Re: [syzbot] [bluetooth?] WARNING in disable_delayed_work_sync

From: Hillf Danton

Date: Wed Nov 11 2026 - 02:12:11 EST


> Date: Tue, 10 Nov 2026 00:23:39 -0800 [thread overview]
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit: 58c1eb84e977 arm64: sdei: Preserve the interrupted context..
> git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
> console output: https://syzkaller.appspot.com/x/log.txt?x=1070f24e580000
> kernel config: https://syzkaller.appspot.com/x/.config?x=a58b6b4d667e7a61
> dashboard link: https://syzkaller.appspot.com/bug?extid=b1146b58a9d6d90e0eb4
> compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8
> userspace arch: arm64
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12869155580000

#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci

--- x/net/bluetooth/hci_conn.c
+++ y/net/bluetooth/hci_conn.c
@@ -1151,6 +1151,7 @@ static struct hci_conn *__hci_conn_add(s
}

hci_conn_init_sysfs(conn);
+ hci_conn_get(conn);
return conn;
}

@@ -1316,6 +1317,7 @@ void hci_conn_del(struct hci_conn *conn)
* rest of hci_conn_del.
*/
hci_conn_cleanup(conn);
+ hci_conn_put(conn);

/* Dequeue callbacks using connection pointer as data */
hci_cmd_sync_dequeue(hdev, NULL, conn, NULL);
--