program:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) (async)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xa0}}, 0x20000880)
[ 75.218870][ T5334] Bluetooth: hci0: command tx timeout
[ 75.260546][ T5355] ------------[ cut here ]------------
[ 75.263285][ T5355] workqueue: cannot queue hci_rx_work on wq hci0
[ 75.273772][ T5355] WARNING: CPU: 0 PID: 5355 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0
[ 75.278132][ T5355] Modules linked in:
[ 75.279859][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 75.283660][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.288157][ T5355] RIP: 0010:__queue_work+0xd38/0xfb0
[ 75.290387][ T5355] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 73 a5 9a 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 a9 8b 4c 89 fa e8 f9 38 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 2a a9 35 00 90 0f 0b 90 e9 dd fc ff
[ 75.298645][ T5355] RSP: 0018:ffffc9000d3afa70 EFLAGS: 00010046
[ 75.301281][ T5355] RAX: 3d15221e84cf1700 RBX: 0000000000000000 RCX: ffff888032c20000
[ 75.304469][ T5355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 75.307501][ T5355] RBP: 1ffff1100898a938 R08: ffff88801fc24253 R09: 1ffff11003f8484a
[ 75.310792][ T5355] R10: dffffc0000000000 R11: ffffed1003f8484b R12: dffffc0000000000
[ 75.314021][ T5355] R13: ffff888043c8cad8 R14: ffff888032c20000 R15: ffff888044c54978
[ 75.317309][ T5355] FS: 00007feb678996c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000
[ 75.321088][ T5355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.323771][ T5355] CR2: 0000000000000000 CR3: 0000000043787000 CR4: 0000000000352ef0
[ 75.327143][ T5355] Call Trace:
[ 75.328585][ T5355]
[ 75.329869][ T5355] ? rcu_is_watching+0x15/0xb0
[ 75.331952][ T5355] queue_work_on+0x181/0x270
[ 75.333992][ T5355] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.336320][ T5355] ? __pfx_queue_work_on+0x10/0x10
[ 75.338520][ T5355] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 75.341035][ T5355] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.343708][ T5355] ? skb_queue_tail+0x30/0xf0
[ 75.345797][ T5355] hci_recv_frame+0x625/0x7c0
[ 75.347697][ T5355] ? skb_pull+0xc1/0x1d0
[ 75.349503][ T5355] vhci_write+0x358/0x4a0
[ 75.351251][ T5355] vfs_write+0x5c9/0xb30
[ 75.352990][ T5355] ? __pfx_vhci_write+0x10/0x10
[ 75.355119][ T5355] ? __pfx_vfs_write+0x10/0x10
[ 75.357167][ T5355] ? __fget_files+0x2a/0x420
[ 75.359226][ T5355] ksys_write+0x145/0x250
[ 75.361102][ T5355] ? __pfx_ksys_write+0x10/0x10
[ 75.363189][ T5355] ? rcu_is_watching+0x15/0xb0
[ 75.365230][ T5355] ? do_syscall_64+0xbe/0x3b0
[ 75.367669][ T5355] do_syscall_64+0xfa/0x3b0
[ 75.369688][ T5355] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.371892][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.374446][ T5355] ? clear_bhb_loop+0x60/0xb0
[ 75.376555][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.379078][ T5355] RIP: 0033:0x7feb6698d97f
[ 75.380919][ T5355] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 75.389260][ T5355] RSP: 002b:00007feb67899000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 75.392851][ T5355] RAX: ffffffffffffffda RBX: 00007feb66be6090 RCX: 00007feb6698d97f
[ 75.396286][ T5355] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 00000000000000ca
[ 75.399698][ T5355] RBP: 00007feb66a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 75.403052][ T5355] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000000
[ 75.406560][ T5355] R13: 00007feb66be6128 R14: 00007feb66be6090 R15: 00007fffaa397de8
[ 75.410057][ T5355]
[ 75.411458][ T5355] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.414701][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 75.418353][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.422594][ T5355] Call Trace:
[ 75.424126][ T5355]
[ 75.425350][ T5355] dump_stack_lvl+0x99/0x250
[ 75.427540][ T5355] ? __asan_memcpy+0x40/0x70
[ 75.429491][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.431722][ T5355] ? __pfx__printk+0x10/0x10
[ 75.433796][ T5355] vpanic+0x281/0x750
[ 75.435594][ T5355] ? __pfx__printk+0x10/0x10
[ 75.437697][ T5355] ? __pfx_vpanic+0x10/0x10
[ 75.439751][ T5355] ? is_bpf_text_address+0x292/0x2b0
[ 75.442016][ T5355] panic+0xb9/0xc0
[ 75.443606][ T5355] ? __pfx_panic+0x10/0x10
[ 75.445411][ T5355] __warn+0x31b/0x4b0
[ 75.447128][ T5355] ? __queue_work+0xd38/0xfb0
[ 75.449260][ T5355] ? __queue_work+0xd38/0xfb0
[ 75.451376][ T5355] report_bug+0x2be/0x4f0
[ 75.453428][ T5355] ? __queue_work+0xd38/0xfb0
[ 75.455527][ T5355] ? __queue_work+0xd38/0xfb0
[ 75.457575][ T5355] ? __queue_work+0xd3a/0xfb0
[ 75.459598][ T5355] handle_bug+0x84/0x160
[ 75.461384][ T5355] exc_invalid_op+0x1a/0x50
[ 75.463365][ T5355] asm_exc_invalid_op+0x1a/0x20
[ 75.465459][ T5355] RIP: 0010:__queue_work+0xd38/0xfb0
[ 75.467716][ T5355] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 73 a5 9a 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 a9 8b 4c 89 fa e8 f9 38 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 2a a9 35 00 90 0f 0b 90 e9 dd fc ff
[ 75.475679][ T5355] RSP: 0018:ffffc9000d3afa70 EFLAGS: 00010046
[ 75.478189][ T5355] RAX: 3d15221e84cf1700 RBX: 0000000000000000 RCX: ffff888032c20000
[ 75.481537][ T5355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 75.484696][ T5355] RBP: 1ffff1100898a938 R08: ffff88801fc24253 R09: 1ffff11003f8484a
[ 75.487759][ T5355] R10: dffffc0000000000 R11: ffffed1003f8484b R12: dffffc0000000000
[ 75.491449][ T5355] R13: ffff888043c8cad8 R14: ffff888032c20000 R15: ffff888044c54978
[ 75.494606][ T5355] ? rcu_is_watching+0x15/0xb0
[ 75.496666][ T5355] queue_work_on+0x181/0x270
[ 75.498612][ T5355] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.500786][ T5355] ? __pfx_queue_work_on+0x10/0x10
[ 75.502888][ T5355] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 75.505374][ T5355] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 75.507957][ T5355] ? skb_queue_tail+0x30/0xf0
[ 75.509831][ T5355] hci_recv_frame+0x625/0x7c0
[ 75.511852][ T5355] ? skb_pull+0xc1/0x1d0
[ 75.513694][ T5355] vhci_write+0x358/0x4a0
[ 75.515479][ T5355] vfs_write+0x5c9/0xb30
[ 75.517355][ T5355] ? __pfx_vhci_write+0x10/0x10
[ 75.519505][ T5355] ? __pfx_vfs_write+0x10/0x10
[ 75.521594][ T5355] ? __fget_files+0x2a/0x420
[ 75.523529][ T5355] ksys_write+0x145/0x250
[ 75.525442][ T5355] ? __pfx_ksys_write+0x10/0x10
[ 75.527645][ T5355] ? rcu_is_watching+0x15/0xb0
[ 75.529677][ T5355] ? do_syscall_64+0xbe/0x3b0
[ 75.531468][ T5355] do_syscall_64+0xfa/0x3b0
[ 75.533250][ T5355] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.535509][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.538248][ T5355] ? clear_bhb_loop+0x60/0xb0
[ 75.540626][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.543184][ T5355] RIP: 0033:0x7feb6698d97f
[ 75.545525][ T5355] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 75.554007][ T5355] RSP: 002b:00007feb67899000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 75.557562][ T5355] RAX: ffffffffffffffda RBX: 00007feb66be6090 RCX: 00007feb6698d97f
[ 75.560810][ T5355] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 00000000000000ca
[ 75.564148][ T5355] RBP: 00007feb66a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 75.567281][ T5355] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000000
[ 75.570498][ T5355] R13: 00007feb66be6128 R14: 00007feb66be6090 R15: 00007fffaa397de8
[ 75.574037][ T5355]
[ 75.575650][ T5355] Kernel Offset: disabled
[ 75.577455][ T5355] Rebooting in 86400 seconds..