program:
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x8, 0xc3, 0x1]}, &(0x7f0000000040)=0xa)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(0x0, 0xe)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200000040"], 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200000040"], 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0x7) (async)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0x7)
[ 86.517531][ T5277] Bluetooth: hci0: command tx timeout
[ 86.585967][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 86.606619][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 86.634469][ T4642] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[ 86.635510][ T4642] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3
[ 86.858295][ T5311] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 86.998215][ T5311] usb 5-1: device descriptor read/64, error -71
[ 87.238242][ T5311] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 87.368079][ T5311] usb 5-1: device descriptor read/64, error -71
[ 87.478630][ T5311] usb usb5-port1: attempt power cycle
[ 87.818114][ T5311] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 87.840536][ T5311] usb 5-1: device descriptor read/8, error -71
[ 88.078217][ T5311] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 88.098772][ T5311] usb 5-1: device descriptor read/8, error -71
[ 88.208526][ T5311] usb usb5-port1: unable to enumerate USB device
[ 88.529321][ T4642] Bluetooth: hci0: command tx timeout
[ 88.690991][ T5277] ------------[ cut here ]------------
[ 88.693786][ T5277] refcnt < 0
[ 88.693798][ T5277] WARNING: net/bluetooth/hci_conn.c:631 at hci_conn_timeout+0xff/0x2c0, CPU#0: kworker/u5:2/5277
[ 88.699741][ T5277] Modules linked in:
[ 88.701827][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: kworker/u5:2 Not tainted syzkaller #0 PREEMPT(full)
[ 88.705640][ T5277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.709837][ T5277] Workqueue: hci0 hci_conn_timeout
[ 88.711961][ T5277] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[ 88.714116][ T5277] Code: 48 89 df e8 c3 cc 09 00 eb 07 e8 3c 2d ff f6 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 b7 a0 fe ff e8 22 2d ff f6 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[ 88.721769][ T5277] RSP: 0018:ffffc9000dce7ad0 EFLAGS: 00010293
[ 88.723963][ T5277] RAX: ffffffff8ac7e4be RBX: ffff888012d24000 RCX: ffff888012c50000
[ 88.727202][ T5277] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[ 88.730471][ T5277] RBP: 00000000ffffffff R08: ffff888012d24013 R09: 1ffff110025a4802
[ 88.733703][ T5277] R10: dffffc0000000000 R11: ffffed10025a4803 R12: dffffc0000000000
[ 88.736907][ T5277] R13: dffffc0000000000 R14: ffff888012d24a40 R15: ffff888012d24010
[ 88.740190][ T5277] FS: 0000000000000000(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000
[ 88.743824][ T5277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.747045][ T5277] CR2: 000055f3a8bfd168 CR3: 0000000043936000 CR4: 0000000000352ef0
[ 88.750548][ T5277] Call Trace:
[ 88.752024][ T5277]
[ 88.753253][ T5277] ? process_scheduled_works+0xa20/0x14e0
[ 88.755489][ T5277] process_scheduled_works+0xa8e/0x14e0
[ 88.757791][ T5277] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.760411][ T5277] ? assign_work+0x3cf/0x5d0
[ 88.762439][ T5277] worker_thread+0xa47/0xfb0
[ 88.764428][ T5277] ? __kthread_parkme+0x71/0x1f0
[ 88.766649][ T5277] kthread+0x388/0x470
[ 88.768449][ T5277] ? __pfx_worker_thread+0x10/0x10
[ 88.770621][ T5277] ? __pfx_kthread+0x10/0x10
[ 88.772569][ T5277] ret_from_fork+0x514/0xb70
[ 88.774512][ T5277] ? __pfx_ret_from_fork+0x10/0x10
[ 88.776583][ T5277] ? __switch_to+0xc89/0x1420
[ 88.778627][ T5277] ? __pfx_kthread+0x10/0x10
[ 88.780489][ T5277] ret_from_fork_asm+0x1a/0x30
[ 88.782416][ T5277]
[ 88.783672][ T5277] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.786714][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: kworker/u5:2 Not tainted syzkaller #0 PREEMPT(full)
[ 88.790477][ T5277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.794575][ T5277] Workqueue: hci0 hci_conn_timeout
[ 88.796537][ T5277] Call Trace:
[ 88.797916][ T5277]
[ 88.799116][ T5277] vpanic+0x56c/0xa60
[ 88.800818][ T5277] ? __pfx__printk+0x10/0x10
[ 88.802818][ T5277] ? __pfx_vpanic+0x10/0x10
[ 88.804793][ T5277] ? is_bpf_text_address+0x292/0x2b0
[ 88.806947][ T5277] ? is_bpf_text_address+0x26/0x2b0
[ 88.809153][ T5277] panic+0xc5/0xd0
[ 88.810764][ T5277] ? __pfx_panic+0x10/0x10
[ 88.812538][ T5277] ? ret_from_fork_asm+0x1a/0x30
[ 88.814542][ T5277] __warn+0x315/0x4c0
[ 88.816146][ T5277] ? hci_conn_timeout+0xff/0x2c0
[ 88.818191][ T5277] ? hci_conn_timeout+0xff/0x2c0
[ 88.820252][ T5277] __report_bug+0x276/0x570
[ 88.822157][ T5277] ? hci_conn_timeout+0xff/0x2c0
[ 88.824136][ T5277] ? __pfx___report_bug+0x10/0x10
[ 88.826197][ T5277] ? add_lock_to_list+0xc7/0x100
[ 88.828155][ T5277] ? lockdep_unlock+0x5d/0xd0
[ 88.830050][ T5277] ? __lock_acquire+0x13e8/0x2cf0
[ 88.832124][ T5277] ? hci_conn_timeout+0xff/0x2c0
[ 88.834965][ T5277] report_bug+0x16a/0x220
[ 88.837067][ T5277] ? hci_conn_timeout+0xff/0x2c0
[ 88.839059][ T5277] ? hci_conn_timeout+0x101/0x2c0
[ 88.841323][ T5277] handle_bug+0x9c/0x200
[ 88.843105][ T5277] exc_invalid_op+0x1a/0x50
[ 88.844927][ T5277] asm_exc_invalid_op+0x1a/0x20
[ 88.846947][ T5277] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[ 88.849224][ T5277] Code: 48 89 df e8 c3 cc 09 00 eb 07 e8 3c 2d ff f6 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 b7 a0 fe ff e8 22 2d ff f6 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[ 88.856776][ T5277] RSP: 0018:ffffc9000dce7ad0 EFLAGS: 00010293
[ 88.859283][ T5277] RAX: ffffffff8ac7e4be RBX: ffff888012d24000 RCX: ffff888012c50000
[ 88.862583][ T5277] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[ 88.865895][ T5277] RBP: 00000000ffffffff R08: ffff888012d24013 R09: 1ffff110025a4802
[ 88.869143][ T5277] R10: dffffc0000000000 R11: ffffed10025a4803 R12: dffffc0000000000
[ 88.872365][ T5277] R13: dffffc0000000000 R14: ffff888012d24a40 R15: ffff888012d24010
[ 88.875496][ T5277] ? hci_conn_timeout+0xfe/0x2c0
[ 88.877371][ T5277] ? process_scheduled_works+0xa20/0x14e0
[ 88.879407][ T5277] process_scheduled_works+0xa8e/0x14e0
[ 88.881519][ T5277] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.883790][ T5277] ? assign_work+0x3cf/0x5d0
[ 88.885626][ T5277] worker_thread+0xa47/0xfb0
[ 88.887489][ T5277] ? __kthread_parkme+0x71/0x1f0
[ 88.889415][ T5277] kthread+0x388/0x470
[ 88.891006][ T5277] ? __pfx_worker_thread+0x10/0x10
[ 88.893026][ T5277] ? __pfx_kthread+0x10/0x10
[ 88.894803][ T5277] ret_from_fork+0x514/0xb70
[ 88.896596][ T5277] ? __pfx_ret_from_fork+0x10/0x10
[ 88.898627][ T5277] ? __switch_to+0xc89/0x1420
[ 88.900477][ T5277] ? __pfx_kthread+0x10/0x10
[ 88.902232][ T5277] ret_from_fork_asm+0x1a/0x30
[ 88.904070][ T5277]
[ 88.905719][ T5277] Kernel Offset: disabled
[ 88.907477][ T5277] Rebooting in 86400 seconds..