binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29189
INFO: task kworker/0:2:3967 blocked for more than 120 seconds.
      Not tainted 4.9.80-gb30d2b5 #28
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/0:2     D25472  3967      2 0x00000000
Workqueue: events_power_efficient reg_check_chans_work
 ffff8801d4c14800 0000000000000000 ffff8801c4534000 ffff8801c53c3000
 ffff8801db221b98 ffff8801d53a7a08 ffffffff838a23db 0000000000000002
 ffff8801c53c3054 00ff8801d4c14800 ffff8801db222468 ffff8801db222490
Call Trace:
 [<ffffffff838a397f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3550
 [<ffffffff838a4303>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3583
 [<ffffffff838a9912>] __mutex_lock_common kernel/locking/mutex.c:582 [inline]
 [<ffffffff838a9912>] mutex_lock_nested+0x312/0x870 kernel/locking/mutex.c:621
 [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
 [<ffffffff835a9a04>] reg_check_chans_work+0x74/0xde0 net/wireless/reg.c:1652
 [<ffffffff81189820>] process_one_work+0x7e0/0x1610 kernel/workqueue.c:2092
 [<ffffffff8118a730>] worker_thread+0xe0/0x10d0 kernel/workqueue.c:2226
 [<ffffffff8119a73d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff838b37dc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:477

Showing all locks held in the system:
2 locks held by khungtaskd/515:
 #0:  (rcu_read_lock){......}, at: [<ffffffff81372ed5>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff81372ed5>] watchdog+0x125/0xa70 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81237fe0>] debug_show_all_locks+0x70/0x280 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/3452:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d3a5f>] __fdget_pos+0x9f/0xc0 fs/file.c:781
2 locks held by getty/3580:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff838b1652>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff82009fa4>] n_tty_read+0x1f4/0x16c0 drivers/tty/n_tty.c:2133
3 locks held by kworker/0:2/3967:
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff81189732>] work_static include/linux/workqueue.h:186 [inline]
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff81189732>] set_work_data kernel/workqueue.c:617 [inline]
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff81189732>] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff81189732>] process_one_work+0x6f2/0x1610 kernel/workqueue.c:2085
 #1:  ((reg_check_chans).work){+.+...}, at: [<ffffffff8118976c>] process_one_work+0x72c/0x1610 kernel/workqueue.c:2089
 #2:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
3 locks held by kworker/0:3/6172:
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff81189732>] work_static include/linux/workqueue.h:186 [inline]
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff81189732>] set_work_data kernel/workqueue.c:617 [inline]
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff81189732>] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff81189732>] process_one_work+0x6f2/0x1610 kernel/workqueue.c:2085
 #1:  ((addr_chk_work).work){+.+...}, at: [<ffffffff8118976c>] process_one_work+0x72c/0x1610 kernel/workqueue.c:2089
 #2:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
2 locks held by syz-executor0/13687:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
 #1:  (rcu_preempt_state.exp_mutex){+.+...}, at: [<ffffffff8128e67e>] exp_funnel_lock kernel/rcu/tree_exp.h:256 [inline]
 #1:  (rcu_preempt_state.exp_mutex){+.+...}, at: [<ffffffff8128e67e>] _synchronize_rcu_expedited+0x45e/0x800 kernel/rcu/tree_exp.h:569
1 lock held by syz-executor0/13699:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor0/13713:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor1/13705:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f7b1ab>] rtnl_lock net/core/rtnetlink.c:70 [inline]
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f7b1ab>] rtnetlink_rcv+0x1b/0x40 net/core/rtnetlink.c:4064
1 lock held by syz-executor1/13731:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f7b1ab>] rtnl_lock net/core/rtnetlink.c:70 [inline]
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f7b1ab>] rtnetlink_rcv+0x1b/0x40 net/core/rtnetlink.c:4064
1 lock held by syz-executor4/13727:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f7b1ab>] rtnl_lock net/core/rtnetlink.c:70 [inline]
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f7b1ab>] rtnetlink_rcv+0x1b/0x40 net/core/rtnetlink.c:4064
1 lock held by syz-executor6/13735:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor6/13750:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff82f76697>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 515 Comm: khungtaskd Not tainted 4.9.80-gb30d2b5 #28
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d8487d00 ffffffff81d94b69 0000000000000000 0000000000000000
 0000000000000000 0000000000000001 ffffffff810bac60 ffff8801d8487d38
 ffffffff81d9fc8d 0000000000000000 0000000000000000 ffff8801d4c14c18
Call Trace:
 [<ffffffff81d94b69>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d94b69>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81d9fc8d>] nmi_cpu_backtrace+0xfd/0x120 lib/nmi_backtrace.c:99
 [<ffffffff81d9fdc7>] nmi_trigger_cpumask_backtrace+0x117/0x190 lib/nmi_backtrace.c:60
 [<ffffffff810bad54>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff813734a0>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff813734a0>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff813734a0>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff813734a0>] watchdog+0x6f0/0xa70 kernel/hung_task.c:239
 [<ffffffff8119a73d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff838b37dc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:477
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3452 Comm: rsyslogd Not tainted 4.9.80-gb30d2b5 #28
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801c7438000 task.stack: ffff8801c7458000
RIP: 0010:[<ffffffff81539b55>] 
c [<ffffffff81539b55>] __slab_free+0x45/0x2d0 mm/slub.c:2808
RSP: 0018:ffff8801c745f9a0  EFLAGS: 00000246
RAX: 00000000000251d0 RBX: ffff880190dfca00 RCX: 000000018020001d
RDX: ffff880190dfc800 RSI: ffffea0006437f00 RDI: ffff8801da001780
RBP: ffff8801c745fa40 R08: 0000000000000001 R09: ffffffff8153e93e
R10: ffffea0006437f00 R11: 0000000000000000 R12: ffffea0006437f00
R13: ffff8801c745faa8 R14: ffffffff8153e93e R15: ffff8801da001780
FS:  00007f4ae5158700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001cb7000 CR3: 00000001cb27c000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000296
c 0000000100120001
c ffff8801cef1e840
c 00010001c745fa70
c
 ffff880190dfc800
c ffff880190dfc800
c 0000000000000000
c 0000000000000007
c
 ffff8801c7438000
c 0000000180120004
c ffff8801c74388b0
c ffff8801c745fa40
c
Call Trace:
 [<ffffffff8153bafa>] do_slab_free mm/slub.c:2950 [inline]
 [<ffffffff8153bafa>] ___cache_free+0xaa/0xc0 mm/slub.c:2971
 [<ffffffff8153e953>] qlink_free mm/kasan/quarantine.c:147 [inline]
 [<ffffffff8153e953>] qlist_free_all+0x43/0xc0 mm/kasan/quarantine.c:166
 [<ffffffff8153edd8>] quarantine_reduce+0x188/0x1d0 mm/kasan/quarantine.c:259
 [<ffffffff8153d3ca>] kasan_kmalloc+0xca/0xe0 mm/kasan/kasan.c:594
 [<ffffffff8153d982>] kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:547
 [<ffffffff815393a0>] slab_post_alloc_hook mm/slab.h:417 [inline]
 [<ffffffff815393a0>] slab_alloc_node mm/slub.c:2715 [inline]
 [<ffffffff815393a0>] slab_alloc mm/slub.c:2723 [inline]
 [<ffffffff815393a0>] kmem_cache_alloc_trace+0xc0/0x2a0 mm/slub.c:2740
 [<ffffffff81267c26>] kmalloc include/linux/slab.h:490 [inline]
 [<ffffffff81267c26>] syslog_print kernel/printk/printk.c:1282 [inline]
 [<ffffffff81267c26>] do_syslog+0x5a6/0xb10 kernel/printk/printk.c:1459
 [<ffffffff816eb8d4>] kmsg_read+0x74/0xa0 fs/proc/kmsg.c:39
 [<ffffffff816c24ff>] proc_reg_read+0xef/0x170 fs/proc/inode.c:202
 [<ffffffff8156c043>] __vfs_read+0x103/0x670 fs/read_write.c:452
 [<ffffffff8156fdde>] vfs_read+0x11e/0x380 fs/read_write.c:475
 [<ffffffff81573b09>] SYSC_read fs/read_write.c:591 [inline]
 [<ffffffff81573b09>] SyS_read+0xd9/0x1b0 fs/read_write.c:584
 [<ffffffff838b346e>] entry_SYSCALL_64_fastpath+0x29/0xe8
Code: 
c48 
c83 
cec 
c70 
c48 
cf7 
c47 
c08 
c00 
c0d 
c21 
c00 
c48 
c89 
c54 
c24 
c20 
c48 
c89 
c4c 
c24 
c28 
c0f 
c85 
c8d 
c01 
c00 
c00 
c66 
c89 
c5c 
c24 
c1e 
c49 
c8b 
c4c 
c24 
c18 
c49 
c8b 
c5c 
c24 
c10 
c<49> 
c63 
c47 
c20 
c48 
c8b 
c54 
c24 
c28 
c41 
c89 
ccd 
c66 
c44 
c2b 
c6c 
c24 
c1e 
c48 
c89 
c4c 
c