last executing test programs: 1m44.873410901s ago: executing program 2 (id=2786): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x80000d}) 1m44.562498477s ago: executing program 2 (id=2792): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff7]}, &(0x7f0000000080), 0x0, 0x8) 1m43.590923062s ago: executing program 2 (id=2813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x11, 0x16, 0x0, 0x0, @str='&*(-^/[#\\.\xa5%\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x0) 1m43.539309586s ago: executing program 3 (id=2816): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_create(0x0, 0x0) 1m43.197247225s ago: executing program 3 (id=2823): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[]) 1m43.1763848s ago: executing program 2 (id=2824): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0xffff, &(0x7f0000000140)) 1m42.659329362s ago: executing program 2 (id=2831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600f7ffffff0400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000f7ffffff66000000060000005d93000000000000b5030200f7ffffff85000000b5000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m42.58877993s ago: executing program 1 (id=2832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad97cb3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.57693206s ago: executing program 2 (id=2833): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 1m42.469447215s ago: executing program 4 (id=2846): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000140081ae08060cdc030ec0007f03e3f7ff1f410000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m42.414238801s ago: executing program 4 (id=2837): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) 1m42.301724112s ago: executing program 4 (id=2838): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x800, 0x41414270, 0x0, 0x0, [{0x80000000}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) 1m42.124365653s ago: executing program 4 (id=2840): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x4800) fcntl$lock(r0, 0x6, &(0x7f0000005240)={0x2, 0x1, 0x2, 0x5, 0xffffffffffffffff}) 1m42.078915919s ago: executing program 1 (id=2842): r0 = gettid() process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/23, 0x25}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/196, 0xcc}, {&(0x7f0000002d40)=""/4110, 0x100e}, {&(0x7f0000000380)=""/155, 0x9b}], 0x5, &(0x7f0000000180)=[{&(0x7f0000000180), 0xfefb}, {&(0x7f00000001c0)=""/28}], 0x1, 0x0) 1m41.985552644s ago: executing program 4 (id=2843): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0xffff, &(0x7f0000000140)) 1m41.837081642s ago: executing program 1 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x840) 1m41.836543408s ago: executing program 0 (id=2847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 1m41.737470285s ago: executing program 0 (id=2848): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001300), &(0x7f0000001340)=0x4) 1m41.734332815s ago: executing program 1 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) 1m41.721798869s ago: executing program 3 (id=2850): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x1, 0x2, 0x17, 0x8, 0x8}, 0x20) 1m41.703788084s ago: executing program 0 (id=2851): r0 = memfd_create(&(0x7f0000001dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xbd\n/\xb2\'\x16X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\x007\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.716292][ T33] task:kworker/1:6 state:D stack:20896 pid:5707 tgid:5707 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 387.716355][ T33] Workqueue: usb_hub_wq hub_event [ 387.716393][ T33] Call Trace: [ 387.716406][ T33] [ 387.716422][ T33] __schedule+0x17dd/0x5820 [ 387.716472][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 387.716511][ T33] ? __pfx___schedule+0x10/0x10 [ 387.716547][ T33] ? schedule+0x90/0x2b0 [ 387.716576][ T33] schedule+0x164/0x2b0 [ 387.716604][ T33] schedule_preempt_disabled+0x13/0x30 [ 387.716642][ T33] __mutex_lock+0x7c4/0x15a0 [ 387.716676][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 387.716709][ T33] ? __input_unregister_device+0x2d8/0x650 [ 387.716744][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 387.716774][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.716815][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.716845][ T33] __input_unregister_device+0x2d8/0x650 [ 387.716883][ T33] input_unregister_device+0x9b/0x100 [ 387.716917][ T33] usbtouch_disconnect+0x89/0x240 [ 387.716948][ T33] usb_unbind_interface+0x295/0x9f0 [ 387.716987][ T33] ? __pfx_usb_unbind_interface+0x10/0x10 [ 387.717013][ T33] device_release_driver_internal+0x4f5/0x880 [ 387.717046][ T33] bus_remove_device+0x444/0x560 [ 387.717084][ T33] ? __pfx_bus_remove_device+0x10/0x10 [ 387.717121][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 387.717156][ T33] device_del+0x524/0x8f0 [ 387.717202][ T33] ? __pfx_device_del+0x10/0x10 [ 387.717237][ T33] ? kobject_put+0x516/0x550 [ 387.717282][ T33] usb_disable_device+0x3d4/0x8d0 [ 387.717318][ T33] usb_disconnect+0x346/0x9a0 [ 387.717362][ T33] hub_event+0x1bbb/0x4d30 [ 387.717403][ T33] ? register_lock_class+0x31/0x2e0 [ 387.717475][ T33] ? __pfx_hub_event+0x10/0x10 [ 387.717509][ T33] ? rcu_is_watching+0x16/0xb0 [ 387.717538][ T33] ? process_scheduled_works+0x97a/0x1630 [ 387.717566][ T33] process_scheduled_works+0xc3d/0x1630 [ 387.717633][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.717669][ T33] ? assign_work+0x3cf/0x5d0 [ 387.717702][ T33] worker_thread+0xa47/0xfb0 [ 387.717746][ T33] ? __kthread_parkme+0x71/0x1f0 [ 387.717789][ T33] kthread+0x38b/0x480 [ 387.717822][ T33] ? __pfx_worker_thread+0x10/0x10 [ 387.717848][ T33] ? __pfx_kthread+0x10/0x10 [ 387.717883][ T33] ret_from_fork+0x514/0xb70 [ 387.717910][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 387.717934][ T33] ? __switch_to+0xc78/0x1410 [ 387.717970][ T33] ? __pfx_kthread+0x10/0x10 [ 387.718005][ T33] ret_from_fork_asm+0x1a/0x30 [ 387.718046][ T33] [ 387.718075][ T33] [ 387.718075][ T33] Showing all locks held in the system: [ 387.718084][ T33] locks held by kthreadd/2: 2, last CPU#1: [ 387.718101][ T33] #0: ffffffff8fea86b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 387.718161][ T33] #1: ffffffff8fd588e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 387.718224][ T33] locks held by kworker/0:0/9: 4, last CPU#0: [ 387.718240][ T33] #0: ffff88807ee49140 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.718306][ T33] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.718385][ T33] #2: ffff888077fbd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 387.718453][ T33] #3: ffff88802a76dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 387.718518][ T33] locks held by kworker/0:1/10: 3, last CPU#0: [ 387.718544][ T33] #0: ffff88807ee25940 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.718616][ T33] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.718697][ T33] #2: ffff88807d3c5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 387.718763][ T33] locks held by kworker/u8:0/12: 4, last CPU#1: [ 387.718779][ T33] #0: ffff8880791ac140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.718845][ T33] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 387.718905][ T33] #2: ffff88807e609440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810