[BUG] WARNING: ODEBUG bug in chan_close_cb
From: Farhad Alemi
Date: Fri Aug 28 2026 - 01:55:47 EST
Hello,
As part of the kernel research at ASU's SEFCOM
lab, we hit the crash below. Crash reports can be found here:
https://github.com/farhad-alemi/public_bug_reports/tree/main/200-warning-odebug-bug-in-chan-close-cb/
ODEBUG: init active (active state 0) object: ffff888114db0d58 object
type: work_struct hint: delete_netdev+0x0/0x40
net/bluetooth/6lowpan.c:252
WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2a8/0x4a0
lib/debugobjects.c:790, CPU#1: kworker/u11:2/9426
Workqueue: hci1 hci_rx_work
Call Trace:
chan_close_cb+0x3c9/0x6a0 net/bluetooth/6lowpan.c:819
l2cap_disconnect_req+0x305/0x510 net/bluetooth/l2cap_core.c:4515
l2cap_le_sig_cmd net/bluetooth/l2cap_core.c:5556 [inline]
l2cap_le_sig_channel net/bluetooth/l2cap_core.c:5598 [inline]
l2cap_recv_frame+0x8ab5/0x10400 net/bluetooth/l2cap_core.c:6964
l2cap_recv_acldata+0x682/0x1330 net/bluetooth/l2cap_core.c:7688
hci_acldata_packet net/bluetooth/hci_core.c:3855 [inline]
hci_rx_work+0x4f9/0x1040 net/bluetooth/hci_core.c:4082
Our reproducer.c is available upon request.
Happy to test a patch if that would help.
Regards,