INFO: task syz.4.448:10613 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.448       state:D stack:25944 pid:10613 tgid:10610 ppid:10306  task_flags:0x400040 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x16f9/0x5500
 rt_mutex_schedule+0x76/0xf0
 __rt_mutex_slowlock_locked+0x1f28/0x2550
 __rwbase_read_lock+0xc3/0x180
 down_read+0x132/0x200
 super_lock+0x2d6/0x3d0
 __iterate_supers+0x126/0x250
 __se_sys_quotactl+0x3a7/0x9e0
 do_syscall_64+0x15f/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f975da0cdd9
RSP: 002b:00007f975bc5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
RAX: ffffffffffffffda RBX: 00007f975dc85fa0 RCX: 00007f975da0cdd9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102
RBP: 00007f975daa2d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f975dc86038 R14: 00007f975dc85fa0 R15: 00007ffdbff910b8
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/0:1/10:
 #0: ffff88816fd2e538 ((wq_completion)wg-kex-wg1#26){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #3: ffff88812103d6d0 (&list->lock#6){+.+.}-{3:3}, at: process_backlog+0x885/0xc60
2 locks held by kworker/u8:0/12:
 #0: ffff888115cb6938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
14 locks held by ktimers/1/30:
 #0: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #1: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #2: ffff88823c6261e0 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x120/0x9f0
 #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
 #4: ffffc90000a4fa80 ((&ndev->rs_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0
 #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670
 #6: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: ip6_output+0x126/0x550
 #7: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #8: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0
 #9: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: veth_xmit+0x60/0xda0
 #10: ffff88823c63d690 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0x8b0
 #11: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
 #12: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
 #13: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
1 lock held by khungtaskd/43:
 #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
4 locks held by kworker/u10:5/1148:
 #0: ffff88817ecda938 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc90008577c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffff888185e196f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830
 #3: ffff888171e8ae98 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830
5 locks held by kworker/u9:12/2163:
 #0: ffff8881000ac138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc9000a457c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffff88801afa4310 (&devlink->lock_key#31){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
 #3: ffff888173a21520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
 #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
2 locks held by dhcpcd/5332:
 #0: ffffffff8f352578 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x644/0x7f0
 #1: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630
2 locks held by getty/5421:
 #0: ffff88811796e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc90003f062e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
12 locks held by kworker/0:4/5677:
 #0: ffff88816fd48138 ((wq_completion)wg-crypt-wg2#11){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc900058dfc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #4: ffff888171e8e230 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200
 #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0
 #6: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #7: ffffffff8dfc82a0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x220/0xed0
 #8: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
 #9: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x10b0
 #10: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #11: ffffffff8dfc82a0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b3/0x3900
1 lock held by kworker/0:7/5720:
 #0: ffff88817ede6538 ((wq_completion)wg-kex-wg0#28){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
7 locks held by kworker/u8:6/6142:
 #0: ffff8881154b9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc9000798fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680
 #3: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
 #5: ffff888114b44470 (&tb->tb6_lock){+...}-{3:3}, at: ip6_ins_rt+0xd4/0x160
 #6: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
3 locks held by kworker/1:6/6508:
 #0: ffff88810006f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc9000472fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffff8881837ef280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0
3 locks held by kworker/1:7/6509:
 #0: ffff88810006f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
 #1: ffffc9000474fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
 #2: ffff88816e44a280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0
4 locks held by syz-executor/9734:
 #0: ffff888115e480d0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
 #1: ffff88816fc74348 (&sbi->cp_global_sem_key){+.+.}-{4:4}, at: f2fs_write_checkpoint+0x2ed/0x26a0
 #2: ffff88816fc743e0 (&sbi->cp_rwsem){++++}-{4:4}, at: f2fs_write_checkpoint+0x607/0x26a0
 #3: ffff88816fc74510 (&sbi->node_change){++++}-{4:4}, at: f2fs_write_checkpoint+0xa10/0x26a0
1 lock held by syz.4.448/10613:
 #0: ffff888115e480d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
1 lock held by syz.8.527/11694:
 #0: ffff888115e480d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
2 locks held by syz-executor/11898:
 #0: ffffffff8f3e1c80 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
 #1: ffffffff8f3e1a98 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
2 locks held by syz-executor/11903:
 #0: ffff88817437c1b8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250
 #1: ffffffff8f3dfc00 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xfd3/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:io_serial_out+0x7c/0xc0
Code: 21 87 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cc bb f0 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
RSP: 0018:ffffc90000167a30 EFLAGS: 00000202
RAX: 0000000000000064 RBX: 0000000000000064 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff853da9e0 R12: dffffc0000000000
R13: 0000000000000001 R14: ffffffff99b6eb00 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88818e91f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe612bee88 CR3: 000000017364a000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 serial8250_console_write+0x12e1/0x1b90
 console_flush_one_record+0x68b/0xb90
 legacy_kthread_func+0x1b6/0x250
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
