------------[ cut here ]------------
workqueue: cannot queue hci_cmd_timeout on wq hci0
WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0 kernel/workqueue.c:2352, CPU#0: udevd/5320
Modules linked in:
CPU: 0 UID: 0 PID: 5320 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:__queue_work+0xd9f/0x10d0 kernel/workqueue.c:2352
Code: 49 81 c7 70 01 00 00 4c 8d 35 7d f9 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 5b 6b ab 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
RSP: 0018:ffffc90000007c00 EFLAGS: 00010046
RAX: 1ffff1100880894e RBX: dffffc0000000000 RCX: ffff888000210000
RDX: ffff88804408a170 RSI: ffffffff8ad99030 RDI: ffffffff907d5fa0
RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f512f
R10: dffffc0000000000 R11: ffffffff818e6d40 R12: 0000000000000008
R13: ffff888044044a58 R14: ffffffff907d5fa0 R15: ffff88804408a170
FS: 00007f2e561e9880(0000) GS:ffff88808c2bb000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e7792859f0 CR3: 000000004fe72000 CR4: 0000000000352ef0
Call Trace:
call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748
expire_timers kernel/time/timer.c:1794 [inline]
__run_timers kernel/time/timer.c:2374 [inline]
__run_timer_base+0x67e/0x8b0 kernel/time/timer.c:2386
run_timer_base kernel/time/timer.c:2395 [inline]
run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405
handle_softirqs+0x226/0x860 kernel/softirq.c:645
do_softirq+0x77/0xd0 kernel/softirq.c:546
__local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473
spin_unlock_bh include/linux/spinlock.h:407 [inline]
crypto_acomp_unlock_stream_bh include/crypto/internal/acompress.h:202 [inline]
scomp_acomp_comp_decomp+0x79c/0xab0 crypto/scompress.c:255
crypto_acomp_decompress+0x4c7/0xbd0 crypto/acompress.c:297
zswap_decompress+0x42f/0x850 mm/zswap.c:952
zswap_load+0x2f4/0x4c0 mm/zswap.c:1621
swap_read_folio+0x926/0x11c0 mm/page_io.c:480
swap_cache_read_folio+0x8b/0x120 mm/swap_state.c:658
swap_cluster_readahead+0x392/0x630 mm/swap_state.c:849
swapin_readahead+0x1a3/0xc50 mm/swap_state.c:997
do_swap_page+0x3fb/0x4c10 mm/memory.c:4971
handle_pte_fault mm/memory.c:6561 [inline]
__handle_mm_fault mm/memory.c:6707 [inline]
handle_mm_fault+0x1398/0x3750 mm/memory.c:6876
do_user_addr_fault+0xa4f/0x1340 arch/x86/mm/fault.c:1343
handle_page_fault arch/x86/mm/fault.c:1483 [inline]
exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f2e562c3e63
Code: 1f 84 00 00 00 00 00 53 be 30 01 00 00 bf 01 00 00 00 e8 b0 a8 ff ff 48 89 c3 48 85 c0 0f 84 c2 00 00 00 48 8d 05 39 c5 04 00 <8b> 00 f6 c4 01 0f 85 ba 00 00 00 48 8d 05 0b 97 04 00 f3 0f 7e 40
RSP: 002b:00007ffd05099850 EFLAGS: 00010202
RAX: 00007f2e5631039c RBX: 000055e779009180 RCX: 000055e779009238
RDX: 0000000000000138 RSI: 0000000000000000 RDI: 000055e779009280
RBP: 0000000000000001 R08: 00000000ffffffff R09: 0000000000000000
R10: 00007ffd05099d95 R11: 0000000000000000 R12: 000055e76a43595f
R13: 000055e76a446660 R14: 0000000000000000 R15: 00000000ffffffff
----------------
Code disassembly (best guess):
0: 49 81 c7 70 01 00 00 add $0x170,%r15
7: 4c 8d 35 7d f9 ee 0e lea 0xeeef97d(%rip),%r14 # 0xeeef98b
e: 48 89 f8 mov %rdi,%rax
11: 48 c1 e8 03 shr $0x3,%rax
15: 80 3c 18 00 cmpb $0x0,(%rax,%rbx,1)
19: 74 05 je 0x20
1b: e8 5b 6b ab 00 call 0xab6b7b
20: 49 8b 75 18 mov 0x18(%r13),%rsi
24: 4c 89 f7 mov %r14,%rdi
27: 4c 89 fa mov %r15,%rdx
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: 4c 89 e8 mov %r13,%rax
32: 48 c1 e8 03 shr $0x3,%rax
36: 80 3c 18 00 cmpb $0x0,(%rax,%rbx,1)
3a: 74 08 je 0x44
3c: 4c 89 ef mov %r13,%rdi
3f: e8 .byte 0xe8