------------[ cut here ]------------ ODEBUG: free active (active state 0) object: ffff888059f1d278 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x20 net/bridge/br_private.h:1290 WARNING: lib/debugobjects.c:612 at 0x0, CPU#1: ksoftirqd/1/23 Modules linked in: CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:debug_print_object+0x19b/0x2a0 lib/debugobjects.c:612 Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d a2 76 dd 0b 41 56 48 8b 14 dd e0 53 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 3c 2f d4 0b 01 48 83 c4 18 5b 5d 41 5c 41 RSP: 0018:ffffc900001d7978 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: ffffffff8bf25320 RSI: ffffffff8bf24f00 RDI: ffffffff90916fd0 RBP: 0000000000000001 R08: ffff888059f1d278 R09: ffffffff8b906bc0 R10: ffffffff9087f7d7 R11: ffff88801dadd4b0 R12: ffffffff8bf24f00 R13: ffffffff8b906c00 R14: ffffffff8a4980a0 R15: ffffc900001d7a78 FS: 0000000000000000(0000) GS:ffff888124a09000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2ee23ffc CR3: 0000000028924000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline] debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129 slab_free_hook mm/slub.c:2471 [inline] slab_free mm/slub.c:6663 [inline] kfree+0x2d1/0x6e0 mm/slub.c:6871 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1ef/0x6f0 lib/kobject.c:737 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0x79c/0x15f0 kernel/rcu/tree.c:2857 handle_softirqs+0x219/0x950 kernel/softirq.c:622 run_ksoftirqd kernel/softirq.c:1063 [inline] run_ksoftirqd+0x3a/0x60 kernel/softirq.c:1055 smpboot_thread_fn+0x3f7/0xae0 kernel/smpboot.c:160 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess): 0: b8 00 00 00 00 mov $0x0,%eax 5: 00 fc add %bh,%ah 7: ff (bad) 8: df 48 89 fisttps -0x77(%rax) b: fa cli c: 48 c1 ea 03 shr $0x3,%rdx 10: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 14: 75 4f jne 0x65 16: 48 8d 3d a2 76 dd 0b lea 0xbdd76a2(%rip),%rdi # 0xbdd76bf 1d: 41 56 push %r14 1f: 48 8b 14 dd e0 53 f2 mov -0x740dac20(,%rbx,8),%rdx 26: 8b 27: 4c 89 e6 mov %r12,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 58 pop %rax 30: 83 05 3c 2f d4 0b 01 addl $0x1,0xbd42f3c(%rip) # 0xbd42f73 37: 48 83 c4 18 add $0x18,%rsp 3b: 5b pop %rbx 3c: 5d pop %rbp 3d: 41 5c pop %r12 3f: 41 rex.B