------------[ cut here ]------------ workqueue: cannot queue hci_cmd_timeout on wq hci4 WARNING: kernel/workqueue.c:2298 at __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296, CPU#0: syz.8.836/9050 Modules linked in: CPU: 0 UID: 0 PID: 9050 Comm: syz.8.836 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296 lr : __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296 sp : ffff80008e8d7b10 x29: ffff80008e8d7b50 x28: dfff800000000000 x27: ffff700011d1af84 x26: ffff0000d27cc800 x25: 0000000000000008 x24: ffff0000d27cc9c0 x23: dfff800000000000 x22: ffff0000cacb5708 x21: 0000000000000100 x20: ffff800089f06000 x19: ffff0000d80b0a70 x18: 1fffe00035c20e20 x17: ffff800125887000 x16: ffff80008e8d0000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000002047 x10: 0000000000ff0100 x9 : c9564283ebb5cc00 x8 : c9564283ebb5cc00 x7 : ffff8000804886d0 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f13b0 x2 : 0000000000000101 x1 : ffff0000cacb5700 x0 : 0000000000000000 Call trace: __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296 (P) delayed_work_timer_fn+0x74/0x90 kernel/workqueue.c:2527 call_timer_fn+0x19c/0xa4c kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1794 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x554/0x74c kernel/time/timer.c:2386 run_timer_base+0x84/0x1b8 kernel/time/timer.c:2395 run_timer_softirq+0x20/0x48 kernel/time/timer.c:2405 handle_softirqs+0x2e4/0xd34 kernel/softirq.c:622 __do_softirq+0x14/0x20 kernel/softirq.c:656 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:68 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:73 do_softirq+0x90/0xf8 kernel/softirq.c:523 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:214 spin_unlock_bh include/linux/spinlock.h:396 [inline] crypto_acomp_unlock_stream_bh include/crypto/internal/acompress.h:202 [inline] scomp_acomp_comp_decomp+0x6e0/0xa0c crypto/scompress.c:257 scomp_acomp_compress+0x24/0x34 crypto/scompress.c:280 crypto_acomp_compress+0x148/0x1c0 crypto/acompress.c:287 zswap_compress mm/zswap.c:874 [inline] zswap_store_page mm/zswap.c:1415 [inline] zswap_store+0x920/0x1bfc mm/zswap.c:1526 swap_writeout+0x4c4/0xdd0 mm/page_io.c:275 writeout mm/vmscan.c:632 [inline] pageout mm/vmscan.c:679 [inline] shrink_folio_list+0x2720/0x426c mm/vmscan.c:1400 reclaim_folio_list+0xe4/0x6f0 mm/vmscan.c:2171 reclaim_pages+0x3cc/0x4a8 mm/vmscan.c:2208 madvise_cold_or_pageout_pte_range+0x1968/0x2194 mm/madvise.c:563 walk_pmd_range mm/pagewalk.c:148 [inline] walk_pud_range mm/pagewalk.c:239 [inline] walk_p4d_range mm/pagewalk.c:280 [inline] walk_pgd_range+0xb04/0x1740 mm/pagewalk.c:321 __walk_page_range+0x148/0x650 mm/pagewalk.c:429 walk_page_range_vma_unsafe+0x2bc/0x364 mm/pagewalk.c:733 walk_page_range_vma+0x80/0x98 mm/pagewalk.c:743 madvise_pageout_page_range mm/madvise.c:622 [inline] madvise_pageout mm/madvise.c:647 [inline] madvise_vma_behavior+0x1e28/0x3348 mm/madvise.c:1358 madvise_walk_vmas+0x4b4/0x9a4 mm/madvise.c:1713 madvise_do_behavior+0x5f4/0x7c4 mm/madvise.c:1929 do_madvise+0x1ac/0x278 mm/madvise.c:2022 __do_sys_madvise mm/madvise.c:2031 [inline] __se_sys_madvise mm/madvise.c:2029 [inline] __arm64_sys_madvise+0xa4/0xc0 mm/madvise.c:2029 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x25c arch/arm64/kernel/entry-common.c:723 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:742 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 irq event stamp: 21079 hardirqs last enabled at (21078): [] handle_softirqs+0x1cc/0xd34 kernel/softirq.c:606 hardirqs last disabled at (21079): [] __raw_spin_lock_irq include/linux/spinlock_api_smp.h:140 [inline] hardirqs last disabled at (21079): [] _raw_spin_lock_irq+0x28/0x70 kernel/locking/spinlock.c:174 softirqs last enabled at (21076): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (21076): [] crypto_acomp_unlock_stream_bh include/crypto/internal/acompress.h:202 [inline] softirqs last enabled at (21076): [] scomp_acomp_comp_decomp+0x6e0/0xa0c crypto/scompress.c:257 softirqs last disabled at (21077): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---