------------[ cut here ]------------
workqueue: cannot queue hci_cmd_timeout on wq hci2
WARNING: CPU: 1 PID: 6033 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0
Modules linked in:
CPU: 1 UID: 0 PID: 6033 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:__queue_work+0xd38/0xfb0
Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 2f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 e0 b8 49 8b 4c 89 fa e8 f9 38 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 da ae 35 00 90 0f 0b 90 e9 dd fc ff
RSP: 0018:ffffc900001e0b10 EFLAGS: 00010046
RAX: 64d6cd3cf273e300 RBX: 0000000000000100 RCX: ffff88810ddf0000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
RBP: 1ffff11022298638 R08: ffff888136624293 R09: 1ffff11026cc4852
R10: dffffc0000000000 R11: ffffed1026cc4853 R12: dffffc0000000000
R13: ffff888106bc4988 R14: 0000000000000008 R15: ffff8881114c3178
FS:  0000555575d92500(0000) GS:ffff8881a417e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30de6ff8 CR3: 0000000114c48000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 call_timer_fn+0x17e/0x5f0
 __run_timer_base+0x646/0x860
 run_timer_softirq+0xb7/0x180
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_acquire+0xb9/0x360
Code: cc 15 c1 0d 00 0f 84 fa 00 00 00 65 8b 05 cf 98 ae 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 20 4a 92 83 b8 ec 0a 00 00 00 <0f> 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89
RSP: 0018:ffffc90004657498 EFLAGS: 00000246
RAX: ffff88810ddf0000 RBX: 0000000000000000 RCX: 64d6cd3cf273e300
RDX: 0000000000000000 RSI: ffffffff817221b2 RDI: 1ffffffff1ba7594
RBP: ffffffff81722195 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc90004657658 R11: ffffffff81aaa4d0 R12: 0000000000000002
R13: ffffffff8dd3aca0 R14: 0000000000000000 R15: 0000000000000000
 unwind_next_frame+0xc2/0x2390
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 save_stack+0xf5/0x1f0
 __reset_page_owner+0x71/0x1f0
 __free_frozen_pages+0xbc4/0xd30
 vfree+0x25a/0x400
 kcov_close+0x28/0x50
 __fput+0x44c/0xa70
 task_work_run+0x1d4/0x260
 do_exit+0x6b5/0x2300
 do_group_exit+0x21c/0x2d0
 get_signal+0x1286/0x1340
 arch_do_signal_or_restart+0x9a/0x750
 exit_to_user_mode_loop+0x75/0x110
 do_syscall_64+0x2bd/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4ead98ec29
Code: Unable to access opcode bytes at 0x7f4ead98ebff.
RSP: 002b:00007ffd9b45f318 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f4eadbd7da0 RCX: 00007f4ead98ec29
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 00007f4eadbd7da0 R08: 000000000003cda4 R09: 0000001d9b45f60f
R10: 00000000005c2a54 R11: 0000000000000246 R12: 0000000000011893
R13: 00007f4eadbd6180 R14: ffffffffffffffff R15: 00007ffd9b45f430
 </TASK>
