================================= [ INFO: inconsistent lock state ] 4.4.174+ #17 Not tainted --------------------------------- inconsistent {RECLAIM_FS-ON-W} -> {IN-RECLAIM_FS-W} usage. kswapd0/28 [HC0[0]:SC0[0]:HE1:SE1] takes: (&sb->s_type->i_mutex_key#10){+.+.?.}, at: [] shmem_fallocate+0x13b/0x9c0 mm/shmem.c:2078 {RECLAIM_FS-ON-W} state was registered at: [] mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2536 [] __lockdep_trace_alloc kernel/locking/lockdep.c:2758 [inline] [] lockdep_trace_alloc+0x18c/0x2b0 kernel/locking/lockdep.c:2773 [] __alloc_pages_nodemask+0x13a/0x14b0 mm/page_alloc.c:3266 [] __alloc_pages include/linux/gfp.h:415 [inline] [] __alloc_pages_node include/linux/gfp.h:428 [inline] [] alloc_pages_node include/linux/gfp.h:442 [inline] [] shmem_alloc_page mm/shmem.c:953 [inline] [] shmem_getpage_gfp+0x6a3/0x1120 mm/shmem.c:1191 [] shmem_getpage mm/shmem.c:130 [inline] [] shmem_write_begin+0xeb/0x190 mm/shmem.c:1509 [] generic_perform_write+0x281/0x540 mm/filemap.c:2591 [] __generic_file_write_iter+0x350/0x540 mm/filemap.c:2716 [] generic_file_write_iter+0x3aa/0x740 mm/filemap.c:2744 [] new_sync_write fs/read_write.c:480 [inline] [] __vfs_write+0x2e8/0x3d0 fs/read_write.c:493 [] vfs_write+0x182/0x4e0 fs/read_write.c:540 [] SYSC_write fs/read_write.c:587 [inline] [] SyS_write+0xdc/0x1c0 fs/read_write.c:579 [] entry_SYSCALL_64_fastpath+0x1e/0x9a irq event stamp: 197437 hardirqs last enabled at (197437): [] __mutex_trylock_slowpath kernel/locking/mutex.c:885 [inline] hardirqs last enabled at (197437): [] mutex_trylock+0x28d/0x500 kernel/locking/mutex.c:908 hardirqs last disabled at (197436): [] __mutex_trylock_slowpath kernel/locking/mutex.c:873 [inline] hardirqs last disabled at (197436): [] mutex_trylock+0xaf/0x500 kernel/locking/mutex.c:908 softirqs last enabled at (191598): [] __do_softirq+0x4da/0xa3f kernel/softirq.c:299 softirqs last disabled at (191577): [] invoke_softirq kernel/softirq.c:350 [inline] softirqs last disabled at (191577): [] irq_exit+0x10a/0x150 kernel/softirq.c:391 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&sb->s_type->i_mutex_key#10); lock(&sb->s_type->i_mutex_key#10); *** DEADLOCK *** 2 locks held by kswapd0/28: #0: (shrinker_rwsem){++++..}, at: [] shrink_slab.part.0+0xb2/0xb30 mm/vmscan.c:431 #1: (ashmem_mutex){+.+.+.}, at: [] ashmem_shrink_scan+0x56/0x4c0 drivers/staging/android/ashmem.c:442 stack backtrace: CPU: 1 PID: 28 Comm: kswapd0 Not tainted 4.4.174+ #17 0000000000000000 58c4243695cb5058 ffff8800bba57290 ffffffff81aad1a1 00000000000000f0 ffff8800bba48000 ffffffff83abfb30 ffffffff84057a80 ffff8800bba48938 ffff8800bba57308 ffffffff813ad456 0000000000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] print_usage_bug.cold+0x454/0x592 kernel/locking/lockdep.c:2267 [] valid_state kernel/locking/lockdep.c:2280 [inline] [] mark_lock_irq kernel/locking/lockdep.c:2478 [inline] [] mark_lock+0x6fd/0x1440 kernel/locking/lockdep.c:2933 [] mark_irqflags kernel/locking/lockdep.c:2834 [inline] [] __lock_acquire+0xa27/0x4f50 kernel/locking/lockdep.c:3169 [] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592 [] __mutex_lock_common kernel/locking/mutex.c:521 [inline] [] mutex_lock_nested+0xc1/0xb80 kernel/locking/mutex.c:621 [] shmem_fallocate+0x13b/0x9c0 mm/shmem.c:2078 [] ashmem_shrink_scan drivers/staging/android/ashmem.c:449 [inline] [] ashmem_shrink_scan+0x1c3/0x4c0 drivers/staging/android/ashmem.c:433 [] do_shrink_slab mm/vmscan.c:357 [inline] [] shrink_slab.part.0+0x402/0xb30 mm/vmscan.c:455 [] shrink_slab mm/vmscan.c:425 [inline] [] shrink_zone+0x4bc/0x610 mm/vmscan.c:2448 [] kswapd_shrink_zone mm/vmscan.c:3123 [inline] [] balance_pgdat mm/vmscan.c:3298 [inline] [] kswapd+0xaaf/0x1c60 mm/vmscan.c:3506 [] kthread+0x273/0x310 kernel/kthread.c:211 [] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:537 audit: type=1400 audit(1569117410.066:773): avc: denied { relabelfrom } for pid=18608 comm="syz-executor.2" name="" dev="pipefs" ino=70288 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=0 lowmemorykiller: Killing 'syz-executor.4' (17495) (tgid 17495), adj 1000, to free 52212kB on behalf of 'udevd' (564) because cache 65436kB is below limit 65536kB for oom_score_adj 12 Free memory is -4068kB above reserved lowmemorykiller: Killing 'syz-executor.2' (5044) (tgid 5044), adj 1000, to free 52204kB on behalf of 'syz-executor.1' (18682) because cache 65140kB is below limit 65536kB for oom_score_adj 12 Free memory is -5140kB above reserved lowmemorykiller: Killing 'syz-executor.4' (9852) (tgid 9852), adj 1000, to free 52196kB on behalf of 'syz-executor.3' (18679) because cache 64844kB is below limit 65536kB for oom_score_adj 12 Free memory is 860kB above reserved lowmemorykiller: Killing 'syz-executor.4' (9895) (tgid 9895), adj 1000, to free 52196kB on behalf of 'udevd' (564) because cache 61440kB is below limit 65536kB for oom_score_adj 12 Free memory is 19560kB above reserved lowmemorykiller: Killing 'syz-executor.4' (9937) (tgid 9937), adj 1000, to free 52196kB on behalf of 'syz-executor.3' (18679) because cache 61292kB is below limit 65536kB for oom_score_adj 12 Free memory is 33840kB above reserved lowmemorykiller: Killing 'syz-executor.4' (10684) (tgid 10684), adj 1000, to free 52188kB on behalf of 'syz-executor.3' (18679) because cache 61128kB is below limit 65536kB for oom_score_adj 12 Free memory is 51344kB above reserved lowmemorykiller: Killing 'syz-executor.0' (11704) (tgid 11704), adj 1000, to free 52180kB on behalf of 'kswapd0' (28) because cache 60996kB is below limit 65536kB for oom_score_adj 12 Free memory is -3736kB above reserved lowmemorykiller: Killing 'syz-executor.0' (7446) (tgid 7446), adj 1000, to free 52176kB on behalf of 'syz-executor.4' (18740) because cache 60848kB is below limit 65536kB for oom_score_adj 12 Free memory is -5380kB above reserved lowmemorykiller: Killing 'syz-executor.0' (11716) (tgid 11716), adj 1000, to free 52180kB on behalf of 'syz-executor.3' (18755) because cache 60996kB is below limit 65536kB for oom_score_adj 12 Free memory is -5256kB above reserved lowmemorykiller: Killing 'syz-executor.0' (9438) (tgid 9438), adj 1000, to free 52176kB on behalf of 'syz-executor.3' (18755) because cache 59368kB is below limit 65536kB for oom_score_adj 12 Free memory is -2388kB above reserved lowmemorykiller: Killing 'syz-executor.2' (5022) (tgid 5022), adj 1000, to free 52172kB on behalf of 'syz-executor.5' (18758) because cache 59220kB is below limit 65536kB for oom_score_adj 12 Free memory is -5200kB above reserved lowmemorykiller: Killing 'syz-executor.2' (5027) (tgid 5027), adj 1000, to free 52172kB on behalf of 'syz-executor.5' (18758) because cache 57592kB is below limit 65536kB for oom_score_adj 12 Free memory is -4208kB above reserved lowmemorykiller: Killing 'syz-executor.3' (5088) (tgid 5088), adj 1000, to free 52172kB on behalf of 'syz-executor.5' (18758) because cache 57592kB is below limit 65536kB for oom_score_adj 12 Free memory is -4104kB above reserved lowmemorykiller: Killing 'syz-executor.1' (8555) (tgid 8555), adj 1000, to free 52172kB on behalf of 'syz-executor.5' (18758) because cache 57592kB is below limit 65536kB for oom_score_adj 12 Free memory is 496kB above reserved lowmemorykiller: Killing 'syz-executor.2' (17734) (tgid 17734), adj 1000, to free 52168kB on behalf of 'syz-executor.4' (18740) because cache 57444kB is below limit 65536kB for oom_score_adj 12 Free memory is 15872kB above reserved lowmemorykiller: Killing 'syz-executor.2' (9308) (tgid 9308), adj 1000, to free 52160kB on behalf of 'syz-executor.4' (18740) because cache 57296kB is below limit 65536kB for oom_score_adj 12 Free memory is 17732kB above reserved lowmemorykiller: Killing 'syz-executor.2' (9321) (tgid 9321), adj 1000, to free 52160kB on behalf of 'syz-executor.2' (18759) because cache 59072kB is below limit 65536kB for oom_score_adj 12 Free memory is -5284kB above reserved lowmemorykiller: Killing 'syz-executor.0' (7575) (tgid 7575), adj 1000, to free 52156kB on behalf of 'syz-executor.2' (18759) because cache 57444kB is below limit 65536kB for oom_score_adj 12 Free memory is 49756kB above reserved lowmemorykiller: Killing 'syz-executor.4' (9803) (tgid 9803), adj 1000, to free 52156kB on behalf of 'syz-executor.2' (18759) because cache 57444kB is below limit 65536kB for oom_score_adj 12 Free memory is 52080kB above reserved lowmemorykiller: Killing 'syz-executor.0' (4161) (tgid 4161), adj 1000, to free 52152kB on behalf of 'syz-executor.2' (18759) because cache 57444kB is below limit 65536kB for oom_score_adj 12 Free memory is 58972kB above reserved lowmemorykiller: Killing 'syz-executor.1' (17069) (tgid 17069), adj 1000, to free 52152kB on behalf of 'kswapd0' (28) because cache 57736kB is below limit 65536kB for oom_score_adj 12 Free memory is -2616kB above reserved lowmemorykiller: Killing 'syz-executor.0' (18843) (tgid 18843), adj 1000, to free 52152kB on behalf of 'kswapd0' (28) because cache 57644kB is below limit 65536kB for oom_score_adj 12 Free memory is -2852kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16097) (tgid 16097), adj 1000, to free 52148kB on behalf of 'kswapd0' (28) because cache 57644kB is below limit 65536kB for oom_score_adj 12 Free memory is 1680kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16108) (tgid 16108), adj 1000, to free 52148kB on behalf of 'syz-executor.0' (18865) because cache 57500kB is below limit 65536kB for oom_score_adj 12 Free memory is -5176kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16108) (tgid 16108), adj 1000, to free 52148kB on behalf of 'syz-executor.2' (18849) because cache 57500kB is below limit 65536kB for oom_score_adj 12 Free memory is -5176kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16673) (tgid 16673), adj 1000, to free 52148kB on behalf of 'syz-executor.2' (18849) because cache 57352kB is below limit 65536kB for oom_score_adj 12 Free memory is 10524kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16710) (tgid 16710), adj 1000, to free 52148kB on behalf of 'syz-executor.0' (18865) because cache 57284kB is below limit 65536kB for oom_score_adj 12 Free memory is 3432kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16746) (tgid 16746), adj 1000, to free 52148kB on behalf of 'syz-executor.0' (18865) because cache 57284kB is below limit 65536kB for oom_score_adj 12 Free memory is 20516kB above reserved lowmemorykiller: Killing 'syz-executor.1' (16768) (tgid 16768), adj 1000, to free 52148kB on behalf of 'syz-executor.0' (18865) because cache 57284kB is below limit 65536kB for oom_score_adj 12 Free memory is 20516kB above reserved lowmemorykiller: Killing 'syz-executor.0' (18865) (tgid 18865), adj 1000, to free 52152kB on behalf of 'kswapd0' (28) because cache 57160kB is below limit 65536kB for oom_score_adj 12 Free memory is -2664kB above reserved lowmemorykiller: Killing 'syz-executor.0' (18879) (tgid 18879), adj 1000, to free 52152kB on behalf of 'kswapd0' (28) because cache 57068kB is below limit 65536kB for oom_score_adj 12 Free memory is -2672kB above reserved lowmemorykiller: Killing 'syz-executor.1' (17260) (tgid 17260), adj 1000, to free 52148kB on behalf of 'kswapd0' (28) because cache 56624kB is below limit 65536kB for oom_score_adj 12 Free memory is -852kB above reserved lowmemorykiller: Killing 'syz-executor.1' (17294) (tgid 17294), adj 1000, to free 52148kB on behalf of 'kswapd0' (28) because cache 56624kB is below limit 65536kB for oom_score_adj 12 Free memory is -1604kB above reserved lowmemorykiller: Killing 'syz-executor.1' (17672) (tgid 17672), adj 1000, to free 52148kB on behalf of 'kswapd0' (28) because cache 56772kB is below limit 65536kB for oom_score_adj 12 Free memory is 13844kB above reserved lowmemorykiller: Killing 'syz-executor.1' (17723) (tgid 17723), adj 1000, to free 52148kB on behalf of 'kswapd0' (28) because cache 56676kB is below limit 65536kB for oom_score_adj 12 Free memory is -2652kB above reserved lowmemorykiller: Killing 'syz-executor.1' (18397) (tgid 18397), adj 1000, to free 52148kB on behalf of 'kswapd0' (28) because cache 56676kB is below limit 65536kB for oom_score_adj 12 Free memory is 14596kB above reserved