Warning: Permanently added '10.128.1.142' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   39.507188][ T3964] 
[   39.507766][ T3964] =====================================
[   39.509025][ T3964] WARNING: bad unlock balance detected!
[   39.510313][ T3964] 5.15.110-syzkaller #0 Not tainted
[   39.511482][ T3964] -------------------------------------
[   39.512679][ T3964] kworker/u5:1/3964 is trying to release lock (&conn->chan_lock) at:
[   39.514457][ T3964] [<ffff800010cd9104>] l2cap_disconnect_rsp+0x210/0x30c
[   39.515999][ T3964] but there are no more locks to release!
[   39.517222][ T3964] 
[   39.517222][ T3964] other info that might help us debug this:
[   39.518961][ T3964] 2 locks held by kworker/u5:1/3964:
[   39.520061][ T3964]  #0: ffff0000c899e138 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8
[   39.522418][ T3964]  #1: ffff80001c4c7c00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8
[   39.524907][ T3964] 
[   39.524907][ T3964] stack backtrace:
[   39.526265][ T3964] CPU: 0 PID: 3964 Comm: kworker/u5:1 Not tainted 5.15.110-syzkaller #0
[   39.528062][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[   39.530219][ T3964] Workqueue: hci0 hci_rx_work
[   39.531258][ T3964] Call trace:
[   39.531937][ T3964]  dump_backtrace+0x0/0x530
[   39.532897][ T3964]  show_stack+0x2c/0x3c
[   39.533883][ T3964]  dump_stack_lvl+0x108/0x170
[   39.534979][ T3964]  dump_stack+0x1c/0x58
[   39.535885][ T3964]  print_unlock_imbalance_bug+0x250/0x2a4
[   39.537163][ T3964]  lock_release+0x4b8/0xa1c
[   39.538124][ T3964]  __mutex_unlock_slowpath+0xe0/0x6d4
[   39.539305][ T3964]  mutex_unlock+0x8c/0xe0
[   39.540278][ T3964]  l2cap_disconnect_rsp+0x210/0x30c
[   39.541404][ T3964]  l2cap_recv_frame+0x188c/0x6a48
[   39.542488][ T3964]  l2cap_recv_acldata+0x4f4/0x163c
[   39.543623][ T3964]  hci_rx_work+0x3b0/0x6d0
[   39.544604][ T3964]  process_one_work+0x790/0x11b8
[   39.545689][ T3964]  worker_thread+0x910/0x1034
[   39.546741][ T3964]  kthread+0x37c/0x45c
[   39.547632][ T3964]  ret_from_fork+0x10/0x20