program:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16)
syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYRES8=r2, @ANYRES64=0x0, @ANYRES8=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2], 0x7)
[ 108.056451][ T5331] ------------[ cut here ]------------
[ 108.058876][ T5331] workqueue: cannot queue hci_rx_work on wq hci0
[ 108.061808][ T5331] WARNING: CPU: 0 PID: 5331 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[ 108.065864][ T5331] Modules linked in:
[ 108.067651][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full)
[ 108.072641][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 108.077085][ T5331] RIP: 0010:__queue_work+0xd62/0xfe0
[ 108.079344][ T5331] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 29 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 30 8a 35 00 90 0f 0b 90 e9 dd fc ff
[ 108.087345][ T5331] RSP: 0018:ffffc9000f43fa68 EFLAGS: 00010046
[ 108.089980][ T5331] RAX: 6778f2ad0f89dd00 RBX: 0000000000000000 RCX: ffff8880006b8000
[ 108.093285][ T5331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 108.096751][ T5331] RBP: 1ffff1100883c238 R08: ffff88801fc24293 R09: 1ffff11003f84852
[ 108.100192][ T5331] R10: dffffc0000000000 R11: ffffed1003f84853 R12: dffffc0000000000
[ 108.103602][ T5331] R13: ffff888043eeca98 R14: ffff8880006b8000 R15: ffff8880441e1178
[ 108.107131][ T5331] FS: 00007f33ab8616c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000
[ 108.111060][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 108.113956][ T5331] CR2: 00007fad072fae9c CR3: 00000000441b7000 CR4: 0000000000352ef0
[ 108.117475][ T5331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 108.120837][ T5331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 108.124443][ T5331] Call Trace:
[ 108.125939][ T5331]
[ 108.127286][ T5331] ? rcu_is_watching+0x15/0xb0
[ 108.129289][ T5331] queue_work_on+0x181/0x270
[ 108.131174][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.133313][ T5331] ? __pfx_queue_work_on+0x10/0x10
[ 108.135216][ T5331] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 108.137639][ T5331] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 108.139976][ T5331] ? skb_queue_tail+0x30/0xf0
[ 108.142056][ T5331] hci_recv_frame+0x5c9/0x720
[ 108.144047][ T5331] ? skb_pull+0xc1/0x1d0
[ 108.145919][ T5331] vhci_write+0x358/0x4a0
[ 108.147647][ T5331] vfs_write+0x54b/0xa90
[ 108.149440][ T5331] ? __pfx_vhci_write+0x10/0x10
[ 108.151495][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 108.153768][ T5331] ? __fget_files+0x2a/0x420
[ 108.155843][ T5331] ksys_write+0x145/0x250
[ 108.157693][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 108.159734][ T5331] ? rcu_is_watching+0x15/0xb0
[ 108.161790][ T5331] ? do_syscall_64+0xbe/0x3b0
[ 108.163755][ T5331] do_syscall_64+0xfa/0x3b0
[ 108.165618][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.167961][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.170567][ T5331] ? clear_bhb_loop+0x60/0xb0
[ 108.172603][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.175167][ T5331] RIP: 0033:0x7f33aa98d3df
[ 108.177072][ T5331] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 108.185212][ T5331] RSP: 002b:00007f33ab861000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 108.188928][ T5331] RAX: ffffffffffffffda RBX: 00007f33aabb6160 RCX: 00007f33aa98d3df
[ 108.192454][ T5331] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 00000000000000ca
[ 108.195954][ T5331] RBP: 00007f33aaa10b39 R08: 0000000000000000 R09: 0000000000000000
[ 108.199368][ T5331] R10: 0000200000000080 R11: 0000000000000293 R12: 0000000000000000
[ 108.202791][ T5331] R13: 0000000000000000 R14: 00007f33aabb6160 R15: 00007ffea9aded28
[ 108.206309][ T5331]
[ 108.207685][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 108.210724][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full)
[ 108.215772][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 108.221194][ T5331] Call Trace:
[ 108.222772][ T5331]
[ 108.224134][ T5331] dump_stack_lvl+0x99/0x250
[ 108.226010][ T5331] ? __asan_memcpy+0x40/0x70
[ 108.227957][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.230094][ T5331] ? __pfx__printk+0x10/0x10
[ 108.232079][ T5331] panic+0x2db/0x790
[ 108.233766][ T5331] ? __pfx_panic+0x10/0x10
[ 108.235697][ T5331] ? show_trace_log_lvl+0x4fb/0x550
[ 108.237750][ T5331] __warn+0x31b/0x4b0
[ 108.239430][ T5331] ? __queue_work+0xd62/0xfe0
[ 108.241321][ T5331] ? __queue_work+0xd62/0xfe0
[ 108.243451][ T5331] report_bug+0x2be/0x4f0
[ 108.245236][ T5331] ? __queue_work+0xd62/0xfe0
[ 108.247332][ T5331] ? __queue_work+0xd62/0xfe0
[ 108.249319][ T5331] ? __queue_work+0xd64/0xfe0
[ 108.251279][ T5331] handle_bug+0x84/0x160
[ 108.253122][ T5331] exc_invalid_op+0x1a/0x50
[ 108.255166][ T5331] asm_exc_invalid_op+0x1a/0x20
[ 108.257395][ T5331] RIP: 0010:__queue_work+0xd62/0xfe0
[ 108.259690][ T5331] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 29 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 30 8a 35 00 90 0f 0b 90 e9 dd fc ff
[ 108.267846][ T5331] RSP: 0018:ffffc9000f43fa68 EFLAGS: 00010046
[ 108.270468][ T5331] RAX: 6778f2ad0f89dd00 RBX: 0000000000000000 RCX: ffff8880006b8000
[ 108.273778][ T5331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 108.277204][ T5331] RBP: 1ffff1100883c238 R08: ffff88801fc24293 R09: 1ffff11003f84852
[ 108.280485][ T5331] R10: dffffc0000000000 R11: ffffed1003f84853 R12: dffffc0000000000
[ 108.283797][ T5331] R13: ffff888043eeca98 R14: ffff8880006b8000 R15: ffff8880441e1178
[ 108.287122][ T5331] ? __queue_work+0xd61/0xfe0
[ 108.289073][ T5331] ? rcu_is_watching+0x15/0xb0
[ 108.291162][ T5331] queue_work_on+0x181/0x270
[ 108.293235][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.295518][ T5331] ? __pfx_queue_work_on+0x10/0x10
[ 108.297648][ T5331] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 108.300183][ T5331] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 108.302993][ T5331] ? skb_queue_tail+0x30/0xf0
[ 108.304963][ T5331] hci_recv_frame+0x5c9/0x720
[ 108.306996][ T5331] ? skb_pull+0xc1/0x1d0
[ 108.308802][ T5331] vhci_write+0x358/0x4a0
[ 108.310794][ T5331] vfs_write+0x54b/0xa90
[ 108.312738][ T5331] ? __pfx_vhci_write+0x10/0x10
[ 108.315051][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 108.317131][ T5331] ? __fget_files+0x2a/0x420
[ 108.319125][ T5331] ksys_write+0x145/0x250
[ 108.321032][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 108.323182][ T5331] ? rcu_is_watching+0x15/0xb0
[ 108.325238][ T5331] ? do_syscall_64+0xbe/0x3b0
[ 108.327310][ T5331] do_syscall_64+0xfa/0x3b0
[ 108.329063][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.331111][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.333568][ T5331] ? clear_bhb_loop+0x60/0xb0
[ 108.335610][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.338370][ T5331] RIP: 0033:0x7f33aa98d3df
[ 108.340264][ T5331] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 108.348531][ T5331] RSP: 002b:00007f33ab861000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 108.352119][ T5331] RAX: ffffffffffffffda RBX: 00007f33aabb6160 RCX: 00007f33aa98d3df
[ 108.355268][ T5331] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 00000000000000ca
[ 108.358598][ T5331] RBP: 00007f33aaa10b39 R08: 0000000000000000 R09: 0000000000000000
[ 108.361968][ T5331] R10: 0000200000000080 R11: 0000000000000293 R12: 0000000000000000
[ 108.365416][ T5331] R13: 0000000000000000 R14: 00007f33aabb6160 R15: 00007ffea9aded28
[ 108.368781][ T5331]
[ 108.370387][ T5331] Kernel Offset: disabled
[ 108.372190][ T5331] Rebooting in 86400 seconds..