program:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0x9216, 0x48c2, 0x40, 0x6}}}}, 0xe)
[ 74.092499][ T4666] Bluetooth: hci0: command tx timeout
[ 74.366730][ T5320] ------------[ cut here ]------------
[ 74.383006][ T5320] WARNING: CPU: 0 PID: 5320 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50
[ 74.386286][ T5320] Modules linked in:
[ 74.387687][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0
[ 74.401838][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.409917][ T5320] RIP: 0010:__queue_work+0xcd3/0xf50
[ 74.414848][ T5320] Code: ff e8 81 d7 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 73 d7 37 00 eb 13 e8 6c d7 37 00 eb 0c e8 65 d7 37 00 eb 05 e8 5e d7 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 74.425884][ T5320] RSP: 0018:ffffc9000d3c7a88 EFLAGS: 00010087
[ 74.428290][ T5320] RAX: ffffffff81879564 RBX: ffff888000bba440 RCX: 0000000000100000
[ 74.440997][ T5320] RDX: ffffc9000eddb000 RSI: 00000000000000b6 RDI: 00000000000000b7
[ 74.444050][ T5320] RBP: 0000000000000000 R08: ffffffff818789c4 R09: 0000000000000000
[ 74.447197][ T5320] R10: ffffc9000d3c7b60 R11: fffff52001a78f6d R12: ffff888043d2f000
[ 74.450376][ T5320] R13: ffff888043d2f1c0 R14: dffffc0000000000 R15: 0000000000000008
[ 74.453892][ T5320] FS: 00007f3b0c7206c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 74.457857][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.476582][ T5320] CR2: 00007f3b0c71ffe0 CR3: 0000000040f28000 CR4: 0000000000352ef0
[ 74.491531][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 74.494884][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 74.498845][ T5320] Call Trace:
[ 74.500302][ T5320]
[ 74.501357][ T5320] ? __warn+0x165/0x4d0
[ 74.502862][ T5320] ? __queue_work+0xcd3/0xf50
[ 74.504568][ T5320] ? report_bug+0x2b3/0x500
[ 74.506234][ T5320] ? __queue_work+0xcd3/0xf50
[ 74.508135][ T5320] ? handle_bug+0x60/0x90
[ 74.513157][ T5320] ? exc_invalid_op+0x1a/0x50
[ 74.515809][ T5320] ? asm_exc_invalid_op+0x1a/0x20
[ 74.517930][ T5320] ? __queue_work+0x124/0xf50
[ 74.536075][ T5320] ? __queue_work+0xcc4/0xf50
[ 74.538542][ T5320] ? __queue_work+0xcd3/0xf50
[ 74.540973][ T5320] ? __queue_work+0xcc4/0xf50
[ 74.542702][ T5320] queue_work_on+0x1c2/0x380
[ 74.544394][ T5320] ? __pfx_queue_work_on+0x10/0x10
[ 74.546151][ T5320] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 74.548204][ T5320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 74.552625][ T5320] ? skb_queue_tail+0x36/0x120
[ 74.554648][ T5320] hci_recv_frame+0x598/0x6f0
[ 74.556600][ T5320] vhci_write+0x35a/0x490
[ 74.572945][ T5320] vfs_write+0xacf/0xd10
[ 74.575485][ T5320] ? __pfx_vhci_write+0x10/0x10
[ 74.578067][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 74.592806][ T5320] ? __fget_files+0x2a/0x410
[ 74.594433][ T5320] ? __fget_files+0x2a/0x410
[ 74.596083][ T5320] ksys_write+0x18f/0x2b0
[ 74.597626][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 74.599356][ T5320] ? exc_page_fault+0x590/0x8b0
[ 74.601112][ T5320] ? do_syscall_64+0xb6/0x230
[ 74.602745][ T5320] do_syscall_64+0xf3/0x230
[ 74.604296][ T5320] ? clear_bhb_loop+0x35/0x90
[ 74.605951][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.608026][ T5320] RIP: 0033:0x7f3b0b98b7df
[ 74.609556][ T5320] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 74.636348][ T5320] RSP: 002b:00007f3b0c720000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 74.639270][ T5320] RAX: ffffffffffffffda RBX: 00007f3b0bba6080 RCX: 00007f3b0b98b7df
[ 74.658056][ T5320] RDX: 000000000000000e RSI: 0000000020000540 RDI: 00000000000000ca
[ 74.661334][ T5320] RBP: 00007f3b0ba0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 74.664041][ T5320] R10: 0000000020000540 R11: 0000000000000293 R12: 0000000000000000
[ 74.666748][ T5320] R13: 0000000000000001 R14: 00007f3b0bba6080 R15: 00007fff56137998
[ 74.669602][ T5320]
[ 74.671762][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.676055][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0
[ 74.680932][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.690461][ T5320] Call Trace:
[ 74.691945][ T5320]
[ 74.693085][ T5320] dump_stack_lvl+0x241/0x360
[ 74.707674][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.710255][ T5320] ? __pfx__printk+0x10/0x10
[ 74.711949][ T5320] ? _printk+0xd5/0x120
[ 74.713426][ T5320] ? __init_begin+0x41000/0x41000
[ 74.715241][ T5320] ? vscnprintf+0x5d/0x90
[ 74.716795][ T5320] panic+0x349/0x880
[ 74.718198][ T5320] ? __warn+0x174/0x4d0
[ 74.720159][ T5320] ? __pfx_panic+0x10/0x10
[ 74.725808][ T5320] __warn+0x344/0x4d0
[ 74.730916][ T5320] ? __queue_work+0xcd3/0xf50
[ 74.737032][ T5320] report_bug+0x2b3/0x500
[ 74.742037][ T5320] ? __queue_work+0xcd3/0xf50
[ 74.750256][ T5320] handle_bug+0x60/0x90
[ 74.765377][ T5320] exc_invalid_op+0x1a/0x50
[ 74.767864][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 74.770086][ T5320] RIP: 0010:__queue_work+0xcd3/0xf50
[ 74.772002][ T5320] Code: ff e8 81 d7 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 73 d7 37 00 eb 13 e8 6c d7 37 00 eb 0c e8 65 d7 37 00 eb 05 e8 5e d7 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 74.778855][ T5320] RSP: 0018:ffffc9000d3c7a88 EFLAGS: 00010087
[ 74.795457][ T5320] RAX: ffffffff81879564 RBX: ffff888000bba440 RCX: 0000000000100000
[ 74.800129][ T5320] RDX: ffffc9000eddb000 RSI: 00000000000000b6 RDI: 00000000000000b7
[ 74.805194][ T5320] RBP: 0000000000000000 R08: ffffffff818789c4 R09: 0000000000000000
[ 74.814985][ T5320] R10: ffffc9000d3c7b60 R11: fffff52001a78f6d R12: ffff888043d2f000
[ 74.818125][ T5320] R13: ffff888043d2f1c0 R14: dffffc0000000000 R15: 0000000000000008
[ 74.836977][ T5320] ? __queue_work+0x124/0xf50
[ 74.838995][ T5320] ? __queue_work+0xcc4/0xf50
[ 74.841535][ T5320] ? __queue_work+0xcc4/0xf50
[ 74.843777][ T5320] queue_work_on+0x1c2/0x380
[ 74.846300][ T5320] ? __pfx_queue_work_on+0x10/0x10
[ 74.849839][ T5320] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 74.852226][ T5320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 74.854813][ T5320] ? skb_queue_tail+0x36/0x120
[ 74.872057][ T5320] hci_recv_frame+0x598/0x6f0
[ 74.873956][ T5320] vhci_write+0x35a/0x490
[ 74.875679][ T5320] vfs_write+0xacf/0xd10
[ 74.882906][ T5320] ? __pfx_vhci_write+0x10/0x10
[ 74.884638][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 74.886309][ T5320] ? __fget_files+0x2a/0x410
[ 74.887937][ T5320] ? __fget_files+0x2a/0x410
[ 74.889535][ T5320] ksys_write+0x18f/0x2b0
[ 74.891062][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 74.910943][ T5320] ? exc_page_fault+0x590/0x8b0
[ 74.913826][ T5320] ? do_syscall_64+0xb6/0x230
[ 74.915847][ T5320] do_syscall_64+0xf3/0x230
[ 74.922594][ T5320] ? clear_bhb_loop+0x35/0x90
[ 74.928954][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.934409][ T5320] RIP: 0033:0x7f3b0b98b7df
[ 74.937163][ T5320] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 74.964948][ T5320] RSP: 002b:00007f3b0c720000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 74.982362][ T5320] RAX: ffffffffffffffda RBX: 00007f3b0bba6080 RCX: 00007f3b0b98b7df
[ 74.985625][ T5320] RDX: 000000000000000e RSI: 0000000020000540 RDI: 00000000000000ca
[ 74.990204][ T5320] RBP: 00007f3b0ba0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 74.995929][ T5320] R10: 0000000020000540 R11: 0000000000000293 R12: 0000000000000000
[ 74.999088][ T5320] R13: 0000000000000001 R14: 00007f3b0bba6080 R15: 00007fff56137998
[ 75.009364][ T5320]
[ 75.013304][ T5320] Kernel Offset: disabled
[ 75.024037][ T5320] Rebooting in 86400 seconds..