------------[ cut here ]------------ WARNING: CPU: 0 PID: 298 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: ------------[ cut here ]------------ CPU: 0 PID: 298 Comm: syz-executor.3 Not tainted 5.19.0-rc8-next-20220726 #1 WARNING: CPU: 1 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Modules linked in: Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 CPU: 1 PID: 300 Comm: syz-executor.1 Not tainted 5.19.0-rc8-next-20220726 #1 RSP: 0018:ffff88803316f6e8 EFLAGS: 00010293 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 RAX: 0000000000000000 RBX: ffff88801b930988 RCX: 0000000000000000 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RDX: ffff8880172f9ac0 RSI: ffffffff811c757a RDI: 0000000000000001 RSP: 0018:ffff88803e0976e8 EFLAGS: 00010293 RBP: ffff88803316f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801b930988 RAX: 0000000000000000 RBX: ffff8880182b4988 RCX: 0000000000000000 R13: 0000000000000001 R14: ffff88801b9309a0 R15: ffff8880172f9ac0 RDX: ffff888018599ac0 RSI: ffffffff811c757a RDI: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 RBP: ffff88803e097890 R08: 0000000000000001 R09: 0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880182b4988 CR2: 000055b7e5fafe68 CR3: 00000000092fa000 CR4: 0000000000350ef0 R13: 0000000000000001 R14: ffff8880182b49a0 R15: ffff888018599ac0 Call Trace: FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c2f60fb508 CR3: 000000000ec9a000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 task_work_run+0xe2/0x1a0 __fput+0x272/0x9d0 do_exit+0xc37/0x2940 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 exit_to_user_mode_prepare+0x131/0x1a0 entry_SYSCALL_64_after_hwframe+0x63/0xcd syscall_exit_to_user_mode+0x19/0x40 RIP: 0033:0x7efe694658d7 do_syscall_64+0x48/0x90 Code: Unable to access opcode bytes at RIP 0x7efe694658ad. entry_SYSCALL_64_after_hwframe+0x63/0xcd RSP: 002b:00007ffc4a509778 EFLAGS: 00000246 RIP: 0033:0x7f543874e8d7 ORIG_RAX: 0000000000000010 Code: Unable to access opcode bytes at RIP 0x7f543874e8ad. RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007efe694658d7 RSP: 002b:00007ffe6ff167a8 EFLAGS: 00000246 RDX: 00007ffc4a509780 RSI: 0000000000008933 RDI: 0000000000000004 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f543874e8d7 RBP: 0000000000000004 R08: 0000000000000008 R09: 0000000000000006 RDX: 00007ffe6ff167b0 RSI: 0000000000008933 RDI: 0000000000000004 R10: 00007efe694bfb40 R11: 0000000000000246 R12: 00007ffc4a509780 RBP: 0000000000000004 R08: 0000000000000100 R09: 0000000000000006 R13: 0000000000000003 R14: 00007ffc4a50980c R15: 000000000000003c R10: 00007f54387a8a00 R11: 0000000000000246 R12: 00007ffe6ff167b0 R13: 0000000000000003 R14: 00007ffe6ff1683c R15: 0000000000000041 irq event stamp: 127279 hardirqs last enabled at (127287): [] console_emit_next_record.constprop.0+0x64c/0x800 irq event stamp: 123947 hardirqs last enabled at (123953): [] vprintk_emit+0x502/0x560 hardirqs last disabled at (127296): [] console_emit_next_record.constprop.0+0x66b/0x800 hardirqs last disabled at (123962): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (126564): [] __irq_exit_rcu+0x11b/0x180 softirqs last enabled at (123460): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (126533): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (123391): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ ------------[ cut here ]------------ WARNING: CPU: 0 PID: 298 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 WARNING: CPU: 1 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: Modules linked in: CPU: 0 PID: 298 Comm: syz-executor.3 Tainted: G W 5.19.0-rc8-next-20220726 #1 CPU: 1 PID: 300 Comm: syz-executor.1 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88803316f6e8 EFLAGS: 00010293 RSP: 0018:ffff88803e0976e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801b930a30 RCX: 0000000000000000 RAX: 0000000000000000 RBX: ffff8880182b4a30 RCX: 0000000000000000 RDX: ffff8880172f9ac0 RSI: ffffffff811c757a RDI: 0000000000000001 RDX: ffff888018599ac0 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88803316f890 R08: 0000000000000001 R09: 0000000000000000 RBP: ffff88803e097890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801b930a30 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880182b4a30 R13: 0000000000000001 R14: ffff88801b930a48 R15: ffff8880172f9ac0 R13: 0000000000000001 R14: ffff8880182b4a48 R15: ffff888018599ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b7e5fafe68 CR3: 00000000092fa000 CR4: 0000000000350ef0 CR2: 000055c2f60fb508 CR3: 000000000ec9a000 CR4: 0000000000350ee0 Call Trace: Call Trace: __cancel_work_timer+0x39c/0x4e0 __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f543874e8d7 RIP: 0033:0x7efe694658d7 Code: Unable to access opcode bytes at RIP 0x7f543874e8ad. Code: Unable to access opcode bytes at RIP 0x7efe694658ad. RSP: 002b:00007ffe6ff167a8 EFLAGS: 00000246 RSP: 002b:00007ffc4a509778 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f543874e8d7 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007efe694658d7 RDX: 00007ffe6ff167b0 RSI: 0000000000008933 RDI: 0000000000000004 RDX: 00007ffc4a509780 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 0000000000000006 RBP: 0000000000000004 R08: 0000000000000008 R09: 0000000000000006 R10: 00007f54387a8a00 R11: 0000000000000246 R12: 00007ffe6ff167b0 R10: 00007efe694bfb40 R11: 0000000000000246 R12: 00007ffc4a509780 R13: 0000000000000003 R14: 00007ffe6ff1683c R15: 0000000000000041 R13: 0000000000000003 R14: 00007ffc4a50980c R15: 000000000000003c irq event stamp: 124713 irq event stamp: 128053 hardirqs last enabled at (124725): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 hardirqs last enabled at (128063): [] console_emit_next_record.constprop.0+0x64c/0x800 hardirqs last disabled at (124732): [] console_emit_next_record.constprop.0+0x66b/0x800 hardirqs last disabled at (128070): [] console_emit_next_record.constprop.0+0x66b/0x800 softirqs last enabled at (123460): [] __irq_exit_rcu+0x11b/0x180 softirqs last enabled at (126564): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (123391): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (126533): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ ------------[ cut here ]------------ WARNING: CPU: 1 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 WARNING: CPU: 0 PID: 298 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: Modules linked in: CPU: 1 PID: 300 Comm: syz-executor.1 Tainted: G W 5.19.0-rc8-next-20220726 #1 CPU: 0 PID: 298 Comm: syz-executor.3 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88803e0976e8 EFLAGS: 00010293 RSP: 0018:ffff88803316f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801b931b30 RCX: 0000000000000000 RAX: 0000000000000000 RBX: ffff8880182b5b30 RCX: 0000000000000000 RDX: ffff8880172f9ac0 RSI: ffffffff811c757a RDI: 0000000000000001 RDX: ffff888018599ac0 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88803316f890 R08: 0000000000000001 R09: 0000000000000000 RBP: ffff88803e097890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801b931b30 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880182b5b30 R13: 0000000000000001 R14: ffff88801b931b48 R15: ffff8880172f9ac0 R13: 0000000000000001 R14: ffff8880182b5b48 R15: ffff888018599ac0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b7e5fafe68 CR3: 00000000092fa000 CR4: 0000000000350ef0 CR2: 000055c2f60fb508 CR3: 000000000ec9a000 CR4: 0000000000350ee0 Call Trace: Call Trace: __cancel_work_timer+0x39c/0x4e0 __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7efe694658d7 RIP: 0033:0x7f543874e8d7 Code: Unable to access opcode bytes at RIP 0x7efe694658ad. Code: Unable to access opcode bytes at RIP 0x7f543874e8ad. RSP: 002b:00007ffc4a509778 EFLAGS: 00000246 RSP: 002b:00007ffe6ff167a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007efe694658d7 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007f543874e8d7 RDX: 00007ffc4a509780 RSI: 0000000000008933 RDI: 0000000000000004 RDX: 00007ffe6ff167b0 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000008 R09: 0000000000000006 RBP: 0000000000000004 R08: 0000000000000100 R09: 0000000000000006 R10: 00007efe694bfb40 R11: 0000000000000246 R12: 00007ffc4a509780 R10: 00007f54387a8a00 R11: 0000000000000246 R12: 00007ffe6ff167b0 R13: 0000000000000003 R14: 00007ffc4a50980c R15: 000000000000003c R13: 0000000000000003 R14: 00007ffe6ff1683c R15: 0000000000000041 irq event stamp: 128825 irq event stamp: 125491 hardirqs last enabled at (125497): [] vprintk_emit+0x502/0x560 hardirqs last enabled at (128835): [] console_emit_next_record.constprop.0+0x64c/0x800 hardirqs last disabled at (125506): [] sysvec_apic_timer_interrupt+0xb/0xc0 hardirqs last disabled at (128844): [] console_emit_next_record.constprop.0+0x66b/0x800 softirqs last enabled at (123460): [] __irq_exit_rcu+0x11b/0x180 softirqs last enabled at (126564): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (123391): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (126533): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 302 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 302 Comm: syz-executor.5 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88804226f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801849c988 RCX: 0000000000000000 RDX: ffff88801859b580 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88804226f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801849c988 R13: 0000000000000001 R14: ffff88801849c9a0 R15: ffff88801859b580 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb812000 CR3: 000000000ee14000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3fece348d7 Code: Unable to access opcode bytes at RIP 0x7f3fece348ad. RSP: 002b:00007ffe2b10e878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007f3fece348d7 RDX: 00007ffe2b10e880 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 00007ffe2b10e8b2 R10: 00007f3fece8ea00 R11: 0000000000000246 R12: 00007ffe2b10e880 R13: 0000000000000003 R14: 00007ffe2b10e900 R15: 0000000000000043 irq event stamp: 125427 hardirqs last enabled at (125439): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (125448): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (124928): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (124845): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 302 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 302 Comm: syz-executor.5 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88804226f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801849ca30 RCX: 0000000000000000 RDX: ffff88801859b580 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88804226f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801849ca30 R13: 0000000000000001 R14: ffff88801849ca48 R15: ffff88801859b580 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb812000 CR3: 000000000ee14000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3fece348d7 Code: Unable to access opcode bytes at RIP 0x7f3fece348ad. RSP: 002b:00007ffe2b10e878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007f3fece348d7 RDX: 00007ffe2b10e880 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 00007ffe2b10e8b2 R10: 00007f3fece8ea00 R11: 0000000000000246 R12: 00007ffe2b10e880 R13: 0000000000000003 R14: 00007ffe2b10e900 R15: 0000000000000043 irq event stamp: 126301 hardirqs last enabled at (126311): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (126322): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (124928): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (124845): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 302 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 302 Comm: syz-executor.5 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88804226f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801849db30 RCX: 0000000000000000 RDX: ffff88801859b580 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88804226f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801849db30 R13: 0000000000000001 R14: ffff88801849db48 R15: ffff88801859b580 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb812000 CR3: 000000000ee14000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3fece348d7 Code: Unable to access opcode bytes at RIP 0x7f3fece348ad. RSP: 002b:00007ffe2b10e878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007f3fece348d7 RDX: 00007ffe2b10e880 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 00007ffe2b10e8b2 R10: 00007f3fece8ea00 R11: 0000000000000246 R12: 00007ffe2b10e880 R13: 0000000000000003 R14: 00007ffe2b10e900 R15: 0000000000000043 irq event stamp: 127171 hardirqs last enabled at (127181): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (127192): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (124928): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (124845): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 301 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 301 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff888020b476e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880178dc988 RCX: 0000000000000000 RDX: ffff8880172fb580 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888020b47890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880178dc988 R13: 0000000000000001 R14: ffff8880178dc9a0 R15: ffff8880172fb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb7ca598 CR3: 000000000ec9a000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f845b83b8d7 Code: Unable to access opcode bytes at RIP 0x7f845b83b8ad. RSP: 002b:00007ffd84428908 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000006 RCX: 00007f845b83b8d7 RDX: 00007ffd84428910 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000200 R09: 00007ffd84428c30 R10: 00007f845b895b80 R11: 0000000000000246 R12: 00007ffd84428910 R13: 00007f845b895b7b R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 125205 hardirqs last enabled at (125215): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (125226): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (123388): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (122985): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 301 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 301 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff888020b476e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880178dca30 RCX: 0000000000000000 RDX: ffff8880172fb580 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888020b47890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880178dca30 R13: 0000000000000001 R14: ffff8880178dca48 R15: ffff8880172fb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb7ca598 CR3: 000000000ec9a000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f845b83b8d7 Code: Unable to access opcode bytes at RIP 0x7f845b83b8ad. RSP: 002b:00007ffd84428908 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000006 RCX: 00007f845b83b8d7 RDX: 00007ffd84428910 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000200 R09: 00007ffd84428c30 R10: 00007f845b895b80 R11: 0000000000000246 R12: 00007ffd84428910 R13: 00007f845b895b7b R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 126073 hardirqs last enabled at (126083): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (126094): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (123388): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (122985): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 301 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 301 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff888020b476e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880178ddb30 RCX: 0000000000000000 RDX: ffff8880172fb580 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888020b47890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880178ddb30 R13: 0000000000000001 R14: ffff8880178ddb48 R15: ffff8880172fb580 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb7ca598 CR3: 000000000ec9a000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f845b83b8d7 Code: Unable to access opcode bytes at RIP 0x7f845b83b8ad. RSP: 002b:00007ffd84428908 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000006 RCX: 00007f845b83b8d7 RDX: 00007ffd84428910 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000200 R09: 00007ffd84428c30 R10: 00007f845b895b80 R11: 0000000000000246 R12: 00007ffd84428910 R13: 00007f845b895b7b R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 126947 hardirqs last enabled at (126957): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (126966): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (123388): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (122985): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 303 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 303 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880422776e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880099f4988 RCX: 0000000000000000 RDX: ffff888018b00000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888042277890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880099f4988 R13: 0000000000000001 R14: ffff8880099f49a0 R15: ffff888018b00000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3583eda580 CR3: 00000000171d2000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa9ce1028d7 Code: Unable to access opcode bytes at RIP 0x7fa9ce1028ad. RSP: 002b:00007ffeb42adb18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007fa9ce1028d7 RDX: 00007ffeb42adb20 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000002004 R09: 0000000000000006 R10: 00007fa9ce15cb40 R11: 0000000000000246 R12: 00007ffeb42adb20 R13: 0000000000000003 R14: 00007ffeb42adbac R15: 000000000000003e irq event stamp: 121801 hardirqs last enabled at (121813): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (121822): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (121330): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (121261): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 303 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 303 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880422776e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880099f4a30 RCX: 0000000000000000 RDX: ffff888018b00000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888042277890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880099f4a30 R13: 0000000000000001 R14: ffff8880099f4a48 R15: ffff888018b00000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3583eda580 CR3: 00000000171d2000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa9ce1028d7 Code: Unable to access opcode bytes at RIP 0x7fa9ce1028ad. RSP: 002b:00007ffeb42adb18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007fa9ce1028d7 RDX: 00007ffeb42adb20 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000002004 R09: 0000000000000006 R10: 00007fa9ce15cb40 R11: 0000000000000246 R12: 00007ffeb42adb20 R13: 0000000000000003 R14: 00007ffeb42adbac R15: 000000000000003e irq event stamp: 122671 hardirqs last enabled at (122681): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (122690): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (121330): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (121261): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 303 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 303 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880422776e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880099f5b30 RCX: 0000000000000000 RDX: ffff888018b00000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888042277890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880099f5b30 R13: 0000000000000001 R14: ffff8880099f5b48 R15: ffff888018b00000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3583eda580 CR3: 00000000171d2000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa9ce1028d7 Code: Unable to access opcode bytes at RIP 0x7fa9ce1028ad. RSP: 002b:00007ffeb42adb18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000004 RCX: 00007fa9ce1028d7 RDX: 00007ffeb42adb20 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000002004 R09: 0000000000000006 R10: 00007fa9ce15cb40 R11: 0000000000000246 R12: 00007ffeb42adb20 R13: 0000000000000003 R14: 00007ffeb42adbac R15: 000000000000003e irq event stamp: 123535 hardirqs last enabled at (123545): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (123556): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (121330): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (121261): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 299 Comm: syz-executor.7 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880407576e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880182b0988 RCX: 0000000000000000 RDX: ffff8880172f8000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888040757890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880182b0988 R13: 0000000000000001 R14: ffff8880182b09a0 R15: ffff8880172f8000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb728460 CR3: 000000000ec9a000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f9527c6b8d7 Code: Unable to access opcode bytes at RIP 0x7f9527c6b8ad. RSP: 002b:00007ffefd9dd568 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007f9527c6b8d7 RDX: 00007ffefd9dd570 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 00007ffefd9dd5a2 R10: 00007f9527cc5a00 R11: 0000000000000246 R12: 00007ffefd9dd570 R13: 0000000000000003 R14: 00007ffefd9dd5f0 R15: 0000000000000042 irq event stamp: 120919 hardirqs last enabled at (120931): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (120940): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (119906): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (119601): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 299 Comm: syz-executor.7 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880407576e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880182b0a30 RCX: 0000000000000000 RDX: ffff8880172f8000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888040757890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880182b0a30 R13: 0000000000000001 R14: ffff8880182b0a48 R15: ffff8880172f8000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb728460 CR3: 000000000ec9a000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f9527c6b8d7 Code: Unable to access opcode bytes at RIP 0x7f9527c6b8ad. RSP: 002b:00007ffefd9dd568 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007f9527c6b8d7 RDX: 00007ffefd9dd570 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 00007ffefd9dd5a2 R10: 00007f9527cc5a00 R11: 0000000000000246 R12: 00007ffefd9dd570 R13: 0000000000000003 R14: 00007ffefd9dd5f0 R15: 0000000000000042 irq event stamp: 121787 hardirqs last enabled at (121797): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (121808): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (119906): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (119601): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 299 Comm: syz-executor.7 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880407576e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880182b1b30 RCX: 0000000000000000 RDX: ffff8880172f8000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff888040757890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880182b1b30 R13: 0000000000000001 R14: ffff8880182b1b48 R15: ffff8880172f8000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f50eb728460 CR3: 000000000ec9a000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f9527c6b8d7 Code: Unable to access opcode bytes at RIP 0x7f9527c6b8ad. RSP: 002b:00007ffefd9dd568 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 syz-executor.5 (302) used greatest stack depth: 24200 bytes left RAX: ffffffffffffffed RBX: 0000000000000010 RCX: 00007f9527c6b8d7 RDX: 00007ffefd9dd570 RSI: 0000000000008933 RDI: 0000000000000004 RBP: 0000000000000004 R08: 0000000000000100 R09: 00007ffefd9dd5a2 R10: 00007f9527cc5a00 R11: 0000000000000246 R12: 00007ffefd9dd570 R13: 0000000000000003 R14: 00007ffefd9dd5f0 R15: 0000000000000042 irq event stamp: 122661 hardirqs last enabled at (122671): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (122680): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (119906): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (119601): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci2: command 0x0409 tx timeout Bluetooth: hci3: Opcode 0x c03 failed: -110 Bluetooth: hci4: command 0x0409 tx timeout Bluetooth: hci6: Opcode 0x c03 failed: -110 Bluetooth: hci5: command 0x0409 tx timeout Bluetooth: hci7: Opcode 0x c03 failed: -110 Bluetooth: hci2: command 0x041b tx timeout Bluetooth: hci4: command 0x041b tx timeout Bluetooth: hci5: command 0x041b tx timeout Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci2: command 0x040f tx timeout Bluetooth: hci4: command 0x040f tx timeout Bluetooth: hci5: command 0x040f tx timeout Bluetooth: hci3: Opcode 0x c03 failed: -110 Bluetooth: hci6: command 0x0409 tx timeout