wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready ------------[ cut here ]------------ WARNING: CPU: 1 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 ------------[ cut here ]------------ Modules linked in: WARNING: CPU: 0 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 CPU: 1 PID: 299 Comm: syz-executor.4 Not tainted 5.19.0-rc8-next-20220726 #1 Modules linked in: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 CPU: 0 PID: 300 Comm: syz-executor.2 Not tainted 5.19.0-rc8-next-20220726 #1 RSP: 0018:ffff88801ac5f6e8 EFLAGS: 00010293 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RAX: 0000000000000000 RBX: ffff888018298988 RCX: 0000000000000000 RIP: 0010:__flush_work+0xaaa/0xd20 RDX: ffff88800fa75040 RSI: ffffffff811c757a RDI: 0000000000000001 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RBP: ffff88801ac5f890 R08: 0000000000000001 R09: 0000000000000000 RSP: 0018:ffff88801d61f6e8 EFLAGS: 00010293 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018298988 R13: 0000000000000001 R14: ffff8880182989a0 R15: ffff88800fa75040 RAX: 0000000000000000 RBX: ffff88801829c988 RCX: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d78bf2f60 CR3: 0000000044cd2000 CR4: 0000000000350ee0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 RDX: ffff88800fc28000 RSI: ffffffff811c757a RDI: 0000000000000001 __fput+0x272/0x9d0 RBP: ffff88801d61f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801829c988 task_work_run+0xe2/0x1a0 R13: 0000000000000001 R14: ffff88801829c9a0 R15: ffff88800fc28000 do_exit+0xc37/0x2940 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f757d4176f4 CR3: 000000000de22000 CR4: 0000000000350ef0 Call Trace: do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 exit_to_user_mode_prepare+0x131/0x1a0 vhci_release+0x7c/0xf0 syscall_exit_to_user_mode+0x19/0x40 __fput+0x272/0x9d0 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd task_work_run+0xe2/0x1a0 RIP: 0033:0x7fa697b8313a do_exit+0xc37/0x2940 Code: Unable to access opcode bytes at RIP 0x7fa697b83110. RSP: 002b:00007fff94740688 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007fa697b8313a RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007fff947406bc R09: ff00000000000000 R10: 00007fa697c66828 R11: 0000000000000246 R12: 00007fff947406bc do_group_exit+0xd0/0x2a0 R13: 00007fa697be4ce6 R14: 00007fa697c66828 R15: 00007fa697c66820 get_signal+0x2205/0x24b0 irq event stamp: 149677 hardirqs last enabled at (149683): [] vprintk_emit+0x502/0x560 hardirqs last disabled at (149692): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (149166): [] __irq_exit_rcu+0x11b/0x180 arch_do_signal_or_restart+0x89/0x1be0 softirqs last disabled at (149145): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 1 PID: 299 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88801ac5f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888018298a30 RCX: 0000000000000000 exit_to_user_mode_prepare+0x131/0x1a0 RDX: ffff88800fa75040 RSI: ffffffff811c757a RDI: 0000000000000001 syscall_exit_to_user_mode+0x19/0x40 RBP: ffff88801ac5f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018298a30 do_syscall_64+0x48/0x90 R13: 0000000000000001 R14: ffff888018298a48 R15: ffff88800fa75040 entry_SYSCALL_64_after_hwframe+0x63/0xcd FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 RIP: 0033:0x7efc9936104a CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Code: Unable to access opcode bytes at RIP 0x7efc99361020. CR2: 0000561d78bf2f60 CR3: 0000000044cd2000 CR4: 0000000000350ee0 RSP: 002b:00007ffda5b78058 EFLAGS: 00000246 Call Trace: ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffed RBX: 00007ffda5b786a8 RCX: 00007efc9936104a RDX: 00007efc993c307d RSI: 00007efc993b91dd RDI: 00007efc993c307d RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc99473bf0 R13: 00007ffda5b78140 R14: 0000000000000000 R15: 00000000000000f8 irq event stamp: 136595 __cancel_work_timer+0x39c/0x4e0 hardirqs last enabled at (136605): [] console_emit_next_record.constprop.0+0x64c/0x800 hardirqs last disabled at (136616): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (135956): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (135919): [] __irq_exit_rcu+0x11b/0x180 mgmt_index_removed+0x193/0x2f0 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 CPU: 0 PID: 300 Comm: syz-executor.2 Tainted: G W 5.19.0-rc8-next-20220726 #1 __fput+0x272/0x9d0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 task_work_run+0xe2/0x1a0 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 do_exit+0xc37/0x2940 RSP: 0018:ffff88801d61f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801829ca30 RCX: 0000000000000000 RDX: ffff88800fc28000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88801d61f890 R08: 0000000000000001 R09: 0000000000000000 do_group_exit+0xd0/0x2a0 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801829ca30 get_signal+0x2205/0x24b0 R13: 0000000000000001 R14: ffff88801829ca48 R15: ffff88800fc28000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f757d4176f4 CR3: 000000000de22000 CR4: 0000000000350ef0 Call Trace: arch_do_signal_or_restart+0x89/0x1be0 __cancel_work_timer+0x39c/0x4e0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 mgmt_index_removed+0x193/0x2f0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa697b8313a Code: Unable to access opcode bytes at RIP 0x7fa697b83110. RSP: 002b:00007fff94740688 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 hci_unregister_dev+0x2e2/0x380 RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007fa697b8313a vhci_release+0x7c/0xf0 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 __fput+0x272/0x9d0 RBP: 0000000000000003 R08: 00007fff947406bc R09: ff00000000000000 R10: 00007fa697c66828 R11: 0000000000000246 R12: 00007fff947406bc R13: 00007fa697be4ce6 R14: 00007fa697c66828 R15: 00007fa697c66820 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 irq event stamp: 150481 hardirqs last enabled at (150487): [] vprintk_emit+0x502/0x560 hardirqs last disabled at (150498): [] sysvec_apic_timer_interrupt+0xb/0xc0 softirqs last enabled at (149166): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (149145): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ do_group_exit+0xd0/0x2a0 WARNING: CPU: 1 PID: 299 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 get_signal+0x2205/0x24b0 Modules linked in: CPU: 1 PID: 299 Comm: syz-executor.4 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 arch_do_signal_or_restart+0x89/0x1be0 RSP: 0018:ffff88801ac5f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888018299b30 RCX: 0000000000000000 RDX: ffff88800fa75040 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff88801ac5f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888018299b30 R13: 0000000000000001 R14: ffff888018299b48 R15: ffff88800fa75040 FS: 0000000000000000(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000561d78bf2f60 CR3: 0000000044cd2000 CR4: 0000000000350ee0 Call Trace: exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7efc9936104a Code: Unable to access opcode bytes at RIP 0x7efc99361020. RSP: 002b:00007ffda5b78058 EFLAGS: 00000246 __cancel_work_timer+0x39c/0x4e0 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffed RBX: 00007ffda5b786a8 RCX: 00007efc9936104a RDX: 00007efc993c307d RSI: 00007efc993b91dd RDI: 00007efc993c307d RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 mgmt_index_removed+0x19f/0x2f0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc99473bf0 R13: 00007ffda5b78140 R14: 0000000000000000 R15: 00000000000000f8 irq event stamp: 137427 hci_unregister_dev+0x2e2/0x380 hardirqs last enabled at (137437): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 vhci_release+0x7c/0xf0 hardirqs last disabled at (137446): [] sysvec_apic_timer_interrupt+0xb/0xc0 __fput+0x272/0x9d0 softirqs last enabled at (135956): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (135919): [] __irq_exit_rcu+0x11b/0x180 task_work_run+0xe2/0x1a0 ---[ end trace 0000000000000000 ]--- do_exit+0xc37/0x2940 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 300 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 300 Comm: syz-executor.2 Tainted: G W 5.19.0-rc8-next-20220726 #1 do_group_exit+0xd0/0x2a0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 get_signal+0x2205/0x24b0 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff88801d61f6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88801829db30 RCX: 0000000000000000 RDX: ffff88800fc28000 RSI: ffffffff811c757a RDI: 0000000000000001 arch_do_signal_or_restart+0x89/0x1be0 RBP: ffff88801d61f890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801829db30 R13: 0000000000000001 R14: ffff88801829db48 R15: ffff88800fc28000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f757d4176f4 CR3: 000000000de22000 CR4: 0000000000350ef0 Call Trace: exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fa697b8313a Code: Unable to access opcode bytes at RIP 0x7fa697b83110. RSP: 002b:00007fff94740688 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 __cancel_work_timer+0x39c/0x4e0 RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007fa697b8313a RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007fff947406bc R09: ff00000000000000 R10: 00007fa697c66828 R11: 0000000000000246 R12: 00007fff947406bc R13: 00007fa697be4ce6 R14: 00007fa697c66828 R15: 00007fa697c66820 mgmt_index_removed+0x19f/0x2f0 irq event stamp: 151277 hardirqs last enabled at (151283): [] vprintk_emit+0x502/0x560 hardirqs last disabled at (151292): [] console_emit_next_record.constprop.0+0x66b/0x800 softirqs last enabled at (149166): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (149145): [] __irq_exit_rcu+0x11b/0x180 hci_unregister_dev+0x2e2/0x380 ---[ end trace 0000000000000000 ]--- vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7efc9936104a Code: Unable to access opcode bytes at RIP 0x7efc99361020. RSP: 002b:00007ffda5b78058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffed RBX: 00007ffda5b786a8 RCX: 00007efc9936104a RDX: 00007efc993c307d RSI: 00007efc993b91dd RDI: 00007efc993c307d RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc99473bf0 R13: 00007ffda5b78140 R14: 0000000000000000 R15: 00000000000000f8 irq event stamp: 139287 hardirqs last enabled at (139297): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (139308): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (135956): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (135919): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 296 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 296 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880207df6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880186c4988 RCX: 0000000000000000 RDX: ffff88800ffb8000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff8880207df890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880186c4988 R13: 0000000000000001 R14: ffff8880186c49a0 R15: ffff88800ffb8000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f34f4045088 CR3: 00000000436f8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x187/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f0a3f7c18ac Code: Unable to access opcode bytes at RIP 0x7f0a3f7c1882. RSP: 002b:00007ffd552f5a80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: 0000000000000024 RBX: 00007f0a4085a320 RCX: 00007f0a3f7c18ac RDX: 0000000000000024 RSI: 00007f0a4085a370 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd552f5ad4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007f0a4085a370 R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 124079 hardirqs last enabled at (124089): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (124102): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (123716): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (123685): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 296 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 296 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880207df6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880186c4a30 RCX: 0000000000000000 RDX: ffff88800ffb8000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff8880207df890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880186c4a30 R13: 0000000000000001 R14: ffff8880186c4a48 R15: ffff88800ffb8000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f34f4045088 CR3: 00000000436f8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x193/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f0a3f7c18ac Code: Unable to access opcode bytes at RIP 0x7f0a3f7c1882. RSP: 002b:00007ffd552f5a80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: 0000000000000024 RBX: 00007f0a4085a320 RCX: 00007f0a3f7c18ac RDX: 0000000000000024 RSI: 00007f0a4085a370 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd552f5ad4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007f0a4085a370 R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 124971 hardirqs last enabled at (124981): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (124992): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (123716): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (123685): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 296 at kernel/workqueue.c:3066 __flush_work+0xaaa/0xd20 Modules linked in: CPU: 0 PID: 296 Comm: syz-executor.6 Tainted: G W 5.19.0-rc8-next-20220726 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__flush_work+0xaaa/0xd20 Code: 00 48 c7 c6 3f 75 1c 81 48 c7 c7 e0 51 40 85 e8 6c 72 0d 00 e9 11 fc ff ff e8 22 36 29 00 0f 0b e9 05 fc ff ff e8 16 36 29 00 <0f> 0b 45 31 ed e9 f6 fb ff ff e8 07 36 29 00 4c 89 e7 e8 7f f4 06 RSP: 0018:ffff8880207df6e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8880186c5b30 RCX: 0000000000000000 RDX: ffff88800ffb8000 RSI: ffffffff811c757a RDI: 0000000000000001 RBP: ffff8880207df890 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880186c5b30 R13: 0000000000000001 R14: ffff8880186c5b48 R15: ffff88800ffb8000 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f34f4045088 CR3: 00000000436f8000 CR4: 0000000000350ef0 Call Trace: __cancel_work_timer+0x39c/0x4e0 mgmt_index_removed+0x19f/0x2f0 hci_unregister_dev+0x2e2/0x380 vhci_release+0x7c/0xf0 __fput+0x272/0x9d0 task_work_run+0xe2/0x1a0 do_exit+0xc37/0x2940 do_group_exit+0xd0/0x2a0 get_signal+0x2205/0x24b0 arch_do_signal_or_restart+0x89/0x1be0 exit_to_user_mode_prepare+0x131/0x1a0 syscall_exit_to_user_mode+0x19/0x40 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f0a3f7c18ac Code: Unable to access opcode bytes at RIP 0x7f0a3f7c1882. RSP: 002b:00007ffd552f5a80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: 0000000000000024 RBX: 00007f0a4085a320 RCX: 00007f0a3f7c18ac RDX: 0000000000000024 RSI: 00007f0a4085a370 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007ffd552f5ad4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007f0a4085a370 R14: 0000000000000003 R15: 0000000000000000 irq event stamp: 125865 hardirqs last enabled at (125877): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (125888): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (123716): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (123685): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci1: command 0x0409 tx timeout Bluetooth: hci6: Opcode 0x c03 failed: -110 Bluetooth: hci7: Opcode 0x c03 failed: -110 Bluetooth: hci1: command 0x041b tx timeout Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 Bluetooth: hci1: command 0x040f tx timeout Bluetooth: hci6: Opcode 0x c03 failed: -110 Bluetooth: hci7: command 0x0409 tx timeout