program:
r0 = io_uring_setup(0x1d68, &(0x7f00000004c0)={0x0, 0x14a0, 0x40, 0x3, 0x201})
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000005c0)={&(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x6e1baa52}, 0x1}, 0x1) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x401c5820, &(0x7f0000000000)=@v2={0x2, @aes128, 0x0, '\x00', @c}) (async, rerun: 32)
write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0xa483, 0x8, '9P2000.u'}, 0x15) (async, rerun: 32)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7)
[ 68.744027][ T5302] Bluetooth: hci0: command tx timeout
[ 68.814723][ T5315] ------------[ cut here ]------------
[ 68.816710][ T5315] WARNING: CPU: 0 PID: 5315 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50
[ 68.820047][ T5315] Modules linked in:
[ 68.821487][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[ 68.824866][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.828573][ T5315] RIP: 0010:__queue_work+0xcd3/0xf50
[ 68.830520][ T5315] Code: ff e8 11 ee 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 03 ee 37 00 eb 13 e8 fc ed 37 00 eb 0c e8 f5 ed 37 00 eb 05 e8 ee ed 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 68.838815][ T5315] RSP: 0018:ffffc9000d427a88 EFLAGS: 00010093
[ 68.841016][ T5315] RAX: ffffffff81679624 RBX: ffff88801f1fc880 RCX: ffff88801f1fc880
[ 68.844062][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 68.847014][ T5315] RBP: 0000000000000000 R08: ffffffff81678a84 R09: 0000000000000000
[ 68.849851][ T5315] R10: ffffc9000d427b60 R11: fffff52001a84f6d R12: ffff888043e2d800
[ 68.852730][ T5315] R13: ffff888043e2d9c0 R14: dffffc0000000000 R15: 0000000000000008
[ 68.855591][ T5315] FS: 00007fa4985c16c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 68.859564][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.862045][ T5315] CR2: 000055555d29a7c8 CR3: 00000000403b4000 CR4: 0000000000352ef0
[ 68.864960][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.867842][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.870707][ T5315] Call Trace:
[ 68.871942][ T5315]
[ 68.873005][ T5315] ? __warn+0x165/0x4d0
[ 68.874645][ T5315] ? __queue_work+0xcd3/0xf50
[ 68.876421][ T5315] ? report_bug+0x2b3/0x500
[ 68.878076][ T5315] ? __queue_work+0xcd3/0xf50
[ 68.879864][ T5315] ? handle_bug+0x60/0x90
[ 68.881596][ T5315] ? exc_invalid_op+0x1a/0x50
[ 68.883460][ T5315] ? asm_exc_invalid_op+0x1a/0x20
[ 68.885251][ T5315] ? __queue_work+0x124/0xf50
[ 68.886983][ T5315] ? __queue_work+0xcc4/0xf50
[ 68.888817][ T5315] ? __queue_work+0xcd3/0xf50
[ 68.890517][ T5315] ? __queue_work+0xcc4/0xf50
[ 68.892240][ T5315] queue_work_on+0x1c2/0x380
[ 68.893817][ T5315] ? __pfx_queue_work_on+0x10/0x10
[ 68.895779][ T5315] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 68.897989][ T5315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 68.900564][ T5315] ? skb_queue_tail+0x36/0x120
[ 68.902526][ T5315] hci_recv_frame+0x598/0x6f0
[ 68.904254][ T5315] vhci_write+0x35a/0x490
[ 68.905724][ T5315] vfs_write+0xaeb/0xd30
[ 68.907126][ T5315] ? __pfx_vhci_write+0x10/0x10
[ 68.908785][ T5315] ? __pfx_vfs_write+0x10/0x10
[ 68.910514][ T5315] ? __fget_files+0x2a/0x410
[ 68.912145][ T5315] ? __fget_files+0x2a/0x410
[ 68.913890][ T5315] ksys_write+0x18f/0x2b0
[ 68.915523][ T5315] ? __pfx_ksys_write+0x10/0x10
[ 68.917486][ T5315] ? do_syscall_64+0x100/0x230
[ 68.919371][ T5315] ? do_syscall_64+0xb6/0x230
[ 68.921137][ T5315] do_syscall_64+0xf3/0x230
[ 68.922691][ T5315] ? clear_bhb_loop+0x35/0x90
[ 68.924555][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.926579][ T5315] RIP: 0033:0x7fa4977847df
[ 68.928165][ T5315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 68.935083][ T5315] RSP: 002b:00007fa4985c1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 68.938644][ T5315] RAX: ffffffffffffffda RBX: 00007fa497975fa0 RCX: 00007fa4977847df
[ 68.941440][ T5315] RDX: 0000000000000007 RSI: 00000000200006c0 RDI: 00000000000000ca
[ 68.944297][ T5315] RBP: 00007fa497801b08 R08: 0000000000000000 R09: 0000000000000000
[ 68.947173][ T5315] R10: 00000000200006c0 R11: 0000000000000293 R12: 0000000000000000
[ 68.950000][ T5315] R13: 0000000000000000 R14: 00007fa497975fa0 R15: 00007fffaff5c018
[ 68.952916][ T5315]
[ 68.954128][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 68.956809][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[ 68.960128][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.963978][ T5315] Call Trace:
[ 68.965168][ T5315]
[ 68.966200][ T5315] dump_stack_lvl+0x241/0x360
[ 68.967921][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.969729][ T5315] ? __pfx__printk+0x10/0x10
[ 68.971320][ T5315] ? _printk+0xd5/0x120
[ 68.972684][ T5315] ? __init_begin+0x41000/0x41000
[ 68.974586][ T5315] ? vscnprintf+0x5d/0x90
[ 68.976411][ T5315] panic+0x349/0x880
[ 68.977888][ T5315] ? __warn+0x174/0x4d0
[ 68.979360][ T5315] ? __pfx_panic+0x10/0x10
[ 68.980918][ T5315] __warn+0x344/0x4d0
[ 68.982391][ T5315] ? __queue_work+0xcd3/0xf50
[ 68.984131][ T5315] report_bug+0x2b3/0x500
[ 68.985864][ T5315] ? __queue_work+0xcd3/0xf50
[ 68.987466][ T5315] handle_bug+0x60/0x90
[ 68.989077][ T5315] exc_invalid_op+0x1a/0x50
[ 68.990743][ T5315] asm_exc_invalid_op+0x1a/0x20
[ 68.992725][ T5315] RIP: 0010:__queue_work+0xcd3/0xf50
[ 68.994680][ T5315] Code: ff e8 11 ee 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 03 ee 37 00 eb 13 e8 fc ed 37 00 eb 0c e8 f5 ed 37 00 eb 05 e8 ee ed 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 69.002138][ T5315] RSP: 0018:ffffc9000d427a88 EFLAGS: 00010093
[ 69.004362][ T5315] RAX: ffffffff81679624 RBX: ffff88801f1fc880 RCX: ffff88801f1fc880
[ 69.007352][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 69.010826][ T5315] RBP: 0000000000000000 R08: ffffffff81678a84 R09: 0000000000000000
[ 69.014045][ T5315] R10: ffffc9000d427b60 R11: fffff52001a84f6d R12: ffff888043e2d800
[ 69.016910][ T5315] R13: ffff888043e2d9c0 R14: dffffc0000000000 R15: 0000000000000008
[ 69.019683][ T5315] ? __queue_work+0x124/0xf50
[ 69.021334][ T5315] ? __queue_work+0xcc4/0xf50
[ 69.023028][ T5315] ? __queue_work+0xcc4/0xf50
[ 69.024580][ T5315] queue_work_on+0x1c2/0x380
[ 69.026228][ T5315] ? __pfx_queue_work_on+0x10/0x10
[ 69.028107][ T5315] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 69.030201][ T5315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 69.032421][ T5315] ? skb_queue_tail+0x36/0x120
[ 69.034085][ T5315] hci_recv_frame+0x598/0x6f0
[ 69.035713][ T5315] vhci_write+0x35a/0x490
[ 69.037355][ T5315] vfs_write+0xaeb/0xd30
[ 69.039206][ T5315] ? __pfx_vhci_write+0x10/0x10
[ 69.041309][ T5315] ? __pfx_vfs_write+0x10/0x10
[ 69.043227][ T5315] ? __fget_files+0x2a/0x410
[ 69.045064][ T5315] ? __fget_files+0x2a/0x410
[ 69.046774][ T5315] ksys_write+0x18f/0x2b0
[ 69.048297][ T5315] ? __pfx_ksys_write+0x10/0x10
[ 69.050054][ T5315] ? do_syscall_64+0x100/0x230
[ 69.051911][ T5315] ? do_syscall_64+0xb6/0x230
[ 69.053448][ T5315] do_syscall_64+0xf3/0x230
[ 69.054948][ T5315] ? clear_bhb_loop+0x35/0x90
[ 69.057121][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.059631][ T5315] RIP: 0033:0x7fa4977847df
[ 69.061862][ T5315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 69.070687][ T5315] RSP: 002b:00007fa4985c1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 69.074498][ T5315] RAX: ffffffffffffffda RBX: 00007fa497975fa0 RCX: 00007fa4977847df
[ 69.077995][ T5315] RDX: 0000000000000007 RSI: 00000000200006c0 RDI: 00000000000000ca
[ 69.081511][ T5315] RBP: 00007fa497801b08 R08: 0000000000000000 R09: 0000000000000000
[ 69.084112][ T5315] R10: 00000000200006c0 R11: 0000000000000293 R12: 0000000000000000
[ 69.086891][ T5315] R13: 0000000000000000 R14: 00007fa497975fa0 R15: 00007fffaff5c018
[ 69.089830][ T5315]
[ 69.091282][ T5315] Kernel Offset: disabled
[ 69.093087][ T5315] Rebooting in 86400 seconds..