------------[ cut here ]------------ workqueue: cannot queue hci_cmd_timeout on wq hci0 WARNING: kernel/workqueue.c:2298 at __queue_work+0xfd4/0x136c kernel/workqueue.c:2296, CPU#0: kworker/u9:3/4719 Modules linked in: CPU: 0 UID: 0 PID: 4719 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Workqueue: hci0 hci_cmd_sync_work pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __queue_work+0xfd4/0x136c kernel/workqueue.c:2296 lr : __queue_work+0xfd4/0x136c kernel/workqueue.c:2296 sp : ffff80008e987b10 x29: ffff80008e987b50 x28: dfff800000000000 x27: ffff700011d30f84 x26: ffff0000d4e3c800 x25: 0000000000000008 x24: ffff0000d4e3c9c0 x23: dfff800000000000 x22: ffff0000d4f05708 x21: ffff800089fbc000 x20: ffff0000cf14ca70 x19: ffff0000cf14ca58 x18: 00000000ffffffff x17: ffff800125721000 x16: ffff80008e980000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000ff0100 x9 : 34444a84a7fb5a00 x8 : 34444a84a7fb5a00 x7 : ffff80008047caa0 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f1374 x2 : 0000000000000103 x1 : ffff0000d4f05700 x0 : 0000000000000000 Call trace: __queue_work+0xfd4/0x136c kernel/workqueue.c:2296 (P) delayed_work_timer_fn+0x74/0x90 kernel/workqueue.c:2539 call_timer_fn+0x194/0xa3c kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1794 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x554/0x74c kernel/time/timer.c:2386 run_timer_base+0x84/0x1b8 kernel/time/timer.c:2395 run_timer_softirq+0x20/0x48 kernel/time/timer.c:2405 handle_softirqs+0x2e4/0xd34 kernel/softirq.c:622 __do_softirq+0x14/0x20 kernel/softirq.c:656 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:503 [inline] __irq_exit_rcu+0x1ac/0x428 kernel/softirq.c:735 irq_exit_rcu+0x14/0x84 kernel/softirq.c:752 __el1_irq arch/arm64/kernel/entry-common.c:514 [inline] el1_interrupt+0x40/0x60 arch/arm64/kernel/entry-common.c:526 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:531 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:590 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:198 (P) raw_spin_unlock_irqrestore_wake include/linux/sched/wake_q.h:97 [inline] __mutex_lock_common kernel/locking/mutex.c:724 [inline] __mutex_lock+0x48c/0xef8 kernel/locking/mutex.c:820 mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:873 hci_cmd_sync_work+0x17c/0x37c net/bluetooth/hci_sync.c:331 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0x79c/0x1098 kernel/workqueue.c:3397 worker_thread+0x754/0xba0 kernel/workqueue.c:3478 kthread+0x2f8/0x3c8 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:842 irq event stamp: 13381 hardirqs last enabled at (13380): [] __local_bh_enable_ip+0x1ec/0x35c kernel/softirq.c:455 hardirqs last disabled at (13381): [] __raw_spin_lock_irq include/linux/spinlock_api_smp.h:140 [inline] hardirqs last disabled at (13381): [] _raw_spin_lock_irq+0x28/0x70 kernel/locking/spinlock.c:174 softirqs last enabled at (12488): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (12488): [] handle_softirqs+0xbc4/0xd34 kernel/softirq.c:650 softirqs last disabled at (13361): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---