------------[ cut here ]------------ WARNING: CPU: 0 PID: 5904 at kernel/workqueue.c:1425 __queue_work+0xc09/0xf40 kernel/workqueue.c:1425 Modules linked in: CPU: 0 PID: 5904 Comm: syz-executor.5 Not tainted 5.10.183 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__queue_work+0xc09/0xf40 kernel/workqueue.c:1425 Code: e0 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 4f 95 51 00 8b 5b 24 31 ff 83 e3 20 89 de e8 40 dd 25 00 85 db 75 2a e8 e7 e3 25 00 <0f> 0b e9 71 fa ff ff e8 db e3 25 00 0f 0b e9 fc f9 ff ff e8 cf e3 RSP: 0018:ffff888048d6fb08 EFLAGS: 00010012 RAX: 00000000000021a9 RBX: 0000000000000000 RCX: ffffc90006c49000 RDX: 0000000000040000 RSI: ffffffff811a8429 RDI: 0000000000000005 RBP: 0000000000000040 R08: 0000000000000001 R09: ffff8880479fe137 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880479fe130 R13: ffff88800ec34000 R14: ffff8880479fe178 R15: ffff8880479fe138 FS: 00007fc10b503700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc10b503718 CR3: 000000001dd84000 CR4: 0000000000350ef0 Call Trace: __queue_delayed_work+0x1c8/0x270 kernel/workqueue.c:1651 queue_delayed_work_on+0xd5/0xe0 kernel/workqueue.c:1687 queue_delayed_work include/linux/workqueue.h:522 [inline] hci_conn_drop include/net/bluetooth/hci_core.h:1159 [inline] hci_conn_drop include/net/bluetooth/hci_core.h:1129 [inline] l2cap_chan_del+0x3a2/0xf30 net/bluetooth/l2cap_core.c:668 l2cap_chan_close+0xd2/0xa60 net/bluetooth/l2cap_core.c:853 l2cap_sock_shutdown+0x3c0/0xee0 net/bluetooth/l2cap_sock.c:1376 __sys_shutdown_sock net/socket.c:2195 [inline] __sys_shutdown_sock net/socket.c:2189 [inline] __sys_shutdown+0xf4/0x1c0 net/socket.c:2207 __do_sys_shutdown net/socket.c:2215 [inline] __se_sys_shutdown net/socket.c:2213 [inline] __x64_sys_shutdown+0x50/0x80 net/socket.c:2213 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xc6 RIP: 0033:0x7fc10dfaeb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc10b503188 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 RAX: ffffffffffffffda RBX: 00007fc10e0c2020 RCX: 00007fc10dfaeb19 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 RBP: 00007fc10e008f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd7f4c5cff R14: 00007fc10b503300 R15: 0000000000022000 irq event stamp: 42 hardirqs last enabled at (41): [] __cancel_work kernel/workqueue.c:3236 [inline] hardirqs last enabled at (41): [] cancel_delayed_work+0x24d/0x2b0 kernel/workqueue.c:3258 hardirqs last disabled at (42): [] queue_delayed_work_on+0xa8/0xe0 kernel/workqueue.c:1684 softirqs last enabled at (36): [] l2cap_sock_teardown_cb+0x1dc/0x420 net/bluetooth/l2cap_sock.c:1593 softirqs last disabled at (34): [] spin_lock_bh include/linux/spinlock.h:359 [inline] softirqs last disabled at (34): [] release_sock+0x1b/0x1b0 net/core/sock.c:3081 ---[ end trace 5eb4283ef3f8e6ed ]--- EXT4-fs error (device loop6): ext4_fill_super:4962: inode #2: comm syz-executor.6: iget: special inode unallocated EXT4-fs (loop6): get root inode failed EXT4-fs (loop6): mount failed