------------[ cut here ]------------ ODEBUG: free active (active state 0) object: ffff88804bfaa490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 include/linux/skbuff.h:2927 WARNING: CPU: 0 PID: 15534 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612 Modules linked in: CPU: 0 UID: 0 PID: 15534 Comm: syz.1.2502 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:debug_print_object+0x1a2/0x2b0 lib/debugobjects.c:612 Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 84 f0 8b 4c 89 e6 48 c7 c7 20 79 f0 8b e8 bf a7 ce fc 90 <0f> 0b 90 90 58 83 05 d6 d3 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d RSP: 0000:ffffc9000ff5f958 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 RDX: ffff888027a6c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf07fc0 R13: ffffffff8b9021e0 R14: ffffffff8a4dbdc0 R15: ffffc9000ff5fa58 FS: 00005555643eb500(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3ef86603ba CR3: 0000000074483000 CR4: 00000000003526f0 Call Trace: __debug_check_no_obj_freed lib/debugobjects.c:1099 [inline] debug_check_no_obj_freed+0x4b7/0x600 lib/debugobjects.c:1129 slab_free_hook mm/slub.c:2474 [inline] slab_free mm/slub.c:6642 [inline] kfree+0x291/0x6d0 mm/slub.c:6849 rose_neigh_put include/net/rose.h:166 [inline] rose_timer_expiry+0x53f/0x630 net/rose/rose_timer.c:183 call_timer_fn+0x19a/0x620 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1798 [inline] __run_timers+0x6ef/0x960 kernel/time/timer.c:2372 __run_timer_base kernel/time/timer.c:2384 [inline] __run_timer_base kernel/time/timer.c:2376 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2393 run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2403 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0x57/0xc0 arch/x86/kernel/apic/apic.c:1052 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0033:0x7f891b06f00c Code: 31 c0 48 81 ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 <41> 83 c7 01 45 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 RSP: 002b:00007ffd2cc038a0 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 00007f891bf15720 RCX: ffffffff8208d2ac RDX: 00000000000012ac RSI: ffffffff8208d2ac RDI: 0000000000000009 RBP: ffffffff8208d2ac R08: 00007f891b3e6128 R09: 00007f891b3d2000 R10: 00007f891a7fd008 R11: 0000000000000009 R12: 0000000000000009 R13: 0000000000000000 R14: ffffffff8208d14c R15: 0000000000071949