Re: [syzbot] [bluetooth?] WARNING in disable_delayed_work_sync

[syzbot <syzbot+b1146b58a9d6d90e0eb4@syzkaller.appspotmail.com>]

>> Date: Tue, 10 Nov 2026 00:23:39 -0800	[thread overview]
>> Hello,
>> 
>> syzbot found the following issue on:
>> 
>> HEAD commit:    58c1eb84e977 arm64: sdei: Preserve the interrupted context..
>> git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
>> console output: https://syzkaller.appspot.com/x/log.txt?x=1070f24e580000
>> kernel config:  https://syzkaller.appspot.com/x/.config?x=a58b6b4d667e7a61
>> dashboard link: https://syzkaller.appspot.com/bug?extid=b1146b58a9d6d90e0eb4
>> compiler:       Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8
>> userspace arch: arm64
>> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=12869155580000
>
> #syz test: upstream  master

Patch testing via #syz test is temporarily disabled.
See https://github.com/google/syzkaller/issues/8122 for details.

>
> --- x/net/bluetooth/hci_conn.c
> +++ y/net/bluetooth/hci_conn.c
> @@ -1151,6 +1151,7 @@ static struct hci_conn *__hci_conn_add(s
>  	}
>  
>  	hci_conn_init_sysfs(conn);
> +	hci_conn_get(conn);
>  	return conn;
>  }
>  
> @@ -1316,6 +1317,7 @@ void hci_conn_del(struct hci_conn *conn)
>  	 * rest of hci_conn_del.
>  	 */
>  	hci_conn_cleanup(conn);
> +	hci_conn_put(conn);
>  
>  	/* Dequeue callbacks using connection pointer as data */
>  	hci_cmd_sync_dequeue(hdev, NULL, conn, NULL);
> --