------------[ cut here ]------------ ODEBUG: free active (active state 0) object: ffff88803380d360 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 net/bluetooth/coredump.c:232 WARNING: CPU: 0 PID: 8364 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612 Modules linked in: CPU: 0 UID: 0 PID: 8364 Comm: syz.1.964 Tainted: G I syzkaller #0 PREEMPT(full) Tainted: [I]=FIRMWARE_WORKAROUND Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612 Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 42 16 8c 4c 89 e6 48 c7 c7 e0 36 16 8c e8 ef c6 91 fc 90 <0f> 0b 90 90 58 83 05 c6 9b c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d RSP: 0018:ffffc90002f17758 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a02f8 RDX: ffff88802dee8000 RSI: ffffffff817a0305 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c163d80 R13: ffffffff8bafec00 R14: ffffffff8a9b1620 R15: ffffc90002f17858 FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c3097d06e8 CR3: 0000000053b50000 CR4: 00000000003526f0 Call Trace: __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline] debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129 slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4695 [inline] kfree+0x28f/0x4d0 mm/slub.c:4894 hci_release_dev+0x4ef/0x610 net/bluetooth/hci_core.c:2776 bt_host_release+0x6a/0xb0 net/bluetooth/hci_sysfs.c:87 device_release+0xa1/0x240 drivers/base/core.c:2565 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1e7/0x5a0 lib/kobject.c:737 put_device+0x1f/0x30 drivers/base/core.c:3797 vhci_release+0x185/0x230 drivers/bluetooth/hci_vhci.c:691