INFO: task syz.5.1712:12025 blocked in I/O wait for more than 143 seconds.
      Tainted: G             L      syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.1712      state:D stack:23752 pid:12025 tgid:12024 ppid:11195  task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 __schedule+0x17b4/0x5680
 schedule+0x164/0x360
 io_schedule+0x7f/0xd0
 folio_wait_bit_common+0x6d8/0xbc0
 migrate_pages_batch+0x17e5/0x4ca0
 migrate_pages+0x20e0/0x2a10
 compact_zone+0x221b/0x4650
 sysctl_compaction_handler+0x4e3/0x870
 proc_sys_call_handler+0x4c8/0x830
 iter_file_splice_write+0x9a1/0x10f0
 direct_splice_actor+0x101/0x160
 splice_direct_to_actor+0x53a/0xc70
 do_splice_direct+0x195/0x290
 do_sendfile+0x535/0x7d0
 __se_sys_sendfile64+0xdf/0x1a0
 do_syscall_64+0x15f/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd26b79c819
RSP: 002b:00007fd26c61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fd26ba15fa0 RCX: 00007fd26b79c819
RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000007
RBP: 00007fd26b832c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fd26ba16038 R14: 00007fd26ba15fa0 R15: 00007ffea8a4b898
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/u8:1/13:
1 lock held by khungtaskd/34:
 #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
1 lock held by dhcpcd/5570:
 #0: ffffffff8fde2280 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
2 locks held by getty/5652:
 #0: ffff888111df60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
 #1: ffffc9000346b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
1 lock held by udevd/6000:
 #0: ffff88816d6bd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
5 locks held by kworker/0:13/6827:
 #0: ffff888168625d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
 #1: ffffc90003b27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
 #2: ffff8881077341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
 #3: ffff888120c961d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
 #4: ffff88811e1121a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
3 locks held by kworker/u9:5/9233:
 #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
 #1: ffffc900066d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
 #2: ffffffff8fde2280 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
1 lock held by syz.5.1712/12025:
 #0: ffff88819a982410 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
2 locks held by syz-executor/15881:
 #0: ffffffff8f514708 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
 #1: ffffffff8fde2280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0

=============================================

NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150
 nmi_cpu_backtrace+0x274/0x2d0
 nmi_trigger_cpumask_backtrace+0x17a/0x300
 sys_info+0x135/0x170
 watchdog+0xfd3/0x1030
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: netns cleanup_net
RIP: 0010:hrtick+0x4/0x2f0
Code: c1 7c c5 48 89 ef e8 db d9 9a 00 eb bb 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 89 fb 49 bd 00 00 00
RSP: 0018:ffffc900000075b8 EFLAGS: 00000006
RAX: ffffffff81b292f9 RBX: ffff88812103bbfb RCX: ffff888102af5880
RDX: 0000000000010100 RSI: ffffffff8c289dc0 RDI: ffff88812103bbc0
RBP: ffff88812103bbc0 R08: ffffffff903365f7 R09: 1ffffffff2066cbe
R10: dffffc0000000000 R11: ffffffff819622f0 R12: 0000000000000000
R13: 1ffff1102420506a R14: ffff8881210283a0 R15: ffffffff819622f0
FS:  0000000000000000(0000) GS:ffff88818dc1b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007efc7a741000 CR3: 000000016fbfc000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 __hrtimer_run_queues+0x375/0xa20
 hrtimer_interrupt+0x44b/0x950
 __sysvec_apic_timer_interrupt+0x102/0x430
 sysvec_apic_timer_interrupt+0x52/0xc0
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:kasan_check_range+0x1c8/0x2c0
Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 9a ce 89 09 cc 45 84 ff 0f 85 a1 00
RSP: 0018:ffffc900000078a8 EFLAGS: 00000256
RAX: 1ffff92000000f01 RBX: 0000000000000010 RCX: ffffffff817710e3
RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000007a18
RBP: 0000000000000000 R08: ffffc90000007a27 R09: 1ffff92000000f44
R10: dffffc0000000000 R11: fffff52000000f45 R12: 0000000000000002
R13: 1ffff92000000f3b R14: fffff52000000f45 R15: 1ffff92000000f43
 __asan_memset+0x22/0x50
 unwind_next_frame+0xf33/0x2550
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_track+0x3e/0x80
 kasan_save_free_info+0x46/0x50
 __kasan_slab_free+0x5c/0x80
 kmem_cache_free+0x182/0x650
 rcu_core+0x7cd/0x1070
 handle_softirqs+0x22a/0x840
 do_softirq+0x76/0xd0
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130
 addrconf_ifdown+0x698/0x1a40
 addrconf_notify+0x1bc/0x1050
 notifier_call_chain+0x1ad/0x3d0
 unregister_netdevice_many_notify+0x17a5/0x22c0
 default_device_exit_batch+0x981/0xa00
 ops_undo_list+0x52b/0x940
 cleanup_net+0x56b/0x800
 process_scheduled_works+0xb5d/0x1860
 worker_thread+0xa53/0xfc0
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
