syzbot

INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 0 PID: 5265 Comm: khidpd_04580058 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Call trace:
 dump_backtrace+0x1c0/0x1ec arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 assign_lock_key+0x230/0x264 kernel/locking/lockdep.c:974
 register_lock_class+0x1ac/0x694 kernel/locking/lockdep.c:1287
 __lock_acquire+0x164/0x6800 kernel/locking/lockdep.c:4928
 lock_acquire+0x20c/0x63c kernel/locking/lockdep.c:5662
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x54/0x6c kernel/locking/spinlock.c:154
 __mutex_lock_common+0xc94/0x1f60 kernel/locking/mutex.c:701
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 l2cap_unregister_user+0x70/0x18c net/bluetooth/l2cap_core.c:1895
 hidp_session_thread+0x3e8/0x478 net/bluetooth/hidp/core.c:1305
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
list_del corruption. prev->next should be ffff800021777c00, but was 0000000000000000. (prev=ffff0000d2e94060)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 5265 Comm: khidpd_04580058 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
lr : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
sp : ffff800021777af0
x29: ffff800021777af0 x28: 1ffff0000387ff0c x27: ffff80001c3ff000
x26: dfff800000000000 x25: ffff7000042eef7c x24: ffff0000d2cf9bc0
x23: 0000000000000000 x22: dfff800000000000 x21: ffff0000d2e94060
x20: ffff0000d2e94060 x19: ffff800021777c00 x18: ffff800011b7bf60
x17: 20747562202c3030 x16: ffff800008042fdc x15: 0000000000000000
x14: 0000000000000001 x13: 1ffff000042eeec4 x12: 0000000000ff0100
x11: ff00800008311710 x10: 0000000000000000 x9 : dcc6c6a438f12200
x8 : dcc6c6a438f12200 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000217775b8 x4 : ffff8000152e4cc0 x3 : ffff80000a88a6b0
x2 : ffff00019f555d10 x1 : 0000000000000002 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 __mutex_remove_waiter kernel/locking/mutex.c:218 [inline]
 __mutex_lock_common+0xd2c/0x1f60 kernel/locking/mutex.c:715
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x38/0x44 kernel/locking/mutex.c:799
 l2cap_unregister_user+0x70/0x18c net/bluetooth/l2cap_core.c:1895
 hidp_session_thread+0x3e8/0x478 net/bluetooth/hidp/core.c:1305
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: 91250000 aa1303e1 aa1503e3 95c1a426 (d4210000) 
---[ end trace 0000000000000000 ]---