last executing test programs: 4m41.09924958s ago: executing program 4 (id=2067): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x200) read$hidraw(r0, &(0x7f00000008c0)=""/254, 0xfe) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xad, 0xe0cd5659ebd36afe, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x6, 0x7, {0xa, 0x25, 0x25, 0x3, 0x40, 0x1a1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x80, 0x7, 0x7, {0xa, 0x25, 0x25, 0x9f, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00hl', @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES16=r0]) syz_usb_connect$cdc_ncm(0x4, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x3, 0xf0, 0xa8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "824333"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x26}, [@obex={0x5, 0x24, 0x15, 0x317}, @mdlm={0x15, 0x24, 0x12, 0x7ff}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf5, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x0, 0xc}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x40, 0x2, 0x7, 0x20, 0x7}, 0x19, &(0x7f0000000100)=ANY=[@ANYBLOB="050f1900020a100300080001095a000a1003028d00050800f8"], 0x2, [{0xa1, &(0x7f0000000140)=@string={0xa1, 0x3, "8e6fc18d50e733cd0cad5440a4e8f3af5ca44bab520b4cc8d7fdc809f19194d951d00c691fa5261a88dea95a9ce8933ebe95a63e0213d21b3bf5180dcb3cc9fbde25db41f2def65d3fb9db27e38be5f932af43f72897d1d73b00039b056d497eb3d605085f0b3b68fcbd98f1ee383690ad1dd0733e54df345e06ed9ebdece48fd4e2de22239614b5ea8ff407cacbc7ed683ce143a72f5da3e2001db8daeaa7"}}, {0xc6, &(0x7f0000000200)=@string={0xc6, 0x3, "930f582d3c444d2239b246b057a21e775e66c96f56ac496f87c4a84b3b7054a07e6dacac6a438935a4e74d6671a1e1c89b1021ae4d2ea290a7bfd804a03f52fd3d9c730de22bdfb00571f703fc24fe5dcd4fefce9bacf2880ea087841c8706e64b49bcb999ed5a2d9231683d3dd3ea3b941637be210cf325f53ec3c8d7420baa3cb6b06b03d3ab670340280fc4fc37b4be88cc61c4d3537952423baa85ae5f87a95fb67408274eb0d69edc5dc043d716d8f5b2286735714e20524e6ffcde49bf030a1a15"}}]}) 4m36.228006972s ago: executing program 4 (id=2072): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$uac3(0x0, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x10, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x27, 0x80000002}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x307, 0x6, 0x6, 0x4, 0x6, 0x5, 0x5, 0x3}, @mixer_unit={0xa, 0x24, 0x5, 0x6, 0x3, '\x00\x00\x00\x00\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0xf7, 0x8, {0xa, 0x25, 0x25, 0x0, 0xff, 0x24d8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x3, {0xa, 0x25, 0x25, 0x2, 0x9, 0xfc01}}}}}}}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000006c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000a13"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00222200000056000006e53f07010000002a900683749e821c0b89923659a71522d61d8385"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x40, 0x10, 0x5, "ece46cef86"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000500)={0x40, 0x13, 0x4, "eba01ef3"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 4m29.9880294s ago: executing program 4 (id=2079): r0 = syz_usb_connect(0x5, 0x29a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407e04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8004, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x19, 0x88, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1010901a10109309102c0c0"], 0x0}, 0x0) (async) syz_usb_connect$rtl8150(0x2, 0x4c, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040ac050a034000010203010902240001010030e50904000501030102ff09210200060122fc020905810320000b0309b5d69da95750e6b0057a496bbabcdf0a86"], &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x0, 0x23, 0x100, {0x100, 0xc, "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"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000800)={0x20, 0x0, 0xff, "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"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xe4}, &(0x7f00000009c0)={0xc0, 0xa1, 0x4, 0xc25}, &(0x7f0000000a00)={0x40, 0xa0, 0x4, 0xfffffff3}, &(0x7f0000000a40)={0xc0, 0xa2, 0x2f, "1cbc389553268b19d806e2b63258f96772aaa461d3a33d99790664131cb9544f7fbed67fba13405f23004289ec0272"}}) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x20, 0x24, 0x91, {0x91, 0x22, "9cc8ebc26c16c5251d8f2c765fa805dcb864e10f139acf5cdc873dcd2288f7925748f3153a40c541cf9d7601a2ce900b20d53b58100953d6e0bab7567c63ae7b23a872bee33ed62dcc69bf8aa96069cfd556507bab612082f278fb485c21f74c4877daceb22b94213bf3b10d4c0ae7b57fe86ffefefaba77656a8415fc2763cd5136a3f209a5a23f2329b3c9b31276"}}, &(0x7f0000000300)={0x0, 0x3, 0x8, @string={0x8, 0x3, "8b20b4cb225a"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0xf, 0x36, "653ca8083cfdd73e6c598b68d2c3614eb7b7e40886775d5840751db81481cff60b95f9bc976c364f94fdac254e034cc07b0dd14368fc"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x91, {0x8f, "91fb8218450c27a8eb4dc444978f7388e37c30c27e71c58106a80b40fdea31c10ca2f1d04d4574c1da611f1a24b918bece10bdda16389b238e67cc22976a7e9163ed013525674bbcf1ff6ed070181a747266d0d0e1ae12dfc64886ababd60c4efc6f5401b3ee73592b23d770e80d58f5439249fd43fc05e761ba7d1214c4d12ed405ff5592f88f51fd961d848167ce"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x98}}) (async) syz_usb_connect(0x3, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x1, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) 4m26.18696566s ago: executing program 4 (id=2084): syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007916ae20e20424140a8a0102030109022f00010000000009040000000266b900052406"], 0x0) (async, rerun: 64) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) (async) syz_usb_connect$cdc_ecm(0x4, 0x6c, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x2c, 0x40, 0xd1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xc, {{0xa, 0x24, 0x6, 0x0, 0x0, "8a537672c4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xff, 0x3, 0x7f}, [@ncm={0x6, 0x24, 0x1a, 0xffff, 0x29}, @obex={0x5, 0x24, 0x15, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x14}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x4, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xa, 0xe, 0x2}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xeb, 0x1, 0x7a, 0x8, 0x1}, 0x11e, &(0x7f0000000340)={0x5, 0xf, 0x11e, 0x6, [@generic={0x23, 0x10, 0x0, "c2e1b23fccfe5835db6295172d06bdda371b330dee3363b689b1e871a70612b0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x60, 0x28, 0xff, 0xe, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x7ffffff, 0xf, 0x6, [0xc0c0]}, @generic={0x75, 0x10, 0xa, "a60ad0ee7bb9e0b28ea6929c9dae338831fc0d5ef6bdf8c9ef44c6ebdec66f6def929e6fde0d42a53585e24f830991843496045ddb89ae68ef8d74b01f73921ce8d160b02d2e1907a5e0a0bc244c18454d6e0978bb436460f7a54b518e0ed85b3cd986b1153be049c19ec4814de7e0b205b9"}, @generic={0x4a, 0x10, 0x3, "ca4ce50a0715bcb3b95bb334ad893079a27498c531d772338abb601f0fce5ea9ab0da2e4b3683db65d462a0f21b4fab19d77d209dc29da3e47fb1c8588c86e51bb1ed9c466f850"}, @ssp_cap={0x1c, 0x10, 0xa, 0xf5, 0x4, 0x10001, 0x0, 0xc, [0xf, 0xffc0, 0x0, 0xff0000]}]}, 0x3, [{0x5a, &(0x7f0000000480)=@string={0x5a, 0x3, "ec3c8f4ed1731316c98099a58786a1c261ba66f484aa5bd0b67b2a1a43f2b7d60c5a4b8fed8c8a74686e370dc753c671a2710301e36bed04df95fa3183b56914e0b763d9e03499fbdfb2b09a1b17cd30366733e11617de0e"}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "ee3ac4a4dd2e2554ede69a82fa60ec8b87d62b5c03fb787fc3cbf1f374caf7435e6552884cb654358bbec89d8ad82fc27379963984541e9e51b54afd752a56006a497b0e083e4d7e4ed2733c0be867dc33bdff351a437c29919e7fa70c32ff1f4918879696f6295dbcf4b4be2e5721fe72b2d8a646feafa579531503"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x201c}}]}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x10001) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/8) (async) syz_usb_connect(0x5, 0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003762b450802030109021c00010702100109044a00000202ff060a240104000a0002010200000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 4m20.853402415s ago: executing program 4 (id=2090): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x16, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102"], 0x0) 4m16.061399018s ago: executing program 4 (id=2093): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003cb86e440f71d002579260102030109021b0002030c150509040506316fc37029c415b70700dd715a17"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) syz_usb_connect$uac1(0x6, 0xcc, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x4, 0x0, 0xfd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x27}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x4, "ea7b0ec6f8ed"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x4, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x2, 0x1, 0x68}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x5, 0x68, "97f6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x1ff, 0x7e, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7f}, @as_header={0x7, 0x24, 0x1, 0xb, 0x4, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x5, 'RX', 'l /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1725.900557][ T31] task:kworker/1:2 state:D stack:19584 pid:780 tgid:780 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1725.900665][ T31] Workqueue: usb_hub_wq hub_event [ 1725.900761][ T31] Call Trace: [ 1725.900776][ T31] [ 1725.900798][ T31] __schedule+0x1325/0x47e0 [ 1725.900856][ T31] ? __pfx___schedule+0x10/0x10 [ 1725.900893][ T31] ? find_held_lock+0x2b/0x80 [ 1725.900945][ T31] ? schedule+0x225/0x2c0 [ 1725.900991][ T31] schedule+0xdd/0x2c0 [ 1725.901029][ T31] schedule_preempt_disabled+0x13/0x30 [ 1725.901070][ T31] rwsem_down_write_slowpath+0x4c2/0x12a0 [ 1725.901132][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1725.901183][ T31] ? kasan_quarantine_put+0x104/0x240 [ 1725.901242][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 1725.901305][ T31] ? __pfx___might_resched+0x10/0x10 [ 1725.901361][ T31] ? kobject_put+0xb9/0x640 [ 1725.901405][ T31] down_write+0x1c0/0x1f0 [ 1725.901455][ T31] ? __pfx_down_write+0x10/0x10 [ 1725.901513][ T31] usb_deregister_dev+0x7c/0x210 [ 1725.901561][ T31] sisusb_disconnect+0x5e/0x200 [ 1725.901750][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 1725.901800][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 ** replaying previous printk message ** [ 1725.901800][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1725.901844][ T31] device_remove+0x12a/0x180 [ 1725.902003][ T31] device_release_driver_internal+0x44e/0x620 [ 1725.902140][ T31] bus_remove_device+0x2bc/0x560 [ 1725.902276][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1725.902410][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1725.902620][ T31] device_del+0x376/0x9b0 [ 1725.902726][ T31] ? __pfx_device_del+0x10/0x10 [ 1725.902810][ T31] ? kobject_put+0xb9/0x640 [ 1725.902923][ T31] usb_disable_device+0x367/0x810 [ 1725.903161][ T31] usb_disconnect+0x2e2/0x9a0 [ 1725.903337][ T31] hub_event+0x1d46/0x4510 [ 1725.903771][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 1725.903888][ T31] ? __pfx_hub_event+0x10/0x10 [ 1725.904027][ T31] ? __up_read+0x6e0/0x980 [ 1725.904145][ T31] ? lock_acquire+0x1d1/0x380 [ 1725.904224][ T31] ? process_one_work+0xa2c/0x1b10 [ 1725.904370][ T31] ? process_one_work+0x906/0x1b10 [ 1725.904506][ T31] ? process_one_work+0x906/0x1b10 [ 1725.904673][ T31] process_one_work+0xac7/0x1b10 [ 1725.904867][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1725.905045][ T31] ? lock_acquire+0x1d1/0x380 [ 1725.905219][ T31] ? __pfx_hub_event+0x10/0x10 [ 1725.905361][ T31] worker_thread+0x5ef/0xe50 [ 1725.905547][ T31] ? kthread+0x13a/0x450 [ 1725.905664][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1725.905817][ T31] kthread+0x373/0x450 [ 1725.905945][ T31] ? __pfx_kthread+0x10/0x10 [ 1725.906082][ T31] ret_from_fork+0x69f/0xc90 [ 1725.906180][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1725.906245][ T31] ? __switch_to+0x7f6/0x10e0 [ 1725.906352][ T31] ? __switch_to_asm+0x39/0x70 [ 1725.906480][ T31] ? __pfx_kthread+0x10/0x10 [ 1725.906618][ T31] ret_from_fork_asm+0x1a/0x30 [ 1725.906822][ T31] [ 1725.906965][ T31] [ 1725.906965][ T31] Showing all locks held in the system: [ 1725.907000][ T31] locks held by pr/ttyS0/15: 2, last CPU#0: [ 1725.907072][ T31] #0: ffffffff898d0ef8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1725.907292][ T31] #1: ffffffff9448c7f8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1725.907622][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1725.907697][ T31] #0: ffffffff898e4c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1725.907945][ T31] locks held by kworker/1:2/780: 6, on CPU#1: [ 1725.908009][ T31] #0: ffff888105ae8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1725.908260][ T31] #1: ffffc900026afd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1725.908527][ T31] #2: ffff88810a36a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4510 [ 1725.908884][ T31] #3: ffff8881177ef1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1725.950773][ T31] #4: ffff88811c8941a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1725.951031][ T31] #5: ffffffff8a555028 (minor_rwsem){++++}-{4:4}, at: usb_deregister_dev+0x7c/0x210 [ 1725.951263][ T31] locks held by syslogd/2845: 1, last CPU#1: [ 1725.951327][ T31] #0: ffff888116dcb060 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 1725.951609][ T31] locks held by klogd/2852: 1, last CPU#1: [ 1725.951674][ T31] #0: ffffffff898e4c20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1725.960086][ T31] locks held by getty/2925: 2, on CPU#0: [ 1725.960167][ T31] #0: ffff888108a940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1725.960445][ T31] #1: ffffc900000452e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1725.960762][ T31] locks held by syz-executor/2965: 2, last CPU#1: [ 1725.960828][ T31] #0: ffff88810e771038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1725.961094][ T31] #1: ffffffff898e4c20 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300 [ 1725.961323][ T31] locks held by syz-executor/2983: 4, last CPU#0: [ 1725.961388][ T31] #0: ffffffff89a313b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4b03/0x80f0 [ 1725.969187][ T31] #1: ffff88810fb935b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2150 [ 1725.969445][ T31] #2: ffff88813ad235b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2150 [ 1725.969729][ T31] #3: ffffffff898e4c20 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x300 [ 1725.969966][ T31] locks held by udevd/5244: 4, on CPU#0: [ 1725.970030][ T31] #0: ffff888114173cf8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1725.977083][ T31] #1: ffff88812178c480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1725.977398][ T31] #2: ffff88811cc0df08 (kn->active#9){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1725.977710][ T31] #3: ffff8881214271d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1725.977955][ T31] locks held by kworker/1:5/5338: 6, on CPU#1: [ 1725.978023][ T31] #0: ffff888105ae8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1725.978279][ T31] #1: ffffc9000225fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1725.982519][ T8341] m920x_read = error: -19 [ 1725.982550][ T8341] dvb-usb: error while querying for an remote control event. [ 1725.982640][ T8341] m920x_read = error: -19 [ 1725.982666][ T8341] dvb-usb: error while querying for an remote control event. [ 1725.982747][ T8341] m920x_read = error: -19 [ 1725.982772][ T8341] dvb-usb: error while querying for an remote control event. [ 1725.982853][ T8341] m920x_read = error: -19 [ 1725.982878][ T8341] dvb-usb: error while querying for an remote control event. [ 1725.982955][ T8341] m920x_read = error: -19 [ 1725.982980][ T8341] dvb-usb: error while querying for an remote control event. [ 1725.983059][ T8341] m920x_read = error: -19 [ 1725.983083][ T8341] dvb-usb: error while querying for an remote control event. [ 1725.989557][ T31] #2: ffff88810a3521d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4510 [ 1725.989951][ T31] #3: ffff8881214271d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1725.990171][ T31] #4: ffff888107bec1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1725.990401][ T31] #5: ffffffff8a555028 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 1725.990634][ T31] locks held by kworker/1:0/9554: 7, on CPU#1: [ 1725.990710][ T31] #0: ffff888105ae8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1725.998843][ T31] #1: ffffc9001441fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1725.999294][ T31] #2: ffff888109f331d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4510 [ 1725.999585][ T31] #3: ffff88813cc061d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1725.999848][ T31] #4: ffff888118cb21a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1726.000054][ T31] #5: ffff88811b341a58 (&dev->mutex){....}-{4:4} [ 1726.000892][ T8341] m920x_read = error: -19 [ 1726.000923][ T8341] dvb-usb: error while querying for an remote control event. [ 1726.009450][ T31] , at: __device_attach+0x7e/0x4d0 [ 1726.009583][ T31] #6: ffffffff8a555028 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 1726.009833][ T31] locks held by kworker/u8:4/12247: 2, on CPU#1: [ 1726.009899][ T31] #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1726.010169][ T31] #1: ffffc90014fb7d18 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1726.010436][ T31] locks held by syz.3.2179/13611: 2, on CPU#1: [ 1726.010499][ T31] #0: ffffffff8a555028 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 1726.010725][ T31] #1: ffff88813c96f8c8 ( [ 1726.019463][ T5236] m920x_read = error: -19 [ 1726.019548][ T5236] dvb-usb: error while querying for an remote control event. [ 1726.019717][ T31] &(sisusb->lock)){+.+.}-{4:4}, at: sisusb_open+0xb6/0x4b0 [ 1726.019926][ T31] locks held by kworker/u8:2/13899: 2, on CPU#1: [ 1726.020007][ T31] #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1726.020271][ T31] #1: ffffc90001c9fd18 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1726.020570][ T31] locks held by modprobe/15179: 1, last CPU#1: [ 1726.020639][ T31] #0: ffff88813a957438 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x15e/0x390 [ 1726.020932][ T31] [ 1726.020954][ T31] ============================================= [ 1726.020954][ T31] [ 1726.021025][ T31] NMI backtrace for cpu 1 [ 1726.021098][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(lazy) [ 1726.021189][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1726.021243][ T31] Call Trace: [ 1726.021275][ T31] [ 1726.021308][ T31] dump_stack_lvl+0x100/0x190 [ 1726.021456][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1726.021541][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1726.021584][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1726.021634][ T31] sys_info+0x141/0x190 [ 1726.021730][ T31] watchdog+0xcb1/0x1030 [ 1726.021888][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1726.021992][ T31] ? __pfx_watchdog+0x10/0x10 [ 1726.022127][ T31] ? __kthread_parkme+0x18f/0x230 [ 1726.022239][ T31] ? kthread+0x13a/0x450 [ 1726.022357][ T31] ? __pfx_watchdog+0x10/0x10 [ 1726.022485][ T31] kthread+0x373/0x450 [ 1726.022612][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.022751][ T31] ret_from_fork+0x69f/0xc90 [ 1726.022851][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.022949][ T31] ? __switch_to+0x7f6/0x10e0 [ 1726.023066][ T31] ? __switch_to_asm+0x39/0x70 [ 1726.023184][ T31] ? __pfx_kthread+0x10/0x10 [ 1726.023325][ T31] ret_from_fork_asm+0x1a/0x30 [ 1726.023469][ T31] [ 1726.023594][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1726.023691][ C0] NMI backtrace for cpu 0 [ 1726.023708][ C0] CPU: 0 UID: 0 PID: 15 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(lazy) [ 1726.023740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1726.023757][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 1726.023866][ C0] Code: 3c 83 fe 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 78 2c ee fe eb a2 e8 01 2d [ 1726.023894][ C0] RSP: 0018:ffffc900000ff968 EFLAGS: 00000002 [ 1726.023915][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1726.023934][ C0] RDX: 00000000000003fd RSI: ffffffff8331bc80 RDI: ffffffff9448c820 [ 1726.023953][ C0] RBP: ffffffff9448c7e0 R08: 0000000000000001 R09: 000000000000001f [ 1726.023973][ C0] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000000 [ 1726.023992][ C0] R13: 0000000000000020 R14: fffffbfff2891959 R15: dffffc0000000000 [ 1726.024011][ C0] FS: 0000000000000000(0000) GS:ffff8882683e2000(0000) knlGS:0000000000000000 [ 1726.024037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.024056][ C0] CR2: 00007fc18b6634e8 CR3: 00000000096ac000 CR4: 00000000003506f0 [ 1726.024074][ C0] Call Trace: [ 1726.024084][ C0] [ 1726.024095][ C0] wait_for_lsr+0x13a/0x210 [ 1726.024135][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1726.024184][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 1726.024222][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1726.024256][ C0] serial8250_console_write+0xf46/0x1330 [ 1726.024304][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1726.024348][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1726.024394][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1726.024438][ C0] ? rcu_is_watching+0x13/0xc0 [ 1726.024478][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1726.024525][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1726.024569][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1726.024610][ C0] ? do_raw_spin_lock+0xf0/0x260 [ 1726.024649][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1726.024683][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1726.024713][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1726.024754][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1726.024801][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1726.024847][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1726.024895][ C0] ? __kthread_parkme+0x18f/0x230 [ 1726.024930][ C0] ? kthread+0x13a/0x450 [ 1726.024971][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1726.025013][ C0] kthread+0x373/0x450 [ 1726.025052][ C0] ? __pfx_kthread+0x10/0x10 [ 1726.025092][ C0] ret_from_fork+0x69f/0xc90 [ 1726.025119][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.025147][ C0] ? __switch_to+0x7f6/0x10e0 [ 1726.025188][ C0] ? __switch_to_asm+0x39/0x70 [ 1726.025219][ C0] ? __pfx_kthread+0x10/0x10 [ 1726.025259][ C0] ret_from_fork_asm+0x1a/0x30 [ 1726.025299][ C0] [ 1726.052592][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1727.276212][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(lazy) [ 1727.285361][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1727.295542][ T31] Call Trace: [ 1727.298855][ T31] [ 1727.301822][ T31] dump_stack_lvl+0x100/0x190 [ 1727.306560][ T31] vpanic+0x553/0x970 [ 1727.310591][ T31] ? __pfx_vpanic+0x10/0x10 [ 1727.315146][ T31] panic+0xd1/0xe0 [ 1727.318904][ T31] ? __pfx_panic+0x10/0x10 [ 1727.323370][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1727.329581][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1727.335979][ T31] ? watchdog.cold+0x1ec/0x234 [ 1727.340801][ T31] watchdog.cold+0x1fd/0x234 [ 1727.345448][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1727.351321][ T31] ? __pfx_watchdog+0x10/0x10 [ 1727.356058][ T31] ? __kthread_parkme+0x18f/0x230 [ 1727.361133][ T31] ? kthread+0x13a/0x450 [ 1727.365424][ T31] ? __pfx_watchdog+0x10/0x10 [ 1727.370161][ T31] kthread+0x373/0x450 [ 1727.374305][ T31] ? __pfx_kthread+0x10/0x10 [ 1727.379128][ T31] ret_from_fork+0x69f/0xc90 [ 1727.383760][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1727.388911][ T31] ? __switch_to+0x7f6/0x10e0 [ 1727.393646][ T31] ? __switch_to_asm+0x39/0x70 [ 1727.398451][ T31] ? __pfx_kthread+0x10/0x10 [ 1727.403104][ T31] ret_from_fork_asm+0x1a/0x30 [ 1727.407925][ T31] [ 1727.411545][ T31] Kernel Offset: disabled [ 1727.415906][ T31] Rebooting in 86400 seconds..