Bluetooth: hci0: command 0x0409 tx timeout
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4176 at kernel/workqueue.c:1449 __queue_work+0x105c/0x12c4 kernel/workqueue.c:1449
Modules linked in:
CPU: 0 PID: 4176 Comm: kworker/0:9 Not tainted 5.15.102-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: events hci_cmd_timeout
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __queue_work+0x105c/0x12c4 kernel/workqueue.c:1449
lr : __queue_work+0x105c/0x12c4 kernel/workqueue.c:1449
sp : ffff80001d3d7a40
x29: ffff80001d3d7a80 x28: ffff0001b47f4500 x27: 0000000000000008
x26: ffff0000d9a49800 x25: dfff800000000000 x24: ffff0000d9a499c0
x23: 0000000000000000 x22: ffff0000cd82d048 x21: 1fffe00019b05a09
x20: 00000000000b0012 x19: ffff00010a43cb30 x18: 1fffe000368fc58e
x17: 1fffe000368fc58e x16: ffff8000082eebe4 x15: ffff800014a5f8e0
x14: 1ffff0000293806a x13: ffffffffffffffff x12: 0000000000000000
x11: ff80800008207508 x10: 0000000000000000 x9 : ffff800008207508
x8 : ffff0000cd82d040 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff8000082063b8
x2 : ffff00010a43cb30 x1 : 0000000000200000 x0 : 0000000000000000
Call trace:
 __queue_work+0x105c/0x12c4 kernel/workqueue.c:1449
 queue_work_on+0xc4/0x17c kernel/workqueue.c:1555
 queue_work include/linux/workqueue.h:501 [inline]
 hci_cmd_timeout+0x170/0x1c8 net/bluetooth/hci_core.c:2787
 process_one_work+0x84c/0x14b8 kernel/workqueue.c:2306
 worker_thread+0x910/0x1034 kernel/workqueue.c:2453
 kthread+0x37c/0x45c kernel/kthread.c:319
 ret_from_fork+0x10/0x20 <unknown>:870
irq event stamp: 49942
hardirqs last  enabled at (49941): [<ffff80000826cb4c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1337 [inline]
hardirqs last  enabled at (49941): [<ffff80000826cb4c>] finish_lock_switch+0xbc/0x1e8 kernel/sched/core.c:4777
hardirqs last disabled at (49942): [<ffff8000082063ac>] queue_work_on+0x7c/0x17c kernel/workqueue.c:1552
softirqs last  enabled at (49916): [<ffff80000d66c5e8>] spin_unlock_bh include/linux/spinlock.h:408 [inline]
softirqs last  enabled at (49916): [<ffff80000d66c5e8>] nsim_dev_trap_report drivers/net/netdevsim/dev.c:739 [inline]
softirqs last  enabled at (49916): [<ffff80000d66c5e8>] nsim_dev_trap_report_work+0x610/0x90c drivers/net/netdevsim/dev.c:765
softirqs last disabled at (49914): [<ffff80000d66c564>] spin_lock_bh include/linux/spinlock.h:368 [inline]
softirqs last disabled at (49914): [<ffff80000d66c564>] nsim_dev_trap_report drivers/net/netdevsim/dev.c:735 [inline]
softirqs last disabled at (49914): [<ffff80000d66c564>] nsim_dev_trap_report_work+0x58c/0x90c drivers/net/netdevsim/dev.c:765
---[ end trace 42772e876f123116 ]---