------------[ cut here ]------------ workqueue: cannot queue hci_cmd_timeout on wq hci1 WARNING: CPU: 0 PID: 26464 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0 kernel/workqueue.c:2254 Modules linked in: CPU: 0 UID: 0 PID: 26464 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:__queue_work+0xd38/0xfb0 kernel/workqueue.c:2254 Code: 42 80 3c 20 00 74 08 4c 89 ef e8 03 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 e0 de 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 7a 9d 35 00 90 0f 0b 90 e9 dd fc ff RSP: 0018:ffffc90000007bb0 EFLAGS: 00010046 RAX: d3118c0006013900 RBX: 0000000000000100 RCX: ffff88802ecb8000 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 RBP: 1ffff1100f525038 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 R13: ffff888055a4c988 R14: 0000000000000008 R15: ffff88807a928178 FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f92e8bc7dac CR3: 000000000df36000 CR4: 00000000003526f0 Call Trace: call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1793 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x646/0x860 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x283/0x870 kernel/softirq.c:579 do_softirq+0xec/0x180 kernel/softirq.c:480 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407 ieee80211_rx_bss_info net/mac80211/ibss.c:1166 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1573 [inline] ieee80211_ibss_rx_queued_mgmt+0x11e5/0x2ae0 net/mac80211/ibss.c:1600 ieee80211_iface_process_skb net/mac80211/iface.c:1699 [inline] ieee80211_iface_work+0x85f/0x12d0 net/mac80211/iface.c:1753 cfg80211_wiphy_work+0x2b8/0x470 net/wireless/core.c:435 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245