Bluetooth: hci0: command 0x0406 tx timeout watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.1:4571] Modules linked in: irq event stamp: 4038995 hardirqs last enabled at (4038994): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] hardirqs last enabled at (4038994): [] _raw_spin_unlock_irqrestore+0x79/0xe0 kernel/locking/spinlock.c:184 hardirqs last disabled at (4038995): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (3952404): [] __do_softirq+0x678/0x980 kernel/softirq.c:318 softirqs last disabled at (3952407): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (3952407): [] irq_exit+0x215/0x260 kernel/softirq.c:412 CPU: 0 PID: 4571 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline] RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xa3/0xe0 kernel/locking/spinlock.c:184 Code: 48 c7 c0 88 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 2f 48 83 3d 7c 31 d8 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb b2 e8 fb eb e6 f8 eb c0 0f 0b 0f 0b 48 c7 c7 88 RSP: 0018:ffff8880ba007c28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff13e3051 RBX: 0000000000000286 RCX: 1ffff1100559bd99 RDX: dffffc0000000000 RSI: ffff88802acdeca8 RDI: 0000000000000286 RBP: ffff8880ba022b40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000022b40 R14: 0000000000000000 R15: ffff8880ba022b40 FS: 00007f2c4e85d700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30c2e000 CR3: 00000000b2c01000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __mod_timer kernel/time/timer.c:1071 [inline] mod_timer+0x4ea/0x1010 kernel/time/timer.c:1114 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x215/0x260 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:mb_find_next_zero_bit fs/ext4/mballoc.c:409 [inline] RIP: 0010:ext4_mb_complex_scan_group+0x27d/0x9e0 fs/ext4/mballoc.c:1953 Code: 6d 18 8b 85 2c ff ff ff 48 8b bd 38 ff ff ff 8d 14 18 89 c3 42 8d 34 28 48 83 e7 f8 48 63 d2 48 63 f6 e8 c6 dd 91 01 44 89 e9 <29> d8 44 39 e8 0f 4e c8 48 8b 85 50 ff ff ff 89 8d 60 ff ff ff 4c RSP: 0018:ffff88801bae73a8 EFLAGS: 00010216 ORIG_RAX: ffffffffffffff13 RAX: 0000000000006e00 RBX: 0000000000000000 RCX: 0000000000008000 RDX: 000000000001038e RSI: ffffffff837523d1 RDI: 0000000000000007 RBP: ffff88801bae7498 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 00000000f2db7f29 R12: ffff88808a231540 R13: 0000000000008000 R14: 00000000000011f6 R15: dffffc0000000000 ext4_mb_regular_allocator+0x9e6/0x1100 fs/ext4/mballoc.c:2226 ext4_mb_new_blocks+0x1b45/0x4370 fs/ext4/mballoc.c:4567 ext4_ext_map_blocks+0x2aa2/0x7390 fs/ext4/extents.c:4493 ext4_map_blocks+0x7a2/0x1a50 fs/ext4/inode.c:657 ext4_getblk+0xad/0x4f0 fs/ext4/inode.c:993 ext4_bread+0x7c/0x210 fs/ext4/inode.c:1043 ext4_append+0x155/0x370 fs/ext4/namei.c:66 ext4_init_new_dir fs/ext4/namei.c:2659 [inline] ext4_mkdir+0x5bd/0xe10 fs/ext4/namei.c:2706 vfs_mkdir+0x508/0x7a0 fs/namei.c:3819 do_mkdirat+0x262/0x2d0 fs/namei.c:3842 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f2c4fee95a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2c4e85d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00007f2c5000af80 RCX: 00007f2c4fee95a9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 RBP: 00007f2c4ff44560 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffedf34400f R14: 00007f2c4e85d300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60