Bluetooth: hci3: command 0x0419 tx timeout Bluetooth: hci5: command 0x0419 tx timeout Bluetooth: hci4: command 0x0419 tx timeout Bluetooth: hci7: command 0x0419 tx timeout ------------[ cut here ]------------ WARNING: CPU: 1 PID: 298 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 298 Comm: syz-executor.7 Not tainted 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 ------------[ cut here ]------------ RIP: 0010:__flush_work+0xaaa/0xd20 WARNING: CPU: 0 PID: 301 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 Modules linked in: RSP: 0018:ffff888034c176e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880363cc988 RCX: 0000000000000000 CPU: 0 PID: 301 Comm: syz-executor.6 Not tainted 5.19.0-rc8-next-20220725 #1 RDX: ffff8880176fd040 RSI: ffffffff811c74fa RDI: 0000000000000001 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RBP: ffff888034c17890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880363cc988 RIP: 0010:__flush_work+0xaaa/0xd20 R13: 0000000000000001 R14: ffff8880363cc9a0 R15: ffff8880176fd040 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 RSP: 0018:ffff888035d476e8 EFLAGS: 00010293 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 RAX: 0000000000000000 RBX: ffff8880157ec988 RCX: 0000000000000000 CR2: 000055e73eb23008 CR3: 000000000da48000 CR4: 0000000000350ee0 RDX: ffff888032fdb580 RSI: ffffffff811c74fa RDI: 0000000000000001 Call Trace: RBP: ffff888035d47890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880157ec988 R13: 0000000000000001 R14: ffff8880157ec9a0 R15: ffff888032fdb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc5766dc88 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 __cancel_work_timer+0x39c/0x4e0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 mgmt_index_removed+0x187/0x2f0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 do_group_exit+0xd0/0x2a0 task_work_run+0xe2/0x1a0 get_signal+0x2205/0x24b0 do_exit+0xc37/0x2940 arch_do_signal_or_restart+0x89/0x1be0 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fafe62ed8d7 Code: Unable to access opcode bytes at RIP 0x7fafe62ed8ad. exit_to_user_mode_prepare+0x131/0x1a0 RSP: 002b:00007ffca32a6718 EFLAGS: 00000246 syscall_exit_to_user_mode+0x19/0x40 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fafe62ed8d7 RDX: 00007ffca32a6720 RSI: 0000000000008933 RDI: 0000000000000004 do_syscall_64+0x48/0x90 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffca32a6752 entry_SYSCALL_64_after_hwframe+0x63/0xcd R10: 00007fafe6347b00 R11: 0000000000000246 R12: 00007ffca32a6720 RIP: 0033:0x7f2eb84818d7 R13: 0000000000000003 R14: 00007ffca32a67a0 R15: 0000000000000037 Code: Unable to access opcode bytes at RIP 0x7f2eb84818ad. irq event stamp: 107671 RSP: 002b:00007fffa13011a8 EFLAGS: 00000246 hardirqs last enabled at (107681): [] console_emit_next_record.constprop.0+0x64c/0x800 ORIG_RAX: 0000000000000010 hardirqs last disabled at (107690): [] console_emit_next_record.constprop.0+0x66b/0x800 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f2eb84818d7 softirqs last enabled at (107474): [] __irq_exit_rcu+0x11b/0x180 RDX: 00007fffa13011b0 RSI: 0000000000008933 RDI: 0000000000000004 softirqs last disabled at (107467): [] __irq_exit_rcu+0x11b/0x180 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ R10: 00007f2eb84dbb00 R11: 0000000000000246 R12: 00007fffa13011b0 WARNING: CPU: 1 PID: 298 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 R13: 0000000000000003 R14: 00007fffa130123c R15: 0000000000000037 Modules linked in: CPU: 1 PID: 298 Comm: syz-executor.7 Tainted: G W 5.19.0-rc8-next-20220725 #1 irq event stamp: 106171 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 hardirqs last enabled at (106181): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 RIP: 0010:__flush_work+0xaaa/0xd20 hardirqs last disabled at (106190): [] console_emit_next_record.constprop.0+0x66b/0x800 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 softirqs last enabled at (105768): [] __irq_exit_rcu+0x11b/0x180 RSP: 0018:ffff888034c176e8 EFLAGS: 00010293 softirqs last disabled at (105763): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- RAX: 0000000000000000 RBX: ffff8880363cca30 RCX: 0000000000000000 ------------[ cut here ]------------ RDX: ffff8880176fd040 RSI: ffffffff811c74fa RDI: 0000000000000001 WARNING: CPU: 0 PID: 301 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 RBP: ffff888034c17890 R08: 0000000000000001 R09: 0000000000000000 Modules linked in: R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880363cca30 CPU: 0 PID: 301 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220725 #1 R13: 0000000000000001 R14: ffff8880363cca48 R15: ffff8880176fd040 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 RIP: 0010:__flush_work+0xaaa/0xd20 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 CR2: 000055e73eb23008 CR3: 000000000da48000 CR4: 0000000000350ee0 RSP: 0018:ffff888035d476e8 EFLAGS: 00010293 Call Trace: RAX: 0000000000000000 RBX: ffff8880157eca30 RCX: 0000000000000000 RDX: ffff888032fdb580 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff888035d47890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880157eca30 R13: 0000000000000001 R14: ffff8880157eca48 R15: ffff888032fdb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 __cancel_work_timer+0x39c/0x4e0 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc5766dc88 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 __cancel_work_timer+0x39c/0x4e0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 mgmt_index_removed+0x193/0x2f0 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 arch_do_signal_or_restart+0x89/0x1be0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 arch_do_signal_or_restart+0x89/0x1be0 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fafe62ed8d7 Code: Unable to access opcode bytes at RIP 0x7fafe62ed8ad. RSP: 002b:00007ffca32a6718 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fafe62ed8d7 RDX: 00007ffca32a6720 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffca32a6752 R10: 00007fafe6347b00 R11: 0000000000000246 R12: 00007ffca32a6720 R13: 0000000000000003 R14: 00007ffca32a67a0 R15: 0000000000000037 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 irq event stamp: 108477 do_syscall_64+0x48/0x90 hardirqs last enabled at (108497): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 entry_SYSCALL_64_after_hwframe+0x63/0xcd hardirqs last disabled at (108506): [] sysvec_apic_timer_interrupt+0xb/0xc0 RIP: 0033:0x7f2eb84818d7 softirqs last enabled at (108492): [] __irq_exit_rcu+0x11b/0x180 Code: Unable to access opcode bytes at RIP 0x7f2eb84818ad. softirqs last disabled at (108485): [] __irq_exit_rcu+0x11b/0x180 RSP: 002b:00007fffa13011a8 EFLAGS: 00000246 ---[ end trace 0000000000000000 ]--- ORIG_RAX: 0000000000000010 ------------[ cut here ]------------ RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f2eb84818d7 WARNING: CPU: 1 PID: 298 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 RDX: 00007fffa13011b0 RSI: 0000000000008933 RDI: 0000000000000004 Modules linked in: RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 CPU: 1 PID: 298 Comm: syz-executor.7 Tainted: G W 5.19.0-rc8-next-20220725 #1 R10: 00007f2eb84dbb00 R11: 0000000000000246 R12: 00007fffa13011b0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 R13: 0000000000000003 R14: 00007fffa130123c R15: 0000000000000037 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 irq event stamp: 106991 RSP: 0018:ffff888034c176e8 EFLAGS: 00010293 hardirqs last enabled at (107001): [] console_emit_next_record.constprop.0+0x64c/0x800 hardirqs last disabled at (107010): [] console_emit_next_record.constprop.0+0x66b/0x800 RAX: 0000000000000000 RBX: ffff8880363cdb30 RCX: 0000000000000000 softirqs last enabled at (106390): [] __irq_exit_rcu+0x11b/0x180 RDX: ffff8880176fd040 RSI: ffffffff811c74fa RDI: 0000000000000001 softirqs last disabled at (106385): [] __irq_exit_rcu+0x11b/0x180 RBP: ffff888034c17890 R08: 0000000000000001 R09: 0000000000000000 ---[ end trace 0000000000000000 ]--- R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880363cdb30 R13: 0000000000000001 R14: ffff8880363cdb48 R15: ffff8880176fd040 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 ------------[ cut here ]------------ CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 WARNING: CPU: 0 PID: 301 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 CR2: 000055e73eb23008 CR3: 000000000da48000 CR4: 0000000000350ee0 Modules linked in: Call Trace: CPU: 0 PID: 301 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff888035d476e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880157edb30 RCX: 0000000000000000 RDX: ffff888032fdb580 RSI: ffffffff811c74fa RDI: 0000000000000001 __cancel_work_timer+0x39c/0x4e0 RBP: ffff888035d47890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880157edb30 R13: 0000000000000001 R14: ffff8880157edb48 R15: ffff888032fdb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 mgmt_index_removed+0x19f/0x2f0 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc5766dc88 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 __cancel_work_timer+0x39c/0x4e0 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 mgmt_index_removed+0x19f/0x2f0 arch_do_signal_or_restart+0x89/0x1be0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 exit_to_user_mode_prepare+0x131/0x1a0 do_group_exit+0xd0/0x2a0 syscall_exit_to_user_mode+0x19/0x40 get_signal+0x2205/0x24b0 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fafe62ed8d7 Code: Unable to access opcode bytes at RIP 0x7fafe62ed8ad. RSP: 002b:00007ffca32a6718 EFLAGS: 00000246 arch_do_signal_or_restart+0x89/0x1be0 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fafe62ed8d7 RDX: 00007ffca32a6720 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffca32a6752 R10: 00007fafe6347b00 R11: 0000000000000246 R12: 00007ffca32a6720 R13: 0000000000000003 R14: 00007ffca32a67a0 R15: 0000000000000037 irq event stamp: 109295 hardirqs last enabled at (109303): [] console_emit_next_record.constprop.0+0x64c/0x800 hardirqs last disabled at (109314): [] sysvec_apic_timer_interrupt+0xb/0xc0 exit_to_user_mode_prepare+0x131/0x1a0 softirqs last enabled at (108772): [] __irq_exit_rcu+0x11b/0x180 syscall_exit_to_user_mode+0x19/0x40 softirqs last disabled at (108767): [] __irq_exit_rcu+0x11b/0x180 do_syscall_64+0x48/0x90 ---[ end trace 0000000000000000 ]--- entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2eb84818d7 Code: Unable to access opcode bytes at RIP 0x7f2eb84818ad. RSP: 002b:00007fffa13011a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f2eb84818d7 RDX: 00007fffa13011b0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f2eb84dbb00 R11: 0000000000000246 R12: 00007fffa13011b0 R13: 0000000000000003 R14: 00007fffa130123c R15: 0000000000000037 irq event stamp: 108813 hardirqs last enabled at (108825): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (108836): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (107340): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (107335): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 296 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 296 Comm: syz-executor.5 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802a10f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880185d0988 RCX: 0000000000000000 RDX: ffff8880176fb580 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802a10f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880185d0988 R13: 0000000000000001 R14: ffff8880185d09a0 R15: ffff8880176fb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc5766fff8 CR3: 000000000d9d4000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa5c0a988d7 Code: Unable to access opcode bytes at RIP 0x7fa5c0a988ad. RSP: 002b:00007ffd2fd4ba98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000006 RCX: 00007fa5c0a988d7 RDX: 00007ffd2fd4baa0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffd2fd4bdc0 R10: 00007fa5c0af2b00 R11: 0000000000000246 R12: 00007ffd2fd4baa0 R13: 00007fa5c0af2b00 R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 105675 hardirqs last enabled at (105687): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (105696): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (104922): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (104915): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 296 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 296 Comm: syz-executor.5 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802a10f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880185d0a30 RCX: 0000000000000000 RDX: ffff8880176fb580 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802a10f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880185d0a30 R13: 0000000000000001 R14: ffff8880185d0a48 R15: ffff8880176fb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc5766fff8 CR3: 000000000d9d4000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa5c0a988d7 Code: Unable to access opcode bytes at RIP 0x7fa5c0a988ad. RSP: 002b:00007ffd2fd4ba98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000006 RCX: 00007fa5c0a988d7 RDX: 00007ffd2fd4baa0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffd2fd4bdc0 R10: 00007fa5c0af2b00 R11: 0000000000000246 R12: 00007ffd2fd4baa0 R13: 00007fa5c0af2b00 R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 106563 hardirqs last enabled at (106573): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (106584): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (104922): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (104915): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 296 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 296 Comm: syz-executor.5 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802a10f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880185d1b30 RCX: 0000000000000000 RDX: ffff8880176fb580 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802a10f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880185d1b30 R13: 0000000000000001 R14: ffff8880185d1b48 R15: ffff8880176fb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc5766fff8 CR3: 000000000d9d4000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa5c0a988d7 Code: Unable to access opcode bytes at RIP 0x7fa5c0a988ad. RSP: 002b:00007ffd2fd4ba98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000006 RCX: 00007fa5c0a988d7 RDX: 00007ffd2fd4baa0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffd2fd4bdc0 R10: 00007fa5c0af2b00 R11: 0000000000000246 R12: 00007ffd2fd4baa0 R13: 00007fa5c0af2b00 R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 107447 hardirqs last enabled at (107457): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (107468): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (104922): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (104915): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 300 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff888032fe76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888018374988 RCX: 0000000000000000 RDX: ffff888032fd8000 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff888032fe7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018374988 R13: 0000000000000001 R14: ffff8880183749a0 R15: ffff888032fd8000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9e9d0a50 CR3: 000000000ebe8000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5c58ac68d7 Code: Unable to access opcode bytes at RIP 0x7f5c58ac68ad. RSP: 002b:00007ffd830832c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f5c58ac68d7 RDX: 00007ffd830832d0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f5c58b20b00 R11: 0000000000000246 R12: 00007ffd830832d0 R13: 0000000000000003 R14: 00007ffd8308335c R15: 0000000000000037 irq event stamp: 105491 hardirqs last enabled at (105501): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (105512): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (100992): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (100917): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 300 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff888032fe76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888018374a30 RCX: 0000000000000000 RDX: ffff888032fd8000 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff888032fe7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018374a30 R13: 0000000000000001 R14: ffff888018374a48 R15: ffff888032fd8000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9e9d0a50 CR3: 000000000ebe8000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5c58ac68d7 Code: Unable to access opcode bytes at RIP 0x7f5c58ac68ad. RSP: 002b:00007ffd830832c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f5c58ac68d7 RDX: 00007ffd830832d0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f5c58b20b00 R11: 0000000000000246 R12: 00007ffd830832d0 R13: 0000000000000003 R14: 00007ffd8308335c R15: 0000000000000037 irq event stamp: 106379 hardirqs last enabled at (106389): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (106400): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (100992): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (100917): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 300 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff888032fe76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888018375b30 RCX: 0000000000000000 RDX: ffff888032fd8000 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff888032fe7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018375b30 R13: 0000000000000001 R14: ffff888018375b48 R15: ffff888032fd8000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9e9d0a50 CR3: 000000000ebe8000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5c58ac68d7 Code: Unable to access opcode bytes at RIP 0x7f5c58ac68ad. RSP: 002b:00007ffd830832c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f5c58ac68d7 RDX: 00007ffd830832d0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f5c58b20b00 R11: 0000000000000246 R12: 00007ffd830832d0 R13: 0000000000000003 R14: 00007ffd8308335c R15: 0000000000000037 irq event stamp: 107267 hardirqs last enabled at (107277): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (107288): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (100992): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (100917): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 295 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 295 Comm: syz-executor.1 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88801b9676e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888034c20988 RCX: 0000000000000000 RDX: ffff8880176f9ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88801b967890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c20988 R13: 0000000000000001 R14: ffff888034c209a0 R15: ffff8880176f9ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb66def45a0 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f21048c18d7 Code: Unable to access opcode bytes at RIP 0x7f21048c18ad. RSP: 002b:00007ffc82f81a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f21048c18d7 RDX: 00007ffc82f81a80 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f210491bb00 R11: 0000000000000246 R12: 00007ffc82f81a80 R13: 0000000000000003 R14: 00007ffc82f81b0c R15: 0000000000000037 irq event stamp: 116481 hardirqs last enabled at (116491): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (116502): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (116464): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (116457): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 295 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 295 Comm: syz-executor.1 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88801b9676e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888034c20a30 RCX: 0000000000000000 RDX: ffff8880176f9ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88801b967890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c20a30 R13: 0000000000000001 R14: ffff888034c20a48 R15: ffff8880176f9ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb66def45a0 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f21048c18d7 Code: Unable to access opcode bytes at RIP 0x7f21048c18ad. RSP: 002b:00007ffc82f81a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f21048c18d7 RDX: 00007ffc82f81a80 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f210491bb00 R11: 0000000000000246 R12: 00007ffc82f81a80 R13: 0000000000000003 R14: 00007ffc82f81b0c R15: 0000000000000037 irq event stamp: 117377 hardirqs last enabled at (117389): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (117400): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (116604): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (116599): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 295 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 295 Comm: syz-executor.1 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88801b9676e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888034c21b30 RCX: 0000000000000000 RDX: ffff8880176f9ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88801b967890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c21b30 R13: 0000000000000001 R14: ffff888034c21b48 R15: ffff8880176f9ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb66def45a0 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f21048c18d7 Code: Unable to access opcode bytes at RIP 0x7f21048c18ad. RSP: 002b:00007ffc82f81a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f21048c18d7 RDX: 00007ffc82f81a80 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f210491bb00 R11: 0000000000000246 R12: 00007ffc82f81a80 R13: 0000000000000003 R14: 00007ffc82f81b0c R15: 0000000000000037 irq event stamp: 118281 hardirqs last enabled at (118291): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (118302): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (117848): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (117843): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 293 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 293 Comm: syz-executor.0 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802a0e76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888034c24988 RCX: 0000000000000000 RDX: ffff888017229ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802a0e7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c24988 R13: 0000000000000001 R14: ffff888034c249a0 R15: ffff888017229ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9ea19d70 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe85933a8d7 Code: Unable to access opcode bytes at RIP 0x7fe85933a8ad. RSP: 002b:00007ffffb651708 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fe85933a8d7 RDX: 00007ffffb651710 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffffb651742 R10: 00007fe859394b00 R11: 0000000000000246 R12: 00007ffffb651710 R13: 0000000000000003 R14: 00007ffffb651790 R15: 0000000000000037 irq event stamp: 105253 hardirqs last enabled at (105263): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (105274): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (105096): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (105091): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 293 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 293 Comm: syz-executor.0 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802a0e76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888034c24a30 RCX: 0000000000000000 RDX: ffff888017229ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802a0e7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c24a30 R13: 0000000000000001 R14: ffff888034c24a48 R15: ffff888017229ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9ea19d70 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe85933a8d7 Code: Unable to access opcode bytes at RIP 0x7fe85933a8ad. RSP: 002b:00007ffffb651708 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fe85933a8d7 RDX: 00007ffffb651710 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffffb651742 R10: 00007fe859394b00 R11: 0000000000000246 R12: 00007ffffb651710 R13: 0000000000000003 R14: 00007ffffb651790 R15: 0000000000000037 irq event stamp: 106139 hardirqs last enabled at (106151): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (106160): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (105096): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (105091): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 293 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 293 Comm: syz-executor.0 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802a0e76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888034c25b30 RCX: 0000000000000000 RDX: ffff888017229ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802a0e7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c25b30 R13: 0000000000000001 R14: ffff888034c25b48 R15: ffff888017229ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9ea19d70 CR3: 000000000ebe8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fe85933a8d7 Code: Unable to access opcode bytes at RIP 0x7fe85933a8ad. RSP: 002b:00007ffffb651708 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fe85933a8d7 RDX: 00007ffffb651710 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007ffffb651742 R10: 00007fe859394b00 R11: 0000000000000246 R12: 00007ffffb651710 R13: 0000000000000003 R14: 00007ffffb651790 R15: 0000000000000037 irq event stamp: 107037 hardirqs last enabled at (107049): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (107060): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (106304): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (106299): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 299 Comm: syz-executor.3 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff888032ff76e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880363c8988 RCX: 0000000000000000 RDX: ffff888032fd9ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff888032ff7890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880363c8988 R13: 0000000000000001 R14: ffff8880363c89a0 R15: ffff888032fd9ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee4dd9e000 CR3: 000000001aba6000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 297 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: mgmt_index_removed+0x187/0x2f0 CPU: 1 PID: 297 Comm: syz-executor.2 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 hci_unregister_dev+0x2e2/0x380 RSP: 0018:ffff88802ef7f6e8 EFLAGS: 00010293 vhci_release+0x7c/0xf0 RAX: 0000000000000000 RBX: ffff8880185d4988 RCX: 0000000000000000 __fput+0x272/0x9d0 RDX: ffff88801bb3d040 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802ef7f890 R08: 0000000000000001 R09: 0000000000000000 task_work_run+0xe2/0x1a0 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880185d4988 do_exit+0xc37/0x2940 R13: 0000000000000001 R14: ffff8880185d49a0 R15: ffff88801bb3d040 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9ea7eff0 CR3: 000000000eebe000 CR4: 0000000000350ee0 Call Trace: do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 exit_to_user_mode_prepare+0x131/0x1a0 hci_unregister_dev+0x2e2/0x380 syscall_exit_to_user_mode+0x19/0x40 vhci_release+0x7c/0xf0 do_syscall_64+0x48/0x90 __fput+0x272/0x9d0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fcbe1bbb8d7 task_work_run+0xe2/0x1a0 Code: Unable to access opcode bytes at RIP 0x7fcbe1bbb8ad. do_exit+0xc37/0x2940 RSP: 002b:00007fffae2b5ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fcbe1bbb8d7 RDX: 00007fffae2b5eb0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007fffae2b5ee2 do_group_exit+0xd0/0x2a0 R10: 00007fcbe1c15b00 R11: 0000000000000246 R12: 00007fffae2b5eb0 get_signal+0x2205/0x24b0 R13: 0000000000000003 R14: 00007fffae2b5f30 R15: 0000000000000037 irq event stamp: 115263 hardirqs last enabled at (115271): [] console_emit_next_record.constprop.0+0x64c/0x800 hardirqs last disabled at (115280): [] console_emit_next_record.constprop.0+0x66b/0x800 arch_do_signal_or_restart+0x89/0x1be0 softirqs last enabled at (114896): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (114891): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 299 Comm: syz-executor.3 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 exit_to_user_mode_prepare+0x131/0x1a0 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 syscall_exit_to_user_mode+0x19/0x40 RSP: 0018:ffff888032ff76e8 EFLAGS: 00010293 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RAX: 0000000000000000 RBX: ffff8880363c8a30 RCX: 0000000000000000 RIP: 0033:0x7f6996a6e8d7 RDX: ffff888032fd9ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 Code: Unable to access opcode bytes at RIP 0x7f6996a6e8ad. RBP: ffff888032ff7890 R08: 0000000000000001 R09: 0000000000000000 RSP: 002b:00007ffd534c6098 EFLAGS: 00000246 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880363c8a30 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f6996a6e8d7 R13: 0000000000000001 R14: ffff8880363c8a48 R15: ffff888032fd9ac0 RDX: 00007ffd534c60a0 RSI: 0000000000008933 RDI: 0000000000000004 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 R10: 00007f6996ac8b00 R11: 0000000000000246 R12: 00007ffd534c60a0 CR2: 00007fee4dd9e000 CR3: 000000001aba6000 CR4: 0000000000350ef0 R13: 0000000000000003 R14: 00007ffd534c612c R15: 0000000000000037 Call Trace: irq event stamp: 115145 hardirqs last enabled at (115151): [] vprintk_emit+0x502/0x560 hardirqs last disabled at (115158): [] console_emit_next_record.constprop.0+0x66b/0x800 softirqs last enabled at (114700): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (114695): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 297 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: __cancel_work_timer+0x39c/0x4e0 CPU: 1 PID: 297 Comm: syz-executor.2 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 mgmt_index_removed+0x193/0x2f0 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802ef7f6e8 EFLAGS: 00010293 hci_unregister_dev+0x2e2/0x380 RAX: 0000000000000000 RBX: ffff8880185d4a30 RCX: 0000000000000000 RDX: ffff88801bb3d040 RSI: ffffffff811c74fa RDI: 0000000000000001 vhci_release+0x7c/0xf0 RBP: ffff88802ef7f890 R08: 0000000000000001 R09: 0000000000000000 __fput+0x272/0x9d0 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880185d4a30 R13: 0000000000000001 R14: ffff8880185d4a48 R15: ffff88801bb3d040 task_work_run+0xe2/0x1a0 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 do_exit+0xc37/0x2940 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d9ea7eff0 CR3: 000000000eebe000 CR4: 0000000000350ee0 Call Trace: do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 exit_to_user_mode_prepare+0x131/0x1a0 __fput+0x272/0x9d0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 task_work_run+0xe2/0x1a0 entry_SYSCALL_64_after_hwframe+0x63/0xcd do_exit+0xc37/0x2940 RIP: 0033:0x7fcbe1bbb8d7 Code: Unable to access opcode bytes at RIP 0x7fcbe1bbb8ad. RSP: 002b:00007fffae2b5ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fcbe1bbb8d7 RDX: 00007fffae2b5eb0 RSI: 0000000000008933 RDI: 0000000000000004 do_group_exit+0xd0/0x2a0 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007fffae2b5ee2 get_signal+0x2205/0x24b0 R10: 00007fcbe1c15b00 R11: 0000000000000246 R12: 00007fffae2b5eb0 R13: 0000000000000003 R14: 00007fffae2b5f30 R15: 0000000000000037 irq event stamp: 116083 hardirqs last enabled at (116093): [] console_emit_next_record.constprop.0+0x64c/0x800 arch_do_signal_or_restart+0x89/0x1be0 hardirqs last disabled at (116104): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (115820): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (115815): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 299 Comm: syz-executor.3 Tainted: G W 5.19.0-rc8-next-20220725 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 exit_to_user_mode_prepare+0x131/0x1a0 RIP: 0010:__flush_work+0xaaa/0xd20 syscall_exit_to_user_mode+0x19/0x40 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 do_syscall_64+0x48/0x90 RSP: 0018:ffff888032ff76e8 EFLAGS: 00010293 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f6996a6e8d7 RAX: 0000000000000000 RBX: ffff8880363c9b30 RCX: 0000000000000000 Code: Unable to access opcode bytes at RIP 0x7f6996a6e8ad. RDX: ffff888032fd9ac0 RSI: ffffffff811c74fa RDI: 0000000000000001 RSP: 002b:00007ffd534c6098 EFLAGS: 00000246 RBP: ffff888032ff7890 R08: 0000000000000001 R09: 0000000000000000 ORIG_RAX: 0000000000000010 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880363c9b30 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f6996a6e8d7 R13: 0000000000000001 R14: ffff8880363c9b48 R15: ffff888032fd9ac0 RDX: 00007ffd534c60a0 RSI: 0000000000008933 RDI: 0000000000000004 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 R10: 00007f6996ac8b00 R11: 0000000000000246 R12: 00007ffd534c60a0 CR2: 00007fee4dd9e000 CR3: 000000001aba6000 CR4: 0000000000350ef0 R13: 0000000000000003 R14: 00007ffd534c612c R15: 0000000000000037 Call Trace: irq event stamp: 115975 hardirqs last enabled at (115981): [] vprintk_emit+0x502/0x560 hardirqs last disabled at (115990): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (115664): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (115659): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 297 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 297 Comm: syz-executor.2 Tainted: G W 5.19.0-rc8-next-20220725 #1 __cancel_work_timer+0x39c/0x4e0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 bf 74 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 d2 33 29 00 0f 0b e9 05 fc ff ff e8 c6 33 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 b7 33 29 00 4c 89 e7 e8 1f 95 06 RSP: 0018:ffff88802ef7f6e8 EFLAGS: 00010293 mgmt_index_removed+0x19f/0x2f0 RAX: 0000000000000000 RBX: ffff8880185d5b30 RCX: 0000000000000000 RDX: ffff88801bb3d040 RSI: ffffffff811c74fa RDI: 0000000000000001 RBP: ffff88802ef7f890 R08: 0000000000000001 R09: 0000000000000000 hci_unregister_dev+0x2e2/0x380 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880185d5b30 vhci_release+0x7c/0xf0 R13: 0000000000000001 R14: ffff8880185d5b48 R15: ffff88801bb3d040 __fput+0x272/0x9d0 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 task_work_run+0xe2/0x1a0 CR2: 0000561d9ea7eff0 CR3: 000000000eebe000 CR4: 0000000000350ee0 do_exit+0xc37/0x2940 Call Trace: do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 __cancel_work_timer+0x39c/0x4e0 arch_do_signal_or_restart+0x89/0x1be0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 exit_to_user_mode_prepare+0x131/0x1a0 task_work_run+0xe2/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_exit+0xc37/0x2940 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fcbe1bbb8d7 Code: Unable to access opcode bytes at RIP 0x7fcbe1bbb8ad. RSP: 002b:00007fffae2b5ea8 EFLAGS: 00000246 do_group_exit+0xd0/0x2a0 ORIG_RAX: 0000000000000010 get_signal+0x2205/0x24b0 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007fcbe1bbb8d7 RDX: 00007fffae2b5eb0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 00007fffae2b5ee2 R10: 00007fcbe1c15b00 R11: 0000000000000246 R12: 00007fffae2b5eb0 R13: 0000000000000003 R14: 00007fffae2b5f30 R15: 0000000000000037 arch_do_signal_or_restart+0x89/0x1be0 irq event stamp: 116903 hardirqs last enabled at (116913): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 hardirqs last disabled at (116922): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (116446): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (116441): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f6996a6e8d7 Code: Unable to access opcode bytes at RIP 0x7f6996a6e8ad. RSP: 002b:00007ffd534c6098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f6996a6e8d7 RDX: 00007ffd534c60a0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000001008 R09: 0000000000000005 R10: 00007f6996ac8b00 R11: 0000000000000246 R12: 00007ffd534c60a0 R13: 0000000000000003 R14: 00007ffd534c612c R15: 0000000000000037 irq event stamp: 117733 hardirqs last enabled at (117745): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (117754): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (116660): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (116629): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci0: command 0x0409 tx timeout Bluetooth: hci3: Opcode 0x c03 failed: -110 Bluetooth: hci1: command 0x0409 tx timeout Bluetooth: hci2: command 0x0409 tx timeout Bluetooth: hci5: command 0x0409 tx timeout Bluetooth: hci6: command 0x0409 tx timeout Bluetooth: hci4: command 0x0409 tx timeout Bluetooth: hci7: command 0x0409 tx timeout Bluetooth: hci0: command 0x041b tx timeout Bluetooth: hci2: command 0x041b tx timeout Bluetooth: hci1: command 0x041b tx timeout Bluetooth: hci5: command 0x041b tx timeout Bluetooth: hci6: command 0x041b tx timeout Bluetooth: hci4: command 0x041b tx timeout Bluetooth: hci7: command 0x041b tx timeout Bluetooth: hci0: command 0x040f tx timeout Bluetooth: hci1: command 0x040f tx timeout Bluetooth: hci2: command 0x040f tx timeout Bluetooth: hci5: command 0x040f tx timeout Bluetooth: hci6: command 0x040f tx timeout Bluetooth: hci4: command 0x040f tx timeout