program:
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@none, 0x5, 0x1, 0x3, "ca7084", 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x3, 0x80, '\x00\\^', 0x539d}]}}}, 0x20)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7)
[ 69.335420][ T4666] Bluetooth: hci0: command tx timeout
[ 69.369498][ T5321] ------------[ cut here ]------------
[ 69.371676][ T5321] WARNING: CPU: 0 PID: 5321 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50
[ 69.375238][ T5321] Modules linked in:
[ 69.376822][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[ 69.380827][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.385048][ T5321] RIP: 0010:__queue_work+0xcd3/0xf50
[ 69.387111][ T5321] Code: ff e8 21 ec 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 13 ec 37 00 eb 13 e8 0c ec 37 00 eb 0c e8 05 ec 37 00 eb 05 e8 fe eb 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 69.394912][ T5321] RSP: 0018:ffffc9000d477a88 EFLAGS: 00010083
[ 69.397225][ T5321] RAX: ffffffff81679664 RBX: ffff888000ce4880 RCX: 0000000000100000
[ 69.400254][ T5321] RDX: ffffc9000eed1000 RSI: 000000000000007f RDI: 0000000000000080
[ 69.403155][ T5321] RBP: 0000000000000000 R08: ffffffff81678ac4 R09: 0000000000000000
[ 69.406173][ T5321] R10: ffffc9000d477b60 R11: fffff52001a8ef6d R12: ffff888043048800
[ 69.409308][ T5321] R13: ffff8880430489c0 R14: dffffc0000000000 R15: 0000000000000008
[ 69.412280][ T5321] FS: 00007fef1e43e6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 69.415999][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.418461][ T5321] CR2: 00007fef1e43dfe0 CR3: 000000004123e000 CR4: 0000000000352ef0
[ 69.421356][ T5321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.424313][ T5321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.427282][ T5321] Call Trace:
[ 69.428527][ T5321]
[ 69.429639][ T5321] ? __warn+0x165/0x4d0
[ 69.431177][ T5321] ? __queue_work+0xcd3/0xf50
[ 69.433077][ T5321] ? report_bug+0x2b3/0x500
[ 69.435162][ T5321] ? __queue_work+0xcd3/0xf50
[ 69.437167][ T5321] ? handle_bug+0x60/0x90
[ 69.438838][ T5321] ? exc_invalid_op+0x1a/0x50
[ 69.440617][ T5321] ? asm_exc_invalid_op+0x1a/0x20
[ 69.442491][ T5321] ? __queue_work+0x124/0xf50
[ 69.449691][ T5321] ? __queue_work+0xcc4/0xf50
[ 69.451483][ T5321] ? __queue_work+0xcd3/0xf50
[ 69.453327][ T5321] ? __queue_work+0xcc4/0xf50
[ 69.455137][ T5321] queue_work_on+0x1c2/0x380
[ 69.456917][ T5321] ? __pfx_queue_work_on+0x10/0x10
[ 69.458840][ T5321] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 69.460997][ T5321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 69.463588][ T5321] ? skb_queue_tail+0x36/0x120
[ 69.465576][ T5321] hci_recv_frame+0x598/0x6f0
[ 69.467700][ T5321] vhci_write+0x35a/0x490
[ 69.469622][ T5321] vfs_write+0xaeb/0xd30
[ 69.471470][ T5321] ? __pfx_vhci_write+0x10/0x10
[ 69.473384][ T5321] ? __pfx_vfs_write+0x10/0x10
[ 69.475287][ T5321] ? __fget_files+0x2a/0x410
[ 69.477078][ T5321] ? __fget_files+0x2a/0x410
[ 69.479008][ T5321] ksys_write+0x18f/0x2b0
[ 69.480639][ T5321] ? __pfx_ksys_write+0x10/0x10
[ 69.482651][ T5321] ? exc_page_fault+0x590/0x8b0
[ 69.484646][ T5321] ? do_syscall_64+0xb6/0x230
[ 69.486499][ T5321] do_syscall_64+0xf3/0x230
[ 69.488254][ T5321] ? clear_bhb_loop+0x35/0x90
[ 69.490086][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.492005][ T5321] RIP: 0033:0x7fef1d5847df
[ 69.493507][ T5321] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 69.499980][ T5321] RSP: 002b:00007fef1e43e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 69.502917][ T5321] RAX: ffffffffffffffda RBX: 00007fef1d776080 RCX: 00007fef1d5847df
[ 69.505732][ T5321] RDX: 0000000000000007 RSI: 00000000200006c0 RDI: 00000000000000ca
[ 69.508792][ T5321] RBP: 00007fef1d601b08 R08: 0000000000000000 R09: 0000000000000000
[ 69.511917][ T5321] R10: 00000000200006c0 R11: 0000000000000293 R12: 0000000000000000
[ 69.515383][ T5321] R13: 0000000000000001 R14: 00007fef1d776080 R15: 00007ffc0add6048
[ 69.518460][ T5321]
[ 69.519882][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 69.523194][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[ 69.527344][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.531540][ T5321] Call Trace:
[ 69.532783][ T5321]
[ 69.533984][ T5321] dump_stack_lvl+0x241/0x360
[ 69.535835][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.537869][ T5321] ? __pfx__printk+0x10/0x10
[ 69.539992][ T5321] ? _printk+0xd5/0x120
[ 69.541695][ T5321] ? __init_begin+0x41000/0x41000
[ 69.543779][ T5321] ? vscnprintf+0x5d/0x90
[ 69.545489][ T5321] panic+0x349/0x880
[ 69.547115][ T5321] ? __warn+0x174/0x4d0
[ 69.548550][ T5321] ? __pfx_panic+0x10/0x10
[ 69.550108][ T5321] __warn+0x344/0x4d0
[ 69.551686][ T5321] ? __queue_work+0xcd3/0xf50
[ 69.553532][ T5321] report_bug+0x2b3/0x500
[ 69.555180][ T5321] ? __queue_work+0xcd3/0xf50
[ 69.557022][ T5321] handle_bug+0x60/0x90
[ 69.558450][ T5321] exc_invalid_op+0x1a/0x50
[ 69.560074][ T5321] asm_exc_invalid_op+0x1a/0x20
[ 69.561758][ T5321] RIP: 0010:__queue_work+0xcd3/0xf50
[ 69.563699][ T5321] Code: ff e8 21 ec 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 13 ec 37 00 eb 13 e8 0c ec 37 00 eb 0c e8 05 ec 37 00 eb 05 e8 fe eb 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 69.570182][ T5321] RSP: 0018:ffffc9000d477a88 EFLAGS: 00010083
[ 69.572588][ T5321] RAX: ffffffff81679664 RBX: ffff888000ce4880 RCX: 0000000000100000
[ 69.575722][ T5321] RDX: ffffc9000eed1000 RSI: 000000000000007f RDI: 0000000000000080
[ 69.578726][ T5321] RBP: 0000000000000000 R08: ffffffff81678ac4 R09: 0000000000000000
[ 69.581784][ T5321] R10: ffffc9000d477b60 R11: fffff52001a8ef6d R12: ffff888043048800
[ 69.584817][ T5321] R13: ffff8880430489c0 R14: dffffc0000000000 R15: 0000000000000008
[ 69.587843][ T5321] ? __queue_work+0x124/0xf50
[ 69.589654][ T5321] ? __queue_work+0xcc4/0xf50
[ 69.591476][ T5321] ? __queue_work+0xcc4/0xf50
[ 69.593376][ T5321] queue_work_on+0x1c2/0x380
[ 69.595257][ T5321] ? __pfx_queue_work_on+0x10/0x10
[ 69.597223][ T5321] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 69.599498][ T5321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 69.601944][ T5321] ? skb_queue_tail+0x36/0x120
[ 69.603893][ T5321] hci_recv_frame+0x598/0x6f0
[ 69.605794][ T5321] vhci_write+0x35a/0x490
[ 69.607472][ T5321] vfs_write+0xaeb/0xd30
[ 69.609080][ T5321] ? __pfx_vhci_write+0x10/0x10
[ 69.610930][ T5321] ? __pfx_vfs_write+0x10/0x10
[ 69.612754][ T5321] ? __fget_files+0x2a/0x410
[ 69.614540][ T5321] ? __fget_files+0x2a/0x410
[ 69.616356][ T5321] ksys_write+0x18f/0x2b0
[ 69.618077][ T5321] ? __pfx_ksys_write+0x10/0x10
[ 69.619947][ T5321] ? exc_page_fault+0x590/0x8b0
[ 69.621858][ T5321] ? do_syscall_64+0xb6/0x230
[ 69.623870][ T5321] do_syscall_64+0xf3/0x230
[ 69.625694][ T5321] ? clear_bhb_loop+0x35/0x90
[ 69.627556][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.629856][ T5321] RIP: 0033:0x7fef1d5847df
[ 69.631614][ T5321] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 69.639092][ T5321] RSP: 002b:00007fef1e43e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 69.642051][ T5321] RAX: ffffffffffffffda RBX: 00007fef1d776080 RCX: 00007fef1d5847df
[ 69.644726][ T5321] RDX: 0000000000000007 RSI: 00000000200006c0 RDI: 00000000000000ca
[ 69.647442][ T5321] RBP: 00007fef1d601b08 R08: 0000000000000000 R09: 0000000000000000
[ 69.650157][ T5321] R10: 00000000200006c0 R11: 0000000000000293 R12: 0000000000000000
[ 69.653346][ T5321] R13: 0000000000000001 R14: 00007fef1d776080 R15: 00007ffc0add6048
[ 69.657259][ T5321]
[ 69.659073][ T5321] Kernel Offset: disabled
[ 69.660910][ T5321] Rebooting in 86400 seconds..