------------[ cut here ]------------
ODEBUG: activate active (active state 0) object: ffff888025f68018 object type: rcu_head hint: 0x0
WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 lib/debugobjects.c:612
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:debug_print_object+0x17a/0x1f0 lib/debugobjects.c:612
Code: e8 8b a3 2d fd 4c 8b 0b 48 c7 c7 40 24 80 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 5b 2a 87 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 48 c6 40 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
RSP: 0018:ffffc90000007838 EFLAGS: 00010282
RAX: a0bde7e397f9eb00 RBX: ffffffff8c2bc520 RCX: ffffffff8e896580
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff8c8025c0 R08: ffffffff81826ce2 R09: 1ffffffff2077a6e
R10: dffffc0000000000 R11: fffffbfff2077a6f R12: 0000000000000000
R13: ffffffff8c8024d8 R14: dffffc0000000000 R15: ffff888025f68018
FS: 0000000000000000(0000) GS:ffff88812525a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000ed2000 CR3: 000000003248c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000b1b000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
debug_object_activate+0x350/0x5c0 lib/debugobjects.c:842
debug_rcu_head_queue kernel/rcu/rcu.h:224 [inline]
__call_rcu_common kernel/rcu/tree.c:3067 [inline]
call_rcu+0x99/0xad0 kernel/rcu/tree.c:3202
radix_tree_node_free lib/radix-tree.c:310 [inline]
delete_node+0x1b2/0x780 lib/radix-tree.c:573
radix_tree_delete_item+0x2e6/0x3f0 lib/radix-tree.c:1430
afs_cell_destroy+0x175/0x2c0 fs/afs/cell.c:522
rcu_do_batch kernel/rcu/tree.c:2568 [inline]
rcu_core+0xaac/0x17a0 kernel/rcu/tree.c:2824
handle_softirqs+0x2d6/0x9b0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0xfb/0x220 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:sched_core_balance+0x158/0xf50 kernel/sched/core.c:6398
Code: 00 48 c7 c2 60 58 2a 8c e8 c5 28 0c 00 4c 89 74 24 58 e9 8a 0d 00 00 4c 89 f7 e8 b3 ac 82 0a e8 5e 56 38 00 fb 48 8b 5c 24 60 <83> fb 08 0f 83 58 0d 00 00 4c 8d 2c dd 90 fb 53 8e 4c 89 e8 48 c1
RSP: 0018:ffffffff8e807960 EFLAGS: 00000282
RAX: a0bde7e397f9eb00 RBX: 0000000000000000 RCX: ffffffff81cb286c
RDX: 0000000000000000 RSI: ffffffff8e446b75 RDI: ffffffff8c801aa0
RBP: ffffffff8e807ad8 R08: ffffffff903bd377 R09: 1ffffffff2077a6e
R10: dffffc0000000000 R11: fffffbfff2077a6f R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff8880b8639940 R15: ffffffff8192d1c0
do_balance_callbacks kernel/sched/core.c:5019 [inline]
__balance_callbacks+0x188/0x280 kernel/sched/core.c:5073
__schedule+0x1cd4/0x5090 kernel/sched/core.c:6751
schedule_idle+0x56/0x90 kernel/sched/core.c:6866
do_idle+0x569/0x5d0 kernel/sched/idle.c:353
cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:423
rest_init+0x2dc/0x300 init/main.c:743
start_kernel+0x484/0x510 init/main.c:1099
x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:513
x86_64_start_kernel+0x66/0x70 arch/x86/kernel/head64.c:494
common_startup_64+0x13e/0x147
----------------
Code disassembly (best guess):
0: 00 48 c7 add %cl,-0x39(%rax)
3: c2 60 58 ret $0x5860
6: 2a 8c e8 c5 28 0c 00 sub 0xc28c5(%rax,%rbp,8),%cl
d: 4c 89 74 24 58 mov %r14,0x58(%rsp)
12: e9 8a 0d 00 00 jmp 0xda1
17: 4c 89 f7 mov %r14,%rdi
1a: e8 b3 ac 82 0a call 0xa82acd2
1f: e8 5e 56 38 00 call 0x385682
24: fb sti
25: 48 8b 5c 24 60 mov 0x60(%rsp),%rbx
* 2a: 83 fb 08 cmp $0x8,%ebx <-- trapping instruction
2d: 0f 83 58 0d 00 00 jae 0xd8b
33: 4c 8d 2c dd 90 fb 53 lea -0x71ac0470(,%rbx,8),%r13
3a: 8e
3b: 4c 89 e8 mov %r13,%rax
3e: 48 rex.W
3f: c1 .byte 0xc1