INFO: task syz.4.142:6636 blocked for more than 145 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.142 state:D stack:25288 pid:6636 tgid:6634 ppid:5833 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5258 [inline] __schedule+0x150e/0x5070 kernel/sched/core.c:6866 __schedule_loop kernel/sched/core.c:6948 [inline] schedule+0x165/0x360 kernel/sched/core.c:6963 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7020 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776 relay_open+0x3b8/0x920 kernel/relay.c:517 blk_trace_setup_prepare+0x425/0x5a0 kernel/trace/blktrace.c:716 blk_trace_setup+0x244/0x3d0 kernel/trace/blktrace.c:789 blk_trace_ioctl+0x2f9/0x6e0 kernel/trace/blktrace.c:935 blkdev_ioctl+0x4a2/0x710 block/ioctl.c:781 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f910818f749 RSP: 002b:00007f9108f58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f91083e5fa0 RCX: 00007f910818f749 RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007f9108213f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f91083e6038 R14: 00007f91083e5fa0 R15: 00007ffcb4310558 INFO: task syz.4.142:6658 blocked for more than 146 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.142 state:D stack:27848 pid:6658 tgid:6634 ppid:5833 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5258 [inline] __schedule+0x150e/0x5070 kernel/sched/core.c:6866 __schedule_loop kernel/sched/core.c:6948 [inline] schedule+0x165/0x360 kernel/sched/core.c:6963 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7020 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776 blk_trace_startstop+0xa3/0x640 kernel/trace/blktrace.c:901 blk_trace_ioctl+0x283/0x6e0 kernel/trace/blktrace.c:947 blkdev_common_ioctl+0x11ad/0x2c70 block/ioctl.c:712 blkdev_ioctl+0x553/0x710 block/ioctl.c:786 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f910818f749 RSP: 002b:00007f91063f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f91083e6090 RCX: 00007f910818f749 RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 RBP: 00007f9108213f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f91083e6128 R14: 00007f91083e6090 R15: 00007ffcb4310558 INFO: task syz.4.142:6661 blocked for more than 147 seconds. Tainted: G L syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.142 state:D stack:28568 pid:6661 tgid:6634 ppid:5833 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5258 [inline] __schedule+0x150e/0x5070 kernel/sched/core.c:6866 __schedule_loop kernel/sched/core.c:6948 [inline] schedule+0x165/0x360 kernel/sched/core.c:6963 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7020 __mutex_lock_common kernel/locking/mutex.c:692 [inline] __mutex_lock+0x7e6/0x1350 kernel/locking/mutex.c:776 blk_trace_remove kernel/trace/blktrace.c:562 [inline] blk_trace_ioctl+0x314/0x6e0 kernel/trace/blktrace.c:950 blkdev_common_ioctl+0x11ad/0x2c70 block/ioctl.c:712 blkdev_ioctl+0x553/0x710 block/ioctl.c:786 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f910818f749 RSP: 002b:00007f91063d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f91083e6180 RCX: 00007f910818f749 RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 RBP: 00007f9108213f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f91083e6218 R14: 00007f91083e6180 R15: 00007ffcb4310558 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff8e13f2e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e13f2e0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline] #0: ffffffff8e13f2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 2 locks held by getty/5582: #0: ffff8880346d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 drivers/tty/n_tty.c:2211 3 locks held by syz.1.29/6064: 2 locks held by syz.4.142/6636: #0: ffff888024dc71b8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788 #1: ffffffff8e196628 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517 1 lock held by syz.4.142/6658: #0: ffff888024dc71b8 ( &q->debugfs_mutex ){+.+.}-{4:4}, at: blk_trace_startstop+0xa3/0x640 kernel/trace/blktrace.c:901 1 lock held by syz.4.142/6661: #0: ffff888024dc71b8 ( &q->debugfs_mutex ){+.+.}-{4:4}, at: blk_trace_remove kernel/trace/blktrace.c:562 [inline] ){+.+.}-{4:4}, at: blk_trace_ioctl+0x314/0x6e0 kernel/trace/blktrace.c:950 3 locks held by syz-executor/6808: 2 locks held by syz.5.212/6933: #0: ffff888024dc4210 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x21c/0x3d0 kernel/trace/blktrace.c:788 #1: ffffffff8e196628 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 kernel/relay.c:517 2 locks held by dhcpcd/7943: #0: ffff888078f0e988 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1028 [inline] #0: ffff888078f0e988 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 net/socket.c:665 #1: ffffffff8e144e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:343 [inline] ffffffff8e144e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 kernel/rcu/tree_exp.h:956 1 lock held by dhcpcd/7945: #0: ffff88805ae61ec8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1028 [inline] #0: ffff88805ae61ec8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 net/socket.c:665 1 lock held by dhcpcd/7946: #0: ffff88805ae62488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1028 [inline] #0: ffff88805ae62488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 net/socket.c:665 1 lock held by dhcpcd/7947: #0: ffff88805ae63b88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1028 [inline] #0: ffff88805ae63b88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 net/socket.c:665 1 lock held by dhcpcd/7956: #0: ffff8881e4f9a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1700 [inline] #0: ffff8881e4f9a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd30 net/packet/af_packet.c:3197 1 lock held by poweroff/7958: 1 lock held by dhcpcd/7961: #0: ffff88814dbd0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1700 [inline] #0: ffff88814dbd0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd30 net/packet/af_packet.c:3197 1 lock held by sleep/7963: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:363 [inline] watchdog+0xe40/0xe90 kernel/hung_task.c:557 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 101 PID: 7956 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:do_jit+0x2ba2/0x11320 arch/x86/net/bpf_jit_comp.c:1864 Code: 0e 01 00 00 e8 0f 49 40 00 41 b6 48 e9 32 01 00 00 e8 02 49 40 00 89 de 83 e6 07 bf 07 00 00 00 e8 f3 4b 40 00 f6 d3 f6 c3 07 <41> 0f 95 c6 48 8b 9c 24 20 03 00 00 31 ff 4c 8b 7c 24 10 44 89 fe RSP: 0018:ffffc9000b9af5e0 EFLAGS: 00000206 RAX: ffffffff81816f6d RBX: 000000000000004b RCX: 0000000000000000 RDX: ffff888034525b80 RSI: 0000000000000004 RDI: 0000000000000007 RBP: ffffc9000b9af968 R08: ffff888034525b80 R09: 0000000000000096 R10: 00000000000000fb R11: 0000000000000000 R12: 0000000000000000 R13: 1ffff9200073f2c1 R14: ffffc900039f9608 R15: 000000000000000e FS: 00007f39c5079740(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f39c525b420 CR3: 00000001c1486000 CR4: 00000000003526f0 Call Trace: bpf_int_jit_compile+0x76c/0x14b0 arch/x86/net/bpf_jit_comp.c:3790 bpf_prog_select_runtime+0x4a3/0x820 kernel/bpf/core.c:2545 bpf_migrate_filter net/core/filter.c:1324 [inline] bpf_prepare_filter+0x1124/0x12c0 net/core/filter.c:1372 bpf_prog_create_from_user+0x2c8/0x440 net/core/filter.c:1466 seccomp_prepare_filter kernel/seccomp.c:701 [inline] seccomp_prepare_user_filter kernel/seccomp.c:738 [inline] seccomp_set_mode_filter kernel/seccomp.c:1990 [inline] do_seccomp+0x7b1/0xd90 kernel/seccomp.c:2110 __do_sys_prctl kernel/sys.c:2625 [inline] __se_sys_prctl+0x28a/0x18f0 kernel/sys.c:2533 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f39c517d2ca Code: 48 8b 05 31 fb 0c 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 9d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d fe fa 0c 00 f7 d8 64 89 01 48 RSP: 002b:00007fff015b5f78 EFLAGS: 00000246 ORIG_RAX: 000000000000009d RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39c517d2ca RDX: 0000563ff8f024a0 RSI: 0000000000000002 RDI: 0000000000000016 RBP: 000056400b1e2440 R08: 0000000000000000 R09: 0000000000000000 R10: 00007f39c517d2ca R11: 0000000000000246 R12: 000056400b1e2494 R13: 00007fff015c6160 R14: 00007fff015c6180 R15: 00007fff015c6120