------------[ cut here ]------------ ODEBUG: activate active (active state 0) object: ffff88805b1e9098 object type: rcu_head hint: 0x0 WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612 Modules linked in: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612 Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 8e f4 8b 4c 89 e6 48 c7 c7 40 83 f4 8b e8 2f b9 a4 fc 90 <0f> 0b 90 90 58 83 05 66 1a af 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d RSP: 0018:ffffc90000a08ad8 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ac018 RDX: ffff88801daea440 RSI: ffffffff817ac025 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: ffffffffffff8950 R12: ffffffff8bf48960 R13: ffffffff8b8e9540 R14: 0000000000000000 R15: ffffc90000a08b98 FS: 0000000000000000(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e11bff8 CR3: 000000001342b000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> debug_object_activate+0x2bc/0x4c0 lib/debugobjects.c:842 debug_rcu_head_queue kernel/rcu/rcu.h:224 [inline] __call_rcu_common.constprop.0+0x2c/0x9f0 kernel/rcu/tree.c:3067 radix_tree_node_free lib/radix-tree.c:310 [inline] delete_node+0x1fc/0x8d0 lib/radix-tree.c:573 __radix_tree_delete+0x193/0x3d0 lib/radix-tree.c:1379 radix_tree_delete_item+0xea/0x230 lib/radix-tree.c:1430 afs_cell_destroy+0x1db/0x310 fs/afs/cell.c:522 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x799/0x14e0 kernel/rcu/tree.c:2824 handle_softirqs+0x216/0x8e0 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 kernel/sched/core.c:5250 Code: fb 09 00 00 44 8b 05 29 a4 fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 af 79 39 00 fb 65 48 8b 1d 6e 44 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 RSP: 0018:ffffc90000197be0 EFLAGS: 00000206 RAX: 0000000002ed7471 RBX: ffff88801daea440 RCX: ffffffff81c2f44f RDX: 0000000000000000 RSI: ffffffff8dbdf8b9 RDI: ffffffff8bf47de0 RBP: ffffc90000197c28 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff9084f017 R11: 0000000000000000 R12: ffff8880b8539dc0 R13: ffff88804d5f0000 R14: ffff88807989a800 R15: ffff8880b853abf0 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x1177/0x5de0 kernel/sched/core.c:6767 schedule_idle+0x5c/0x90 kernel/sched/core.c:6886 do_idle+0x2b6/0x510 kernel/sched/idle.c:353 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423 start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x148 </TASK> ---------------- Code disassembly (best guess): 0: fb sti 1: 09 00 or %eax,(%rax) 3: 00 44 8b 05 add %al,0x5(%rbx,%rcx,4) 7: 29 a4 fb 0e 45 85 c0 sub %esp,-0x3f7abaf2(%rbx,%rdi,8) e: 0f 85 be 01 00 00 jne 0x1d2 14: 4c 89 e7 mov %r12,%rdi 17: e8 a4 f6 ff ff call 0xfffff6c0 1c: e8 af 79 39 00 call 0x3979d0 21: fb sti 22: 65 48 8b 1d 6e 44 1a mov %gs:0x121a446e(%rip),%rbx # 0x121a4498 29: 12 * 2a: 48 8d bb 18 16 00 00 lea 0x1618(%rbx),%rdi <-- trapping instruction 31: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 38: fc ff df 3b: 48 89 fa mov %rdi,%rdx 3e: 48 rex.W 3f: c1 .byte 0xc1