------------[ cut here ]------------
ODEBUG: activate active (active state 0) object: ffff888025a2db98 object type: rcu_head hint: 0x0
WARNING: CPU: 1 PID: 6306 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 lib/debugobjects.c:612
Modules linked in:
CPU: 1 UID: 0 PID: 6306 Comm: kworker/u8:8 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: bat_events batadv_nc_worker
RIP: 0010:debug_print_object+0x16b/0x1e0 lib/debugobjects.c:612
Code: 4c 89 ff e8 47 9c 60 fd 4d 8b 0f 48 c7 c7 a0 d3 e1 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 da 29 c3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a7 11 e0 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
RSP: 0018:ffffc90000a088e0 EFLAGS: 00010292
RAX: ebe332c265361300 RBX: dffffc0000000000 RCX: ffff888024a55a00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: 0000000000000000
R13: ffffffff8be1d520 R14: ffff888025a2db98 R15: ffffffff8b8bde80
FS:  0000000000000000(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faebc205286 CR3: 0000000034fb8000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 debug_object_activate+0x26a/0x420 lib/debugobjects.c:842
 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline]
 __call_rcu_common kernel/rcu/tree.c:3079 [inline]
 call_rcu+0xaa/0x9c0 kernel/rcu/tree.c:3214
 radix_tree_node_free lib/radix-tree.c:310 [inline]
 delete_node+0x1b6/0xa50 lib/radix-tree.c:573
 radix_tree_delete_item+0x2b6/0x400 lib/radix-tree.c:1430
 afs_cell_destroy+0x16f/0x2c0 fs/afs/cell.c:522
 rcu_do_batch kernel/rcu/tree.c:2576 [inline]
 rcu_core+0xca8/0x1710 kernel/rcu/tree.c:2832
 handle_softirqs+0x283/0x870 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:114 [inline]
RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:128 [inline]
RIP: 0010:lock_release+0xaf/0x3e0 kernel/locking/lockdep.c:5888
Code: 0a 00 00 00 0f 85 1e 02 00 00 49 81 3e 00 c3 60 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 <fa> 48 c7 c7 53 8c 99 8d e8 64 07 ca 09 65 ff 05 4d 04 ff 10 c7 44
RSP: 0018:ffffc9000b5c79b8 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000202 RCX: ebe332c265361300
RDX: 0000000000000000 RSI: ffffffff8be1c9e0 RDI: ffffffff8be1c9a0
RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b35fe82
R10: dffffc0000000000 R11: ffffffff8b35fdb0 R12: dffffc0000000000
R13: ffffffff8b35fe82 R14: ffffffff8e13f0e0 R15: ffff888024a55a00
 rcu_lock_release include/linux/rcupdate.h:341 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
 batadv_nc_worker+0x28c/0x610 net/batman-adv/network-coding.c:719
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
 kthread+0x711/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	0a 00                	or     (%rax),%al
   2:	00 00                	add    %al,(%rax)
   4:	0f 85 1e 02 00 00    	jne    0x228
   a:	49 81 3e 00 c3 60 93 	cmpq   $0xffffffff9360c300,(%r14)
  11:	0f 84 11 02 00 00    	je     0x228
  17:	48 c7 44 24 20 00 00 	movq   $0x0,0x20(%rsp)
  1e:	00 00
  20:	9c                   	pushf
  21:	8f 44 24 20          	pop    0x20(%rsp)
  25:	48 8b 5c 24 20       	mov    0x20(%rsp),%rbx
* 2a:	fa                   	cli <-- trapping instruction
  2b:	48 c7 c7 53 8c 99 8d 	mov    $0xffffffff8d998c53,%rdi
  32:	e8 64 07 ca 09       	call   0x9ca079b
  37:	65 ff 05 4d 04 ff 10 	incl   %gs:0x10ff044d(%rip)        # 0x10ff048b
  3e:	c7                   	.byte 0xc7
  3f:	44                   	rex.R