Bluetooth: hci4: command 0x0406 tx timeout INFO: task kworker/u9:2:38 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u9:2 state:D stack:24600 pid:38 tgid:38 ppid:2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_do_writepages+0x11af/0x30c0 ext4_writepages+0x2f2/0x700 do_writepages+0x1aa/0x810 __writeback_single_inode+0x114/0xdf0 writeback_sb_inodes+0x5b8/0xe40 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x694/0xa50 wb_workfn+0x876/0xe50 process_one_work+0x8ee/0x1a00 worker_thread+0x674/0xe70 kthread+0x2c2/0x3a0 ret_from_fork+0x48/0x80 ret_from_fork_asm+0x1a/0x30 INFO: task systemd-journal:96 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:systemd-journal state:D stack:25056 pid:96 tgid:96 ppid:1 flags:0x00004006 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_truncate+0x69c/0x1190 ext4_setattr+0x1a64/0x2540 notify_change+0x677/0x1240 do_truncate+0x143/0x200 do_ftruncate+0x5c9/0x710 do_sys_ftruncate+0x65/0xb0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9f3e8f4247 RSP: 002b:00007fffbc5c8d48 EFLAGS: 00000202 ORIG_RAX: 000000000000004d RAX: ffffffffffffffda RBX: 00007fffbc5c8d90 RCX: 00007f9f3e8f4247 RDX: 000055f9f60d7290 RSI: 0000000000800000 RDI: 0000000000000016 RBP: 000055f9f60d7480 R08: 0000000000000001 R09: 000055f9f60d7504 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffbc5c8d88 R13: 000055f9f60d3360 R14: 0000000000000703 R15: 0000000000000000 INFO: task syz-fuzzer:252 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-fuzzer state:D stack:23848 pid:252 tgid:248 ppid:242 flags:0x00000004 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 file_update_time+0x183/0x1c0 ext4_page_mkwrite+0x339/0x15e0 do_page_mkwrite+0x180/0x380 do_wp_page+0x100b/0x2f00 __handle_mm_fault+0xdd5/0x2f50 handle_mm_fault+0x2b4/0x6a0 do_user_addr_fault+0x4fa/0xf40 exc_page_fault+0x9c/0x1a0 asm_exc_page_fault+0x26/0x30 RIP: 0033:0x5cde47 RSP: 002b:000000c00065d238 EFLAGS: 00010212 RAX: 000000c00065da40 RBX: 00007f5532313000 RCX: 000000c001b9cc00 RDX: 000000c00065da40 RSI: 0000000001090008 RDI: 000000c00065da48 RBP: 000000c00065d248 R08: 000000c00065d948 R09: 000000c0050310c0 R10: 0000000000000038 R11: 0000000000000011 R12: 000000c005001800 R13: 000000c0000221f8 R14: 0000000000e5dacd R15: 0000000000000000 INFO: task syz-executor.2:282 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:24952 pid:282 tgid:282 ppid:274 flags:0x00000000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdc5a4059c7 RSP: 002b:00007fff5a7c1028 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 000055557a637c60 RCX: 00007fdc5a4059c7 RDX: 0000000000008000 RSI: 000055557a637c90 RDI: 0000000000000004 RBP: 000055557a637c90 R08: 0000000000000030 R09: 00007fdc5a4c6640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 000055557a637c64 R14: 0000000000000016 R15: 00007fff5a7c3320 INFO: task syz-executor.6:286 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.6 state:D stack:24952 pid:286 tgid:286 ppid:278 flags:0x00000000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa34ceef9c7 RSP: 002b:00007ffe97696558 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 0000555556b58c20 RCX: 00007fa34ceef9c7 RDX: 0000000000008000 RSI: 0000555556b58c50 RDI: 0000000000000003 RBP: 0000555556b58c50 R08: 0000000000000030 R09: 00007fa34cfb0640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 0000555556b58c24 R14: 0000000000000016 R15: 00007ffe97697750 INFO: task kworker/u9:5:324 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u9:5 state:D stack:24800 pid:324 tgid:324 ppid:2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_do_writepages+0x11af/0x30c0 ext4_writepages+0x2f2/0x700 do_writepages+0x1aa/0x810 __writeback_single_inode+0x114/0xdf0 writeback_sb_inodes+0x5b8/0xe40 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x694/0xa50 wb_workfn+0x876/0xe50 process_one_work+0x8ee/0x1a00 worker_thread+0x674/0xe70 kthread+0x2c2/0x3a0 ret_from_fork+0x48/0x80 ret_from_fork_asm+0x1a/0x30 INFO: task kworker/u10:4:336 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u10:4 state:D stack:24800 pid:336 tgid:336 ppid:2 flags:0x00004000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_do_writepages+0x11af/0x30c0 ext4_writepages+0x2f2/0x700 do_writepages+0x1aa/0x810 __writeback_single_inode+0x114/0xdf0 writeback_sb_inodes+0x5b8/0xe40 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x694/0xa50 wb_workfn+0x876/0xe50 process_one_work+0x8ee/0x1a00 worker_thread+0x674/0xe70 kthread+0x2c2/0x3a0 ret_from_fork+0x48/0x80 ret_from_fork_asm+0x1a/0x30 INFO: task syz-executor.0:3968 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:24952 pid:3968 tgid:3968 ppid:3962 flags:0x00000000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0b164129c7 RSP: 002b:00007ffe05422b98 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 000055557a376c20 RCX: 00007f0b164129c7 RDX: 0000000000008000 RSI: 000055557a376c50 RDI: 0000000000000003 RBP: 000055557a376c50 R08: 0000000000000030 R09: 00007f0b164d3640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 000055557a376c24 R14: 0000000000000016 R15: 00007ffe05423d90 INFO: task syz-executor.4:6498 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:24872 pid:6498 tgid:6498 ppid:6497 flags:0x00000000 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 touch_atime+0x4bb/0x590 iterate_dir+0x464/0x5e0 __x64_sys_getdents64+0x13e/0x2c0 do_syscall_64+0xbf/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f24309309c7 RSP: 002b:00007fffeb4a4db8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 0000555555d94c20 RCX: 00007f24309309c7 RDX: 0000000000008000 RSI: 0000555555d94c50 RDI: 0000000000000003 RBP: 0000555555d94c50 R08: 0000000000000030 R09: 00007f24309f1640 R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffbc R13: 0000555555d94c24 R14: 0000000000000016 R15: 00007fffeb4a5fb0 INFO: task syz-executor.1:7078 blocked for more than 143 seconds. Not tainted 6.12.0-next-20241126 #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:26128 pid:7078 tgid:7078 ppid:284 flags:0x00004004 Call Trace: __schedule+0xc19/0x2fa0 schedule+0xdb/0x340 start_this_handle+0x602/0x1300 jbd2__journal_start+0x393/0x6b0 __ext4_journal_start_sb+0x183/0x600 ext4_dirty_inode+0xa5/0x130 __mark_inode_dirty+0x1c1/0xd40 generic_update_time+0xcb/0xf0 file_update_time+0x183/0x1c0 ext4_page_mkwrite+0x339/0x15e0 do_page_mkwrite+0x180/0x380 __handle_mm_fault+0x115b/0x2f50 handle_mm_fault+0x2b4/0x6a0 do_user_addr_fault+0x4fa/0xf40 exc_page_fault+0x9c/0x1a0 asm_exc_page_fault+0x26/0x30 RIP: 0033:0x7f3ab4374673 RSP: 002b:00007ffc358e3fb8 EFLAGS: 00010287 RAX: 0000001b2cc27000 RBX: 00007f3ab414e008 RCX: 0000001b2cc20000 RDX: 0000001b2cc27004 RSI: ffffffff81c6384b RDI: 000000009ea4e1a6 RBP: 0000000000000001 R08: 0000001b2dc20000 R09: 0000001b2cc2604c R10: 00000000000001a9 R11: 000000009ea4e1aa R12: 0000000000003e4f R13: 00007f3ab44de000 R14: ffffffff81c6384b R15: 00007f3ab44e9ff0 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff85c16140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x70/0x390 4 locks held by kworker/u9:1/33: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff888009a5fd90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800f4a80e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800f4aab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 4 locks held by kworker/u9:2/38: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff88800a2cfd90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800f4a80e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800f4aab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 4 locks held by kworker/u10:1/43: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff88800a48fd90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800f4a80e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800f4aab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 3 locks held by kworker/u10:2/68: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff88800f237d90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff888008fe60e0 (&type->s_umount_key#33){.+.+}-{4:4}, at: super_trylock_shared+0x21/0x100 3 locks held by systemd-journal/96: #0: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: do_sys_ftruncate+0x65/0xb0 #1: ffff8880159f3ed8 (&sb->s_type->i_mutex_key#6){++++}-{4:4}, at: do_truncate+0x131/0x200 #2: ffff8880159f4078 (mapping.invalidate_lock){++++}-{4:4}, at: ext4_setattr+0xb75/0x2540 1 lock held by in:imklog/174: #0: ffff88800d509978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 3 locks held by rs:main Q:Reg/175: #0: ffff88800d5090b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x122/0x240 #2: ffff8880171f03f8 (&sb->s_type->i_mutex_key#6){++++}-{4:4}, at: ext4_buffered_write_iter+0xae/0x3c0 2 locks held by syz-fuzzer/252: #0: ffff88801613c658 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x141/0x800 #1: ffff88800f4a84f0 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x180/0x380 3 locks held by syz-executor.2/282: #0: ffff88800c6bcb78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff8880408ca168 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 3 locks held by syz-executor.6/286: #0: ffff88800a117978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff8880186f83f8 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 4 locks held by kworker/u9:5/324: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff88800e6efd90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800f4a80e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800f4aab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 4 locks held by kworker/u10:4/336: #0: ffff888009a39148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ff/0x1a00 #1: ffff888019567d90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x861/0x1a00 #2: ffff88800f4a80e0 (&type->s_umount_key#46){++++}-{4:4}, at: super_trylock_shared+0x21/0x100 #3: ffff88800f4aab90 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1aa/0x810 3 locks held by syz-executor.0/3968: #0: ffff888015f9cd38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff8880186d9798 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 3 locks held by syz-executor.4/6498: #0: ffff88800a117438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x283/0x3a0 #1: ffff8880186da168 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: iterate_dir+0xdf/0x5e0 #2: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: iterate_dir+0x464/0x5e0 2 locks held by syz-executor.1/7078: #0: ffff88801965ac40 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x141/0x800 #1: ffff88800f4a84f0 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x180/0x380 2 locks held by syz-executor.1/7083: #0: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x348/0x9d0 #1: ffff8880408cc8a8 (&sb->s_type->i_mutex_key#6){++++}-{4:4}, at: ext4_file_write_iter+0x83f/0x18e0 2 locks held by syz-executor.7/7099: #0: ffff88800bb42148 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x141/0x800 #1: ffff88800f4a84f0 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x180/0x380 3 locks held by syz-executor.7/7100: #0: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: __ext4_ioctl+0x237a/0x3b20 #1: ffff88800f4ac160 (&journal->j_barrier){+.+.}-{4:4}, at: jbd2_journal_lock_updates+0x15d/0x310 #2: ffff88800f4ac3e8 (&journal->j_checkpoint_mutex){+.+.}-{4:4}, at: jbd2_journal_flush+0x19e/0xc30 2 locks held by syz-executor.5/7102: #0: ffff88800f4a83f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf5/0x4a0 #1: ffff8880408cbed8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1ae/0x4a0 =============================================