INFO: task syz.2.1012:9877 blocked in I/O wait for more than 143 seconds.
Tainted: G L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.1012 state:D stack:25600 pid:9877 tgid:9876 ppid:8071 task_flags:0x400140 flags:0x08080002
Call Trace:
context_switch kernel/sched/core.c:5520 [inline]
__schedule+0x1259/0x6920 kernel/sched/core.c:7270
__schedule_loop kernel/sched/core.c:7347 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7362
io_schedule+0x8a/0xf0 kernel/sched/core.c:8190
folio_wait_bit_common+0x3c0/0xac0 mm/filemap.c:1329
folio_lock include/linux/pagemap.h:1186 [inline]
migrate_folio_unmap mm/migrate.c:1261 [inline]
migrate_pages_batch+0x81d/0x46f0 mm/migrate.c:1919
migrate_pages_sync+0x4db/0x880 mm/migrate.c:2063
migrate_pages+0x1a83/0x2850 mm/migrate.c:2145
compact_zone+0x2643/0x4640 mm/compaction.c:2698
compact_node+0x17f/0x2c0 mm/compaction.c:2945
compact_nodes mm/compaction.c:2967 [inline]
sysctl_compaction_handler mm/compaction.c:3018 [inline]
sysctl_compaction_handler+0x141/0x210 mm/compaction.c:3005
proc_sys_call_handler+0x47f/0x5a0 fs/proc/proc_sysctl.c:600
iter_file_splice_write+0x830/0x10b0 fs/splice.c:736
do_splice_from fs/splice.c:936 [inline]
direct_splice_actor+0x192/0x690 fs/splice.c:1159
splice_direct_to_actor+0x345/0xa30 fs/splice.c:1103
do_splice_direct_actor fs/splice.c:1202 [inline]
do_splice_direct+0x174/0x240 fs/splice.c:1228
do_sendfile+0xadc/0xe20 fs/read_write.c:1371
__do_compat_sys_sendfile fs/read_write.c:1447 [inline]
__se_compat_sys_sendfile fs/read_write.c:1436 [inline]
__ia32_compat_sys_sendfile+0x162/0x220 fs/read_write.c:1436
do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
__do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf706efec
RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004
RDX: 00000000800000c0 RSI: 0000000000000005 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
locks held by pool_workqueue_/3: 1, on CPU#2:
#0: ffffffff8edf55e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343
locks held by khungtaskd/43: 1, last CPU#1:
#0: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#0: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
#0: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6793
locks held by kworker/3:1/62: 2, last CPU#3:
#0: ffff88801c0c7540 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3362
#1: ffffc900007dfd08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3363
locks held by kswapd1/112: 3, last CPU#2:
#0: ffffffff8efc5bc0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbce/0x1f00 mm/vmscan.c:7220
#1: ffffe8ffac23ee28 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_compress mm/zswap.c:853 [inline]
#1: ffffe8ffac23ee28 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store_page mm/zswap.c:1410 [inline]
#1: ffffe8ffac23ee28 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xd16/0x2e70 mm/zswap.c:1521
#2: ffffe8ffac23ee68 (&ps->lock){+...}-{3:3}, at: raw_spin_rq_lock_nested kernel/sched/core.c:685 [inline]
#2: ffffe8ffac23ee68 (&ps->lock){+...}-{3:3}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:669
locks held by getty/5530: 2, on CPU#2:
#0: ffff88804c9e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
#1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211
locks held by kworker/3:2H/5980: 2, last CPU#3:
#0: ffff88801c0aa540 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3362
#1: ffffc90006a8fd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3363
locks held by udevd/8809: 1, on CPU#1:
#0: ffff8880280b2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:990
locks held by syz.2.1012/9877: 1, on CPU#1:
#0: ffff888013c0c460 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 fs/splice.c:1103
locks held by syz-executor/10139: 3, last CPU#0:
#0: ffff888000c56388 (&xt[i].compat_mutex){+.+.}-{4:4}, at: compat_get_entries+0x19b/0x7f0 net/ipv4/netfilter/ip_tables.c:1594
#1: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#1: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
#1: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
#1: ffffffff8ede9b40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 arch/x86/kernel/unwind_orc.c:495
#2: ffff88802b224568 (psi_seq){-.-.}-{0:0}, at: psi_enqueue kernel/sched/stats.h:159 [inline]
#2: ffff88802b224568 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x1dc/0x4f0 kernel/sched/core.c:2196
locks held by syz.1.1663/12374: 1, last CPU#0:
#0: ffff888050debb78 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1090 [inline]
#0: ffff888050debb78 (mapping.invalidate_lock#2){++++}-{4:4}, at: do_page_cache_ra+0x101/0x160 mm/readahead.c:347
locks held by syz.3.1664/12378: 2, on CPU#2:
#0: ffffffff90ba9b80 (register_mutex#4){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
#0: ffffffff90ba9b80 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 sound/core/seq/oss/seq_oss.c:140
#1: ffffffff8edf55e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343
locks held by syz.3.1664/12379: 1, on CPU#3:
#0: ffff88804ac8fd60 (&rmidi->open_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline]
#0: ffff88804ac8fd60 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 sound/core/rawmidi.c:574
locks held by dhcpcd/12392: 1, on CPU#2:
#0: ffff8880135024c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1025 [inline]
#0: ffff8880135024c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 net/socket.c:734
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:123
nmi_trigger_cpumask_backtrace+0x21f/0x2a0 lib/nmi_backtrace.c:66
trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
watchdog+0xcb1/0x1030 kernel/hung_task.c:561
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0,2-3:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 54 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 kernel/kcov.c:217
Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 34 17 00 00 85 c0 74 2b 8b 82 08 17 00 00 <83> f8 02 75 20 48 8b 8a 10 17 00 00 8b 92 0c 17 00 00 48 8b 01 48
RSP: 0018:ffffc9000075f898 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000001
RDX: ffff88801d348000 RSI: ffffffff81fdb7dd RDI: ffff88801d348000
RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000007
R10: 0000000000000002 R11: 0000000000000000 R12: 0000000005668201
R13: 0000000000000000 R14: ffff88802b23ce10 R15: 0000000000000002
FS: 0000000000000000(0000) GS:ffff88809698f000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055c1a8bc22a0 CR3: 000000000eb94000 CR4: 0000000000352ef0
Call Trace:
smp_call_function_many_cond+0x44d/0x18c0 kernel/smp.c:934
on_each_cpu include/linux/smp.h:71 [inline]
smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2602 [inline]
smp_text_poke_batch_finish+0x919/0xc60 arch/x86/kernel/alternative.c:2895
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
jump_label_update+0x37a/0x550 kernel/jump_label.c:910
static_key_enable_cpuslocked+0x1bc/0x270 kernel/jump_label.c:210
static_key_enable+0x1a/0x20 kernel/jump_label.c:223
toggle_allocation_gate mm/kfence/core.c:911 [inline]
toggle_allocation_gate+0xfe/0x2d0 mm/kfence/core.c:903
process_one_work+0xac7/0x1b10 kernel/workqueue.c:3387
process_scheduled_works kernel/workqueue.c:3470 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3551
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
NMI backtrace for cpu 2
CPU: 2 UID: 0 PID: 112 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:check_kcov_mode kernel/kcov.c:185 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x40/0x70 kernel/kcov.c:217
Code: 7e 12 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 34 17 00 00 85 c0 74 2b <8b> 82 08 17 00 00 83 f8 02 75 20 48 8b 8a 10 17 00 00 8b 92 0c 17
RSP: 0018:ffffc9000210ed30 EFLAGS: 00000246
RAX: 8000000000000201 RBX: ffff88806c620000 RCX: 0000000000000201
RDX: ffff888040b40000 RSI: ffffffff852dec14 RDI: ffff888040b40000
RBP: 0000000000000009 R08: 0000000000000001 R09: 0000000000000040
R10: 0000000000000009 R11: ffff88806c620042 R12: 000000000000000a
R13: ffff8880230100a8 R14: 0000000000000001 R15: 0000000000000009
FS: 0000000000000000(0000) GS:ffff888096b8f000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000057e0b1fc CR3: 00000000649b3000 CR4: 0000000000352ef0
Call Trace:
add_bits+0xa4/0x8c0 lib/842/842_compress.c:181
add_template lib/842/842_compress.c:257 [inline]
process_next lib/842/842_compress.c:460 [inline]
sw842_compress+0x3279/0x4450 lib/842/842_compress.c:545
crypto_scomp_decompress include/crypto/internal/scompress.h:80 [inline]
scomp_acomp_comp_decomp+0x732/0xc40 crypto/scompress.c:252
crypto_acomp_compress+0x14c/0x540 crypto/acompress.c:285
zswap_compress mm/zswap.c:874 [inline]
zswap_store_page mm/zswap.c:1410 [inline]
zswap_store+0xe8d/0x2e70 mm/zswap.c:1521
swap_writeout+0xde0/0x1b20 mm/page_io.c:285
pageout mm/vmscan.c:658 [inline]
shrink_folio_list+0x5d6c/0x5f10 mm/vmscan.c:1390
evict_folios+0x31d/0x17b0 mm/vmscan.c:4841
try_to_shrink_lruvec+0x366/0x830 mm/vmscan.c:5004
shrink_one+0x307/0x850 mm/vmscan.c:5045
shrink_many mm/vmscan.c:5108 [inline]
lru_gen_shrink_node mm/vmscan.c:5186 [inline]
shrink_node+0x2721/0x3e90 mm/vmscan.c:6175
kswapd_shrink_node mm/vmscan.c:7029 [inline]
balance_pgdat+0xb20/0x1f00 mm/vmscan.c:7207
kswapd+0x556/0xb50 mm/vmscan.c:7483
kthread+0x373/0x450 kernel/kthread.c:436
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
NMI backtrace for cpu 3
CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: 88 a3 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 7e 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc9000048fe00 EFLAGS: 00000202
RAX: 00000000009306ad RBX: ffff88801cbfa580 RCX: ffffffff8bc72115
RDX: 0000000000000001 RSI: ffffffff8e3e1d0b RDI: ffffffff8c618180
RBP: ffffed100397f4b0 R08: 0000000000000001 R09: ffffed10056a678d
R10: ffff88802b533c6b R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff888096c8f000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f07fbaa26e0 CR3: 0000000074c74000 CR4: 0000000000352ef0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:768
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:199 [inline]
do_idle+0x3ae/0x5b0 kernel/sched/idle.c:355
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x158