syzbot

INFO: task syz-executor.0:4046 blocked for more than 430 seconds.
      Not tainted 6.9.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:0     pid:4046  tgid:4044  ppid:3022   flags:0x00000005
Call trace: 
[<81904c90>] (__schedule) from [<81905894>] (__schedule_loop kernel/sched/core.c:6822 [inline])
[<81904c90>] (__schedule) from [<81905894>] (schedule+0x2c/0xfc kernel/sched/core.c:6837)
 r10:dfb65b7c r9:82605244 r8:82604ec0 r7:00000000 r6:00000002 r5:00000000
 r4:847cd400
[<81905868>] (schedule) from [<819059c0>] (io_schedule+0x38/0x48 kernel/sched/core.c:9043)
 r5:00000000 r4:847cd400
[<81905988>] (io_schedule) from [<80433a60>] (folio_wait_bit_common+0x190/0x3a8 mm/filemap.c:1307)
 r5:847cd400 r4:00000002
[<804338d0>] (folio_wait_bit_common) from [<80437148>] (folio_put_wait_locked mm/filemap.c:1471 [inline])
[<804338d0>] (folio_wait_bit_common) from [<80437148>] (do_read_cache_folio+0x98/0x248 mm/filemap.c:3770)
 r10:85035480 r9:00080001 r8:00000000 r7:8078b69c r6:00000000 r5:831807b8
 r4:ddeae02c
[<804370b0>] (do_read_cache_folio) from [<80437314>] (read_cache_folio+0x1c/0x24 mm/filemap.c:3820)
 r10:85035480 r9:00000002 r8:00000000 r7:00000000 r6:807b332c r5:837b6600
 r4:00000000 r3:00000000
[<804372f8>] (read_cache_folio) from [<807b311c>] (read_mapping_folio include/linux/pagemap.h:894 [inline])
[<804372f8>] (read_cache_folio) from [<807b311c>] (read_part_sector+0x58/0xd0 block/partitions/core.c:712)
[<807b30c4>] (read_part_sector) from [<807b3394>] (msdos_partition+0x68/0xafc block/partitions/msdos.c:592)
 r5:837b6600 r4:85035480
[<807b332c>] (msdos_partition) from [<807b2a7c>] (check_partition block/partitions/core.c:138 [inline])
[<807b332c>] (msdos_partition) from [<807b2a7c>] (blk_add_partitions block/partitions/core.c:579 [inline])
[<807b332c>] (msdos_partition) from [<807b2a7c>] (bdev_disk_changed+0x2d4/0x6ac block/partitions/core.c:683)
 r10:00000000 r9:81aebff8 r8:00000000 r7:827ee49d r6:807b332c r5:837b6600
 r4:85035480
[<807b27a8>] (bdev_disk_changed) from [<8078a224>] (blkdev_get_whole+0xa8/0xd0 block/bdev.c:680)
 r10:837b672c r9:00000000 r8:00000001 r7:00000001 r6:837b6600 r5:00000000
 r4:83180440
[<8078a17c>] (blkdev_get_whole) from [<8078ad7c>] (bdev_open+0x224/0x3e8 block/bdev.c:889)
 r7:837b6600 r6:00000000 r5:8435d840 r4:83180440
[<8078ab58>] (bdev_open) from [<8078cb14>] (blkdev_open+0x78/0x9c block/fops.c:615)
 r10:8435d840 r9:00000004 r8:8435d8b0 r7:83180440 r6:00000001 r5:8435d840
 r4:00000000
[<8078ca9c>] (blkdev_open) from [<804fdf34>] (do_dentry_open+0x1e4/0x57c fs/open.c:955)
 r7:8078ca9c r6:00000000 r5:83832260 r4:8435d840
[<804fdd50>] (do_dentry_open) from [<804fff08>] (vfs_open+0x34/0x38 fs/open.c:1089)
 r8:dfb65e58 r7:dfb65f20 r6:00000000 r5:8271c0c8 r4:00000000
[<804ffed4>] (vfs_open) from [<80517c54>] (do_open fs/namei.c:3650 [inline])
[<804ffed4>] (vfs_open) from [<80517c54>] (path_openat+0xa84/0x10e0 fs/namei.c:3807)
[<805171d0>] (path_openat) from [<80518a90>] (do_filp_open+0x9c/0x138 fs/namei.c:3834)
 r10:00000142 r9:847cd400 r8:00000001 r7:dfb65e58 r6:dfb65f20 r5:847cd400
 r4:82ea9000
[<805189f4>] (do_filp_open) from [<805001f4>] (do_sys_openat2+0xbc/0xe4 fs/open.c:1406)
 r8:8020029c r7:ffffff9c r6:00000006 r5:dfb65f58 r4:82ea9000
[<80500138>] (do_sys_openat2) from [<805005fc>] (do_sys_open fs/open.c:1421 [inline])
[<80500138>] (do_sys_openat2) from [<805005fc>] (__do_sys_openat fs/open.c:1437 [inline])
[<80500138>] (do_sys_openat2) from [<805005fc>] (sys_openat+0x98/0xd4 fs/open.c:1432)
 r7:00000142 r6:00000000 r5:76b9baf8 r4:ffffff9c
[<80500564>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfb65fa8 to 0xdfb65ff0)
5fa0:                   00000000 76b9baf8 ffffff9c 76b9baf8 00000000 00000000
5fc0: 00000000 76b9baf8 00000000 00000142 00000000 7eecf32f 003d0f00 76b9c0fc
5fe0: 81010101 76b9bab0 00091468 0004f848
 r5:76b9baf8 r4:00000000
INFO: task syz-executor.0:4047 blocked for more than 430 seconds.
      Not tainted 6.9.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:0     pid:4047  tgid:4044  ppid:3022   flags:0x00000005
Call trace: 
[<81904c90>] (__schedule) from [<81905894>] (__schedule_loop kernel/sched/core.c:6822 [inline])
[<81904c90>] (__schedule) from [<81905894>] (schedule+0x2c/0xfc kernel/sched/core.c:6837)
 r10:00000036 r9:00000000 r8:837b6730 r7:00000002 r6:df9fde24 r5:847c8000
 r4:847c8000
[<81905868>] (schedule) from [<81905ea4>] (schedule_preempt_disabled+0x18/0x24 kernel/sched/core.c:6894)
 r5:847c8000 r4:837b672c
[<81905e8c>] (schedule_preempt_disabled) from [<8190878c>] (__mutex_lock_common kernel/locking/mutex.c:684 [inline])
[<81905e8c>] (schedule_preempt_disabled) from [<8190878c>] (__mutex_lock.constprop.0+0x2e8/0xae0 kernel/locking/mutex.c:752)
[<819084a4>] (__mutex_lock.constprop.0) from [<81909058>] (__mutex_lock_slowpath+0x14/0x18 kernel/locking/mutex.c:1040)
 r10:00000036 r9:837b672c r8:83180440 r7:00000000 r6:837b6600 r5:8438ff00
 r4:831806a8
[<81909044>] (__mutex_lock_slowpath) from [<81909098>] (mutex_lock+0x3c/0x40 kernel/locking/mutex.c:286)
[<8190905c>] (mutex_lock) from [<8078b1a4>] (bdev_release+0x58/0x1a0 block/bdev.c:1059)
[<8078b14c>] (bdev_release) from [<8078b73c>] (blkdev_release+0x14/0x1c block/fops.c:623)
 r9:847c8000 r8:841d3610 r7:83832260 r6:83025f30 r5:084a001d r4:8438ff00
[<8078b728>] (blkdev_release) from [<805050b4>] (__fput+0x84/0x2d4 fs/file_table.c:422)
[<80505030>] (__fput) from [<80505380>] (____fput+0x10/0x14 fs/file_table.c:450)
 r9:847c8000 r8:82860608 r7:847c8000 r6:847c8884 r5:847c8854 r4:00000000
[<80505370>] (____fput) from [<8026de6c>] (task_work_run+0x90/0xb8 kernel/task_work.c:180)
[<8026dddc>] (task_work_run) from [<8020bde8>] (resume_user_mode_work include/linux/resume_user_mode.h:50 [inline])
[<8026dddc>] (task_work_run) from [<8020bde8>] (do_work_pending+0x448/0x4f8 arch/arm/kernel/signal.c:631)
 r9:847c8000 r8:8020029c r7:00000036 r6:8020029c r5:df9fdfb0 r4:847c8000
[<8020b9a0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24)
Exception stack(0xdf9fdfb0 to 0xdf9fdff8)
dfa0:                                     00000000 0000ab03 00000000 00000000
dfc0: 00000000 00000000 0014c354 00000036 7eecf32e 7eecf32f 003d0f00 76b7b0fc
dfe0: 76b7af08 76b7aef8 00016d28 00051560 60000010 00000003
 r10:00000036 r9:847c8000 r8:8020029c r7:00000036 r6:0014c354 r5:00000000
 r4:00000000
NMI backtrace for cpu 1
CPU: 1 PID: 32 Comm: khungtaskd Not tainted 6.9.0-syzkaller #0
Hardware name: ARM-Versatile Express
Call trace: 
[<818e358c>] (dump_backtrace) from [<818e3688>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:00000113 r5:60000193 r4:81fe2aec
[<818e3670>] (show_stack) from [<81900c98>] (__dump_stack lib/dump_stack.c:88 [inline])
[<818e3670>] (show_stack) from [<81900c98>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:114)
[<81900c28>] (dump_stack_lvl) from [<81900cbc>] (dump_stack+0x18/0x1c lib/dump_stack.c:123)
 r5:00000001 r4:00000001
[<81900ca4>] (dump_stack) from [<818d08b8>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113)
[<818d0758>] (nmi_cpu_backtrace) from [<818d0a04>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62)
 r7:00000001 r6:8260c5d0 r5:8261a7cc r4:ffffffff
[<818d08d4>] (nmi_trigger_cpumask_backtrace) from [<80210408>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851)
 r9:827e5ee7 r8:828a4fa0 r7:8260c734 r6:00007f2f r5:8261adc8 r4:84652c1c
[<802103f0>] (arch_trigger_cpumask_backtrace) from [<803531f8>] (trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline])
[<802103f0>] (arch_trigger_cpumask_backtrace) from [<803531f8>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline])
[<802103f0>] (arch_trigger_cpumask_backtrace) from [<803531f8>] (watchdog+0x48c/0x59c kernel/hung_task.c:379)
[<80352d6c>] (watchdog) from [<8027151c>] (kthread+0x104/0x134 kernel/kthread.c:389)
 r10:00000000 r9:df819e58 r8:82ce3600 r7:00000000 r6:80352d6c r5:82e9b000
 r4:82f821c0
[<80271418>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:134)
Exception stack(0xdf8e1fb0 to 0xdf8e1ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80271418 r4:82f821c0
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.9.0-syzkaller #0
Hardware name: ARM-Versatile Express
PC is at kmap_local_sched_in kernel/sched/core.c:5188 [inline]
PC is at finish_task_switch+0x8c/0x294 kernel/sched/core.c:5290
LR is at __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
LR is at _raw_spin_unlock+0x2c/0x50 kernel/locking/spinlock.c:186
pc : [<8027ed0c>]    lr : [<8190ddc0>]    psr: 20000013
sp : 82601e88  ip : 82601e78  fp : 82601ecc
r10: 00002001  r9 : 8261adc0  r8 : 83823000
r7 : 84096100  r6 : 8190508c  r5 : dddd0440  r4 : 00000000
r3 : 8261adc0  r2 : 00000001  r1 : 81fe2aec  r0 : 00000001
Flags: nzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
Control: 30c5387d  Table: 85344740  DAC: fffffffd
Call trace: 
[<8027ec80>] (finish_task_switch) from [<8190508c>] (context_switch kernel/sched/core.c:5411 [inline])
[<8027ec80>] (finish_task_switch) from [<8190508c>] (__schedule+0x3fc/0xbd8 kernel/sched/core.c:6745)
 r10:00000000 r9:84096100 r8:8260ca7c r7:84096100 r6:8261adc0 r5:dddd0440
 r4:84da0000
[<81904c90>] (__schedule) from [<81905ddc>] (schedule_idle+0x24/0x68 kernel/sched/core.c:6863)
 r10:00000000 r9:00000000 r8:00000000 r7:8260c5f8 r6:8261adc0 r5:8260c5d0
 r4:8261adc0
[<81905db8>] (schedule_idle) from [<8029bee0>] (do_idle+0x19c/0x2cc kernel/sched/idle.c:360)
 r5:8260c5d0 r4:00000000
[<8029bd44>] (do_idle) from [<8029c344>] (cpu_startup_entry+0x30/0x34 kernel/sched/idle.c:430)
 r10:8261a8b0 r9:820f8d80 r8:8260c580 r7:00000000 r6:deffc061 r5:82625cfc
 r4:000000ec
[<8029c314>] (cpu_startup_entry) from [<81902fc8>] (kernel_init+0x0/0x138 init/main.c:742)
[<81902ee8>] (rest_init) from [<82401398>] (start_kernel+0x75c/0x778 init/main.c:1084)
[<82400c3c>] (start_kernel) from [<00000000>] (0x0)