INFO: task syz.1.8411:13911 blocked in I/O wait for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.8411      state:D stack:24968 pid:13911 tgid:13905 ppid:11205  task_flags:0x400040 flags:0x08080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x125c/0x6730 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0xdd/0x2c0 kernel/sched/core.c:7326
 io_schedule+0x8a/0xf0 kernel/sched/core.c:8154
 folio_wait_bit_common+0x414/0xa70 mm/filemap.c:1323
 folio_lock include/linux/pagemap.h:1157 [inline]
 migrate_folio_unmap mm/migrate.c:1250 [inline]
 migrate_pages_batch+0x7a1/0x45c0 mm/migrate.c:1907
 migrate_pages_sync+0x4db/0x880 mm/migrate.c:2051
 migrate_pages+0x1a83/0x2850 mm/migrate.c:2133
 compact_zone+0x243c/0x4420 mm/compaction.c:2669
 compact_node+0x17f/0x2c0 mm/compaction.c:2938
 compact_nodes mm/compaction.c:2960 [inline]
 sysctl_compaction_handler mm/compaction.c:3011 [inline]
 sysctl_compaction_handler+0x141/0x210 mm/compaction.c:2998
 proc_sys_call_handler+0x47f/0x5a0 fs/proc/proc_sysctl.c:600
 iter_file_splice_write+0x830/0x10b0 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x192/0x690 fs/splice.c:1159
 splice_direct_to_actor+0x345/0xa30 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x174/0x240 fs/splice.c:1228
 do_sendfile+0xadc/0xe20 fs/read_write.c:1371
 __do_compat_sys_sendfile fs/read_write.c:1447 [inline]
 __se_compat_sys_sendfile fs/read_write.c:1436 [inline]
 __ia32_compat_sys_sendfile+0x162/0x220 fs/read_write.c:1436
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]
 __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf705efec
RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004
RDX: 00000000800000c0 RSI: 000000000000000a RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/44:
 #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
2 locks held by getty/5550:
 #0: ffff88804b0df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243
 #1: ffffc90002d962e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211
3 locks held by sshd-session/5735:
5 locks held by kworker/1:4/5907:
 #0: ffff888020de5540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297
 #1: ffffc900067bfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298
 #2: ffff888028c0a1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1102 [inline]
 #2: ffff888028c0a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899
 #3: ffff888020bfb568 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_lock_port drivers/usb/core/hub.c:3252 [inline]
 #3: ffff888020bfb568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_port_connect drivers/usb/core/hub.c:5464 [inline]
 #3: ffff888020bfb568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 #3: ffff888020bfb568 (&port_dev->status_lock){+.+.}-{4:4}, at: port_event drivers/usb/core/hub.c:5871 [inline]
 #3: ffff888020bfb568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 drivers/usb/core/hub.c:5953
 #4: ffff888024aeda60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_port_connect drivers/usb/core/hub.c:5465 [inline]
 #4: ffff888024aeda60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 #4: ffff888024aeda60 (hcd->address0_mutex){+.+.}-{4:4}, at: port_event drivers/usb/core/hub.c:5871 [inline]
 #4: ffff888024aeda60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 drivers/usb/core/hub.c:5953
4 locks held by kworker/0:5/5908:
1 lock held by udevd/30217:
 #0: ffff888027526350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 block/bdev.c:948
3 locks held by kworker/0:3/8783:
 #0: ffff88801b8aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297
 #1: ffffc90007e9fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298
 #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 kernel/rcu/tree_exp.h:311
1 lock held by syz.1.8411/13911:
 #0: ffff888029bee450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 fs/splice.c:1103
1 lock held by syz.3.9932/1872:
1 lock held by syz.5.9947/2016:
 #0: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 44 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:122
 nmi_trigger_cpumask_backtrace+0x21c/0x2a0 lib/nmi_backtrace.c:65
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x141/0x190 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xcb1/0x1030 kernel/hung_task.c:561
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Sending NMI from CPU 1 to CPUs 0,2-3:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 5735 Comm: sshd-session Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:lock_is_held_type+0xf5/0x140 kernel/locking/lockdep.c:5945
Code: ff ff ff ff 65 0f c1 15 19 a5 79 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 7c 3f 03 00 c3 cc cc cc cc 31 c0
RSP: 0000:ffffc9000435f5f0 EFLAGS: 00000296
RAX: 0000000000000000 RBX: ffff8880471040f8 RCX: 0000000000000001
RDX: 0000000000000046 RSI: ffffffff8df33399 RDI: ffffffff8c1e8f80
RBP: ffff888020c38000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000246 R14: ffff888020c38bf0 R15: 0000000000000002
FS:  00007fcce1b4f300(0000) GS:ffff8880970e7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcce0cb9000 CR3: 0000000051317000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 lock_is_held include/linux/lockdep.h:249 [inline]
 __swap_table_get mm/swap_table.h:246 [inline]
 __swap_table_test_zero mm/swap_table.h:287 [inline]
 swap_zeromap_batch mm/page_io.c:546 [inline]
 swap_read_folio_zeromap mm/page_io.c:571 [inline]
 swap_read_folio+0x13d5/0x2ec0 mm/page_io.c:684
 swap_cache_read_folio+0xae/0x140 mm/swap_state.c:652
 swap_cluster_readahead+0x387/0x5f0 mm/swap_state.c:831
 swapin_readahead+0x159/0x1200 mm/swap_state.c:984
 do_swap_page+0xf98/0x5780 mm/memory.c:4836
 handle_pte_fault mm/memory.c:6382 [inline]
 __handle_mm_fault+0x192f/0x2a00 mm/memory.c:6517
 handle_mm_fault+0x37b/0xa30 mm/memory.c:6686
 do_user_addr_fault+0x5a3/0x12f0 arch/x86/mm/fault.c:1343
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7fcce157f0d3
Code: 01 62 e1 fe 28 7f 41 01 62 e1 fe 28 7f 41 02 62 e1 fe 28 7f 41 03 c3 48 3b 15 29 92 07 00 73 5f 40 0f b6 c6 48 89 d1 48 89 fa <f3> aa 48 89 d0 c3 83 fa 10 7d 22 62 e1 fd 08 7e c1 83 fa 08 7d 27
RSP: 002b:00007ffe872759f8 EFLAGS: 00010287
RAX: 0000000000000000 RBX: 00007fcce0a49010 RCX: 0000000000090010
RDX: 00007fcce0a49010 RSI: 0000000000000000 RDI: 00007fcce0cb9000
RBP: 000055b184c0fb50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000055b184c127d0
R13: 000055b14dad4b12 R14: 000055b184c15770 R15: 000055b184c0fb50
 </TASK>
NMI backtrace for cpu 3
CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: d6 86 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 57 11 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc9000049fe00 EFLAGS: 00000202
RAX: 000000000183f44f RBX: ffff88801c7e0000 RCX: ffffffff8b9a42d5
RDX: 0000000000000000 RSI: ffffffff8df59017 RDI: ffffffff8c1e8f80
RBP: ffffed10038fc000 R08: 0000000000000001 R09: ffffed10056a678d
R10: ffff88802b533c6b R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffff92000093fc4 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880973e7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000005677a4ec CR3: 000000000e592000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
 default_idle+0x9/0x10 arch/x86/kernel/process.c:768
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x158
 </TASK>
NMI backtrace for cpu 2
CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64
Code: d6 86 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 57 11 00 fb f4 <e9> bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc9000048fe00 EFLAGS: 00000202
RAX: 0000000001bf6be3 RBX: ffff88801c7e2540 RCX: ffffffff8b9a42d5
RDX: 0000000000000000 RSI: ffffffff8df59017 RDI: ffffffff8c1e8f80
RBP: ffffed10038fc4a8 R08: 0000000000000001 R09: ffffed100568678d
R10: ffff88802b433c6b R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880972e7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000f53c5da4 CR3: 000000002a38d000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
 default_idle+0x9/0x10 arch/x86/kernel/process.c:768
 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:199 [inline]
 do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355
 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
 common_startup_64+0x13e/0x158
 </TASK>