------------[ cut here ]------------
workqueue: cannot queue hci_cmd_timeout on wq hci0
WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#1: kworker/1:4/26983
Modules linked in:
CPU: 1 UID: 0 PID: 26983 Comm: kworker/1:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: events request_firmware_work_func
RIP: 0010:__queue_work+0xd66/0x10a0
Code: 49 81 c7 70 01 00 00 4c 8d 35 f6 9c cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 a4 c3 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
RSP: 0018:ffffc90000a08bc8 EFLAGS: 00010046
RAX: 1ffff110241e014e RBX: dffffc0000000000 RCX: ffff8881be950000
RDX: ffff888118224970 RSI: ffffffff8ac23fe0 RDI: ffffffff905a7750
RBP: 0000000000000100 R08: ffffffff90574b37 R09: 1ffffffff20ae966
R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008
R13: ffff888120f00a58 R14: ffffffff905a7750 R15: ffff888118224970
FS:  0000000000000000(0000) GS:ffff8882a8f52000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000056253dd66858 CR3: 000000011da9a000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 call_timer_fn+0x192/0x5e0
 __run_timer_base+0x67e/0x8b0
 run_timer_softirq+0xb7/0x170
 handle_softirqs+0x225/0x840
 __irq_exit_rcu+0xca/0x220
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:finish_task_switch+0x417/0xc60
Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 53 fc 3d 0a e8 6e aa 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
RSP: 0018:ffffc90003b1f360 EFLAGS: 00000202
RAX: 0000000000103031 RBX: ffff88823c63bf20 RCX: 0000000080000001
RDX: 0000000000000006 RSI: ffffffff8e229955 RDI: ffffffff8c4bbf80
RBP: ffffc90003b1f3b0 R08: ffffffff90574b37 R09: 1ffffffff20ae966
R10: dffffc0000000000 R11: fffffbfff20ae967 R12: ffff8881be950000
R13: ffff88823c63bee8 R14: dffffc0000000000 R15: 1ffff110478c77e4
 __schedule+0x17e1/0x56c0
 schedule+0x164/0x2b0
 schedule_timeout+0x152/0x2c0
 wait_for_completion_timeout+0x2cf/0x610
 usb_start_wait_urb+0x1e9/0x5b0
 usb_control_msg+0x234/0x3e0
 ath9k_hif_usb_download_fw+0x163/0x380
 ath9k_hif_usb_firmware_cb+0x107/0x4b0
 request_firmware_work_func+0xf7/0x2d0
 process_scheduled_works+0xa8e/0x14e0
 worker_thread+0xa47/0xfb0
 kthread+0x388/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
