------------[ cut here ]------------ ODEBUG: free active (active state 1) object type: rcu_head hint: 0x0 WARNING: CPU: 1 PID: 4092 at lib/debugobjects.c:515 debug_print_object lib/debugobjects.c:512 [inline] WARNING: CPU: 1 PID: 4092 at lib/debugobjects.c:515 __debug_check_no_obj_freed lib/debugobjects.c:999 [inline] WARNING: CPU: 1 PID: 4092 at lib/debugobjects.c:515 debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1030 Modules linked in: CPU: 1 PID: 4092 Comm: syz-executor.2 Not tainted 5.15.105-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object lib/debugobjects.c:512 [inline] pc : __debug_check_no_obj_freed lib/debugobjects.c:999 [inline] pc : debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1030 lr : debug_print_object lib/debugobjects.c:512 [inline] lr : __debug_check_no_obj_freed lib/debugobjects.c:999 [inline] lr : debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1030 sp : ffff800008017ad0 x29: ffff800008017b10 x28: ffff800011a9a900 x27: dfff800000000000 x26: ffff0000d4a2eb08 x25: 0000000000000001 x24: ffff8000185fc070 x23: ffff0000c23be540 x22: ffff800011f30d98 x21: ffff800011a9a900 x20: ffff8000185fc068 x19: ffff0000d4a2e800 x18: 0000000000000102 x17: ff808000083336c4 x16: ffff80001193f6fc x15: ffff8000083336c4 x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000100 x11: ff8080000832b16c x10: 0000000000000000 x9 : f3b72fc6fb63cb00 x8 : f3b72fc6fb63cb00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800008017238 x4 : ffff80001499f940 x3 : ffff800008549b3c x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000044 Call trace: debug_print_object lib/debugobjects.c:512 [inline] __debug_check_no_obj_freed lib/debugobjects.c:999 [inline] debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1030 slab_free_hook mm/slub.c:1680 [inline] slab_free_freelist_hook+0x9c/0x1ec mm/slub.c:1731 slab_free mm/slub.c:3499 [inline] kfree+0x178/0x410 mm/slub.c:4559 qdisc_free net/sched/sch_generic.c:1001 [inline] qdisc_free_cb+0xac/0xcc net/sched/sch_generic.c:1008 rcu_do_batch kernel/rcu/tree.c:2509 [inline] rcu_core+0x830/0x1b34 kernel/rcu/tree.c:2749 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2762 __do_softirq+0x344/0xe20 kernel/softirq.c:558 do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] invoke_softirq kernel/softirq.c:439 [inline] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636 irq_exit+0x14/0x88 kernel/softirq.c:660 handle_domain_irq+0xf4/0x178 kernel/irq/irqdesc.c:710 gic_handle_irq+0x78/0x1c8 drivers/irqchip/irq-gic-v3.c:757 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:899 do_interrupt_handler+0x74/0x94 arch/arm64/kernel/entry-common.c:267 el1_interrupt+0x30/0x58 arch/arm64/kernel/entry-common.c:442 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:458 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:580 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline] raw_spin_rq_unlock_irq kernel/sched/sched.h:1337 [inline] finish_lock_switch+0xc4/0x1e8 kernel/sched/core.c:4780 finish_task_switch+0x120/0x6b4 kernel/sched/core.c:4898 context_switch kernel/sched/core.c:5029 [inline] __schedule+0xf14/0x1e38 kernel/sched/core.c:6372 preempt_schedule_common+0x140/0x260 kernel/sched/core.c:6548 preempt_schedule+0x64/0x84 kernel/sched/core.c:6573 __raw_read_unlock include/linux/rwlock_api_smp.h:227 [inline] _raw_read_unlock+0xe4/0x128 kernel/locking/spinlock.c:260 wait_task_zombie kernel/exit.c:1099 [inline] wait_consider_task+0x948/0x2914 kernel/exit.c:1406 do_wait_thread kernel/exit.c:1469 [inline] do_wait+0x2f4/0xac8 kernel/exit.c:1586 kernel_wait4+0x24c/0x400 kernel/exit.c:1749 __do_sys_wait4 kernel/exit.c:1777 [inline] __se_sys_wait4 kernel/exit.c:1773 [inline] __arm64_sys_wait4+0x120/0x2d0 kernel/exit.c:1773 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 2680405 hardirqs last enabled at (2680404): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (2680405): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387 softirqs last enabled at (2680324): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (2680337): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (2680337): [] invoke_softirq kernel/softirq.c:439 [inline] softirqs last disabled at (2680337): [] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636 ---[ end trace a5b001600e7f5583 ]---