------------[ cut here ]------------
ODEBUG: activate active (active state 0) object: ffff88806a900dd8 object type: rcu_head hint: 0x0
WARNING: lib/debugobjects.c:615 at debug_print_object lib/debugobjects.c:612 [inline], CPU#0: syz-executor/5832
WARNING: lib/debugobjects.c:615 at debug_object_activate+0x33b/0x580 lib/debugobjects.c:842, CPU#0: syz-executor/5832
Modules linked in:
CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
RIP: 0010:debug_print_object lib/debugobjects.c:612 [inline]
RIP: 0010:debug_object_activate+0x39c/0x580 lib/debugobjects.c:842
Code: 30 00 74 08 4c 89 ef e8 e2 3b 7b fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 60 65 09 8c 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 4c 05 62 0b b8 ea
RSP: 0018:ffffc90000007bf0 EFLAGS: 00010246
RAX: 1ffffffff175c3bc RBX: ffff88806a900dd8 RCX: 0000000000000000
RDX: ffffffff8c096b40 RSI: ffffffff8c096560 RDI: ffffffff901c4980
RBP: 0000000000000003 R08: ffff88806a900dd8 R09: ffffffff8bae1e40
R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff901c4980
R13: ffffffff8bae1de0 R14: dffffc0000000000 R15: ffffffff8c096b40
FS:  000055558f920500(0000) GS:ffff88812529d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f20507456b8 CR3: 0000000075706000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline]
 __call_rcu_common kernel/rcu/tree.c:3116 [inline]
 call_rcu+0x43/0x890 kernel/rcu/tree.c:3251
 radix_tree_node_free lib/radix-tree.c:310 [inline]
 delete_node+0x1b6/0xa50 lib/radix-tree.c:573
 radix_tree_delete_item+0x2e9/0x400 lib/radix-tree.c:1430
 afs_cell_destroy+0x16f/0x2c0 fs/afs/cell.c:580
 rcu_do_batch kernel/rcu/tree.c:2617 [inline]
 rcu_core+0x7cd/0x1070 kernel/rcu/tree.c:2869
 handle_softirqs+0x22a/0x7c0 kernel/softirq.c:626
 __do_softirq kernel/softirq.c:660 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x5f/0x150 kernel/softirq.c:727
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:743
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__page_table_check_ptes_set+0x190/0x320 mm/page_table_check.c:212
Code: 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 3b 07 8c ff 90 0f 0b 90 eb 05 e8 30 07 8c ff <31> ff 89 ee e8 67 0b 8c ff 41 89 ef 85 ed 0f 84 a6 00 00 00 4c 89
RSP: 0018:ffffc9000411f2d0 EFLAGS: 00000293
RAX: ffffffff823719c5 RBX: 800000006375a007 RCX: ffff8880792f0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400031bad0
R10: dffffc0000000000 R11: fffff9400031bad1 R12: dffffc0000000000
R13: 800000006375a007 R14: ffff888038eefaa8 R15: ffff88807e99ee40
 page_table_check_ptes_set include/linux/page_table_check.h:83 [inline]
 set_ptes include/linux/pgtable.h:413 [inline]
 __copy_present_ptes mm/memory.c:1117 [inline]
 copy_present_ptes mm/memory.c:1196 [inline]
 copy_pte_range mm/memory.c:1319 [inline]
 copy_pmd_range+0x3b71/0x7e80 mm/memory.c:1407
 copy_pud_range mm/memory.c:1444 [inline]
 copy_p4d_range mm/memory.c:1468 [inline]
 copy_page_range+0xb8d/0x11c0 mm/memory.c:1554
 dup_mmap+0xf41/0x1d90 mm/mmap.c:1840
 dup_mm kernel/fork.c:1530 [inline]
 copy_mm+0x13b/0x4b0 kernel/fork.c:1582
 copy_process+0x18b5/0x3cf0 kernel/fork.c:2222
 kernel_clone+0x248/0x870 kernel/fork.c:2653
 __do_sys_clone kernel/fork.c:2794 [inline]
 __se_sys_clone kernel/fork.c:2778 [inline]
 __x64_sys_clone+0x1b6/0x230 kernel/fork.c:2778
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f204f9c3752
Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
RSP: 002b:00007ffd25a5b2b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007ffd25a5b2b0 RCX: 00007f204f9c3752
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 00007ffd25a5b43c R08: 0000000000000000 R09: 0000000000000001
R10: 000055558f9207d0 R11: 0000000000000246 R12: 0000000000000001
R13: 00000000000927c0 R14: 0000000000080555 R15: 00007ffd25a5b490
 </TASK>
----------------
Code disassembly (best guess):
   0:	30 00                	xor    %al,(%rax)
   2:	74 08                	je     0xc
   4:	4c 89 ef             	mov    %r13,%rdi
   7:	e8 e2 3b 7b fd       	call   0xfd7b3bee
   c:	4d 8b 4d 00          	mov    0x0(%r13),%r9
  10:	4c 89 e7             	mov    %r12,%rdi
  13:	48 c7 c6 60 65 09 8c 	mov    $0xffffffff8c096560,%rsi
  1a:	4c 89 fa             	mov    %r15,%rdx
  1d:	8b 4c 24 04          	mov    0x4(%rsp),%ecx
  21:	4c 8b 44 24 10       	mov    0x10(%rsp),%r8
  26:	ff 74 24 08          	push   0x8(%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	4c 8b 7c 24 18       	mov    0x18(%rsp),%r15
  38:	ff 05 4c 05 62 0b    	incl   0xb62054c(%rip)        # 0xb62058a
  3e:	b8                   	.byte 0xb8
  3f:	ea                   	(bad)