program:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0402030c02"], 0x7)
[ 102.257123][ T5326] ------------[ cut here ]------------
[ 102.259608][ T5326] workqueue: cannot queue hci_rx_work on wq hci0
[ 102.262495][ T5326] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd3f/0x1040, CPU#0: syz.0.0/5326
[ 102.266629][ T5326] Modules linked in:
[ 102.268710][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.273472][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.281401][ T5326] RIP: 0010:__queue_work+0xd67/0x1040
[ 102.283849][ T5326] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 3a 5e a5 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef
[ 102.292429][ T5326] RSP: 0018:ffffc90006ea7b08 EFLAGS: 00010082
[ 102.295162][ T5326] RAX: 1ffff1100254a178 RBX: 0000000000000008 RCX: 0000000000100000
[ 102.298669][ T5326] RDX: ffff888040964170 RSI: ffffffff8a9e36f0 RDI: ffffffff9033ef50
[ 102.302227][ T5326] RBP: 0000000000000000 R08: ffff888012a50baf R09: 1ffff1100254a175
[ 102.305879][ T5326] R10: dffffc0000000000 R11: ffffed100254a176 R12: dffffc0000000000
[ 102.309651][ T5326] R13: ffff888012a50ba8 R14: ffffffff9033ef50 R15: ffff888040964170
[ 102.313086][ T5326] FS: 00007fcc6f4336c0(0000) GS:ffff88808c87e000(0000) knlGS:0000000000000000
[ 102.316757][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.319567][ T5326] CR2: 00007f715b5145c0 CR3: 0000000012f45000 CR4: 0000000000352ef0
[ 102.322825][ T5326] Call Trace:
[ 102.324310][ T5326]
[ 102.325539][ T5326] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.327830][ T5326] ? rcu_is_watching+0x15/0xb0
[ 102.330004][ T5326] queue_work_on+0x106/0x1d0
[ 102.332162][ T5326] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 102.334864][ T5326] hci_recv_frame+0x625/0x7c0
[ 102.337093][ T5326] ? skb_pull+0xc1/0x1d0
[ 102.339023][ T5326] vhci_write+0x358/0x4a0
[ 102.341002][ T5326] vfs_write+0x61d/0xb90
[ 102.342895][ T5326] ? __pfx_vfs_write+0x10/0x10
[ 102.345061][ T5326] ? __fget_files+0x2a/0x420
[ 102.347253][ T5326] ksys_write+0x150/0x270
[ 102.349337][ T5326] ? __pfx_ksys_write+0x10/0x10
[ 102.351558][ T5326] ? __pfx_kcov_ioctl+0x10/0x10
[ 102.353770][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.356418][ T5326] do_syscall_64+0x15f/0xf80
[ 102.358658][ T5326] ? trace_irq_disable+0x3b/0x140
[ 102.360975][ T5326] ? clear_bhb_loop+0x40/0x90
[ 102.363062][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.365721][ T5326] RIP: 0033:0x7fcc6e55d68e
[ 102.367754][ T5326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 102.376438][ T5326] RSP: 002b:00007fcc6f432f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 102.380289][ T5326] RAX: ffffffffffffffda RBX: 00007fcc6f4336c0 RCX: 00007fcc6e55d68e
[ 102.383791][ T5326] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 00000000000000ca
[ 102.387364][ T5326] RBP: 00007fcc6e632d6f R08: 0000000000000000 R09: 0000000000000000
[ 102.390920][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.394389][ T5326] R13: 00007fcc6e816128 R14: 00007fcc6e816090 R15: 00007ffd9f795b68
[ 102.397852][ T5326]
[ 102.399294][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.402441][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.406441][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.411000][ T5326] Call Trace:
[ 102.412514][ T5326]
[ 102.413858][ T5326] vpanic+0x56c/0xa60
[ 102.415652][ T5326] ? __pfx__printk+0x10/0x10
[ 102.417719][ T5326] ? __pfx_vpanic+0x10/0x10
[ 102.419749][ T5326] ? is_bpf_text_address+0x292/0x2b0
[ 102.422025][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 102.424536][ T5326] panic+0xc5/0xd0
[ 102.426241][ T5326] ? __pfx_panic+0x10/0x10
[ 102.428624][ T5326] __warn+0x315/0x4c0
[ 102.430699][ T5326] ? __queue_work+0xd3f/0x1040
[ 102.433223][ T5326] ? __queue_work+0xd3f/0x1040
[ 102.435356][ T5326] __report_bug+0x29a/0x540
[ 102.437406][ T5326] ? __pfx_stack_trace_save+0x10/0x10
[ 102.439868][ T5326] ? __queue_work+0xd3f/0x1040
[ 102.442067][ T5326] ? __pfx___report_bug+0x10/0x10
[ 102.444337][ T5326] ? __pfx_hci_rx_work+0x10/0x10
[ 102.446565][ T5326] ? __alloc_skb+0x27d/0x7d0
[ 102.448694][ T5326] ? vhci_write+0xbe/0x4a0
[ 102.450692][ T5326] ? vfs_write+0x61d/0xb90
[ 102.452725][ T5326] ? ksys_write+0x150/0x270
[ 102.454710][ T5326] ? do_syscall_64+0x15f/0xf80
[ 102.457513][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.460296][ T5326] report_bug_entry+0x19a/0x290
[ 102.462510][ T5326] ? __queue_work+0xd67/0x1040
[ 102.464703][ T5326] ? __queue_work+0xd6c/0x1040
[ 102.466812][ T5326] handle_bug+0xce/0x200
[ 102.468791][ T5326] exc_invalid_op+0x1a/0x50
[ 102.470861][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 102.473061][ T5326] RIP: 0010:__queue_work+0xd67/0x1040
[ 102.475409][ T5326] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 3a 5e a5 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef
[ 102.484031][ T5326] RSP: 0018:ffffc90006ea7b08 EFLAGS: 00010082
[ 102.486664][ T5326] RAX: 1ffff1100254a178 RBX: 0000000000000008 RCX: 0000000000100000
[ 102.490137][ T5326] RDX: ffff888040964170 RSI: ffffffff8a9e36f0 RDI: ffffffff9033ef50
[ 102.493560][ T5326] RBP: 0000000000000000 R08: ffff888012a50baf R09: 1ffff1100254a175
[ 102.496751][ T5326] R10: dffffc0000000000 R11: ffffed100254a176 R12: dffffc0000000000
[ 102.499949][ T5326] R13: ffff888012a50ba8 R14: ffffffff9033ef50 R15: ffff888040964170
[ 102.503246][ T5326] ? __pfx_hci_rx_work+0x10/0x10
[ 102.505484][ T5326] ? __queue_work+0xd2c/0x1040
[ 102.507735][ T5326] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.510086][ T5326] ? rcu_is_watching+0x15/0xb0
[ 102.512291][ T5326] queue_work_on+0x106/0x1d0
[ 102.514390][ T5326] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 102.517024][ T5326] hci_recv_frame+0x625/0x7c0
[ 102.519164][ T5326] ? skb_pull+0xc1/0x1d0
[ 102.521123][ T5326] vhci_write+0x358/0x4a0
[ 102.523098][ T5326] vfs_write+0x61d/0xb90
[ 102.525055][ T5326] ? __pfx_vfs_write+0x10/0x10
[ 102.527152][ T5326] ? __fget_files+0x2a/0x420
[ 102.529349][ T5326] ksys_write+0x150/0x270
[ 102.531306][ T5326] ? __pfx_ksys_write+0x10/0x10
[ 102.533534][ T5326] ? __pfx_kcov_ioctl+0x10/0x10
[ 102.535801][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.538548][ T5326] do_syscall_64+0x15f/0xf80
[ 102.540684][ T5326] ? trace_irq_disable+0x3b/0x140
[ 102.542952][ T5326] ? clear_bhb_loop+0x40/0x90
[ 102.545091][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.547761][ T5326] RIP: 0033:0x7fcc6e55d68e
[ 102.549869][ T5326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 102.558760][ T5326] RSP: 002b:00007fcc6f432f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 102.562455][ T5326] RAX: ffffffffffffffda RBX: 00007fcc6f4336c0 RCX: 00007fcc6e55d68e
[ 102.565920][ T5326] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 00000000000000ca
[ 102.569371][ T5326] RBP: 00007fcc6e632d6f R08: 0000000000000000 R09: 0000000000000000
[ 102.572698][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.575899][ T5326] R13: 00007fcc6e816128 R14: 00007fcc6e816090 R15: 00007ffd9f795b68
[ 102.579514][ T5326]
[ 102.581259][ T5326] Kernel Offset: disabled
[ 102.583190][ T5326] Rebooting in 86400 seconds..