Re: [syzbot] [bluetooth?] WARNING in disable_delayed_work_sync

[Hillf Danton <hdanton@sina.com>]

> Date: Tue, 10 Nov 2026 00:23:39 -0800	[thread overview]
> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    58c1eb84e977 arm64: sdei: Preserve the interrupted context..
> git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
> console output: https://syzkaller.appspot.com/x/log.txt?x=1070f24e580000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=a58b6b4d667e7a61
> dashboard link: https://syzkaller.appspot.com/bug?extid=b1146b58a9d6d90e0eb4
> compiler:       Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8
> userspace arch: arm64
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=12869155580000

#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci

--- x/net/bluetooth/hci_conn.c
+++ y/net/bluetooth/hci_conn.c
@@ -1151,6 +1151,7 @@ static struct hci_conn *__hci_conn_add(s
 	}
 
 	hci_conn_init_sysfs(conn);
+	hci_conn_get(conn);
 	return conn;
 }
 
@@ -1316,6 +1317,7 @@ void hci_conn_del(struct hci_conn *conn)
 	 * rest of hci_conn_del.
 	 */
 	hci_conn_cleanup(conn);
+	hci_conn_put(conn);
 
 	/* Dequeue callbacks using connection pointer as data */
 	hci_cmd_sync_dequeue(hdev, NULL, conn, NULL);
--