program: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000050b000/0x2000)=nil, 0x80000000, 0x0, 0x0, 0x6, 0x46, 0x2}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000011c0)) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r3, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) sendto$inet(r3, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r3, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="0a2ca221d440bae485b2447df3e8a908254dcfd6019b61073814f0402d99176b08c64ff16fa023db8a312792d94b693fcbcc9843a8117eefc059923e1cfb6a909e945ceaa53483ba981129d746311b931f3be6318b312eae32e55fe4521bd96208a2b542776cbe94e21182b09ce09a842139784b05fad84d8d3aadad3b149afd57cbf21df02c016c5e8e1ee0bd052bcbd23e7b37cee9f2d809f2bd110e8d716143f84df4e401789f70007ec73b533518e9b04d4c8001d75e08909ddde3793c3134e2c1cbd03cabd4de7843d022dd77ff", 0xd0}, {&(0x7f0000000540)="5465243116848d474de7059462ffa24f0023791bad873ff8a6595d0d4e12cccd9556d708ee6ce481d4573d4fcd7016d1dc2f3bd75127cb62f3a7bc719623051a44c167dafc3f90f2104ea215fbd1508f74f49f99acee621a3db8aebccedc7405a8fa88d240791178339b82c6bef70a3656db1f3e68f2306f71b08743fe400b867dc24076c90eca3ef3ab80104d9a27d4779d751866430d70", 0x98}, {&(0x7f00000016c0)="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", 0xfd}, {&(0x7f0000001b80)="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", 0xd9c}], 0x4}}], 0x1, 0x40800) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800}, 0xe) sendmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="5c0658", 0x3}], 0x1}}], 0x2, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000017c0)={r4, r4, 0x7f, 0x1000, &(0x7f0000002940)="40b10fd6451ad82a0000cf7a003dffb6fde0277283a1253c75325e3383d65ac3d8c9adf3386fe768f322244c4ba75e886d354e6f4a3cf752f7e9ae474bddffb3a96f4915dfa86c283788ee1a74930dd372f19bac70ab111c0dec1f8947bafa096eab2cb8d45b2477f3542469fc0b159b3ae3002f3bc5c721899b9ab06b85f5002a97dae85a543d18d0d8975834715397278949fef28924e0b97232354a6b648782c02439bcf2eca3affaa83e08996c305963625d18a3023cb6d265ed7e9073d0c415f95803f2a812c2e8451c71d09ead5b20b6a8c50d10befc199cba795d277a5df8168be51b0ba06184d1a8f189783c739a881198fa2a1f2252575242b787b2abd321abc7ccec531075edd406adb099f9d0255cd7c18dc2a5c127a321f67997d70202ca196981ff590cd8bc24f4da9152ca19743f2a74a49d03ccaa59174ee4916dedff8d540f5e8c1a1c1f631725efb8ba93d36b5c28dc3b7b4550f53fbab2047e620652d50f803a89246c428663951c3349a30218520e7d7e9731645c37e839fa41176df286753ce15a69897f8a276c28a66f45ccea1b2f1e604f520d2ec918139044fd018ba75bcbac47abdd6340e8ca47435e6b47dc6b14212e2660713ca8b7b3825b5c8d062b155b56987bdc39fc213d4a3c8726302a68d0da6cd916cef79fb920c3f471795e49dc21a30714e57706a193397484a4f6cdfe1b7eb2da783c47f854d885c69d04943837fde6b5104be80ebc427ad1a022b5917a6c37a7570fc7fa3f31f9f2390723943a6c543a9093a2f5a2ee82a02b508b5d36e681820fc25d54e0868a87327f139eab0e829d8078a75a1f9755823b69b28daba9be7366a1c891d8ee438729dc0bf5458ef5f5b7922bf1e5a8771184b299bca7439c4a3b5ec9278113ea804630a2cae3d8c3e4a51d886a8c5465447d5fea29a54788323496b63d8517b1f521a41e38d4e25fe1a1bbb3bf00ef0f1e98937a54f301a5e7d1eb15821b9e82e23b31907d1d393cfcac1fa9e7ee47237d16a2c6c6c6db8e7c07d0d609989e799ff608c2c1044cbf703e57419eabaae7d42bec907e268c088e97a69b405e852617339e9f0c07b5eae234db9ea510f7dac27c6f6982b7c771b67a25444111afeb8c948867d2024a0be40378c56fc04d41b8ef53a4dd0d9794cf9789aa2edabef92201b022344fc05ebdf5aa4b6fecdab1a9aa85d666e163953548539a5222eb83a892b1568693595a576d36c725689a7c062dea04ae173c088ccdb994f60a4f2a776b918b55e19c1e2e9c05773d67ac878f1e49fd4c24fa27a776130a87f7e163c3d1987b098dbd6c78eaee2a89a9e2408e309de96f2d149c12e5201eba12d5ff8f5922b7e79779643b030534b88534f19160b9c8c1e279702535a761c155e0cd98b9f8fc2f4f4566b5e92f77454e658895ce14691213117a898951e7859bac368e2ff798d72904ef487761eddf9ec9cc028348bfcd326727268bec8e21006c85e1ed92cabf1b32a4aab39b638e7d99d51bb7fc59413fdb61d9dca331e632b4bfbb16382fc68115ab79469e2b3d674f439d19cfae3eb2029bd6fa3da29f4772a04ead3ebe0e63c718a580306157959cbd24ca4842d1f3cb01b16734310656628db50e517f3e1b6b7699206faf37e58cef56c7f6eec13b631e2ef1fa5a58c4f134ba0e32e8a85ba697a7201d6e2a1e4d639e2c832627b34c30d21ab37f0378ed6a696a3c932ffe230953a41111046389e68342f2de5f2b34c39f99cc2cb6cb6fb537c20384ac9aa55e1643bd12ee15ba254bf8a321a276d8789a4c9f6cfd5d005aaa39ed4c3ef573f21c453d11e774aacbce22aa4b8bd8cfebc1348ce3097e21ac083313c6dd066f63d34635d37d6924ea9b83b459919ba9aeac7b89a5fb2df738cb247abe5e8dff4c9f311e41dc901a88eaa7a6b655528aa3421fe2de89c28e67773cb9dbb5f39ce4cfb299e2b39722341dbd17c175d6d47d92cbc4727306802951ac321b451cfeaf04292ca4f154981a7c09b32e8cd6af3b0e23ca9d89f5deaff106ea2a3e829a2114d83c6a4733759ade3fe598ca0bf0dce0faba709016a2f6f550830ab9810da49d09e2d8e89df4f497546eeaaa6c06b0d60d39071c538e015114ce47c0fb496260a5110a946253fed381bf50a8a6c14dd4294d450acf797df7e373adae5fe3516389762916df9d8e8b47235c7a529285d83d63f823bd733a24f1da92e3053d0aeec76945693d6fb30cc1fcd5a9577794997ba7f6295d36bda3937fe3a9d7025e98dbf3cff461b58d07e08d8cd1700889d5f118a4dd89c6a9b8e23f7ee05a42d21aa40dc27d538f91eabffc860e1d1ac36fbb41bbe3201c0322af88d7dca77b7f302e2e53f00cdb9ce04e06735a217dd88ca85b12d6a6135330b53879b0a1822882ad4f0805d8387cc9c0b528dd401d711c517bdcb2b9d4c3481dfdf3fc9224965c115c11052dd3c6c13d9254fd8582bf0bd23be82e4a2ba903e8d3ad0515e3a0d046bc70eca942e4c948039083241a77545bff6ace85960d0d066a68ab4f3e686ef2977863573218aa7a0a9a61fb8fb56c16087aa1034a06f9c7da535a9e5be52ae94e685bada3f77d16cf39bd17c8dca4baf41f11d9f2a7750f45a86f4fb68ed7568d950be38382b547b52159824f9cab3748f02cf4bb60c7f42dcc81456325ce12030018885495cb632ecb57af450407a78816409eff97c5fe86da8d7d81ee09a58fbe24070ab886d6081a72855627fbbad32a80e745a7c05a0c64015a6d1d09aae937a3f12ffefbd76c8ecc3a45c548658bd8ca943fb0b9829b6a1b7a24ec23b5342e73d4edf1815fde72cad010b7612183d01786572473f358d771fc3587e937762c3dc764a7b2b6175f83b551f1c39be44666cb5834eab37242121d452f5090c5469d4320754df29e34749b2b1e632862288e064d27682d85c41b6e9f2dbf4eeef01795f7e15a68b284bf614e32f363f16bbbeaaef50c4b5e9035077a2982b5c5888264d7c6293460ee4f309d8ab7259b976585607a6628f564803dd3b32622615ed0ca8347a7eb50a81e13cb3b62320a27bd8cc27886a5f511d094ba33cb70ecf154b0510b59c1d3303104121a6ab19bb81c5ac4ae4b06bab1f274e4ee03ee8ac78b36754c874ee7ded509e3420f224ec7c1699ae7e03b554ce80e0d60695527082b5a252a6fb509aa88363d94a86470174e90d810a00a36ba1a455040e5907473ddf32238737a66b3f8efd5c12f444a4dd3501b945ceb30c80105ded39e12a4e91f9f4822f49fdb50822f8e6181cb6d78ff710768924be69ac79832872fc03a685562cd0e65fa8282499e2eaa00fa371d3b423ffaca2d15b89aa2011f79b0d4dd14fece783d10dce1b4507ece848120930e1972e4cc939d0b3d8e990b7d4f9effef979d0bf570c3565f10f240c92e9c03621ad07d0e823eaa467af9f525b19a66d46184408f56dfb32899715eeec08ffdca4757c61b9f6a427fe892ea71f747a79b9fdd7af601271434411190264bdfb7bc47963c40b51a6824382fb2551223674f15ff664a0e06adfc2e131407f16c67a72bf1ea29f68f96270a2447393723951e59485fe7a924a93f716d4cfbb9bbf55b229ae3937fde670d650cdf6c197ced3f024f166cc87afc0347ca26382aeb6e7e5f4f01a5900af7caa71cb217b5fae04ded6288c870beb06bd75094a9b39052eead864001bed2f37f7e2517e1772774e59feaf2b1e18d996dec94c5ba5df63aa96d32b92bb052eefffa7fcf5f4ac7bdd62e8ebfd76bc811a768adfd33df772d063dbf05387a34dfc5fe3eb28eb81fb4995afc2be5c107fd0c95aced59161c55508357918cede614baa3c2f314b3481261a20e81fb7c8dba731c724a100c8fac2cfc1a43a3eb65a85107f437b288aaaf81408e3e27905e397cef7491e45f39e0f4128e850c4020d642b662de85f3e2c017f9374aacfc26c19a3a248ff9d5ef3ff0e3079365a15b161e245f703a8680462bd06e22327a5eb471f1a81c01bbe03d56d9e93051c115630b10a7347c5f3217c8a389bfb7ae3a932d073cc41788cc497025fe0392ff2ad8f5bc1835241e266d4511e5f9ba6872cae3543f555c2bc5fac5003447dee1aa8f9f4cbf33d85e4716d9f18f26590600d51e8e5b009accc2c72edd97200bbd068faad9f0ddbd6e48cd8fd34b25ffbbfd7d7df4a83facc5d65af7d855c759fb7aa2a00db4269d2df431541ffb95a168cf9b64397147753446562cd487db159887ca480d27f099af0c7e43c9070fb36642c4b84347be664e8b0dca52bd9cc0663ba5b376e599427fc60e4278521ddcebf44870b315509e14f0ad076fbf53ea173fa5a92d259586407d8bdfcd5dfd958db58f582fb486bc193d3d8dc20daed74de382eca0a3fd2e242230535640343f576f12911e25ae25e8c6da43ba8eb2b54744629d524f76fb3a1deba2b985e5acb7a86a49630813efdf13828fe0f4787999d08030f033ac6ed91904fc1516a01058ddadd66972f85dc4cdc57528f334b764fdcb7c3a4173b595ad0fb591665f91c96d7267fa6d99904dc0367b16134de4d1af7cfba30b8ab6d33abbfae1cb06a9e794e88e35d36f8393679d9e86d92745f456ce95e408d1913cf11d84ba945e46dea92f33f60a5bcf11dc12bb03cf408ae74608c3f7f5d67686032567c77da35ec764483a60633eaf5fd51791990ade0ac300aeeb32a72904e727524f15f0bbcf77d1b3c21c7836a216eda988f91000e9fa3506974d67660e67c9bf7e1b00353f36865f716032885d68051742e1db4d755f2eb1c9f4fdaaa208a8ded37a053aafdb09df9dc2e1484beb7a0dceaa4dea8607cec68fa9d3439970263f53fd0227f3d74d4271d90c35674f1670dee645686226bce9be7d9eee5890dc9668ffe7aae3f1f72bd3b9fe58fb82de1e35b394f95ebca2632e7f3092b7b7bb0647600fceb6569c92d13bf868b67bce00bb2e29a9e7537633344e68accdcaa9408f2ead322d46c9755df1e4a39d530420fb1bdb9f1b4d6d530823d3c7c918df6be50728cefc8765c3fc6c36a29c4de1fafebc8ed79ed86a0456ee86006ba39029368d2eab47da5e65e85d791c5d4b3d5326d6f0055456421ac0ea0c11e5af9531739009c4672bbfee4ade0bcdb59a7493113bb8c19b7bdb3ad656f975072476479095ffb73969a89f65de449cbf92b5b04d93cdef51ef81b20dc2586889c97759da2ca8e2783b9726f64330905cd7adb30161acda74d6593ae315d63b5a8a806ac61e1b84bfd1384e07e42cc3d71f6b1f51f6b29df22754947d222ffa92196d80d7ba9841b10627ecc637921f72cb394be63cd8896886d7cd8205e76741cf7fcb15d2ce3902c5004d9da646c6709b901f69836264972b1246af9e659a384a62bab2627b6d6889bfd54e76bd63148a4e5a81f9550ca0ab04606608f6ec76d608dbdbc9c237be32c0f83a295d0994d3412eaf10b474a09ea9f449f12e0b594f69c20eba3437e3fd857510ca45dc23c1c1513442d193acad3482e540b58254b8c0dc5a8fdf1689ffc3159a3995a9d5dd3b08e19a740a7a391894d10c074983e7e505c63e4e9c6622a244cf85f8fa7e7672ff52eb2d91dcad422e745daa3ff726972bcf0296ec10fb36cb9b159d34a35fa1c34ca26b91e3ee820242058ececc7ffd3e9956316179fb07f1575e6b7be60c263c2b24a41f497fcdb6959a7a2c8f980a8c49e864cb60b6c949a68f3a4eb658405db25a3a3060beafbfcb3b959f574c32f81e502e45568e56e5ffaef6611c17", 0xf1, 0x8, 0x4e5d, 0x1, 0xfcfd, 0x1, 0x9, 'syz1\x00'}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc8, 0x9}}}, 0x7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={0x0, 0x1}, 0x19) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001880)=""/234, 0xea}], 0x1, 0x764c, 0xd2b) [ 85.968843][ T5325] Bluetooth: hci0: command tx timeout [ 86.070054][ T5349] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 86.191984][ T5347] hid (null): unknown global tag 0xd [ 86.194387][ T5347] hid (null): global environment stack underflow [ 86.200264][ T5347] hid (null): unknown global tag 0xd [ 86.203600][ T5347] hid (null): invalid report_count 1399927896 [ 86.207591][ T5347] hid (null): invalid report_count -28735193 [ 86.210127][ T5347] hid (null): unknown global tag 0xd [ 86.212526][ T5347] hid (null): bogus close delimiter [ 86.215400][ T5347] hid (null): report_id 1747595302 is invalid [ 86.218890][ T5347] hid (null): report_id 0 is invalid [ 86.221322][ T5347] hid (null): unknown global tag 0xfe [ 86.223936][ T5347] hid (null): unknown global tag 0x4f [ 86.227219][ T5347] hid (null): report_id 4249427599 is invalid [ 86.230074][ T5347] hid (null): invalid report_count 54223993 [ 86.232786][ T5347] hid (null): unknown global tag 0xc [ 86.235137][ T5347] hid (null): invalid report_size 8345 [ 86.238650][ T5347] hid (null): global environment stack underflow [ 86.241621][ T5347] hid (null): global environment stack underflow [ 86.244612][ T5347] hid (null): bogus close delimiter [ 86.249214][ T5347] hid (null): unknown global tag 0xc [ 86.251767][ T5347] hid (null): report_id 36314 is invalid [ 86.254279][ T5347] hid (null): report_id 2262 is invalid [ 86.257555][ T5347] hid (null): unknown global tag 0xe [ 86.259923][ T5347] hid (null): unknown global tag 0xd [ 86.262350][ T5347] hid (null): unknown global tag 0xd [ 86.264743][ T5347] hid (null): global environment stack underflow [ 86.268484][ T5347] hid (null): global environment stack underflow [ 86.271339][ T5347] hid (null): unknown global tag 0xc [ 86.273702][ T5347] hid (null): global environment stack underflow [ 86.277413][ T5347] hid (null): unknown global tag 0x80 [ 86.280580][ T5347] hid (null): global environment stack underflow [ 86.283974][ T5347] hid (null): unknown global tag 0xe [ 86.287586][ T5347] hid (null): invalid report_count 16444 [ 86.290084][ T5347] hid (null): global environment stack underflow [ 86.293294][ T5347] hid (null): unknown global tag 0x22 [ 86.297074][ T5347] hid (null): global environment stack underflow [ 86.299967][ T5347] hid (null): unknown global tag 0x18 [ 86.302496][ T5347] hid (null): unknown global tag 0xd [ 86.304739][ T5347] hid (null): unknown global tag 0xc [ 86.309509][ T5347] hid (null): global environment stack underflow [ 86.312179][ T5347] hid (null): bogus close delimiter [ 86.314284][ T5347] hid (null): report_id 52743 is invalid [ 86.317229][ T5347] hid (null): unknown global tag 0xc [ 86.319583][ T5347] hid (null): invalid report_size 36935 [ 86.322040][ T5347] hid (null): global environment stack underflow [ 86.324814][ T5347] hid (null): invalid report_size -1473455527 [ 86.328185][ T5347] hid (null): invalid report_count 809760294 [ 86.330494][ T5347] hid (null): unknown global tag 0xd [ 86.332844][ T5347] hid (null): unknown global tag 0xc [ 86.335147][ T5347] hid (null): report_id 0 is invalid [ 86.337871][ T5347] hid (null): unknown global tag 0xe [ 86.340256][ T5347] hid (null): unknown global tag 0xd [ 86.342918][ T5347] hid (null): unknown global tag 0xc [ 86.345420][ T5347] hid (null): unknown global tag 0xe [ 86.348920][ T5347] hid (null): report_id 52695 is invalid [ 86.351326][ T5347] hid (null): unknown global tag 0xc [ 86.355004][ T5347] hid (null): unknown global tag 0xd [ 86.357822][ T5347] hid (null): invalid report_size 25533 [ 86.360147][ T5347] hid (null): unknown global tag 0x76 [ 86.370969][ T5347] hid-generic 0005:4E5D:0001.0002: unknown main item tag 0x4 [ 86.374269][ T5347] hid-generic 0005:4E5D:0001.0002: unknown global tag 0xd [ 86.378294][ T5347] hid-generic 0005:4E5D:0001.0002: item 0 2 1 13 parsing failed [ 86.382694][ T5347] hid-generic 0005:4E5D:0001.0002: probe with driver hid-generic failed with error -22 [ 86.390488][ T5325] [ 86.391480][ T5325] ====================================================== [ 86.394110][ T5325] WARNING: possible circular locking dependency detected [ 86.397007][ T5325] 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 Not tainted [ 86.399926][ T5325] ------------------------------------------------------ [ 86.402624][ T5325] kworker/u5:2/5325 is trying to acquire lock: [ 86.405134][ T5325] ffff888045bc7840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 86.410018][ T5325] [ 86.410018][ T5325] but task is already holding lock: [ 86.412969][ T5325] ffff888045bc7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 86.416706][ T5325] [ 86.416706][ T5325] which lock already depends on the new lock. [ 86.416706][ T5325] [ 86.420952][ T5325] [ 86.420952][ T5325] the existing dependency chain (in reverse order) is: [ 86.424603][ T5325] [ 86.424603][ T5325] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 86.427739][ T5325] lock_acquire+0x120/0x360 [ 86.429941][ T5325] __mutex_lock+0x182/0xe80 [ 86.432167][ T5325] l2cap_info_timeout+0x60/0xa0 [ 86.434577][ T5325] process_scheduled_works+0xae1/0x17b0 [ 86.437235][ T5325] worker_thread+0x8a0/0xda0 [ 86.439475][ T5325] kthread+0x70e/0x8a0 [ 86.441560][ T5325] ret_from_fork+0x3fc/0x770 [ 86.443631][ T5325] ret_from_fork_asm+0x1a/0x30 [ 86.445763][ T5325] [ 86.445763][ T5325] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 86.450301][ T5325] validate_chain+0xb9b/0x2140 [ 86.452535][ T5325] __lock_acquire+0xab9/0xd20 [ 86.454553][ T5325] lock_acquire+0x120/0x360 [ 86.456735][ T5325] __flush_work+0x6b8/0xbc0 [ 86.458634][ T5325] __cancel_work_sync+0xbe/0x110 [ 86.460800][ T5325] l2cap_conn_del+0x4f0/0x680 [ 86.462822][ T5325] hci_disconn_complete_evt+0x4fe/0x920 [ 86.465318][ T5325] hci_event_packet+0x7e3/0x1200 [ 86.467606][ T5325] hci_rx_work+0x46a/0xe80 [ 86.469735][ T5325] process_scheduled_works+0xae1/0x17b0 [ 86.472091][ T5325] worker_thread+0x8a0/0xda0 [ 86.474143][ T5325] kthread+0x70e/0x8a0 [ 86.475944][ T5325] ret_from_fork+0x3fc/0x770 [ 86.478234][ T5325] ret_from_fork_asm+0x1a/0x30 [ 86.480323][ T5325] [ 86.480323][ T5325] other info that might help us debug this: [ 86.480323][ T5325] [ 86.484803][ T5325] Possible unsafe locking scenario: [ 86.484803][ T5325] [ 86.488062][ T5325] CPU0 CPU1 [ 86.490361][ T5325] ---- ---- [ 86.492623][ T5325] lock(&conn->lock#2); [ 86.494501][ T5325] lock((work_completion)(&(&conn->info_timer)->work)); [ 86.498434][ T5325] lock(&conn->lock#2); [ 86.501202][ T5325] lock((work_completion)(&(&conn->info_timer)->work)); [ 86.504232][ T5325] [ 86.504232][ T5325] *** DEADLOCK *** [ 86.504232][ T5325] [ 86.507786][ T5325] 6 locks held by kworker/u5:2/5325: [ 86.509984][ T5325] #0: ffff888045bc6948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 86.514574][ T5325] #1: ffffc9000d44fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 86.519557][ T5325] #2: ffff88804378c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_disconn_complete_evt+0x3f/0x920 [ 86.523892][ T5325] #3: ffffffff8f686108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_disconn_complete_evt+0x49b/0x920 [ 86.528434][ T5325] #4: ffff888045bc7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 86.532501][ T5325] #5: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 86.536568][ T5325] [ 86.536568][ T5325] stack backtrace: [ 86.539281][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: kworker/u5:2 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 86.539297][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.539306][ T5325] Workqueue: hci0 hci_rx_work [ 86.539323][ T5325] Call Trace: [ 86.539331][ T5325] [ 86.539338][ T5325] dump_stack_lvl+0x189/0x250 [ 86.539355][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.539370][ T5325] ? __pfx__printk+0x10/0x10 [ 86.539387][ T5325] ? print_lock_name+0xde/0x100 [ 86.539406][ T5325] print_circular_bug+0x2ee/0x310 [ 86.539421][ T5325] check_noncircular+0x134/0x160 [ 86.539437][ T5325] validate_chain+0xb9b/0x2140 [ 86.539450][ T5325] ? do_raw_spin_lock+0x121/0x290 [ 86.539468][ T5325] ? look_up_lock_class+0x74/0x170 [ 86.539480][ T5325] ? register_lock_class+0x51/0x320 [ 86.539491][ T5325] __lock_acquire+0xab9/0xd20 [ 86.539504][ T5325] ? __flush_work+0xd2/0xbc0 [ 86.539519][ T5325] lock_acquire+0x120/0x360 [ 86.539529][ T5325] ? __flush_work+0xd2/0xbc0 [ 86.539543][ T5325] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.539559][ T5325] ? __flush_work+0xd2/0xbc0 [ 86.539573][ T5325] __flush_work+0x6b8/0xbc0 [ 86.539586][ T5325] ? __flush_work+0xd2/0xbc0 [ 86.539599][ T5325] ? __flush_work+0xd2/0xbc0 [ 86.539612][ T5325] ? __pfx___flush_work+0x10/0x10 [ 86.539625][ T5325] ? __pfx_wq_barrier_func+0x10/0x10 [ 86.539638][ T5325] ? __pfx___cancel_work+0x10/0x10 [ 86.539651][ T5325] ? hci_conn_drop+0x14d/0x280 [ 86.539667][ T5325] __cancel_work_sync+0xbe/0x110 [ 86.539682][ T5325] l2cap_conn_del+0x4f0/0x680 [ 86.539696][ T5325] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 86.539710][ T5325] hci_disconn_complete_evt+0x4fe/0x920 [ 86.539724][ T5325] hci_event_packet+0x7e3/0x1200 [ 86.539734][ T5325] ? __pfx_hci_disconn_complete_evt+0x10/0x10 [ 86.539744][ T5325] ? __pfx_hci_event_packet+0x10/0x10 [ 86.539754][ T5325] ? kcov_remote_start+0x4d3/0x7f0 [ 86.539823][ T5325] ? lockdep_hardirqs_on+0x90/0x150 [ 86.539833][ T5325] ? hci_send_to_monitor+0xe2/0x570 [ 86.539848][ T5325] hci_rx_work+0x46a/0xe80 [ 86.539860][ T5325] ? process_scheduled_works+0x9ef/0x17b0 [ 86.539880][ T5325] process_scheduled_works+0xae1/0x17b0 [ 86.539899][ T5325] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.539918][ T5325] worker_thread+0x8a0/0xda0 [ 86.539932][ T5325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.539951][ T5325] ? __kthread_parkme+0x7b/0x200 [ 86.539965][ T5325] kthread+0x70e/0x8a0 [ 86.539981][ T5325] ? __pfx_worker_thread+0x10/0x10 [ 86.539993][ T5325] ? __pfx_kthread+0x10/0x10 [ 86.540008][ T5325] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.540024][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.540034][ T5325] ? __pfx_kthread+0x10/0x10 [ 86.540047][ T5325] ret_from_fork+0x3fc/0x770 [ 86.540060][ T5325] ? __pfx_ret_from_fork+0x10/0x10 [ 86.540073][ T5325] ? __pfx_kthread+0x10/0x10 [ 86.540088][ T5325] ret_from_fork_asm+0x1a/0x30 [ 86.540107][ T5325] [ 86.668596][ T54] cfg80211: failed to load regulatory.db