------------[ cut here ]------------
ODEBUG: activate active (active state 0) object: ffff88807e2de3d8 object type: rcu_head hint: 0x0
WARNING: lib/debugobjects.c:632 at debug_print_object lib/debugobjects.c:629 [inline], CPU#0: udevd/5201
WARNING: lib/debugobjects.c:632 at debug_object_activate+0x33b/0x580 lib/debugobjects.c:859, CPU#0: udevd/5201
Modules linked in:
CPU: 0 UID: 0 PID: 5201 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:debug_print_object lib/debugobjects.c:629 [inline]
RIP: 0010:debug_object_activate+0x39c/0x580 lib/debugobjects.c:859
Code: 30 00 74 08 4c 89 ef e8 a2 62 6b fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 e0 10 2a 8c 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 8c 3f 6f 0b b8 ea
RSP: 0018:ffffc90000007bf0 EFLAGS: 00010246
RAX: 1ffffffff179c030 RBX: ffff88807e2de3d8 RCX: 0000000000000000
RDX: ffffffff8c2a16c0 RSI: ffffffff8c2a10e0 RDI: ffffffff903e8e90
RBP: 0000000000000003 R08: ffff88807e2de3d8 R09: ffffffff8bce01e0
R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff903e8e90
R13: ffffffff8bce0180 R14: dffffc0000000000 R15: ffffffff8c2a16c0
FS: 00007fb434e4e880(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c4123bc CR3: 0000000050f68000 CR4: 00000000003526f0
Call Trace:
debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline]
__call_rcu_common kernel/rcu/tree.c:3116 [inline]
call_rcu+0x43/0x890 kernel/rcu/tree.c:3251
radix_tree_node_free lib/radix-tree.c:310 [inline]
delete_node+0x1b6/0xa50 lib/radix-tree.c:573
radix_tree_delete_item+0x2e9/0x400 lib/radix-tree.c:1430
afs_cell_destroy+0x16f/0x2c0 fs/afs/cell.c:580
rcu_do_batch kernel/rcu/tree.c:2617 [inline]
rcu_core+0x7cd/0x1070 kernel/rcu/tree.c:2869
handle_softirqs+0x22a/0x870 kernel/softirq.c:626
__do_softirq kernel/softirq.c:660 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0x5f/0x150 kernel/softirq.c:727
irq_exit_rcu+0x9/0x30 kernel/softirq.c:743
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x20b/0x2e0 kernel/locking/lockdep.c:5872
Code: e9 30 ff ff ff e8 05 03 19 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 81 30 a0 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 3e 3e 95
RSP: 0018:ffffc90003a17818 EFLAGS: 00000286
RAX: 12d3ebf1340de500 RBX: 0000000000000246 RCX: 0000000000000046
RDX: 000000005a44979c RSI: ffffffff8e287f97 RDI: ffffffff8c2a0b00
RBP: 0000000000000000 R08: ffffffff8176da45 R09: ffffffff8e9602e0
R10: ffffc90003a17978 R11: ffffffff81b11670 R12: 0000000000000002
R13: ffffffff8e9602e0 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
rcu_read_lock include/linux/rcupdate.h:850 [inline]
class_rcu_constructor include/linux/rcupdate.h:1193 [inline]
unwind_next_frame+0xc2/0x23c0 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:57 [inline]
kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
poison_slab_object mm/kasan/common.c:253 [inline]
__kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
kasan_slab_free include/linux/kasan.h:235 [inline]
slab_free_hook mm/slub.c:2687 [inline]
slab_free mm/slub.c:6124 [inline]
kfree+0x1c1/0x630 mm/slub.c:6442
seq_release+0x54/0x70 fs/seq_file.c:356
kernfs_fop_release+0x30f/0x460 fs/kernfs/file.c:784
__fput+0x44f/0xa70 fs/file_table.c:469
fput_close_sync+0x11f/0x240 fs/file_table.c:574
__do_sys_close fs/open.c:1509 [inline]
__se_sys_close fs/open.c:1494 [inline]
__x64_sys_close+0x7e/0x110 fs/open.c:1494
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb434715a67
Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007ffda0ef37d8 EFLAGS: 00000297 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 00005605bb00a8a0 RCX: 00007fb434715a67
RDX: 00007fb4347efea0 RSI: 00005605bb02f7e0 RDI: 000000000000000c
RBP: 00007fb4347efff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000
R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544
----------------
Code disassembly (best guess):
0: 30 00 xor %al,(%rax)
2: 74 08 je 0xc
4: 4c 89 ef mov %r13,%rdi
7: e8 a2 62 6b fd call 0xfd6b62ae
c: 4d 8b 4d 00 mov 0x0(%r13),%r9
10: 4c 89 e7 mov %r12,%rdi
13: 48 c7 c6 e0 10 2a 8c mov $0xffffffff8c2a10e0,%rsi
1a: 4c 89 fa mov %r15,%rdx
1d: 8b 4c 24 04 mov 0x4(%rsp),%ecx
21: 4c 8b 44 24 10 mov 0x10(%rsp),%r8
26: ff 74 24 08 push 0x8(%rsp)
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 48 83 c4 08 add $0x8,%rsp
33: 4c 8b 7c 24 18 mov 0x18(%rsp),%r15
38: ff 05 8c 3f 6f 0b incl 0xb6f3f8c(%rip) # 0xb6f3fca
3e: b8 .byte 0xb8
3f: ea (bad)