INFO: task kcompactd0:30 blocked for more than 143 seconds.
      Not tainted 5.16.0-rc1-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kcompactd0      state:D stack:24048 pid:   30 ppid:     2 flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:4972 [inline]
 __schedule+0xb72/0x1460 kernel/sched/core.c:6253
 schedule+0x12b/0x1f0 kernel/sched/core.c:6326
 io_schedule+0x83/0x100 kernel/sched/core.c:8371
 folio_wait_bit_common+0x8aa/0xe00 mm/filemap.c:1371
 lock_page include/linux/pagemap.h:780 [inline]
 __unmap_and_move+0x9d9/0xda0 mm/migrate.c:980
 unmap_and_move+0x321/0xd70 mm/migrate.c:1204
 migrate_pages+0x562/0x16f0 mm/migrate.c:1481
 compact_zone+0x2d23/0x3d10 mm/compaction.c:2399
 kcompactd_do_work mm/compaction.c:2839 [inline]
 kcompactd+0x937/0x2920 mm/compaction.c:2941
 kthread+0x468/0x490 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/27:
 #0: ffffffff8cd1dc00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
1 lock held by khugepaged/33:
1 lock held by kswapd0/98:
1 lock held by kswapd1/99:
1 lock held by systemd-journal/2968:
 #0: ffff888017ab5550 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:838 [inline]
 #0: ffff888017ab5550 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0x1b8/0x9f0 mm/readahead.c:194
1 lock held by in:imklog/6182:
4 locks held by syz-fuzzer/6488:
1 lock held by syz-executor.1/19803:

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
 watchdog+0xc82/0xcd0 kernel/hung_task.c:295
 kthread+0x468/0x490 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 137 Comm: kworker/0:2 Not tainted 5.16.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events kfree_rcu_work
RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:60 [inline]
RIP: 0010:stack_access_ok arch/x86/kernel/unwind_orc.c:342 [inline]
RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:352 [inline]
RIP: 0010:unwind_next_frame+0x1280/0x1fc0 arch/x86/kernel/unwind_orc.c:600
Code: 01 ea 49 8b 5d 10 43 8a 04 37 84 c0 0f 85 3e 0c 00 00 48 89 d5 48 39 d3 76 1a 49 39 ec 77 15 41 83 7d 00 00 74 0e 48 8d 45 08 <4c> 39 e0 76 05 48 39 d8 76 3b 49 8d 7d 28 48 89 f8 48 c1 e8 03 48
RSP: 0018:ffffc900027af5e0 EFLAGS: 00000202
RAX: ffffc900027afc58 RBX: ffffc900027b0000 RCX: 0000000000000000
RDX: ffffc900027afc50 RSI: 0000000000000001 RDI: ffffc900027af6b0
RBP: ffffc900027afc50 R08: dffffc0000000000 R09: ffffc900027af6f0
R10: fffff520004f5ee0 R11: 0000000000000000 R12: ffffc900027a8000
R13: ffffc900027af6a0 R14: dffffc0000000000 R15: 1ffff920004f5ed4
FS:  0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c019995cc8 CR3: 0000000072956000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 arch_stack_walk+0x112/0x140 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x11b/0x1e0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:38 [inline]
 kasan_set_track+0x4c/0x80 mm/kasan/common.c:46
 kasan_set_free_info+0x1f/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free+0x10d/0x150 mm/kasan/common.c:366
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:1723 [inline]
 slab_free_freelist_hook+0x12e/0x1a0 mm/slub.c:1749
 slab_free mm/slub.c:3513 [inline]
 kfree+0xe1/0x330 mm/slub.c:4561
 kfree_rcu_work+0x683/0x820 kernel/rcu/tree.c:3315
 process_one_work+0x853/0x1140 kernel/workqueue.c:2298
 worker_thread+0xac1/0x1320 kernel/workqueue.c:2445
 kthread+0x468/0x490 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30
 </TASK>
----------------
Code disassembly (best guess):
   0:	01 ea                	add    %ebp,%edx
   2:	49 8b 5d 10          	mov    0x10(%r13),%rbx
   6:	43 8a 04 37          	mov    (%r15,%r14,1),%al
   a:	84 c0                	test   %al,%al
   c:	0f 85 3e 0c 00 00    	jne    0xc50
  12:	48 89 d5             	mov    %rdx,%rbp
  15:	48 39 d3             	cmp    %rdx,%rbx
  18:	76 1a                	jbe    0x34
  1a:	49 39 ec             	cmp    %rbp,%r12
  1d:	77 15                	ja     0x34
  1f:	41 83 7d 00 00       	cmpl   $0x0,0x0(%r13)
  24:	74 0e                	je     0x34
  26:	48 8d 45 08          	lea    0x8(%rbp),%rax
* 2a:	4c 39 e0             	cmp    %r12,%rax <-- trapping instruction
  2d:	76 05                	jbe    0x34
  2f:	48 39 d8             	cmp    %rbx,%rax
  32:	76 3b                	jbe    0x6f
  34:	49 8d 7d 28          	lea    0x28(%r13),%rdi
  38:	48 89 f8             	mov    %rdi,%rax
  3b:	48 c1 e8 03          	shr    $0x3,%rax
  3f:	48                   	rex.W