Bluetooth: hci4: command 0x0406 tx timeout systemd[1]: systemd-journald.service: State 'stop-watchdog' timed out. Killing. systemd[1]: systemd-journald.service: Killing process 96 (systemd-journal) with signal SIGKILL. INFO: task systemd-journal:96 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-journal state:D stack:25056 pid:96 tgid:96 ppid:1 flags:0x00004004 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 file_update_time+0x183/0x1c0 ext4_page_mkwrite+0x339/0x15e0 do_page_mkwrite+0x180/0x380 do_wp_page+0x100b/0x2f00 __handle_mm_fault+0xdd5/0x2f50 handle_mm_fault+0x2b4/0x6a0 do_user_addr_fault+0x4fa/0xf40 exc_page_fault+0x9c/0x1a0 asm_exc_page_fault+0x26/0x30 RIP: 0033:0x7f0f4d0acace RSP: 002b:00007ffcaf0039d0 EFLAGS: 00010246 RAX: 00007f0f4b9528d0 RBX: 0000555c9a70b3f0 RCX: 000000000000acf8 RDX: 0000000000000000 RSI: 0000555c9a70b3f0 RDI: 00007f0f4babde90 RBP: 0000555c9a700290 R08: 00000000001a0e50 R09: 00000000001a0e50 R10: 0000000000000002 R11: 0000000000257b28 R12: 0000000000000026 R13: 00000000000342e0 R14: 0000000000000000 R15: 00007ffcaf0039f0 INFO: task rs:main Q:Reg:174 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:rs:main Q:Reg state:D stack:26176 pid:174 tgid:171 ppid:1 flags:0x00004000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 file_modified+0x1f0/0x230 ext4_buffered_write_iter+0xf7/0x3c0 ext4_file_write_iter+0x95e/0x18e0 vfs_write+0xbdb/0x10a0 ksys_write+0x122/0x240 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f38c9351fef RSP: 002b:00007f38c3ffe860 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f38b4002680 RCX: 00007f38c9351fef RDX: 00000000000000f9 RSI: 00007f38b4002940 RDI: 0000000000000007 RBP: 00000000000000f9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 00007f38b4002940 R13: 0000000000000000 R14: 0000000000000092 R15: 00007f38b4002680 INFO: task syz-executor.6:290 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.6 state:D stack:24952 pid:290 tgid:290 ppid:287 flags:0x00004000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff6c18a59c7 RSP: 002b:00007ffec44b2678 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 0000555581b2cc20 RCX: 00007ff6c18a59c7 RDX: 0000000000008000 RSI: 0000555581b2cc50 RDI: 0000000000000003 RBP: 0000555581b2cc50 R08: 0000000000000030 R09: 00007ff6c1966640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 0000555581b2cc24 R14: 0000000000000016 R15: 00007ffec44b3870 INFO: task syz-executor.4:291 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:24952 pid:291 tgid:291 ppid:285 flags:0x00004000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faa39f989c7 RSP: 002b:00007ffcb11bc728 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 000055555ebe8c20 RCX: 00007faa39f989c7 RDX: 0000000000008000 RSI: 000055555ebe8c50 RDI: 0000000000000003 RBP: 000055555ebe8c50 R08: 0000000000000030 R09: 00007faa3a059640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 000055555ebe8c24 R14: 0000000000000016 R15: 00007ffcb11bd920 INFO: task syz-executor.1:295 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:24952 pid:295 tgid:295 ppid:281 flags:0x00004000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fecb63c19c7 RSP: 002b:00007ffde03220e8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 000055555cf33c20 RCX: 00007fecb63c19c7 RDX: 0000000000008000 RSI: 000055555cf33c50 RDI: 0000000000000003 RBP: 000055555cf33c50 R08: 0000000000000030 R09: 00007fecb6482640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 000055555cf33c24 R14: 0000000000000016 R15: 00007ffde03232e0 INFO: task kworker/u9:5:469 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u9:5 state:D stack:24800 pid:469 tgid:469 ppid:2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_do_writepages+0x11af/0x30c0 ext4_writepages+0x2f2/0x700 do_writepages+0x1aa/0x810 __writeback_single_inode+0x114/0xdf0 writeback_sb_inodes+0x5b8/0xe40 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x694/0xa50 wb_workfn+0x876/0xe50 process_one_work+0x8ee/0x1a00 worker_thread+0x674/0xe70 kthread+0x2c2/0x3a0 ret_from_fork+0x48/0x80 ret_from_fork_asm+0x1a/0x30 INFO: task syz-executor.3:3981 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:24944 pid:3981 tgid:3981 ppid:3976 flags:0x00004000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f58762f99c7 RSP: 002b:00007ffef3a632f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 00005555714e4c20 RCX: 00007f58762f99c7 RDX: 0000000000008000 RSI: 00005555714e4c50 RDI: 0000000000000003 RBP: 00005555714e4c50 R08: 0000000000000030 R09: 00007f58763ba640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 00005555714e4c24 R14: 0000000000000016 R15: 00007ffef3a644f0 INFO: task syz-executor.5:3983 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:24952 pid:3983 tgid:3983 ppid:3979 flags:0x00004000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc97943d9c7 RSP: 002b:00007ffddfb57bf8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 00005555763bfc20 RCX: 00007fc97943d9c7 RDX: 0000000000008000 RSI: 00005555763bfc50 RDI: 0000000000000003 RBP: 00005555763bfc50 R08: 0000000000000030 R09: 00007fc9794fe640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 00005555763bfc24 R14: 0000000000000016 R15: 00007ffddfb58df0 INFO: task syz-executor.0:8499 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28128 pid:8499 tgid:8499 ppid:6860 flags:0x00004004 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_evict_inode+0x5f6/0x1830 evict+0x38e/0x8a0 iput+0x4e4/0x7e0 dentry_unlink_inode+0x2bb/0x4a0 __dentry_kill+0x1d2/0x5f0 dput.part.0+0x49e/0x930 dput+0x1f/0x30 path_put+0x31/0x70 exit_fs+0xfd/0x170 do_exit+0xa8b/0x2a30 do_group_exit+0xd3/0x2a0 get_signal+0x2240/0x2320 arch_do_signal_or_restart+0x81/0x780 syscall_exit_to_user_mode+0x123/0x1e0 ret_from_fork_asm+0x1a/0x30 INFO: task syz-executor.0:9079 blocked for more than 143 seconds. Not tainted 6.12.0-rc7-next-20241115 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:28088 pid:9079 tgid:9079 ppid:6860 flags:0x00004004 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_evict_inode+0x5f6/0x1830 evict+0x38e/0x8a0 iput+0x4e4/0x7e0 dentry_unlink_inode+0x2bb/0x4a0 __dentry_kill+0x1d2/0x5f0 dput.part.0+0x49e/0x930 dput+0x1f/0x30 path_put+0x31/0x70 exit_fs+0xfd/0x170 do_exit+0xa8b/0x2a30 do_group_exit+0xd3/0x2a0 get_signal+0x2240/0x2320 arch_do_signal_or_restart+0x81/0x780 syscall_exit_to_user_mode+0x123/0x1e0 do_syscall_64+0xcc/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7e8b8e8b19 RSP: 002b:00007f7e88e5e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f7e8b9fbf68 RCX: 00007f7e8b8e8b19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e8b9fbf68 RBP: 00007f7e8b9fbf60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e8b9fbf6c R13: 00007fff98defeef R14: 00007f7e88e5e300 R15: 0000000000022000 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff85c16180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x70/0x390 2 locks held by systemd-journal/96: #0: ffff8880132259b8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x141/0x800 #1: ffff88800c2464f0 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x180/0x380 2 locks held by in:imklog/173: #0: ffff88800cb9c7f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88806ce3b998 (&rq->__lock){-.-.}-{2:2}, at: __is_insn_slot_addr+0x2e/0x290 3 locks held by rs:main Q:Reg/174: #0: ffff88800dcda0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x122/0x240 #2: ffff888017670dc8 (&sb->s_type->i_mutex_key#6){++++}-{4:4}, at: ext4_buffered_write_iter+0xae/0x3c0 3 locks held by syz-executor.6/290: #0: ffff88800c6fe9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88801ab75278 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 3 locks held by syz-executor.4/291: #0: ffff88800e2350b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88801aa66fe8 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 3 locks held by syz-executor.1/295: #0: ffff888015d7aef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88801ab748a8 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 4 locks held by kworker/u10:7/347: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff8880163a7d90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800c2460e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800c258b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 4 locks held by kworker/u9:5/469: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff88802f347d90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800c2460e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800c258b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 3 locks held by syz-executor.3/3981: #0: ffff888015d7ab78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88801ab73ed8 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 3 locks held by syz-executor.5/3983: #0: ffff88800f2289b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88801aa63508 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 4 locks held by kworker/u10:0/7321: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff88803f4efd90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800c2460e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800c258b90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 4 locks held by kworker/u9:0/8468: 1 lock held by syz-executor.0/8499: #0: ffff88800c2465e8 (sb_internal){.+.+}-{0:0}, at: evict+0x38e/0x8a0 1 lock held by syz-executor.0/9079: #0: ffff88800c2465e8 (sb_internal){.+.+}-{0:0}, at: evict+0x38e/0x8a0 3 locks held by syz-executor.2/9166: #0: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: ext4_ioctl_group_add+0x122/0x580 #1: ffff88800c25a160 (&journal->j_barrier){+.+.}-{4:4}, at: jbd2_journal_lock_updates+0x15d/0x310 #2: ffff88800c25a3e8 (&journal->j_checkpoint_mutex){+.+.}-{4:4}, at: jbd2_journal_flush+0x19e/0xc30 2 locks held by syz-executor.7/9165: #0: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf5/0x4a0 #1: ffff88801aae6fe8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1ae/0x4a0 2 locks held by syz-executor.0/9167: #0: ffff88800c2463f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf5/0x4a0 #1: ffff88801aae1798 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1ae/0x4a0 =============================================