INFO: task syz.5.1710:12543 blocked for more than 143 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.5.1710 state:D stack:25912 pid:12543 tgid:12543 ppid:6594 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1295/0x67a0 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7340 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0xced/0x1b10 kernel/locking/mutex.c:820 ima_check_last_writer security/integrity/ima/ima_main.c:215 [inline] ima_file_free+0x146/0x340 security/integrity/ima/ima_main.c:251 security_file_release+0x10e/0x120 security/security.c:2424 __fput+0x359/0xb50 fs/file_table.c:504 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:67 [inline] exit_to_user_mode_loop+0x107/0x4f0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x706/0x860 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f170959ce59 RSP: 002b:00007ffc3b78c1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007f1709817da0 RCX: 00007f170959ce59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f1709817da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00007f1709817cb0 R11: 0000000000000246 R12: 0000000000092f54 R13: 00007f1709815fac R14: 0000000000092d32 R15: 00007ffc3b78c2f0 Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 2 locks held by getty/5366: #0: ffff888038e670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211 3 locks held by kworker/u8:13/6399: 1 lock held by syz.5.1710/12543: #0: ffff888076a76168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_check_last_writer security/integrity/ima/ima_main.c:215 [inline] #0: ffff888076a76168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 security/integrity/ima/ima_main.c:251 1 lock held by syz.5.1710/12545: 2 locks held by udevd/13298: #0: ffff8880244a1ee8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock_shared include/linux/fs.h:1044 [inline] #0: ffff8880244a1ee8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_read_iter+0x2b6/0x4f0 block/fops.c:854 #1: ffff8880244a2080 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1094 [inline] #1: ffff8880244a2080 (mapping.invalidate_lock){++++}-{4:4}, at: do_page_cache_ra mm/readahead.c:333 [inline] #1: ffff8880244a2080 (mapping.invalidate_lock){++++}-{4:4}, at: force_page_cache_ra+0x25c/0x370 mm/readahead.c:364 3 locks held by syz.6.2029/13930: #0: ffff888027684430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb50 drivers/block/loop.c:1234 #1: ffff888027377020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 block/blk-mq.c:206 #2: ffff888027377058 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 block/blk-mq.c:206 1 lock held by syz.6.2029/13933: #0: ffff8880244a2080 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_invalidate_lock_shared include/linux/fs.h:1094 [inline] #0: ffff8880244a2080 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3ae/0xf10 mm/readahead.c:497 1 lock held by syz.6.2029/13935: #0: ffff888027684430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_simple_ioctl drivers/block/loop.c:1498 [inline] #0: ffff888027684430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xd13/0x1bc0 drivers/block/loop.c:1572 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 13930 Comm: syz.6.2029 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:check_preemption_disabled+0x1c/0xe0 lib/smp_processor_id.c:54 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d f5 f7 7f 08 65 f7 05 e6 f7 7f 08 ff ff ff 7f 74 0f <48> 83 c4 08 89 d8 5b 5d 41 5c e9 c5 22 03 00 9c 58 f6 c4 02 74 ea RSP: 0018:ffffc90000007be0 EFLAGS: 00000006 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff8defedf0 RDI: ffffffff8c1c4400 RBP: ffff888032f6a500 R08: 0000000000000000 R09: ffffed10039509ac R10: ffff88801ca84d67 R11: 0000000000000001 R12: 00000000ffffffff R13: 0000000000000046 R14: ffff888032f6b0e0 R15: 0000000000000002 FS: 00007fddeba246c0(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33602ff8 CR3: 000000002a1ff000 CR4: 00000000003526f0 Call Trace: lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline] lock_is_held_type+0xca/0x140 kernel/locking/lockdep.c:5941 lock_is_held include/linux/lockdep.h:249 [inline] rcu_read_lock_any_held kernel/rcu/update.c:387 [inline] rcu_read_lock_any_held+0x55/0xa0 kernel/rcu/update.c:380 select_idle_sibling kernel/sched/fair.c:8187 [inline] select_task_rq_fair+0x267c/0x4940 kernel/sched/fair.c:8891 select_task_rq kernel/sched/core.c:3579 [inline] try_to_wake_up+0x993/0x1900 kernel/sched/core.c:4290 hrtimer_wakeup+0x47/0x60 kernel/time/hrtimer.c:2191 __run_hrtimer kernel/time/hrtimer.c:1930 [inline] __hrtimer_run_queues+0x470/0xa00 kernel/time/hrtimer.c:1994 hrtimer_interrupt+0x3e5/0x940 kernel/time/hrtimer.c:2113 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] __sysvec_apic_timer_interrupt+0x10b/0x460 arch/x86/kernel/apic/apic.c:1067 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0x9e/0xc0 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2039 [inline] RIP: 0010:vprintk_emit+0x553/0x6b0 kernel/printk/printk.c:2478 Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 61 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 d6 5b 21 00 48 85 ed 0f 85 27 01 00 00 e8 60 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 RSP: 0018:ffffc900072175a8 EFLAGS: 00000287 RAX: 000000000003cbb2 RBX: 000000000000002f RCX: ffffc9001056a000 RDX: 0000000000080000 RSI: ffffffff81e74f94 RDI: ffff888032f6a500 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000e42eb7 R13: 0000000000000200 R14: ffff888020af4a00 R15: ffffc90007217670 _printk+0xcf/0x110 kernel/printk/printk.c:2504 set_capacity_and_notify.cold+0x75/0x7a block/genhd.c:93 loop_set_size drivers/block/loop.c:220 [inline] loop_set_status+0x97c/0xb50 drivers/block/loop.c:1271 loop_set_status_old+0x163/0x1d0 drivers/block/loop.c:1362 lo_ioctl+0xd6c/0x1bc0 drivers/block/loop.c:1551 blkdev_ioctl+0x5ad/0x6f0 block/ioctl.c:797 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x10b/0x860 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fddeab9ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fddeba24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fddeae15fa0 RCX: 00007fddeab9ce59 RDX: 0000200000000280 RSI: 0000000000004c02 RDI: 0000000000000003 RBP: 00007fddeac32d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fddeae16038 R14: 00007fddeae15fa0 R15: 00007ffe20916458 I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2