[ 388.094241][ T3655] usb 6-1: config 4 interface 253 has no altsetting 0 [ 388.101148][ T3655] usb 6-1: config 4 interface 16 has no altsetting 0 [ 388.107802][ T3655] usb 6-1: config 4 interface 238 has no altsetting 0 [ 388.289330][ T3655] usb 6-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=51.61 [ 388.298832][ T3655] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.307066][ T3655] usb 6-1: Product: syz [ 388.311584][ T3655] usb 6-1: Manufacturer: syz [ 388.316170][ T3655] usb 6-1: SerialNumber: syz [ 388.371552][ T3655] usb 6-1: USB2VGA dongle found at address 3 [ 388.379682][ T3655] usb 6-1: Allocated 8 output buffers [ 433.582471][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.810040][ T4078] syz-executor.1 (4078) used greatest stack depth: 22920 bytes left [ 433.822389][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.885774][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.942997][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.550354][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.556658][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.683076][ T52] device hsr_slave_0 left promiscuous mode [ 434.690978][ T52] device hsr_slave_1 left promiscuous mode [ 434.697354][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.714627][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.727893][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.739177][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.748359][ T52] device bridge_slave_1 left promiscuous mode [ 434.761627][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.769965][ T52] device bridge_slave_0 left promiscuous mode [ 434.776156][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.792486][ T52] device veth1_macvtap left promiscuous mode [ 434.798523][ T52] device veth0_macvtap left promiscuous mode [ 434.805219][ T52] device veth1_vlan left promiscuous mode [ 434.811266][ T52] device veth0_vlan left promiscuous mode [ 434.953538][ T52] team0 (unregistering): Port device team_slave_1 removed [ 434.968799][ T52] team0 (unregistering): Port device team_slave_0 removed [ 434.980564][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.995295][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.047304][ T52] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. [ 435.529451][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.575993][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.642798][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.696487][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.878118][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.927796][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.986765][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.062595][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.220360][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.275414][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.324852][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.385536][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.569379][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.643589][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.698218][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.765602][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.507012][ T52] device hsr_slave_0 left promiscuous mode [ 438.513742][ T52] device hsr_slave_1 left promiscuous mode [ 438.522155][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.529960][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.538464][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.546493][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.558211][ T52] device bridge_slave_1 left promiscuous mode [ 438.564862][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.574267][ T52] device bridge_slave_0 left promiscuous mode [ 438.580644][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.593644][ T52] device hsr_slave_0 left promiscuous mode [ 438.600250][ T52] device hsr_slave_1 left promiscuous mode [ 438.606597][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.614499][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.623960][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.631598][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.641123][ T52] device bridge_slave_1 left promiscuous mode [ 438.647310][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.655811][ T52] device bridge_slave_0 left promiscuous mode [ 438.663630][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.675186][ T52] device hsr_slave_0 left promiscuous mode [ 438.682066][ T52] device hsr_slave_1 left promiscuous mode [ 438.689546][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.696947][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.705611][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.713478][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.722435][ T52] device bridge_slave_1 left promiscuous mode [ 438.728560][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.736780][ T52] device bridge_slave_0 left promiscuous mode [ 438.743032][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.755734][ T52] device hsr_slave_0 left promiscuous mode [ 438.762047][ T52] device hsr_slave_1 left promiscuous mode [ 438.768206][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.776244][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.785091][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.793676][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.803052][ T52] device bridge_slave_1 left promiscuous mode [ 438.809581][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.817595][ T52] device bridge_slave_0 left promiscuous mode [ 438.824330][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.836656][ T52] device hsr_slave_0 left promiscuous mode [ 438.843019][ T52] device hsr_slave_1 left promiscuous mode [ 438.849661][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.857114][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.865879][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.873672][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.882653][ T52] device bridge_slave_1 left promiscuous mode [ 438.888861][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.898310][ T52] device bridge_slave_0 left promiscuous mode [ 438.904945][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.922304][ T52] device veth1_macvtap left promiscuous mode [ 438.928522][ T52] device veth0_macvtap left promiscuous mode [ 438.935222][ T52] device veth1_vlan left promiscuous mode [ 438.941596][ T52] device veth0_vlan left promiscuous mode [ 438.948232][ T52] device veth1_macvtap left promiscuous mode [ 438.954603][ T52] device veth0_macvtap left promiscuous mode [ 438.963461][ T52] device veth1_vlan left promiscuous mode [ 438.970229][ T52] device veth0_vlan left promiscuous mode [ 438.976889][ T52] device veth1_macvtap left promiscuous mode [ 438.983570][ T52] device veth0_macvtap left promiscuous mode [ 438.989812][ T52] device veth1_vlan left promiscuous mode [ 438.995658][ T52] device veth0_vlan left promiscuous mode [ 439.004105][ T52] device veth1_macvtap left promiscuous mode [ 439.010881][ T52] device veth0_macvtap left promiscuous mode [ 439.016980][ T52] device veth1_vlan left promiscuous mode [ 439.022967][ T52] device veth0_vlan left promiscuous mode [ 439.030132][ T52] device veth1_macvtap left promiscuous mode [ 439.036228][ T52] device veth0_macvtap left promiscuous mode [ 439.044663][ T52] device veth1_vlan left promiscuous mode [ 439.050606][ T52] device veth0_vlan left promiscuous mode [ 439.437800][ T52] team0 (unregistering): Port device team_slave_1 removed [ 439.454999][ T52] team0 (unregistering): Port device team_slave_0 removed [ 439.466163][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.480704][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.536842][ T52] bond0 (unregistering): Released all slaves [ 439.666085][ T52] team0 (unregistering): Port device team_slave_1 removed [ 439.682581][ T52] team0 (unregistering): Port device team_slave_0 removed [ 439.697760][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.712619][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.766274][ T52] bond0 (unregistering): Released all slaves [ 439.875669][ T52] team0 (unregistering): Port device team_slave_1 removed [ 439.891733][ T52] team0 (unregistering): Port device team_slave_0 removed [ 439.907530][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.922113][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.974890][ T52] bond0 (unregistering): Released all slaves [ 440.085325][ T52] team0 (unregistering): Port device team_slave_1 removed [ 440.102030][ T52] team0 (unregistering): Port device team_slave_0 removed [ 440.113772][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.128095][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.197633][ T52] bond0 (unregistering): Released all slaves [ 440.305530][ T52] team0 (unregistering): Port device team_slave_1 removed [ 440.321982][ T52] team0 (unregistering): Port device team_slave_0 removed [ 440.362299][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.390005][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.448395][ T52] bond0 (unregistering): Released all slaves [ 441.001303][ T52] ------------[ cut here ]------------ [ 441.006917][ T52] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 441.018444][ T52] WARNING: CPU: 1 PID: 52 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 [ 441.032406][ T52] Modules linked in: [ 441.036469][ T52] CPU: 1 PID: 52 Comm: kworker/u4:2 Not tainted 5.18.0-rc6-syzkaller #0 [ 441.045562][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.059562][ T52] Workqueue: netns cleanup_net [ 441.064579][ T52] RIP: 0010:debug_print_object+0x16e/0x250 [ 441.073992][ T52] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 40 c0 42 89 4c 89 ee 48 c7 c7 40 b4 42 89 e8 0c 6b b3 04 <0f> 0b 83 05 a5 b5 2e 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 441.097915][ T52] RSP: 0018:ffffc900013af8b0 EFLAGS: 00010286 [ 441.104400][ T52] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 441.116309][ T52] RDX: 0000000000000001 RSI: ffffffff8942afe0 RDI: fffff52000275f08 [ 441.124675][ T52] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880b9f34147 [ 441.136524][ T52] R10: ffffed10173e6828 R11: 0000000000000001 R12: ffffffff88ed7ae0 [ 441.144684][ T52] R13: ffffffff8942b920 R14: ffffffff815cef00 R15: dffffc0000000000 [ 441.156927][ T52] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 441.166315][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.176782][ T52] CR2: 00007fb319832880 CR3: 00000000735b6000 CR4: 00000000003506e0 [ 441.185639][ T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.197714][ T52] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.205874][ T52] Call Trace: [ 441.213101][ T52] [ 441.216210][ T52] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 441.222268][ T52] ? lockdep_hardirqs_on+0x79/0x100 [ 441.227818][ T52] debug_check_no_obj_freed+0x301/0x420 [ 441.235617][ T52] slab_free_freelist_hook+0xeb/0x1c0 [ 441.241660][ T52] ? device_release+0x93/0x200 [ 441.246733][ T52] kfree+0xd6/0x4d0 [ 441.251109][ T52] ? devres_close_group+0x300/0x300 [ 441.256519][ T52] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 441.263926][ T52] device_release+0x93/0x200 [ 441.268664][ T52] kobject_put+0x139/0x410 [ 441.273659][ T52] netdev_run_todo+0x63e/0xe90 [ 441.278707][ T52] ? generic_xdp_install+0x3c0/0x3c0 [ 441.288091][ T52] ? netdev_pick_tx+0x920/0x920 [ 441.294072][ T52] ? unregister_netdevice_queue+0x13d/0x330 [ 441.303929][ T52] ? unregister_netdevice_many+0x1630/0x1630 [ 441.310082][ T52] ? br_dev_delete+0x104/0x190 [ 441.315067][ T52] default_device_exit_batch+0x3a4/0x4f0 [ 441.324502][ T52] ? unregister_netdev+0x20/0x20 [ 441.329714][ T52] ? ops_exit_list+0xa7/0x160 [ 441.334530][ T52] cleanup_net+0x423/0x980 [ 441.342797][ T52] ? unregister_pernet_device+0x60/0x60 [ 441.348595][ T52] process_one_work+0x865/0x13d0 [ 441.353694][ T52] ? lock_release+0x720/0x720 [ 441.358549][ T52] ? pwq_dec_nr_in_flight+0x230/0x230 [ 441.367909][ T52] ? rwlock_bug.part.0+0x90/0x90 [ 441.373237][ T52] ? _raw_spin_lock_irq+0x41/0x50 [ 441.378404][ T52] worker_thread+0x598/0xec0 [ 441.387455][ T52] ? process_one_work+0x13d0/0x13d0 [ 441.392842][ T52] kthread+0x299/0x340 [ 441.397123][ T52] ? kthread_complete_and_exit+0x20/0x20 [ 441.407204][ T52] ret_from_fork+0x1f/0x30 [ 441.411845][ T52] [ 441.415160][ T52] Kernel panic - not syncing: panic_on_warn set ... [ 441.421741][ T52] CPU: 1 PID: 52 Comm: kworker/u4:2 Not tainted 5.18.0-rc6-syzkaller #0 [ 441.430061][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.440128][ T52] Workqueue: netns cleanup_net [ 441.444898][ T52] Call Trace: [ 441.448189][ T52] [ 441.451125][ T52] dump_stack_lvl+0x57/0x7d [ 441.455656][ T52] panic+0x227/0x466 [ 441.459572][ T52] ? panic_print_sys_info.part.0+0x69/0x69 [ 441.465399][ T52] ? debug_print_object+0x16e/0x250 [ 441.470679][ T52] __warn.cold+0x14b/0x1d9 [ 441.475097][ T52] ? irq_work_queue+0x35/0x50 [ 441.479932][ T52] ? debug_print_object+0x16e/0x250 [ 441.485141][ T52] report_bug+0x15a/0x1b0 [ 441.489485][ T52] handle_bug+0x3c/0x60 [ 441.493649][ T52] exc_invalid_op+0x14/0x40 [ 441.498237][ T52] asm_exc_invalid_op+0x12/0x20 [ 441.503081][ T52] RIP: 0010:debug_print_object+0x16e/0x250 [ 441.508879][ T52] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 40 c0 42 89 4c 89 ee 48 c7 c7 40 b4 42 89 e8 0c 6b b3 04 <0f> 0b 83 05 a5 b5 2e 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 441.528564][ T52] RSP: 0018:ffffc900013af8b0 EFLAGS: 00010286 [ 441.534652][ T52] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 441.542615][ T52] RDX: 0000000000000001 RSI: ffffffff8942afe0 RDI: fffff52000275f08 [ 441.550624][ T52] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880b9f34147 [ 441.558594][ T52] R10: ffffed10173e6828 R11: 0000000000000001 R12: ffffffff88ed7ae0 [ 441.566648][ T52] R13: ffffffff8942b920 R14: ffffffff815cef00 R15: dffffc0000000000 [ 441.574610][ T52] ? calc_wheel_index+0x3a0/0x3a0 [ 441.579744][ T52] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 441.585547][ T52] ? lockdep_hardirqs_on+0x79/0x100 [ 441.590743][ T52] debug_check_no_obj_freed+0x301/0x420 [ 441.596295][ T52] slab_free_freelist_hook+0xeb/0x1c0 [ 441.601662][ T52] ? device_release+0x93/0x200 [ 441.606423][ T52] kfree+0xd6/0x4d0 [ 441.610223][ T52] ? devres_close_group+0x300/0x300 [ 441.615417][ T52] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 441.621223][ T52] device_release+0x93/0x200 [ 441.625808][ T52] kobject_put+0x139/0x410 [ 441.630219][ T52] netdev_run_todo+0x63e/0xe90 [ 441.634979][ T52] ? generic_xdp_install+0x3c0/0x3c0 [ 441.640261][ T52] ? netdev_pick_tx+0x920/0x920 [ 441.645106][ T52] ? unregister_netdevice_queue+0x13d/0x330 [ 441.650988][ T52] ? unregister_netdevice_many+0x1630/0x1630 [ 441.656964][ T52] ? br_dev_delete+0x104/0x190 [ 441.661733][ T52] default_device_exit_batch+0x3a4/0x4f0 [ 441.667363][ T52] ? unregister_netdev+0x20/0x20 [ 441.672301][ T52] ? ops_exit_list+0xa7/0x160 [ 441.676975][ T52] cleanup_net+0x423/0x980 [ 441.681382][ T52] ? unregister_pernet_device+0x60/0x60 [ 441.686929][ T52] process_one_work+0x865/0x13d0 [ 441.691869][ T52] ? lock_release+0x720/0x720 [ 441.696536][ T52] ? pwq_dec_nr_in_flight+0x230/0x230 [ 441.701902][ T52] ? rwlock_bug.part.0+0x90/0x90 [ 441.706833][ T52] ? _raw_spin_lock_irq+0x41/0x50 [ 441.711946][ T52] worker_thread+0x598/0xec0 [ 441.716539][ T52] ? process_one_work+0x13d0/0x13d0 [ 441.721729][ T52] kthread+0x299/0x340 [ 441.725790][ T52] ? kthread_complete_and_exit+0x20/0x20 [ 441.731414][ T52] ret_from_fork+0x1f/0x30 [ 441.735836][ T52] [ 441.739191][ T52] Kernel Offset: disabled [ 441.743699][ T52] Rebooting in 86400 seconds..