------------[ cut here ]------------
workqueue: cannot queue hci_cmd_timeout on wq hci1
WARNING: CPU: 1 PID: 30 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 kernel/workqueue.c:2254
Modules linked in:
CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__queue_work+0xd03/0x1160 kernel/workqueue.c:2254
Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 80 00 ac 8b e8 1e 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 6f 7f 38 00 90 0f 0b 90 e9 b4 f5 ff
RSP: 0018:ffffc90000a08be8 EFLAGS: 00010082
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358
RDX: ffff88801eada440 RSI: ffffffff817a3365 RDI: 0000000000000001
RBP: ffff8880367b4970 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014118f
R13: 0000000000000101 R14: ffffffff81832500 R15: ffff888029609178
FS: 0000000000000000(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555895ef5c8 CR3: 0000000054af3000 CR4: 00000000003526f0
Call Trace:
call_timer_fn+0x19a/0x620 kernel/time/timer.c:1747
expire_timers kernel/time/timer.c:1793 [inline]
__run_timers+0x569/0x960 kernel/time/timer.c:2372
__run_timer_base kernel/time/timer.c:2384 [inline]
__run_timer_base kernel/time/timer.c:2376 [inline]
run_timer_base+0x114/0x190 kernel/time/timer.c:2393
run_timer_softirq+0x1a/0x40 kernel/time/timer.c:2403
handle_softirqs+0x216/0x8e0 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1050
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0x9a2/0xc60 kernel/printk/printk.c:3227
Code: 00 e8 12 da 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c0 ee 20 00 48 85 db 0f 85 55 01 00 00 e8 42 f3 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 87 4b 87
RSP: 0018:ffffc90000a679c8 EFLAGS: 00000293
RAX: ffffffff8f2ec278 RBX: 0000000000000000 RCX: ffffffff819a9fd0
RDX: ffff88801eada440 RSI: ffffffff819a9fde RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ec278
R13: ffffffff8f2ec220 R14: ffffc90000a67a58 R15: dffffc0000000000
__console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
console_unlock+0xd8/0x210 kernel/printk/printk.c:3325
vprintk_emit+0x418/0x6d0 kernel/printk/printk.c:2450
_printk+0xc7/0x100 kernel/printk/printk.c:2475
kauditd_printk_skb kernel/audit.c:546 [inline]
kauditd_hold_skb+0x205/0x250 kernel/audit.c:581
kauditd_send_queue+0x236/0x290 kernel/audit.c:766
kauditd_thread+0x623/0xa70 kernel/audit.c:890
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess):
0: 00 e8 add %ch,%al
2: 12 da adc %dl,%bl
4: 28 00 sub %al,(%rax)
6: 9c pushf
7: 5b pop %rbx
8: 81 e3 00 02 00 00 and $0x200,%ebx
e: 31 ff xor %edi,%edi
10: 48 89 de mov %rbx,%rsi
13: e8 c0 ee 20 00 call 0x20eed8
18: 48 85 db test %rbx,%rbx
1b: 0f 85 55 01 00 00 jne 0x176
21: e8 42 f3 20 00 call 0x20f368
26: fb sti
27: 4c 89 e0 mov %r12,%rax
* 2a: 48 c1 e8 03 shr $0x3,%rax <-- trapping instruction
2e: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1)
33: 0f 84 11 ff ff ff je 0xffffff4a
39: 4c 89 e7 mov %r12,%rdi
3c: e8 .byte 0xe8
3d: 87 4b 87 xchg %ecx,-0x79(%rbx)