================================= [ INFO: inconsistent lock state ] 4.9.141+ #23 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-W} usage. kswapd0/33 [HC0[0]:SC0[0]:HE1:SE1] takes: (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] inode_lock include/linux/fs.h:766 [inline] (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] shmem_fallocate+0x13c/0xb10 mm/shmem.c:2676 mark_held_locks+0xc7/0x130 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18e/0x2a0 kernel/locking/lockdep.c:2897 __alloc_pages_nodemask+0x14a/0x1bd0 mm/page_alloc.c:3804 __alloc_pages include/linux/gfp.h:433 [inline] __alloc_pages_node include/linux/gfp.h:446 [inline] alloc_pages_node include/linux/gfp.h:460 [inline] shmem_alloc_page mm/shmem.c:1420 [inline] shmem_alloc_and_acct_page mm/shmem.c:1450 [inline] shmem_getpage_gfp+0xc7c/0x18f0 mm/shmem.c:1724 shmem_getpage mm/shmem.c:123 [inline] shmem_write_begin+0xf4/0x1a0 mm/shmem.c:2205 generic_perform_write+0x28a/0x500 mm/filemap.c:2753 __generic_file_write_iter+0x352/0x540 mm/filemap.c:2878 generic_file_write_iter+0x37a/0x620 mm/filemap.c:2906 new_sync_write fs/read_write.c:496 [inline] __vfs_write+0x3d7/0x580 fs/read_write.c:509 vfs_write+0x187/0x520 fs/read_write.c:557 SYSC_write fs/read_write.c:604 [inline] SyS_write+0xd9/0x1c0 fs/read_write.c:596 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb irq event stamp: 263 hardirqs last enabled at (263): [] __mutex_trylock_slowpath kernel/locking/mutex.c:885 [inline] hardirqs last enabled at (263): [] mutex_trylock+0x258/0x3e0 kernel/locking/mutex.c:908 hardirqs last disabled at (262): [] __mutex_trylock_slowpath kernel/locking/mutex.c:873 [inline] hardirqs last disabled at (262): [] mutex_trylock+0xaf/0x3e0 kernel/locking/mutex.c:908 softirqs last enabled at (0): [] copy_process.part.8+0x10da/0x6a10 kernel/fork.c:1639 softirqs last disabled at (0): [< (null)>] (null) other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&sb->s_type->i_mutex_key#10); lock(&sb->s_type->i_mutex_key#10); *** DEADLOCK *** 2 locks held by kswapd0/33: #0: (shrinker_rwsem){++++..}, at: [] shrink_slab.part.8+0xb2/0xa00 mm/vmscan.c:471 #1: (ashmem_mutex){+.+.+.}, at: [] ashmem_shrink_scan+0x55/0x4c0 drivers/staging/android/ashmem.c:455 stack backtrace: CPU: 1 PID: 33 Comm: kswapd0 Not tainted 4.9.141+ #23 ffff8801d842f380 ffffffff81b42e79 ffff8801d8420000 ffffffff83cacb10 ffff8801d8420900 ffff8801d8420920 ffffffff84244d40 ffff8801d842f3f8 ffffffff81400780 0000000000000000 ffffffff00000001 0000000000000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_usage_bug.cold.40+0x44e/0x57e kernel/locking/lockdep.c:2387 [] valid_state kernel/locking/lockdep.c:2400 [inline] [] mark_lock_irq kernel/locking/lockdep.c:2602 [inline] [] mark_lock+0x2f2/0x1290 kernel/locking/lockdep.c:3065 [] mark_irqflags kernel/locking/lockdep.c:2958 [inline] [] __lock_acquire+0x632/0x4a10 kernel/locking/lockdep.c:3302 [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] down_write+0x41/0xa0 kernel/locking/rwsem.c:52 [] inode_lock include/linux/fs.h:766 [inline] [] shmem_fallocate+0x13c/0xb10 mm/shmem.c:2676 [] ashmem_shrink_scan+0x1b9/0x4c0 drivers/staging/android/ashmem.c:462 [] do_shrink_slab mm/vmscan.c:398 [inline] [] shrink_slab.part.8+0x3c6/0xa00 mm/vmscan.c:501 [] shrink_slab mm/vmscan.c:465 [inline] [] shrink_node+0x1ed/0x740 mm/vmscan.c:2602 [] kswapd_shrink_node mm/vmscan.c:3202 [inline] [] balance_pgdat mm/vmscan.c:3319 [inline] [] kswapd+0x7e9/0x13b0 mm/vmscan.c:3512 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 audit_printk_skb: 1903 callbacks suppressed audit: type=1400 audit(1575202717.069:369176): avc: denied { dac_override } for pid=8573 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.099:369177): avc: denied { net_admin } for pid=2076 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.099:369178): avc: denied { dac_override } for pid=8573 comm="syz-executor.2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.109:369179): avc: denied { sys_admin } for pid=8573 comm="syz-executor.2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.119:369180): avc: denied { net_admin } for pid=2076 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.119:369181): avc: denied { net_admin } for pid=2076 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.129:369182): avc: denied { net_admin } for pid=2076 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.139:369183): avc: denied { net_admin } for pid=2076 comm="syz-executor.3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.139:369184): avc: denied { net_admin } for pid=8558 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202717.159:369185): avc: denied { create } for pid=8583 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 syz-executor.1: page allocation failure: order:0, mode:0x2200000(GFP_NOWAIT|__GFP_NOTRACK) CPU: 1 PID: 2072 Comm: syz-executor.1 Not tainted 4.9.141+ #23 ffff8801b3cff058 ffffffff81b42e79 1ffff1003679fe0d ffff8801d3e5af80 ffffffff82a974e0 0000000000000000 0000000000000000 ffff8801b3cff1a0 ffffffff814fc7c8 0000000041b58ab3 ffffffff82e37a10 ffffffff81427db0 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] warn_alloc.cold.31+0x7f/0x9c mm/page_alloc.c:3068 [] __alloc_pages_slowpath mm/page_alloc.c:3772 [inline] [] __alloc_pages_nodemask+0x628/0x1bd0 mm/page_alloc.c:3862 [] __alloc_pages include/linux/gfp.h:433 [inline] [] __alloc_pages_node include/linux/gfp.h:446 [inline] [] alloc_slab_page mm/slub.c:1408 [inline] [] allocate_slab mm/slub.c:1557 [inline] [] new_slab+0x367/0x3d0 mm/slub.c:1635 [] new_slab_objects mm/slub.c:2419 [inline] [] ___slab_alloc.constprop.33+0x2ed/0x470 mm/slub.c:2576 [] __slab_alloc.isra.25.constprop.32+0x50/0xa0 mm/slub.c:2618 [] slab_alloc_node mm/slub.c:2681 [inline] [] slab_alloc mm/slub.c:2723 [inline] [] kmem_cache_alloc+0x212/0x2b0 mm/slub.c:2728 [] kmem_cache_zalloc include/linux/slab.h:626 [inline] [] avc_alloc_node+0x27/0x3c0 security/selinux/avc.c:551 [] avc_insert security/selinux/avc.c:670 [inline] [] avc_compute_av+0x178/0x610 security/selinux/avc.c:976 [] avc_has_perm_noaudit+0x29d/0x2f0 security/selinux/avc.c:1112 [] cred_has_capability+0x13a/0x2e0 security/selinux/hooks.c:1666 [] selinux_capable+0x36/0x40 security/selinux/hooks.c:2178 [] security_capable+0x88/0xc0 security/security.c:189 [] ns_capable_common+0xd4/0x150 kernel/capability.c:373 [] ns_capable+0x22/0x30 kernel/capability.c:395 [] compat_do_ip6t_get_ctl+0xfb/0x940 net/ipv6/netfilter/ip6_tables.c:1685 [] compat_nf_sockopt net/netfilter/nf_sockopt.c:138 [inline] [] compat_nf_getsockopt+0x8e/0x130 net/netfilter/nf_sockopt.c:162 [] compat_ipv6_getsockopt+0x1f8/0x2f0 net/ipv6/ipv6_sockglue.c:1396 [] inet_csk_compat_getsockopt+0x97/0x120 net/ipv4/inet_connection_sock.c:904 [] compat_tcp_getsockopt+0x3d/0x70 net/ipv4/tcp.c:3117 [] compat_sock_common_getsockopt+0xb4/0x150 net/core/sock.c:2676 [] C_SYSC_getsockopt net/compat.c:520 [inline] [] compat_SyS_getsockopt+0x16a/0x560 net/compat.c:503 [] C_SYSC_socketcall net/compat.c:854 [inline] [] compat_SyS_socketcall+0x580/0x680 net/compat.c:785 [] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline] [] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390 [] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137 Mem-Info: active_anon:1303469 inactive_anon:68770 isolated_anon:0 active_file:6634 inactive_file:46040 isolated_file:32 unevictable:0 dirty:3 writeback:0 unstable:0 slab_reclaimable:8405 slab_unreclaimable:94795 mapped:72979 shmem:86486 pagetables:28460 bounce:0 free:6036 free_pcp:172 free_cma:0 Node 0 active_anon:5213876kB inactive_anon:275080kB active_file:26536kB inactive_file:184160kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:291916kB dirty:12kB writeback:0kB shmem:345944kB writeback_tmp:0kB unstable:0kB pages_scanned:33 all_unreclaimable? no DMA32 free:18628kB min:4696kB low:7712kB high:10728kB active_anon:2422556kB inactive_anon:141796kB active_file:724kB inactive_file:130084kB unevictable:0kB writepending:116kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:9480kB slab_unreclaimable:210304kB kernel_stack:18496kB pagetables:44632kB bounce:0kB free_pcp:188kB local_pcp:0kB free_cma:0kB Normal free:5516kB min:5580kB low:9168kB high:12756kB active_anon:2791220kB inactive_anon:133284kB active_file:25812kB inactive_file:54024kB unevictable:0kB writepending:44kB present:4718592kB managed:3589312kB mlocked:0kB slab_reclaimable:24140kB slab_unreclaimable:168876kB kernel_stack:21632kB pagetables:69208kB bounce:0kB free_pcp:500kB local_pcp:124kB free_cma:0kB DMA32: 159*4kB (UME) 116*8kB (E) 45*16kB (UE) 101*32kB (UME) 68*64kB (UME) 5*128kB (UME) 18*256kB (UME) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18700kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313618 pages reserved SLUB: Unable to allocate memory on node -1, gfp=0x2008000(GFP_NOWAIT|__GFP_ZERO) cache: avc_node, object size: 72, buffer size: 104, default order: 0, min order: 0 node 0: slabs: 1490, objs: 58110, free: 0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8744 comm=syz-executor.3 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8748 comm=syz-executor.3 audit_printk_skb: 2676 callbacks suppressed audit: type=1400 audit(1575202722.059:370078): avc: denied { net_admin } for pid=2078 comm="syz-executor.2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202722.129:370079): avc: denied { read } for pid=8752 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1575202722.129:370080): avc: denied { dac_override } for pid=8752 comm="syz-executor.5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202722.129:370081): avc: denied { write } for pid=8752 comm="syz-executor.5" name="bus" dev="sda1" ino=16537 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xen_device_t:s0 tclass=file permissive=1 audit: type=1400 audit(1575202722.129:370082): avc: denied { write open } for pid=8752 comm="syz-executor.5" path="/syzcgroup/cpu/syz5/bus" dev="sda1" ino=16537 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xen_device_t:s0 tclass=file permissive=1 audit: type=1400 audit(1575202722.129:370083): avc: denied { write } for pid=8752 comm="syz-executor.5" name="bus" dev="sda1" ino=16537 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xen_device_t:s0 tclass=file permissive=1 audit: type=1400 audit(1575202722.129:370084): avc: denied { sys_admin } for pid=8752 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202722.129:370085): avc: denied { sys_admin } for pid=8752 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202722.179:370086): avc: denied { sys_admin } for pid=2081 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1575202722.179:370087): avc: denied { sys_admin } for pid=2081 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1