INFO: task kworker/1:1H:55 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1H state:D stack:26192 pid:55 ppid:2 flags:0x00004000
Workqueue: xfs-log/loop2 xlog_ioend_work
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x15ae/0x4660 kernel/sched/core.c:6700
schedule+0xbd/0x170 kernel/sched/core.c:6774
schedule_timeout+0xc1/0x2d0 kernel/time/timer.c:2144
___down_common kernel/locking/semaphore.c:229 [inline]
__down_common+0x30e/0x650 kernel/locking/semaphore.c:250
down+0x80/0xd0 kernel/locking/semaphore.c:64
xfs_buf_lock+0x14d/0x460 fs/xfs/xfs_buf.c:1126
xfs_buf_item_unpin+0x1b6/0x650 fs/xfs/xfs_buf_item.c:582
xfs_trans_committed_bulk+0x39d/0x8b0 fs/xfs/xfs_trans.c:808
xlog_cil_committed+0x1d3/0x530 fs/xfs/xfs_log_cil.c:733
xlog_cil_process_committed+0x154/0x1a0 fs/xfs/xfs_log_cil.c:765
xlog_state_shutdown_callbacks+0x26e/0x360 fs/xfs/xfs_log.c:538
xlog_force_shutdown+0x2c9/0x320 fs/xfs/xfs_log.c:3807
xlog_ioend_work+0xaf/0x100 fs/xfs/xfs_log.c:1395
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
INFO: task kworker/0:1H:98 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1H state:D stack:27536 pid:98 ppid:2 flags:0x00004000
Workqueue: xfs-log/loop3 xlog_ioend_work
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x15ae/0x4660 kernel/sched/core.c:6700
schedule+0xbd/0x170 kernel/sched/core.c:6774
schedule_timeout+0xc1/0x2d0 kernel/time/timer.c:2144
___down_common kernel/locking/semaphore.c:229 [inline]
__down_common+0x30e/0x650 kernel/locking/semaphore.c:250
down+0x80/0xd0 kernel/locking/semaphore.c:64
xfs_buf_lock+0x14d/0x460 fs/xfs/xfs_buf.c:1126
xfs_buf_item_unpin+0x1b6/0x650 fs/xfs/xfs_buf_item.c:582
xfs_trans_committed_bulk+0x39d/0x8b0 fs/xfs/xfs_trans.c:808
xlog_cil_committed+0x1d3/0x530 fs/xfs/xfs_log_cil.c:733
xlog_cil_process_committed+0x154/0x1a0 fs/xfs/xfs_log_cil.c:765
xlog_state_shutdown_callbacks+0x26e/0x360 fs/xfs/xfs_log.c:538
xlog_force_shutdown+0x2c9/0x320 fs/xfs/xfs_log.c:3807
xlog_ioend_work+0xaf/0x100 fs/xfs/xfs_log.c:1395
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
INFO: task syz.3.20:5976 blocked for more than 144 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.20 state:D stack:24280 pid:5976 ppid:5902 flags:0x00004006
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x15ae/0x4660 kernel/sched/core.c:6700
schedule+0xbd/0x170 kernel/sched/core.c:6774
xlog_wait fs/xfs/xfs_log_priv.h:622 [inline]
xlog_wait_on_iclog+0x474/0x680 fs/xfs/xfs_log.c:892
xlog_force_lsn+0x493/0x900 fs/xfs/xfs_log.c:3342
xfs_log_force_seq+0x1c3/0x430 fs/xfs/xfs_log.c:3379
__xfs_trans_commit+0x966/0xd90 fs/xfs/xfs_trans.c:1013
xfs_sync_sb_buf+0xfd/0x190 fs/xfs/libxfs/xfs_sb.c:1164
xfs_ioc_setlabel fs/xfs/xfs_ioctl.c:1823 [inline]
xfs_file_ioctl+0x1523/0x17b0 fs/xfs/xfs_ioctl.c:1921
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:871 [inline]
__se_sys_ioctl+0xfd/0x170 fs/ioctl.c:857
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f9582d9ce59
RSP: 002b:00007fff1a2aadf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f9583015fa0 RCX: 00007f9582d9ce59
RDX: 00002000000004c0 RSI: 0000000041009432 RDI: 0000000000000004
RBP: 00007f9582e32e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9583015fac R14: 00007f9583015fa0 R15: 00007f9583015fa0
</TASK>
INFO: task syz.2.19:5977 blocked for more than 145 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.19 state:D stack:24424 pid:5977 ppid:5901 flags:0x00004006
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x15ae/0x4660 kernel/sched/core.c:6700
schedule+0xbd/0x170 kernel/sched/core.c:6774
xlog_wait fs/xfs/xfs_log_priv.h:622 [inline]
xlog_wait_on_iclog+0x474/0x680 fs/xfs/xfs_log.c:892
xlog_force_lsn+0x493/0x900 fs/xfs/xfs_log.c:3342
xfs_log_force_seq+0x1c3/0x430 fs/xfs/xfs_log.c:3379
__xfs_trans_commit+0x966/0xd90 fs/xfs/xfs_trans.c:1013
xfs_sync_sb_buf+0xfd/0x190 fs/xfs/libxfs/xfs_sb.c:1164
xfs_ioc_setlabel fs/xfs/xfs_ioctl.c:1823 [inline]
xfs_file_ioctl+0x1523/0x17b0 fs/xfs/xfs_ioctl.c:1921
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:871 [inline]
__se_sys_ioctl+0xfd/0x170 fs/ioctl.c:857
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f73b099ce59
RSP: 002b:00007ffc3bfb6b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f73b0c15fa0 RCX: 00007f73b099ce59
RDX: 00002000000004c0 RSI: 0000000041009432 RDI: 0000000000000004
RBP: 00007f73b0a32e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f73b0c15fac R14: 00007f73b0c15fa0 R15: 00007f73b0c15fa0
</TASK>
Showing all locks held in the system:
2 locks held by kworker/0:0H/9:
#0: ffff888031032138 ((wq_completion)xfs-log/loop1){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff888031032138 ((wq_completion)xfs-log/loop1){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc900000e7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc900000e7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by kworker/1:0H/24:
#0: ffff88805fdb8938 ((wq_completion)xfs-log/loop0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff88805fdb8938 ((wq_completion)xfs-log/loop0){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc900001e7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc900001e7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
1 lock held by khungtaskd/29:
#0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline]
#0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline]
#0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 kernel/locking/lockdep.c:6633
2 locks held by kworker/u4:2/34:
2 locks held by kworker/1:1H/55:
#0: ffff888142aef138 ((wq_completion)xfs-log/loop2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff888142aef138 ((wq_completion)xfs-log/loop2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc9000130fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc9000130fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by kworker/0:1H/98:
#0: ffff88802522cd38 ((wq_completion)xfs-log/loop3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff88802522cd38 ((wq_completion)xfs-log/loop3){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc900025b7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc900025b7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by getty/5533:
#0: ffff88802cff80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 drivers/tty/n_tty.c:2217
2 locks held by kworker/1:4/5933:
#0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc90003477d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc90003477d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
1 lock held by syz.3.20/5976:
#0: ffff88807cc24418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.2.19/5977:
#0: ffff888025e08418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.0.17/5979:
#0: ffff888077fd8418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.1.18/6008:
#0: ffff88807db98418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
2 locks held by kworker/0:2H/6017:
#0: ffff8880535cfd38 ((wq_completion)xfs-log/loop7){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff8880535cfd38 ((wq_completion)xfs-log/loop7){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc90003787d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc90003787d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by kworker/0:3H/6018:
#0: ffff888054f67d38 ((wq_completion)xfs-log/loop4){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff888054f67d38 ((wq_completion)xfs-log/loop4){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc90003797d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc90003797d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by kworker/1:3H/6019:
#0: ffff888053470538 ((wq_completion)xfs-log/loop5){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff888053470538 ((wq_completion)xfs-log/loop5){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc900037d7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc900037d7d00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
1 lock held by syz.4.21/6106:
#0: ffff88803014a418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.5.22/6107:
#0: ffff88805c6ca418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.6.23/6124:
#0: ffff888028fb8418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.7.24/6125:
#0: ffff88806013c418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
2 locks held by kworker/0:4H/6143:
#0: ffff88805bcf9138 ((wq_completion)xfs-log/loop9){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff88805bcf9138 ((wq_completion)xfs-log/loop9){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc9000473fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc9000473fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by kworker/0:5H/6144:
#0: ffff88805cdca938 ((wq_completion)xfs-log/loop6){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff88805cdca938 ((wq_completion)xfs-log/loop6){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc9000474fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc9000474fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
2 locks held by kworker/0:6H/6145:
#0: ffff88805dd00d38 ((wq_completion)xfs-log/loop8){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#0: ffff88805dd00d38 ((wq_completion)xfs-log/loop8){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
#1: ffffc9000475fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2628 [inline]
#1: ffffc9000475fd00 ((work_completion)(&iclog->ic_end_io_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 kernel/workqueue.c:2730
1 lock held by syz-executor/6174:
#0: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:292 [inline]
#0: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 kernel/rcu/tree_exp.h:1004
1 lock held by syz.8.25/6202:
#0: ffff88804dc88418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.9.26/6213:
#0: ffff88804b984418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 fs/namespace.c:456
1 lock held by syz.3.274/6520:
#0: ffff8880219acb60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x6c0 drivers/block/loop.c:1265
1 lock held by syz.0.275/6521:
#0: ffff888021990b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x2a/0x6c0 drivers/block/loop.c:1265
2 locks held by syz.1.276/6522:
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
<TASK>
dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106
nmi_cpu_backtrace+0x3a6/0x3e0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x17a/0x2f0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
watchdog+0xf59/0xfa0 kernel/hung_task.c:379
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:check_kcov_mode kernel/kcov.c:193 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 kernel/kcov.c:320
Code: a0 ce 7c 7e 65 8b 15 a1 ce 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 91 f8 15 00 00 <83> fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1
RSP: 0018:ffffc900015b7220 EFLAGS: 00000246
RAX: ffffffff81328f9a RBX: ffffc900015b72e0 RCX: ffff88801d2d3c00
RDX: 0000000000000000 RSI: ffffffff89f89f00 RDI: 0000000000000000
RBP: ffffc900015b72b0 R08: ffff88801d2d3c00 R09: 0000000000000003
R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff89f89f00
R13: ffffffff8ca7b360 R14: ffffffff81758be0 R15: ffffc900015b7228
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555591a94a38 CR3: 000000000cf32000 CR4: 00000000003506e0
Call Trace:
<TASK>
arch_stack_walk+0x12a/0x190 arch/x86/kernel/stacktrace.c:27
stack_trace_save+0xaa/0x100 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:46 [inline]
kasan_set_track+0x4e/0x70 mm/kasan/common.c:53
____kasan_kmalloc mm/kasan/common.c:375 [inline]
__kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:384
kasan_kmalloc include/linux/kasan.h:198 [inline]
__do_kmalloc_node mm/slab_common.c:1007 [inline]
__kmalloc+0xb7/0x240 mm/slab_common.c:1020
kmalloc include/linux/slab.h:604 [inline]
kzalloc include/linux/slab.h:721 [inline]
ieee802_11_parse_elems_full+0xb9/0x20c0 net/mac80211/util.c:1616
ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2337 [inline]
ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2344 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1609 [inline]
ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 net/mac80211/ibss.c:1642
ieee80211_iface_process_skb net/mac80211/iface.c:1655 [inline]
ieee80211_iface_work+0x730/0xc90 net/mac80211/iface.c:1709
cfg80211_wiphy_work+0x228/0x260 net/wireless/core.c:437
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>