program: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) [ 76.873812][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.874019][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.028347][ C0] ------------[ cut here ]------------ [ 77.028364][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 77.028575][ C0] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#0: kswapd0/78 [ 77.038311][ C0] Modules linked in: [ 77.040025][ C0] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 77.043609][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.048244][ C0] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 77.050697][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 9d f9 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 7b 49 ab 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 77.059210][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046 [ 77.061951][ C0] RAX: 1ffff110087d594e RBX: dffffc0000000000 RCX: ffff888000222580 [ 77.065411][ C0] RDX: ffff88803fdc3170 RSI: ffffffff8ad80130 RDI: ffffffff907d37e0 [ 77.069401][ C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f4c4f [ 77.073381][ C0] R10: dffffc0000000000 R11: ffffffff818e4560 R12: 0000000000000008 [ 77.077770][ C0] R13: ffff888043eaca58 R14: ffffffff907d37e0 R15: ffff88803fdc3170 [ 77.081569][ C0] FS: 0000000000000000(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 77.085499][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.088499][ C0] CR2: 0000200000000040 CR3: 00000000506f0000 CR4: 0000000000352ef0 [ 77.092169][ C0] Call Trace: [ 77.093731][ C0] [ 77.095046][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.097429][ C0] call_timer_fn+0x18d/0x5f0 [ 77.099522][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 77.102120][ C0] ? call_timer_fn+0xd5/0x5f0 [ 77.104270][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 77.106573][ C0] ? do_raw_spin_unlock+0x4d/0x200 [ 77.108863][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 77.111387][ C0] __run_timer_base+0x67e/0x8b0 [ 77.113481][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 77.115858][ C0] ? ktime_get+0x1f5/0x220 [ 77.118707][ C0] ? lapic_next_event+0x11/0x20 [ 77.121111][ C0] run_timer_softirq+0xb7/0x170 [ 77.123160][ C0] handle_softirqs+0x226/0x860 [ 77.125093][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 77.127127][ C0] __irq_exit_rcu+0xcb/0x220 [ 77.128973][ C0] irq_exit_rcu+0x9/0x30 [ 77.130744][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 77.132990][ C0] [ 77.134230][ C0] [ 77.135611][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.138248][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 77.140537][ C0] Code: ff ff ff e8 50 25 44 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 70 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 29 47 0a cc 48 8d 3d 97 6c da [ 77.148790][ C0] RSP: 0018:ffffc90000b07200 EFLAGS: 00000296 [ 77.151413][ C0] RAX: 46e04bdab69c1000 RBX: 0000000000000001 RCX: 8000000000000001 [ 77.154768][ C0] RDX: ffff888000223158 RSI: ffffffff8e6a02af RDI: ffffffff8c6dc080 [ 77.158109][ C0] RBP: ffff888000222580 R08: 0000000000000008 R09: ffffffff96ba75a0 [ 77.161434][ C0] R10: 0000000052aac2cc R11: 00000000b9022b62 R12: ffff888044292e28 [ 77.164737][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 77.168156][ C0] _raw_spin_lock+0x2e/0x40 [ 77.170155][ C0] ? iput+0x228/0xf00 [ 77.171924][ C0] iput+0x228/0xf00 [ 77.173541][ C0] ? dentry_unlink_inode+0x333/0x3e0 [ 77.175899][ C0] dentry_kill+0x1b9/0x880 [ 77.177951][ C0] shrink_dentry_list+0x209/0x310 [ 77.180244][ C0] prune_dcache_sb+0x119/0x180 [ 77.182374][ C0] ? __pfx_prune_dcache_sb+0x10/0x10 [ 77.184771][ C0] ? list_lru_count_one+0x27/0x2c0 [ 77.187093][ C0] ? list_lru_count_one+0x27/0x2c0 [ 77.189281][ C0] ? list_lru_count_one+0x27/0x2c0 [ 77.191468][ C0] ? list_lru_count_one+0x264/0x2c0 [ 77.193675][ C0] super_cache_scan+0x35f/0x4a0 [ 77.195776][ C0] do_shrink_slab+0x6d0/0x10e0 [ 77.197979][ C0] shrink_slab+0x838/0x1220 [ 77.200001][ C0] ? shrink_slab+0x1e9/0x1220 [ 77.202121][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 77.204214][ C0] shrink_one+0x2a2/0x730 [ 77.206034][ C0] ? shrink_node+0x31a1/0x3e30 [ 77.208091][ C0] shrink_node+0x35d0/0x3e30 [ 77.210146][ C0] ? shrink_node+0x31a1/0x3e30 [ 77.212264][ C0] ? __lock_acquire+0x747/0x2de0 [ 77.214410][ C0] ? lock_acquire+0x115/0x350 [ 77.216325][ C0] ? percpu_ref_put+0x19/0x180 [ 77.218285][ C0] ? __pfx_shrink_node+0x10/0x10 [ 77.220285][ C0] ? percpu_ref_put+0x19/0x180 [ 77.222238][ C0] ? percpu_ref_put+0x19/0x180 [ 77.224359][ C0] ? mem_cgroup_iter+0x410/0x440 [ 77.226403][ C0] ? mem_cgroup_iter+0x3b/0x440 [ 77.228641][ C0] kswapd+0x185e/0x32c0 [ 77.230541][ C0] ? kswapd+0xa08/0x32c0 [ 77.232453][ C0] ? __pfx_kswapd+0x10/0x10 [ 77.234450][ C0] ? __lock_acquire+0x747/0x2de0 [ 77.236610][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 77.238997][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 77.241695][ C0] ? __kthread_parkme+0x71/0x1f0 [ 77.243881][ C0] ? __kthread_parkme+0x199/0x1f0 [ 77.245983][ C0] kthread+0x38b/0x480 [ 77.247809][ C0] ? __pfx_kswapd+0x10/0x10 [ 77.249706][ C0] ? __pfx_kthread+0x10/0x10 [ 77.251626][ C0] ret_from_fork+0x514/0xb70 [ 77.253520][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 77.255599][ C0] ? __switch_to+0xc89/0x1420 [ 77.257374][ C0] ? __pfx_kthread+0x10/0x10 [ 77.259402][ C0] ret_from_fork_asm+0x1a/0x30 [ 77.261512][ C0] [ 77.262821][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.265795][ C0] CPU: 0 UID: 0 PID: 78 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 77.269554][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.273997][ C0] Call Trace: [ 77.275574][ C0] [ 77.276882][ C0] vpanic+0x56d/0xa60 [ 77.278567][ C0] ? __pfx__printk+0x10/0x10 [ 77.280493][ C0] ? __pfx_vpanic+0x10/0x10 [ 77.282368][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 77.284578][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 77.286672][ C0] panic+0xc5/0xd0 [ 77.288557][ C0] ? __pfx_panic+0x10/0x10 [ 77.290483][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 77.292682][ C0] __warn+0x315/0x4c0 [ 77.294361][ C0] ? __queue_work+0xd83/0x10d0 [ 77.296388][ C0] ? __queue_work+0xd83/0x10d0 [ 77.298615][ C0] __report_bug+0x276/0x570 [ 77.301205][ C0] ? __queue_work+0xd83/0x10d0 [ 77.303251][ C0] ? __pfx___report_bug+0x10/0x10 [ 77.305372][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 77.307747][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.309876][ C0] ? look_up_lock_class+0x57/0x110 [ 77.312205][ C0] ? register_lock_class+0x31/0x2e0 [ 77.314490][ C0] report_bug_entry+0x19b/0x290 [ 77.316891][ C0] ? __queue_work+0xd9f/0x10d0 [ 77.319037][ C0] ? __queue_work+0xda4/0x10d0 [ 77.320972][ C0] handle_bug+0xce/0x200 [ 77.322749][ C0] exc_invalid_op+0x1a/0x50 [ 77.324620][ C0] asm_exc_invalid_op+0x1a/0x20 [ 77.326622][ C0] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 77.328835][ C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 9d f9 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 7b 49 ab 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 77.337079][ C0] RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046 [ 77.339798][ C0] RAX: 1ffff110087d594e RBX: dffffc0000000000 RCX: ffff888000222580 [ 77.343310][ C0] RDX: ffff88803fdc3170 RSI: ffffffff8ad80130 RDI: ffffffff907d37e0 [ 77.346791][ C0] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f4c4f [ 77.350227][ C0] R10: dffffc0000000000 R11: ffffffff818e4560 R12: 0000000000000008 [ 77.353687][ C0] R13: ffff888043eaca58 R14: ffffffff907d37e0 R15: ffff88803fdc3170 [ 77.357303][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 77.359850][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 77.362188][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.364525][ C0] call_timer_fn+0x18d/0x5f0 [ 77.366636][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 77.369285][ C0] ? call_timer_fn+0xd5/0x5f0 [ 77.371286][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 77.373420][ C0] ? do_raw_spin_unlock+0x4d/0x200 [ 77.375652][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 77.378104][ C0] __run_timer_base+0x67e/0x8b0 [ 77.380157][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 77.382517][ C0] ? ktime_get+0x1f5/0x220 [ 77.384393][ C0] ? lapic_next_event+0x11/0x20 [ 77.386573][ C0] run_timer_softirq+0xb7/0x170 [ 77.388686][ C0] handle_softirqs+0x226/0x860 [ 77.390761][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 77.392844][ C0] __irq_exit_rcu+0xcb/0x220 [ 77.394831][ C0] irq_exit_rcu+0x9/0x30 [ 77.396619][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 77.398889][ C0] [ 77.400153][ C0] [ 77.401403][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.403755][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 77.405921][ C0] Code: ff ff ff e8 50 25 44 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 70 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 29 47 0a cc 48 8d 3d 97 6c da [ 77.413908][ C0] RSP: 0018:ffffc90000b07200 EFLAGS: 00000296 [ 77.416886][ C0] RAX: 46e04bdab69c1000 RBX: 0000000000000001 RCX: 8000000000000001 [ 77.420298][ C0] RDX: ffff888000223158 RSI: ffffffff8e6a02af RDI: ffffffff8c6dc080 [ 77.423847][ C0] RBP: ffff888000222580 R08: 0000000000000008 R09: ffffffff96ba75a0 [ 77.427260][ C0] R10: 0000000052aac2cc R11: 00000000b9022b62 R12: ffff888044292e28 [ 77.430627][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 77.434143][ C0] _raw_spin_lock+0x2e/0x40 [ 77.436180][ C0] ? iput+0x228/0xf00 [ 77.437886][ C0] iput+0x228/0xf00 [ 77.439574][ C0] ? dentry_unlink_inode+0x333/0x3e0 [ 77.441905][ C0] dentry_kill+0x1b9/0x880 [ 77.443915][ C0] shrink_dentry_list+0x209/0x310 [ 77.446082][ C0] prune_dcache_sb+0x119/0x180 [ 77.448092][ C0] ? __pfx_prune_dcache_sb+0x10/0x10 [ 77.450424][ C0] ? list_lru_count_one+0x27/0x2c0 [ 77.452866][ C0] ? list_lru_count_one+0x27/0x2c0 [ 77.455181][ C0] ? list_lru_count_one+0x27/0x2c0 [ 77.457560][ C0] ? list_lru_count_one+0x264/0x2c0 [ 77.459822][ C0] super_cache_scan+0x35f/0x4a0 [ 77.461950][ C0] do_shrink_slab+0x6d0/0x10e0 [ 77.463956][ C0] shrink_slab+0x838/0x1220 [ 77.466036][ C0] ? shrink_slab+0x1e9/0x1220 [ 77.468395][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 77.470661][ C0] shrink_one+0x2a2/0x730 [ 77.472604][ C0] ? shrink_node+0x31a1/0x3e30 [ 77.474688][ C0] shrink_node+0x35d0/0x3e30 [ 77.476697][ C0] ? shrink_node+0x31a1/0x3e30 [ 77.478883][ C0] ? __lock_acquire+0x747/0x2de0 [ 77.481187][ C0] ? lock_acquire+0x115/0x350 [ 77.483284][ C0] ? percpu_ref_put+0x19/0x180 [ 77.485246][ C0] ? __pfx_shrink_node+0x10/0x10 [ 77.487407][ C0] ? percpu_ref_put+0x19/0x180 [ 77.489581][ C0] ? percpu_ref_put+0x19/0x180 [ 77.491722][ C0] ? mem_cgroup_iter+0x410/0x440 [ 77.493924][ C0] ? mem_cgroup_iter+0x3b/0x440 [ 77.496164][ C0] kswapd+0x185e/0x32c0 [ 77.498109][ C0] ? kswapd+0xa08/0x32c0 [ 77.500043][ C0] ? __pfx_kswapd+0x10/0x10 [ 77.502012][ C0] ? __lock_acquire+0x747/0x2de0 [ 77.504111][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 77.506578][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 77.509364][ C0] ? __kthread_parkme+0x71/0x1f0 [ 77.511620][ C0] ? __kthread_parkme+0x199/0x1f0 [ 77.514027][ C0] kthread+0x38b/0x480 [ 77.516035][ C0] ? __pfx_kswapd+0x10/0x10 [ 77.518216][ C0] ? __pfx_kthread+0x10/0x10 [ 77.520246][ C0] ret_from_fork+0x514/0xb70 [ 77.522324][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 77.524520][ C0] ? __switch_to+0xc89/0x1420 [ 77.526661][ C0] ? __pfx_kthread+0x10/0x10 [ 77.528709][ C0] ret_from_fork_asm+0x1a/0x30 [ 77.530918][ C0] [ 77.532742][ C0] Kernel Offset: disabled [ 77.534698][ C0] Rebooting in 86400 seconds..