Bluetooth: hci1: command 0x0419 tx timeout
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_write include/linux/instrumented.h:97 [inline]
BUG: KASAN: null-ptr-deref in set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline]
BUG: KASAN: null-ptr-deref in l2cap_sock_suspend_cb+0x43/0x90 net/bluetooth/l2cap_sock.c:1784
Write of size 8 at addr 0000000000000590 by task kworker/u33:4/5800

CPU: 1 UID: 0 PID: 5800 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: hci0 hci_rx_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 kasan_report+0xdf/0x1d0 mm/kasan/report.c:595
 check_region_inline mm/kasan/generic.c:186 [inline]
 kasan_check_range+0x10f/0x1e0 mm/kasan/generic.c:200
 instrument_atomic_write include/linux/instrumented.h:97 [inline]
 set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline]
 l2cap_sock_suspend_cb+0x43/0x90 net/bluetooth/l2cap_sock.c:1784
 l2cap_chan_ready.part.0+0x1c9/0x240 net/bluetooth/l2cap_core.c:1273
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1262 [inline]
 l2cap_le_start+0x1ea/0xd20 net/bluetooth/l2cap_core.c:1391
 l2cap_conn_ready net/bluetooth/l2cap_core.c:1644 [inline]
 l2cap_connect_cfm+0x8ce/0xf80 net/bluetooth/l2cap_core.c:7419
 hci_connect_cfm include/net/bluetooth/hci_core.h:2139 [inline]
 le_conn_complete_evt+0x197c/0x1f60 net/bluetooth/hci_event.c:5865
 hci_le_conn_complete_evt+0x23c/0x3a0 net/bluetooth/hci_event.c:5891
 hci_le_meta_evt+0x34a/0x5f0 net/bluetooth/hci_event.c:7529
 hci_event_func net/bluetooth/hci_event.c:7793 [inline]
 hci_event_packet+0x51c/0xcd0 net/bluetooth/hci_event.c:7847
 hci_rx_work+0x451/0xfc0 net/bluetooth/hci_core.c:4077
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302
 process_scheduled_works kernel/workqueue.c:3385 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
==================================================================