------------[ cut here ]------------
ODEBUG: activate active (active state 0) object: ffff88805b1e9098 object type: rcu_head hint: 0x0
WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Modules linked in:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612
Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 8e f4 8b 4c 89 e6 48 c7 c7 40 83 f4 8b e8 2f b9 a4 fc 90 <0f> 0b 90 90 58 83 05 66 1a af 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
RSP: 0018:ffffc90000a08ad8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ac018
RDX: ffff88801daea440 RSI: ffffffff817ac025 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffffffff8950 R12: ffffffff8bf48960
R13: ffffffff8b8e9540 R14: 0000000000000000 R15: ffffc90000a08b98
FS: 0000000000000000(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e11bff8 CR3: 000000001342b000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
debug_object_activate+0x2bc/0x4c0 lib/debugobjects.c:842
debug_rcu_head_queue kernel/rcu/rcu.h:224 [inline]
__call_rcu_common.constprop.0+0x2c/0x9f0 kernel/rcu/tree.c:3067
radix_tree_node_free lib/radix-tree.c:310 [inline]
delete_node+0x1fc/0x8d0 lib/radix-tree.c:573
__radix_tree_delete+0x193/0x3d0 lib/radix-tree.c:1379
radix_tree_delete_item+0xea/0x230 lib/radix-tree.c:1430
afs_cell_destroy+0x1db/0x310 fs/afs/cell.c:522
rcu_do_batch kernel/rcu/tree.c:2568 [inline]
rcu_core+0x799/0x14e0 kernel/rcu/tree.c:2824
handle_softirqs+0x216/0x8e0 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 kernel/sched/core.c:5250
Code: fb 09 00 00 44 8b 05 29 a4 fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 af 79 39 00 fb 65 48 8b 1d 6e 44 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
RSP: 0018:ffffc90000197be0 EFLAGS: 00000206
RAX: 0000000002ed7471 RBX: ffff88801daea440 RCX: ffffffff81c2f44f
RDX: 0000000000000000 RSI: ffffffff8dbdf8b9 RDI: ffffffff8bf47de0
RBP: ffffc90000197c28 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff9084f017 R11: 0000000000000000 R12: ffff8880b8539dc0
R13: ffff88804d5f0000 R14: ffff88807989a800 R15: ffff8880b853abf0
context_switch kernel/sched/core.c:5385 [inline]
__schedule+0x1177/0x5de0 kernel/sched/core.c:6767
schedule_idle+0x5c/0x90 kernel/sched/core.c:6886
do_idle+0x2b6/0x510 kernel/sched/idle.c:353
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423
start_secondary+0x21d/0x2b0 arch/x86/kernel/smpboot.c:315
common_startup_64+0x13e/0x148
----------------
Code disassembly (best guess):
0: fb sti
1: 09 00 or %eax,(%rax)
3: 00 44 8b 05 add %al,0x5(%rbx,%rcx,4)
7: 29 a4 fb 0e 45 85 c0 sub %esp,-0x3f7abaf2(%rbx,%rdi,8)
e: 0f 85 be 01 00 00 jne 0x1d2
14: 4c 89 e7 mov %r12,%rdi
17: e8 a4 f6 ff ff call 0xfffff6c0
1c: e8 af 79 39 00 call 0x3979d0
21: fb sti
22: 65 48 8b 1d 6e 44 1a mov %gs:0x121a446e(%rip),%rbx # 0x121a4498
29: 12
* 2a: 48 8d bb 18 16 00 00 lea 0x1618(%rbx),%rdi <-- trapping instruction
31: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
38: fc ff df
3b: 48 89 fa mov %rdi,%rdx
3e: 48 rex.W
3f: c1 .byte 0xc1