------------[ cut here ]------------ workqueue: cannot queue hci_cmd_timeout on wq hci3 WARNING: CPU: 1 PID: 11260 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 kernel/workqueue.c:2256 Modules linked in: CPU: 1 UID: 0 PID: 11260 Comm: syz.2.1173 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__queue_work+0xd62/0xfe0 kernel/workqueue.c:2256 Code: 42 80 3c 20 00 74 08 4c 89 ef e8 c9 56 97 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 00 e9 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 a0 44 35 00 90 0f 0b 90 e9 dd fc ff RSP: 0000:ffffc90004b8fa48 EFLAGS: 00010046 RAX: c9c4e87e693d8300 RBX: 0000000000000100 RCX: ffff8880301d3c00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 RBP: 1ffff11006144538 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dffffc0000000000 R13: ffff888029598988 R14: 0000000000000008 R15: ffff888030a22978 FS: 000055555d58f500(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31312ff8 CR3: 0000000061c79000 CR4: 0000000000350ef0 Call Trace: call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747 expire_timers kernel/time/timer.c:1793 [inline] __run_timers kernel/time/timer.c:2372 [inline] __run_timer_base+0x646/0x860 kernel/time/timer.c:2384 run_timer_base kernel/time/timer.c:2393 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403 handle_softirqs+0x286/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0x57/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0033:0x7f3481267e00 Code: 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 8b 70 f8 48 89 08 <48> 8b 0b 49 8b 14 24 eb bf 48 39 f2 72 97 48 39 f0 73 46 49 89 34 RSP: 002b:00007ffd27de01c0 EFLAGS: 00000216 RAX: 00007f3480997548 RBX: 00007f3480997060 RCX: ffffffff8b689134 RDX: ffffffff8b689134 RSI: ffffffff8b689134 RDI: 00007f3480997eb8 RBP: 00007f34809966f0 R08: 00007f34809972d0 R09: 00007f34815a2000 R10: 00007f34805fd008 R11: 000000000000000d R12: 00007f34809966e8 R13: 0000000000000017 R14: ffffffffffffffff R15: 00007f34805fd008