------------[ cut here ]------------ workqueue: cannot queue hci_tx_work on wq hci4 WARNING: CPU: 0 PID: 8425 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0 kernel/workqueue.c:2254 Modules linked in: CPU: 0 UID: 0 PID: 8425 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__queue_work+0xd38/0xfb0 kernel/workqueue.c:2254 Code: 42 80 3c 20 00 74 08 4c 89 ef e8 13 05 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 60 de 89 8b 4c 89 fa e8 a9 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 9b 35 00 90 0f 0b 90 e9 dd fc ff RSP: 0018:ffffc90004dcf550 EFLAGS: 00010046 RAX: 17f76b4f121d2200 RBX: 0000000000000000 RCX: ffff888068133c00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 RBP: 1ffff11004d80f38 R08: ffff8880b8624253 R09: 1ffff110170c484a R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 R13: ffff88803184cb68 R14: ffff888068133c00 R15: ffff888026c07978 FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000559b16b3a950 CR3: 0000000073570000 CR4: 00000000003526f0 Call Trace: queue_work_on+0x181/0x270 kernel/workqueue.c:2390 l2cap_chan_send+0x1110/0x2790 net/bluetooth/l2cap_core.c:-1 l2cap_sock_sendmsg+0x32e/0x4a0 net/bluetooth/l2cap_sock.c:1139 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x21c/0x270 net/socket.c:729 sock_sendmsg net/socket.c:752 [inline] kernel_sendmsg+0x175/0x250 net/socket.c:776 bnep_tx_frame net/bluetooth/bnep/core.c:466 [inline] bnep_session+0x24e4/0x2b40 net/bluetooth/bnep/core.c:509 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245