binder: 25568:25568 transaction failed 29201/-71, size 0-8 line 2759 binder: 25569:25569 got reply transaction with no transaction stack binder: 25569:25569 transaction failed 29201/-71, size 0-8 line 2759 binder: 25572:25572 got reply transaction with no transaction stack binder: 25572:25572 transaction failed 29201/-71, size 0-8 line 2759 INFO: task kworker/u4:0:7 blocked for more than 140 seconds. Not tainted 4.18.0-rc3+ #137 binder: undelivered TRANSACTION_ERROR: 29201 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. binder: undelivered TRANSACTION_ERROR: 29201 kworker/u4:0 D12776 7 2 0x80000000 Workqueue: events_unbound fsnotify_mark_destroy_workfn binder: undelivered TRANSACTION_ERROR: 29201 Call Trace: context_switch kernel/sched/core.c:2853 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3501 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 schedule+0xfb/0x450 kernel/sched/core.c:3545 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 schedule_timeout+0x1cc/0x260 kernel/time/timer.c:1777 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x430/0x8d0 kernel/sched/completion.c:136 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 __synchronize_srcu+0x189/0x240 kernel/rcu/srcutree.c:928 binder: 25581:25581 got reply transaction with no transaction stack binder: 25581:25581 transaction failed 29201/-71, size 0-8 line 2759 synchronize_srcu+0x41c/0x56f kernel/rcu/srcutree.c:1006 binder: 25576:25576 got reply transaction with no transaction stack binder: 25576:25576 transaction failed 29201/-71, size 0-8 line 2759 binder: 25580:25580 got reply transaction with no transaction stack binder: 25580:25580 transaction failed 29201/-71, size 0-8 line 2759 fsnotify_mark_destroy_workfn+0x1be/0x550 fs/notify/mark.c:765 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25582:25582 got reply transaction with no transaction stack process_one_work+0xc73/0x1ba0 kernel/workqueue.c:2153 binder: 25582:25582 transaction failed 29201/-71, size 0-8 line 2759 binder: 25586:25586 got reply transaction with no transaction stack binder: 25586:25586 transaction failed 29201/-71, size 0-8 line 2759 binder: 25585:25585 got reply transaction with no transaction stack binder: 25585:25585 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29201 worker_thread+0x189/0x13c0 kernel/workqueue.c:2296 binder: 25588:25588 got reply transaction with no transaction stack binder: 25588:25588 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25591:25591 got reply transaction with no transaction stack kthread+0x345/0x410 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 INFO: task kworker/u4:1:4883 blocked for more than 140 seconds. binder: 25591:25591 transaction failed 29201/-71, size 0-8 line 2759 Not tainted 4.18.0-rc3+ #137 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:1 D binder: 25594:25594 got reply transaction with no transaction stack 22392 4883 2 0x80000000 Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: context_switch kernel/sched/core.c:2853 [inline] __schedule+0x87c/0x1ed0 kernel/sched/core.c:3501 binder: 25594:25594 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 schedule+0xfb/0x450 kernel/sched/core.c:3545 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25595:25595 got reply transaction with no transaction stack schedule_timeout+0x1cc/0x260 kernel/time/timer.c:1777 binder: 25595:25595 transaction failed 29201/-71, size 0-8 line 2759 binder: 25584:25584 got reply transaction with no transaction stack do_wait_for_common kernel/sched/completion.c:83 [inline] __wait_for_common kernel/sched/completion.c:104 [inline] wait_for_common kernel/sched/completion.c:115 [inline] wait_for_completion+0x430/0x8d0 kernel/sched/completion.c:136 binder: 25584:25584 transaction failed 29201/-71, size 0-8 line 2759 binder: 25577:25577 got reply transaction with no transaction stack binder: 25577:25577 transaction failed 29201/-71, size 0-8 line 2759 __synchronize_srcu+0x189/0x240 kernel/rcu/srcutree.c:928 binder: 25597:25597 got reply transaction with no transaction stack binder: 25597:25597 transaction failed 29201/-71, size 0-8 line 2759 binder: 25599:25599 got reply transaction with no transaction stack synchronize_srcu_expedited kernel/rcu/srcutree.c:953 [inline] synchronize_srcu+0x335/0x56f kernel/rcu/srcutree.c:1004 binder: 25599:25599 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25601:25601 got reply transaction with no transaction stack fsnotify_connector_destroy_workfn+0x44/0xa0 fs/notify/mark.c:156 binder: 25601:25601 transaction failed 29201/-71, size 0-8 line 2759 process_one_work+0xc73/0x1ba0 kernel/workqueue.c:2153 binder: 25602:25602 got reply transaction with no transaction stack binder: 25602:25602 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25603:25603 got reply transaction with no transaction stack binder: 25603:25603 transaction failed 29201/-71, size 0-8 line 2759 binder: 25605:25605 got reply transaction with no transaction stack binder: 25605:25605 transaction failed 29201/-71, size 0-8 line 2759 binder: 25606:25606 got reply transaction with no transaction stack binder: 25606:25606 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 worker_thread+0x189/0x13c0 kernel/workqueue.c:2296 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25608:25608 got reply transaction with no transaction stack binder: 25608:25608 transaction failed 29201/-71, size 0-8 line 2759 binder: 25609:25609 got reply transaction with no transaction stack binder: 25609:25609 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25610:25610 got reply transaction with no transaction stack binder: 25610:25610 transaction failed 29201/-71, size 0-8 line 2759 binder: 25611:25611 got reply transaction with no transaction stack binder: 25611:25611 transaction failed 29201/-71, size 0-8 line 2759 kthread+0x345/0x410 kernel/kthread.c:246 binder: 25613:25613 got reply transaction with no transaction stack binder: 25613:25613 transaction failed 29201/-71, size 0-8 line 2759 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 binder: 25614:25614 got reply transaction with no transaction stack Showing all locks held in the system: binder: 25614:25614 transaction failed 29201/-71, size 0-8 line 2759 2 locks held by kworker/u4:0/7: #0: binder: 25615:25615 got reply transaction with no transaction stack 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] 00000000c5a7f130 ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xb44/0x1ba0 kernel/workqueue.c:2124 #1: binder: 25615:25615 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 00000000f82c0717 ((reaper_work).work){+.+.}, at: process_one_work+0xb9b/0x1ba0 kernel/workqueue.c:2128 1 lock held by khungtaskd/901: binder: undelivered TRANSACTION_ERROR: 29201 #0: 000000009caeaa20 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 kernel/locking/lockdep.c:4461 1 lock held by rsyslogd/4406: binder: 25593:25593 got reply transaction with no transaction stack #0: 000000007eafb650 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766 2 locks held by getty/4496: binder: 25593:25593 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 #0: 00000000b7928842 binder: 25618:25618 got reply transaction with no transaction stack (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: binder: 25618:25618 transaction failed 29201/-71, size 0-8 line 2759 binder: 25621:25621 got reply transaction with no transaction stack 000000004d989ba3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4497: binder: 25621:25621 transaction failed 29201/-71, size 0-8 line 2759 #0: 00000000ae543eff ( binder: 25619:25619 got reply transaction with no transaction stack &tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000de169989 ( binder: 25619:25619 transaction failed 29201/-71, size 0-8 line 2759 binder: undelivered TRANSACTION_ERROR: 29201 &ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4498: #0: binder: 25623:25623 got reply transaction with no transaction stack 00000000d7a290a6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 0000000068bbef71 binder: 25623:25623 transaction failed 29201/-71, size 0-8 line 2759 binder: 25624:25624 got reply transaction with no transaction stack (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4499: binder: 25624:25624 transaction failed 29201/-71, size 0-8 line 2759 #0: 0000000060dcd345 ( binder: undelivered TRANSACTION_ERROR: 29201 &tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000b12ce2b0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4500: #0: 000000009ac1ca5b (&tty->ldisc_sem binder: 25625:25625 got reply transaction with no transaction stack ){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: 00000000275a166c binder: 25625:25625 transaction failed 29201/-71, size 0-8 line 2759 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 binder: 25620:25620 got reply transaction with no transaction stack 2 locks held by getty/4501: #0: 00000000704ea6da binder: 25620:25620 transaction failed 29201/-71, size 0-8 line 2759 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: binder: 25626:25626 got reply transaction with no transaction stack 0000000012400cf4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 2 locks held by getty/4502: binder: 25626:25626 transaction failed 29201/-71, size 0-8 line 2759 #0: 000000004a5e8da8 ( binder: 25627:25627 got reply transaction with no transaction stack &tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: binder: 25627:25627 transaction failed 29201/-71, size 0-8 line 2759 000000007ff21e4e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140 1 lock held by syz-executor3/4541: binder: undelivered TRANSACTION_ERROR: 29201 3 locks held by kworker/0:0/4805: 2 locks held by kworker/u4:1/4883: #0: 00000000c5a7f130 binder: 25631:25631 got reply transaction with no transaction stack ((wq_completion)"events_unbound"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline] ((wq_completion)"events_unbound"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] ((wq_completion)"events_unbound"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline] ((wq_completion)"events_unbound"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline] ((wq_completion)"events_unbound"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline] ((wq_completion)"events_unbound"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline] ((wq_completion)"events_unbound"){+.+.}, at: process_one_work+0xb44/0x1ba0 kernel/workqueue.c:2124 #1: binder: 25631:25631 transaction failed 29201/-71, size 0-8 line 2759 00000000a8f9c838 (connector_reaper_work binder: 25629:25629 got reply transaction with no transaction stack ){+.+.}, at: process_one_work+0xb9b/0x1ba0 kernel/workqueue.c:2128 1 lock held by udevd/25590: 2 locks held by syz-executor3/25629: binder: 25629:25629 transaction failed 29201/-71, size 0-8 line 2759 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 901 Comm: khungtaskd Not tainted 4.18.0-rc3+ #137 binder: undelivered TRANSACTION_ERROR: 29201 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 binder: 25633:25633 got reply transaction with no transaction stack nmi_cpu_backtrace.cold.4+0x19/0xce lib/nmi_backtrace.c:103 binder: 25633:25633 transaction failed 29201/-71, size 0-8 line 2759 nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline] watchdog+0x9c4/0xf80 kernel/hung_task.c:252 binder: undelivered TRANSACTION_ERROR: 29201 binder: 25634:25634 got reply transaction with no transaction stack binder: 25634:25634 transaction failed 29201/-71, size 0-8 line 2759 kthread+0x345/0x410 kernel/kthread.c:246 binder: undelivered TRANSACTION_ERROR: 29201 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Sending NMI from CPU 1 to CPUs 0: binder: 25636:25636 got reply transaction with no transaction stack NMI backtrace for cpu 0 CPU: 0 PID: 25636 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #137 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rcu_lockdep_current_cpu_online+0x9b/0x1b0 kernel/rcu/tree.c:1092 Code: 00 00 0f 85 c0 00 00 00 4c 8d 6d d8 65 ff 05 8c 34 9b 7e 49 c7 c4 00 d8 02 00 65 4c 03 25 e5 c7 9a 7e 49 8d 7c 24 20 48 89 f8 <48> c1 e8 03 80 3c 10 00 0f 85 dc 00 00 00 49 8d 7c 24 28 4d 8b 74 RSP: 0018:ffff8801dae071e8 EFLAGS: 00000086 RAX: ffff8801dae2d820 RBX: 1ffff1003b5c0e3d RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff8801dae2d820 RBP: ffff8801dae07270 R08: ffffed003b5c46d7 R09: ffffed003b5c46d6 R10: ffffed003b5c46d6 R11: ffff8801dae236b3 R12: ffff8801dae2d800 R13: ffff8801dae07248 R14: 0000000000000000 R15: dffffc0000000000 FS: 0000000000c87940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004caeb0 CR3: 00000001bd2d8000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_read_lock_held+0x90/0xc0 kernel/rcu/update.c:283 select_idle_sibling+0xae1/0xd90 kernel/sched/fair.c:6449 select_task_rq_fair+0x18b7/0x32a0 kernel/sched/fair.c:6657 select_task_rq kernel/sched/core.c:1551 [inline] try_to_wake_up+0x4de/0x12b0 kernel/sched/core.c:2060 wake_up_process+0x10/0x20 kernel/sched/core.c:2148 hrtimer_wakeup+0x48/0x60 kernel/time/hrtimer.c:1647 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0x3eb/0x10c0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x2f3/0x750 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline] smp_apic_timer_interrupt+0x165/0x730 arch/x86/kernel/apic/apic.c:1050 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:863 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline] RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1678 [inline] RIP: 0010:vprintk_emit+0xbe9/0xdf0 kernel/printk/printk.c:1906 Code: fc ff df 41 80 3c 04 00 0f 85 d4 01 00 00 48 83 3d b3 c1 8e 07 00 0f 84 fe 00 00 00 e8 e0 1c 19 00 48 8b bd a8 fe ff ff 57 9d <0f> 1f 44 00 00 e9 18 fe ff ff 41 80 fd 64 0f 84 eb f9 ff ff e9 ef RSP: 0018:ffff8801be126890 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8801acb08480 RBX: 0000000000000200 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8162eec0 RDI: 0000000000000293 RBP: ffff8801be126a20 R08: ffff8801acb08480 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 1ffffffff11e360d R13: 0000000000000043 R14: ffffed0037c24d2f R15: ffffffff8aa0c4a0 vprintk_default+0x28/0x30 kernel/printk/printk.c:1948 vprintk_func+0x7a/0xe7 kernel/printk/printk_safe.c:382 printk+0xa7/0xcf kernel/printk/printk.c:1981 binder_transaction.cold.75+0xafb/0x1afb drivers/android/binder.c:2755 binder_thread_write+0x858/0x2c30 drivers/android/binder.c:3528 binder_ioctl_write_read.isra.41+0x2e7/0xb10 drivers/android/binder.c:4456 binder_ioctl+0xd2f/0x141e drivers/android/binder.c:4596 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x1de/0x1720 fs/ioctl.c:684 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701 __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x455e29 Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fff3981bb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000c87914 RCX: 0000000000455e29 RDX: 0000000020000700 RSI: 00000000c0306201 RDI: 0000000000000003 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000001 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.117 msecs