INFO: task syz.1.662:6761 blocked for more than 440 seconds.
      Not tainted syzkaller #0
      Blocked by coredump.
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.662       state:D stack:0     pid:6761  tgid:6758  ppid:3203   task_flags:0x400548 flags:0x0000000c
Call Trace:
[<ffffffff863ce260>] context_switch kernel/sched/core.c:5357 [inline]
[<ffffffff863ce260>] __schedule+0x1042/0x4106 kernel/sched/core.c:6961
[<ffffffff863d13e8>] __schedule_loop kernel/sched/core.c:7043 [inline]
[<ffffffff863d13e8>] schedule+0xc4/0x35e kernel/sched/core.c:7058
[<ffffffff863d1d6c>] schedule_preempt_disabled+0x16/0x28 kernel/sched/core.c:7115
[<ffffffff863d998a>] __mutex_lock_common kernel/locking/mutex.c:676 [inline]
[<ffffffff863d998a>] __mutex_lock+0xb76/0x19d8 kernel/locking/mutex.c:760
[<ffffffff863da800>] mutex_lock_nested+0x14/0x1c kernel/locking/mutex.c:812
[<ffffffff800181ae>] io_uring_del_tctx_node+0x120/0x2c8 io_uring/tctx.c:179
[<ffffffff8001842e>] io_uring_clean_tctx+0xd8/0x188 io_uring/tctx.c:195
[<ffffffff80017572>] io_uring_cancel_generic+0x6be/0x712 io_uring/io_uring.c:3272
[<ffffffff816e17d6>] __io_uring_cancel+0x24/0x2e io_uring/io_uring.c:3287
[<ffffffff8015e96c>] io_uring_files_cancel include/linux/io_uring.h:19 [inline]
[<ffffffff8015e96c>] do_exit+0x2e8/0x28e0 kernel/exit.c:907
[<ffffffff801614c4>] do_group_exit+0xd4/0x26c kernel/exit.c:1102
[<ffffffff8019a11a>] get_signal+0x207c/0x22fc kernel/signal.c:3034
[<ffffffff80071104>] arch_do_signal_or_restart+0x776/0x25d6 arch/riscv/kernel/signal.c:431
[<ffffffff803c20fe>] exit_to_user_mode_loop+0x90/0x134 kernel/entry/common.c:40
[<ffffffff863c3970>] exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
[<ffffffff863c3970>] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
[<ffffffff863c3970>] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
[<ffffffff863c3970>] do_trap_ecall_u+0x3f0/0x530 arch/riscv/kernel/traps.c:357
[<ffffffff863ed236>] handle_exception+0x146/0x152 arch/riscv/kernel/entry.S:197

Showing all locks held in the system:
1 lock held by kthreadd/2:
2 locks held by kworker/1:1/36:
1 lock held by khungtaskd/37:
 #0: ffffffff883dd9a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 kernel/locking/lockdep.c:6771
2 locks held by kswapd0/77:
1 lock held by jbd2/vda-8/2995:
1 lock held by klogd/3018:
2 locks held by dhcpcd/3062:
1 lock held by dhcpcd/3064:
2 locks held by getty/3171:
 #0: ffffaf801d5040a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 drivers/tty/tty_ldsem.c:340
 #1: ffff8f800008e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12b6 drivers/tty/n_tty.c:2222
2 locks held by sshd/3193:
3 locks held by syz-executor/3195:
2 locks held by syz-executor/3201:
1 lock held by kworker/u10:3/3382:
2 locks held by kworker/u9:3/4189:
1 lock held by kworker/u9:7/4497:
4 locks held by kworker/0:0/4863:
 #0: ffffaf802183c548 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x848/0x1f32 kernel/workqueue.c:3211
 #1: ffff8f8002ee7b70 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f32 kernel/workqueue.c:3211
 #2: ffffaf8021c51308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x12c/0x904 drivers/net/wireguard/noise.c:598
 #3: ffffaf80301cdc60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4b4/0x904 drivers/net/wireguard/noise.c:632
4 locks held by kworker/u9:0/4915:
3 locks held by kworker/u9:4/5049:
2 locks held by kworker/u10:2/5929:
3 locks held by kworker/u9:2/5949:
4 locks held by kworker/1:3/6222:
1 lock held by kworker/u8:4/6540:
5 locks held by kworker/u10:0/6703:
2 locks held by kworker/1:2/6753:
1 lock held by syz.1.662/6758:
1 lock held by syz.1.662/6761:
 #0: ffffaf8038d7a0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_uring_del_tctx_node+0x120/0x2c8 io_uring/tctx.c:179
2 locks held by syz.1.662/6765:
2 locks held by syz.0.663/6760:

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT 
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8007949a>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:132
[<ffffffff8000329a>] show_stack+0x30/0x3c arch/riscv/kernel/stacktrace.c:138
[<ffffffff80060b76>] __dump_stack lib/dump_stack.c:94 [inline]
[<ffffffff80060b76>] dump_stack_lvl+0x12e/0x1a6 lib/dump_stack.c:120
[<ffffffff80060c0a>] dump_stack+0x1c/0x24 lib/dump_stack.c:129
[<ffffffff8638560a>] nmi_cpu_backtrace+0x3b0/0x3b2 lib/nmi_backtrace.c:113
[<ffffffff863858c2>] nmi_trigger_cpumask_backtrace+0x2b6/0x458 lib/nmi_backtrace.c:62
[<ffffffff80087004>] arch_trigger_cpumask_backtrace+0x2c/0x3c arch/riscv/kernel/smp.c:350
[<ffffffff804ffe90>] trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
[<ffffffff804ffe90>] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline]
[<ffffffff804ffe90>] watchdog+0xc56/0x1134 kernel/hung_task.c:491
[<ffffffff801e8234>] kthread+0x39c/0x7d4 kernel/kthread.c:463
[<ffffffff800699c4>] ret_from_fork_kernel+0x2a/0xbb4 arch/riscv/kernel/process.c:214
[<ffffffff863ed356>] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:327
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 4189 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT 
Hardware name: riscv-virtio,qemu (DT)
Workqueue: events_unbound toggle_allocation_gate
epc : finish_task_switch.isra.0+0x1f4/0x940 kernel/sched/core.c:5225
 ra : raw_spin_rq_unlock_irq kernel/sched/sched.h:1531 [inline]
 ra : finish_lock_switch kernel/sched/core.c:5105 [inline]
 ra : finish_task_switch.isra.0+0x1f0/0x940 kernel/sched/core.c:5223
epc : ffffffff8021a7e4 ra : ffffffff8021a7e0 sp : ffff8f8003d876a0
 gp : ffffffff89c9e340 tp : ffffaf80133e4ec0 t0 : 0000000000000000
 t1 : fffff5ef0dda7220 t2 : 0000000000000000 s0 : ffff8f8003d87720
 s1 : 0000000000000000 a0 : 0000000000000000 a1 : ffffffff87d8a560
 a2 : 0000000000000006 a3 : 0000000000000001 a4 : 0000000000000001
 a5 : 0000000000208909 a6 : 0000000000000003 a7 : ffffaf806ed39103
 s2 : ffffaf806ed39118 s3 : ffffaf806ed39100 s4 : ffffaf806ed39cd8
 s5 : ffffaf8012aecec0 s6 : 0000000000000000 s7 : 0000000000000402
 s8 : ffffffff89cdf720 s9 : 1ffff5f00dda739b s10: ffffaf80185d0000
 s11: 1ffff5f00255d730 t3 : c43f549200000000 t4 : fffff5ef0dda7220
 t5 : fffff5ef0dda7221 t6 : 0000000000000002
status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001
[<ffffffff8021a7e4>] arch_local_irq_enable arch/riscv/include/asm/irqflags.h:21 [inline]
[<ffffffff8021a7e4>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1531 [inline]
[<ffffffff8021a7e4>] finish_lock_switch kernel/sched/core.c:5105 [inline]
[<ffffffff8021a7e4>] finish_task_switch.isra.0+0x1f4/0x940 kernel/sched/core.c:5223
[<ffffffff863ce268>] context_switch kernel/sched/core.c:5360 [inline]
[<ffffffff863ce268>] __schedule+0x104a/0x4106 kernel/sched/core.c:6961
[<ffffffff863d13e8>] __schedule_loop kernel/sched/core.c:7043 [inline]
[<ffffffff863d13e8>] schedule+0xc4/0x35e kernel/sched/core.c:7058
[<ffffffff80b22e48>] toggle_allocation_gate mm/kfence/core.c:852 [inline]
[<ffffffff80b22e48>] toggle_allocation_gate+0x1f0/0x26c mm/kfence/core.c:842
[<ffffffff801c783c>] process_one_work+0x96a/0x1f32 kernel/workqueue.c:3236
[<ffffffff801ca94c>] process_scheduled_works kernel/workqueue.c:3319 [inline]
[<ffffffff801ca94c>] worker_thread+0x5ce/0xde8 kernel/workqueue.c:3400
[<ffffffff801e8234>] kthread+0x39c/0x7d4 kernel/kthread.c:463
[<ffffffff800699c4>] ret_from_fork_kernel+0x2a/0xbb4 arch/riscv/kernel/process.c:214
[<ffffffff863ed356>] ret_from_fork_kernel_asm+0x16/0x18 arch/riscv/kernel/entry.S:327