573:15573 transaction failed 29189/-22, size 0-0 line 2852 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15580:15580 BC_DEAD_BINDER_DONE 0000000000000000 not found fsnotify_mark_destroy_workfn+0x1be/0x550 fs/notify/mark.c:765 binder: 15580:15580 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15580:15580 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15574:15574 transaction failed 29189/-22, size 0-0 line 2852 process_one_work+0xc73/0x1ba0 kernel/workqueue.c:2153 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15577:15577 transaction failed 29189/-22, size 0-0 line 2852 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15582:15582 BC_DEAD_BINDER_DONE 0000000000000000 not found binder: 15582:15582 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15582:15582 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29189 worker_thread+0x189/0x13c0 kernel/workqueue.c:2296 binder: 15579:15579 transaction failed 29189/-22, size 0-0 line 2852 binder: 15578:15578 transaction failed 29189/-22, size 0-0 line 2852 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15590:15590 BC_DEAD_BINDER_DONE 0000000000000000 not found binder: 15590:15590 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15590:15590 DecRefs 0 refcount change on invalid ref 0 ret -22 kthread+0x345/0x410 kernel/kthread.c:240 binder: 15580:15580 transaction failed 29189/-22, size 0-0 line 2852 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 INFO: task kworker/u4:2:4951 blocked for more than 120 seconds. binder: undelivered TRANSACTION_ERROR: 29189 Not tainted 4.18.0-rc2+ #21 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:2 D23896 4951 2 0x80000000 binder: 15592:15592 BC_DEAD_BINDER_DONE 0000000000000000 not found Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: context_switch kernel/sched/core.c:2862 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3504 binder: 15592:15592 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15592:15592 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29189 schedule+0xfb/0x450 kernel/sched/core.c:3548 binder: 15594:15594 BC_DEAD_BINDER_DONE 0000000000000000 not found schedule_timeout+0x1cc/0x260 kernel/time/timer.c:1777 binder: 15594:15594 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15594:15594 DecRefs 0 refcount change on invalid ref 0 ret -22 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x430/0x8d0 kernel/sched/completion.c:136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15596:15596 BC_DEAD_BINDER_DONE 0000000000000000 not found __synchronize_srcu+0x189/0x240 kernel/rcu/srcutree.c:928 binder: 15596:15596 DecRefs 0 refcount change on invalid ref 0 ret -22 synchronize_srcu_expedited kernel/rcu/srcutree.c:953 [inline] synchronize_srcu+0x335/0x56f kernel/rcu/srcutree.c:1004 binder: 15596:15596 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15582:15582 transaction failed 29189/-22, size 0-0 line 2852 fsnotify_connector_destroy_workfn+0x44/0xa0 fs/notify/mark.c:156 binder: undelivered TRANSACTION_ERROR: 29189 process_one_work+0xc73/0x1ba0 kernel/workqueue.c:2153 binder: 15590:15590 transaction failed 29189/-22, size 0-0 line 2852 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15563:15563 transaction failed 29189/-22, size 0-0 line 2852 binder: 15592:15592 transaction failed 29189/-22, size 0-0 line 2852 worker_thread+0x189/0x13c0 kernel/workqueue.c:2296 binder: 15597:15597 BC_DEAD_BINDER_DONE 0000000000000000 not found binder: 15597:15597 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: 15597:15597 DecRefs 0 refcount change on invalid ref 0 ret -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: 15594:15594 transaction failed 29189/-22, size 0-0 line 2852 kthread+0x345/0x410 kernel/kthread.c:240 binder: 15598:15598 BC_DEAD_BINDER_DONE 0000000000000000 not found ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Showing all locks held in the system: 2 locks held by kworker/u4:1/23: binder: 15598:15598 DecRefs 0 refcount change on invalid ref 0 ret -22 #0: 0000000034cee49c ( binder: 15598:15598 DecRefs 0 refcount change on invalid ref 0 ret -22 (wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] (wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] (wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] (wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] (wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] (wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] (wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xb44/0x1ba0 kernel/workqueue.c:2124 binder: undelivered TRANSACTION_ERROR: 29189 #1: 000000006ee3dc11 ((reaper_work).work){+.+.} binder: undelivered TRANSACTION_ERROR: 29189 , at: process_one_work+0xb9b/0x1ba0 kernel/workqueue.c:2128 1 lock held by khungtaskd/899: #0: 000000007827fceb (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 kernel/locking/lockdep.c:4461 1 lock held by rsyslogd/4402: binder: 15596:15596 transaction failed 29189/-22, size 0-0 line 2852 2 locks held by getty/4492: #0: 00000000e76fa6da (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000082103240 ( binder: 15603:15603 BC_DEAD_BINDER_DONE 0000000000000000 not found &ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 2 locks held by getty/4493: #0: 00000000048e5ac8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 binder: 15603:15603 DecRefs 0 refcount change on invalid ref 0 ret -22 #1: 00000000ae615550 (&ldata->atomic_read_lock){+.+.} binder: 15603:15603 DecRefs 0 refcount change on invalid ref 0 ret -22 , at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 2 locks held by getty/4494: binder: 15604:15604 BC_DEAD_BINDER_DONE 0000000000000000 not found #0: 0000000030134b3f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000d952648f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 binder: 15604:15604 DecRefs 0 refcount change on invalid ref 0 ret -22 2 locks held by getty/4495: #0: binder: 15604:15604 DecRefs 0 refcount change on invalid ref 0 ret -22 0000000017662a65 (&tty->ldisc_sem binder: undelivered TRANSACTION_ERROR: 29189 ){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 000000008f10222a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 2 locks held by getty/4496: binder: 15597:15597 transaction failed 29189/-22, size 0-0 line 2852 #0: 00000000ada63a63 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000085aa2554 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 binder: undelivered TRANSACTION_ERROR: 29189 2 locks held by getty/4497: #0: 00000000666e9e8e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: binder: 15598:15598 transaction failed 29189/-22, size 0-0 line 2852 00000000609752a1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 2 locks held by getty/4498: #0: 00000000e8194f72 ( binder: 15606:15606 BC_DEAD_BINDER_DONE 0000000000000000 not found &tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000088cebeba (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2131 1 lock held by syz-executor3/4537: binder: 15606:15606 DecRefs 0 refcount change on invalid ref 0 ret -22 2 locks held by kworker/u4:2/4951: #0: 0000000034cee49c ( binder: 15606:15606 DecRefs 0 refcount change on invalid ref 0 ret -22 (wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] (wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] (wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] (wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] (wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] (wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] (wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xb44/0x1ba0 kernel/workqueue.c:2124 #1: binder: undelivered TRANSACTION_ERROR: 29189 00000000c4acb65c (connector_reaper_work){+.+.}, at: process_one_work+0xb9b/0x1ba0 kernel/workqueue.c:2128 2 locks held by kworker/0:1/4959: 1 lock held by syz-executor3/15607: binder: 15607:15607 BC_DEAD_BINDER_DONE 0000000000000000 not found ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 899 Comm: khungtaskd Not tainted 4.18.0-rc2+ #21 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 binder: 15607:15607 DecRefs 0 refcount change on invalid ref 0 ret -22 nmi_cpu_backtrace.cold.4+0x19/0xce lib/nmi_backtrace.c:103 binder: 15607:15607 DecRefs 0 refcount change on invalid ref 0 ret -22 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 binder: 15604:15604 transaction failed 29189/-22, size 0-0 line 2852 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline] watchdog+0x9c4/0xf80 kernel/hung_task.c:252 binder: 15603:15603 transaction failed 29189/-22, size 0-0 line 2852 kthread+0x345/0x410 kernel/kthread.c:240 binder: undelivered TRANSACTION_ERROR: 29189 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4959 Comm: kworker/0:1 Not tainted 4.18.0-rc2+ #21 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events binder_deferred_func RIP: 0010:put_dec_trunc8+0x64/0x300 lib/vsprintf.c:192 Code: 8f 02 49 c1 ed 20 41 6b c5 64 41 29 c4 48 b8 00 00 00 00 00 fc ff df 4b 8d bc 24 20 b3 86 88 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 45 02 00 00 48 RSP: 0018:ffff8801cf3f6a88 EFLAGS: 00000807 RAX: dffffc0000000000 RBX: ffff8801cf3f6ba0 RCX: ffffffff878e6673 RDX: 0000000000000000 RSI: ffffffff878e6682 RDI: ffffffff8886b366 RBP: ffff8801cf3f6aa8 R08: ffff8801c8b8e3c0 R09: fffffbfff15412ec R10: fffffbfff15412ec R11: ffffffff8aa09766 R12: 0000000000000023 R13: 00000000000021c1 R14: 000000000000000a R15: ffffffff8aa09767 FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000ffa3c31c CR3: 00000001d91e2000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: put_dec+0x3b/0xf0 lib/vsprintf.c:258 number+0xb94/0xc90 lib/vsprintf.c:467 vsnprintf+0x13d6/0x1b60 lib/vsprintf.c:2333 sprintf+0xb0/0xe0 lib/vsprintf.c:2469 print_time kernel/printk/printk.c:1223 [inline] print_prefix+0x26a/0x3f0 kernel/printk/printk.c:1246 msg_print_text+0xca/0x1c0 kernel/printk/printk.c:1273 console_unlock+0x4c0/0x10b0 kernel/printk/printk.c:2363 vprintk_emit+0x6c6/0xdf0 kernel/printk/printk.c:1907 vprintk_default+0x28/0x30 kernel/printk/printk.c:1948 vprintk_func+0x7a/0xe7 kernel/printk/printk_safe.c:382 printk+0xa7/0xcf kernel/printk/printk.c:1981 binder_release_work.cold.64+0x2c/0xa2 drivers/android/binder.c:4213 binder_thread_release+0x525/0x680 drivers/android/binder.c:4401 binder_deferred_release drivers/android/binder.c:4946 [inline] binder_deferred_func+0x6d6/0x1340 drivers/android/binder.c:5029 process_one_work+0xc73/0x1ba0 kernel/workqueue.c:2153 worker_thread+0x189/0x13c0 kernel/workqueue.c:2296 kthread+0x345/0x410 kernel/kthread.c:240 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412