INFO: task kworker/1:4:5902 blocked for more than 144 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/1:4 state:D stack:22152 pid:5902 tgid:5902 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient reg_check_chans_work Call Trace: context_switch kernel/sched/core.c:5354 [inline] __schedule+0x165c/0x5520 kernel/sched/core.c:6966 __schedule_loop kernel/sched/core.c:7049 [inline] schedule+0x164/0x360 kernel/sched/core.c:7064 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7121 __mutex_lock_common kernel/locking/mutex.c:710 [inline] __mutex_lock+0x856/0x1420 kernel/locking/mutex.c:794 class_wiphy_constructor include/net/cfg80211.h:6645 [inline] reg_leave_invalid_chans net/wireless/reg.c:2454 [inline] reg_check_chans_work+0x197/0x1090 net/wireless/reg.c:2469 process_one_work kernel/workqueue.c:3302 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3466 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/u8:14:8862 blocked for more than 144 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u8:14 state:D stack:25656 pid:8862 tgid:8862 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: ipv6_addrconf addrconf_verify_work Call Trace: context_switch kernel/sched/core.c:5354 [inline] __schedule+0x165c/0x5520 kernel/sched/core.c:6966 __schedule_loop kernel/sched/core.c:7049 [inline] schedule+0x164/0x360 kernel/sched/core.c:7064 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7121 __mutex_lock_common kernel/locking/mutex.c:710 [inline] __mutex_lock+0x856/0x1420 kernel/locking/mutex.c:794 rtnl_net_lock include/linux/rtnetlink.h:130 [inline] addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4739 process_one_work kernel/workqueue.c:3302 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3466 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: 1 lock held by kthreadd/2: 1 lock held by kworker/R-kvfre/6: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 kernel/workqueue.c:2717 2 locks held by kworker/0:0/9: 4 locks held by kworker/0:1/10: 4 locks held by kworker/u8:0/12: 3 locks held by kworker/u8:1/13: 1 lock held by kworker/R-mm_pe/14: 4 locks held by kworker/1:0/24: #0: ffff888037912540 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff888037912540 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc900001e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc900001e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffff88802fefd380 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 drivers/net/wireguard/noise.c:598 #3: ffff88807e68aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 drivers/net/wireguard/noise.c:632 3 locks held by kworker/1:1/29: 1 lock held by khungtaskd/31: #0: ffffffff8e95d260 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline] #0: ffffffff8e95d260 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline] #0: ffffffff8e95d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 1 lock held by kworker/R-write/33: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 kernel/workqueue.c:2717 4 locks held by kworker/u8:2/36: #0: ffff88804b46c140 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff88804b46c140 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc90000ac7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc90000ac7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffff888034015380 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 drivers/net/wireguard/noise.c:529 #3: ffff88802c974888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 drivers/net/wireguard/noise.c:530 3 locks held by kworker/u8:3/49: 3 locks held by kworker/u8:4/58: 3 locks held by kworker/u8:5/134: 3 locks held by kworker/1:2/807: 3 locks held by kworker/0:2/992: #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc90005237c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc90005237c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffffffff8fded8c0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 net/switchdev/switchdev.c:104 3 locks held by kworker/u8:6/1010: 5 locks held by kworker/u8:7/1023: 3 locks held by kworker/0:3/1231: 3 locks held by kworker/u8:8/1335: 3 locks held by kworker/u8:9/1348: #0: ffff88801ae9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff88801ae9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc9000622fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc9000622fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0xd2/0x740 kernel/workqueue.c:2999 4 locks held by kworker/R-bat_e/3429: 1 lock held by kworker/R-ext4-/5175: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 kernel/workqueue.c:2717 1 lock held by klogd/5201: 2 locks held by udevd/5212: 2 locks held by dhcpcd/5506: 2 locks held by dhcpcd/5507: 1 lock held by crond/5585: 2 locks held by getty/5602: #0: ffff88803244e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 drivers/tty/n_tty.c:2211 1 lock held by kworker/R-wg-cr/5870: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 1 lock held by kworker/R-wg-cr/5871: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 1 lock held by kworker/R-wg-cr/5872: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 1 lock held by kworker/R-wg-cr/5874: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 1 lock held by kworker/R-wg-cr/5876: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 2 locks held by kworker/R-wg-cr/5880: 3 locks held by kworker/0:4/5888: 3 locks held by kworker/1:3/5895: 4 locks held by kworker/1:4/5902: #0: ffff88813fe59d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff88813fe59d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc90003c67c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc90003c67c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffffffff8fded8c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 net/wireless/reg.c:2466 #3: ffff88805c550780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6645 [inline] #3: ffff88805c550780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_leave_invalid_chans net/wireless/reg.c:2454 [inline] #3: ffff88805c550780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x197/0x1090 net/wireless/reg.c:2469 3 locks held by kworker/1:5/5909: 4 locks held by kworker/0:5/5929: 1 lock held by syz-executor/6677: 3 locks held by kworker/1:6/7678: 2 locks held by syz-executor/8018: 1 lock held by kworker/R-wg-cr/8090: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 1 lock held by kworker/R-wg-cr/8091: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 1 lock held by kworker/R-wg-cr/8093: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_detach_from_pool kernel/workqueue.c:2775 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc4d/0x1130 kernel/workqueue.c:3637 4 locks held by kworker/0:6/8583: #0: ffff888060d0c540 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff888060d0c540 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc90005c3fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc90005c3fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffff8880365f5380 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 drivers/net/wireguard/noise.c:598 #3: ffff88806060b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 drivers/net/wireguard/noise.c:632 3 locks held by kworker/u8:10/8855: 3 locks held by kworker/u8:11/8857: 4 locks held by kworker/u8:12/8859: #0: ffff88804c754940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff88804c754940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc90002e57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc90002e57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffff88802fefd380 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 drivers/net/wireguard/noise.c:529 #3: ffff88807e68aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 drivers/net/wireguard/noise.c:530 4 locks held by kworker/u8:13/8861: 3 locks held by kworker/u8:14/8862: #0: ffff8880321a6140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3277 [inline] #0: ffff8880321a6140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 kernel/workqueue.c:3385 #1: ffffc900026f7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3278 [inline] #1: ffffc900026f7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 kernel/workqueue.c:3385 #2: ffffffff8fded8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff8fded8c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4739 4 locks held by syz.3.1057/9317: 1 lock held by syz.0.1058/9319: 4 locks held by kworker/u8:15/9323: 5 locks held by kworker/u8:16/9324: 1 lock held by kworker/u8:17/9325: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 kernel/workqueue.c:2717 1 lock held by kworker/0:7/9327: #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: set_pf_worker kernel/workqueue.c:3391 [inline] #0: ffffffff8e7fb640 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_thread+0x5d/0xfc0 kernel/workqueue.c:3417 2 locks held by dhcpcd/9328: #0: ffff888034da8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1713 [inline] #0: ffff888034da8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 net/packet/af_packet.c:3198 #1: ffffffff8e963568 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] #1: ffffffff8e963568 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 kernel/rcu/tree_exp.h:961 1 lock held by syz-executor/9330: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd3/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 3429 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Workqueue: bat_events batadv_tt_purge RIP: 0010:lock_release+0x5/0x3c0 kernel/locking/lockdep.c:5876 Code: e9 70 fe ff ff 41 be 2f 00 00 00 e9 0e ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b RSP: 0018:ffffc90000a07d48 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff90c92f01 RCX: 0000000080000102 RDX: ffffc90000a07e01 RSI: ffffffff81776256 RDI: ffffffff8e95d260 RBP: dffffc0000000000 R08: ffffc90000a07e78 R09: 0000000000000000 R10: ffffc90000a07ed8 R11: fffff52000140fdd R12: ffffc90000a07e88 R13: ffffc90000a01000 R14: ffffc90000a07e88 R15: ffffffff81776256 FS: 0000000000000000(0000) GS:ffff888125304000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f87ad3ea078 CR3: 0000000036738000 CR4: 00000000003526f0 Call Trace: rcu_lock_release include/linux/rcupdate.h:322 [inline] rcu_read_unlock include/linux/rcupdate.h:881 [inline] class_rcu_destructor include/linux/rcupdate.h:1193 [inline] unwind_next_frame+0x1bba/0x2550 arch/x86/kernel/unwind_orc.c:709 __unwind_start+0x5b8/0x760 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] kmem_cache_alloc_noprof+0x2bc/0x650 mm/slub.c:4905 skb_clone+0x212/0x3a0 net/core/skbuff.c:2109 deliver_clone net/bridge/br_forward.c:125 [inline] br_flood+0x8cf/0xb80 net/bridge/br_forward.c:250 br_handle_frame_finish+0x14c2/0x1bb0 net/bridge/br_input.c:229 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x91f/0xc30 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x374/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1277/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x98f/0x3170 net/core/dev.c:6082 __netif_receive_skb_one_core net/core/dev.c:6193 [inline] __netif_receive_skb net/core/dev.c:6308 [inline] process_backlog+0x76d/0x1950 net/core/dev.c:6659 __napi_poll+0xae/0x340 net/core/dev.c:7723 napi_poll net/core/dev.c:7786 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7943 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_local_purge+0x2a7/0x340 net/batman-adv/translation-table.c:1315 batadv_tt_purge+0x35/0x9e0 net/batman-adv/translation-table.c:3509 process_one_work kernel/workqueue.c:3302 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385 rescuer_thread+0x827/0x1130 kernel/workqueue.c:3609 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245