------------[ cut here ]------------ ODEBUG: free active (active state 0) object type: timer_list hint: xprt_init_autodisconnect+0x0/0x220 include/linux/list.h:64 WARNING: CPU: 1 PID: 12763 at lib/debugobjects.c:325 debug_print_object+0x16a/0x250 lib/debugobjects.c:325 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 12763 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #28 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 panic+0x2cb/0x65c kernel/panic.c:214 __warn.cold+0x20/0x48 kernel/panic.c:571 report_bug+0x263/0x2b0 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x11b/0x200 arch/x86/kernel/traps.c:271 do_invalid_op+0x37/0x50 arch/x86/kernel/traps.c:290 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:973 RIP: 0010:debug_print_object+0x16a/0x250 lib/debugobjects.c:325 Code: dd e0 bf 81 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd e0 bf 81 88 48 c7 c7 80 b5 81 88 e8 16 53 ba fd <0f> 0b 83 05 b1 e4 ca 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 RSP: 0018:ffff8880ae7079d0 EFLAGS: 00010082 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000100 RSI: ffffffff81685456 RDI: 0000000000000005 RBP: ffff8880ae707a10 R08: ffff8880961ba100 R09: ffffed1015ce3ef9 R10: ffffed1015ce3ef8 R11: ffff8880ae71f7c7 R12: 0000000000000001 R13: ffffffff899ad9e0 R14: ffffffff816ea710 R15: dffffc0000000000 kobject: 'loop4' (0000000020e4df03): kobject_uevent_env __debug_check_no_obj_freed lib/debugobjects.c:785 [inline] debug_check_no_obj_freed+0x39d/0x588 lib/debugobjects.c:817 kfree+0xbd/0x230 mm/slab.c:3805 __rcu_reclaim kernel/rcu/rcu.h:233 [inline] rcu_do_batch kernel/rcu/tree.c:2452 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2773 [inline] rcu_process_callbacks+0xd76/0x1680 kernel/rcu/tree.c:2754 kobject: 'loop4' (0000000020e4df03): fill_kobj_path: path = '/devices/virtual/block/loop4' __do_softirq+0x30b/0xb11 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x1b7/0x760 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline] RIP: 0010:lock_acquire+0x259/0x570 kernel/locking/lockdep.c:3844 Code: 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 64 02 00 00 48 83 3d 26 31 2e 08 00 0f 84 d0 01 00 00 48 8b bd 48 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 85 40 ff ff ff RSP: 0018:ffff88805c376cb8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff1325016 RBX: ffff8880961ba100 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000286 RBP: ffff88805c376d88 R08: 0000000000000001 R09: ffff8880961ba9c8 R10: ffff8880961ba9a8 R11: 0000000000000001 R12: ffffffff899a3f00 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 rcu_lock_acquire include/linux/rcupdate.h:223 [inline] rcu_read_lock+0x29/0x70 include/linux/rcupdate.h:607 lock_page_memcg+0x75/0x2e0 mm/memcontrol.c:1885 page_remove_file_rmap mm/rmap.c:1217 [inline] page_remove_rmap+0x7e8/0x1990 mm/rmap.c:1302 zap_pte_range mm/memory.c:1090 [inline] zap_pmd_range mm/memory.c:1192 [inline] zap_pud_range mm/memory.c:1221 [inline] zap_p4d_range mm/memory.c:1242 [inline] unmap_page_range+0xf0f/0x25a0 mm/memory.c:1263 unmap_single_vma+0x19d/0x300 mm/memory.c:1308 unmap_vmas+0x17c/0x310 mm/memory.c:1339 exit_mmap+0x2d4/0x5d0 mm/mmap.c:3140 __mmput kernel/fork.c:1047 [inline] mmput+0x240/0x640 kernel/fork.c:1068 exit_mm kernel/exit.c:545 [inline] do_exit+0x9e2/0x26e0 kernel/exit.c:854 do_group_exit+0x177/0x430 kernel/exit.c:971 get_signal+0x8b4/0x19b0 kernel/signal.c:2517 do_signal+0x91/0x1ea0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x2f7/0x3b0 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x696/0x800 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457ec9 Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fc58b6cbcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 000000000073bf08 RCX: 0000000000457ec9 RDX: 00000000004c6426 RSI: 0000000000000081 RDI: 000000000073bf0c RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000fdef R11: 0000000000000246 R12: 000000000073bf0c R13: 00007ffdb179850f R14: 00007fc58b6cc9c0 R15: 000000000073bf0c ======================================================