Bluetooth: hci5: command 0x041b tx timeout
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5296 at kernel/workqueue.c:1453 __queue_work+0xee4/0x114c kernel/workqueue.c:1453
Modules linked in:
CPU: 1 PID: 5296 Comm: kworker/1:18 Not tainted 5.15.173-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events hci_cmd_timeout
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __queue_work+0xee4/0x114c kernel/workqueue.c:1453
lr : __queue_work+0xee4/0x114c kernel/workqueue.c:1453
sp : ffff800020cd7a40
x29: ffff800020cd7a80 x28: ffff0001b41ab100 x27: 0000000000000008
x26: ffff0000d6f65000 x25: dfff800000000000 x24: ffff0000d6f651c0
x23: 1fffe0001adeca38 x22: ffff0000d5089b48 x21: 1fffe0001aa11369
x20: 00000000000b0012 x19: ffff0000d8d08b30 x18: 0000000000000001
x17: 0000000000000000 x16: ffff8000082ec8b8 x15: 00000000ffffffff
x14: ffff0000d5089b40 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : ffff0000d5089b40
x8 : ffff800008206d14 x7 : 0000000000000000 x6 : 0000000000000001
x5 : ffff800020cd7178 x4 : 0000000000000000 x3 : ffff800008205d3c
x2 : ffff0000d8d08b30 x1 : 0000000000200000 x0 : 0000000000000000
Call trace:
 __queue_work+0xee4/0x114c kernel/workqueue.c:1453
 queue_work_on+0xc4/0x17c kernel/workqueue.c:1559
 queue_work include/linux/workqueue.h:512 [inline]
 hci_cmd_timeout+0x1d0/0x204 net/bluetooth/hci_core.c:2788
 process_one_work+0x790/0x11b8 kernel/workqueue.c:2310
 worker_thread+0x910/0x1034 kernel/workqueue.c:2457
 kthread+0x37c/0x45c kernel/kthread.c:334
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870
irq event stamp: 38616
hardirqs last  enabled at (38615): [<ffff80000832c128>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (38616): [<ffff800008205d30>] queue_work_on+0x7c/0x17c kernel/workqueue.c:1556
softirqs last  enabled at (38596): [<ffff800010acd1c8>] spin_unlock_bh include/linux/spinlock.h:408 [inline]
softirqs last  enabled at (38596): [<ffff800010acd1c8>] __fib6_clean_all+0x2ac/0x428 net/ipv6/ip6_fib.c:2261
softirqs last disabled at (38590): [<ffff800010acd104>] spin_lock_bh include/linux/spinlock.h:368 [inline]
softirqs last disabled at (38590): [<ffff800010acd104>] __fib6_clean_all+0x1e8/0x428 net/ipv6/ip6_fib.c:2258
---[ end trace 6e0fb8c583cf1f35 ]---
XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x54/0x434 fs/xfs/libxfs/xfs_ialloc_btree.c:321, xfs_finobt block 0x20 
XFS (loop5): Unmount and run xfs_repair
XFS (loop5): First 128 bytes of corrupted metadata buffer:
00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................