------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(!test_bit(class_idx, lock_classes_in_use))
WARNING: CPU: 0 PID: 19784 at kernel/locking/lockdep.c:4985 __lock_acquire+0x1086/0x54a0 kernel/locking/lockdep.c:4985
Modules linked in:
CPU: 0 PID: 19784 Comm: kworker/0:8 Not tainted 5.14.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events l2cap_chan_timeout
RIP: 0010:__lock_acquire+0x1086/0x54a0 kernel/locking/lockdep.c:4985
Code: d2 0f 85 8b 31 00 00 44 8b 35 ae 75 12 0c 45 85 f6 0f 85 b3 fd ff ff 48 c7 c6 a0 f3 8b 89 48 c7 c7 a0 c3 8b 89 e8 d2 45 8e 07 <0f> 0b e9 9c fd ff ff bd 02 00 00 00 e9 6e f5 ff ff 45 31 f6 e9 14
RSP: 0018:ffffc90005a5f910 EFLAGS: 00010086
RAX: 0000000000000000 RBX: fffffffffff468c1 RCX: 0000000000000000
RDX: ffff8880333ca380 RSI: ffffffff815cb9a5 RDI: fffff52000b4bf14
RBP: ffff8880333cae32 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffff815c57ae R11: 0000000000000000 R12: ffff8880333cae10
R13: ffff8880333ca380 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd6c5b1720 CR3: 00000000212fc000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 lock_acquire kernel/locking/lockdep.c:5625 [inline]
 lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
 _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175
 spin_lock_bh include/linux/spinlock.h:359 [inline]
 lock_sock_nested+0x40/0x120 net/core/sock.c:3162
 l2cap_sock_teardown_cb+0xa1/0x660 net/bluetooth/l2cap_sock.c:1528
 l2cap_chan_del+0xbc/0xa80 net/bluetooth/l2cap_core.c:622
 l2cap_chan_close+0x1b9/0xaf0 net/bluetooth/l2cap_core.c:825
 l2cap_chan_timeout+0x17e/0x2f0 net/bluetooth/l2cap_core.c:436
 process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
 worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
 kthread+0x3e5/0x4d0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
----------------
Code disassembly (best guess):
   0:	d2 0f                	rorb   %cl,(%rdi)
   2:	85 8b 31 00 00 44    	test   %ecx,0x44000031(%rbx)
   8:	8b 35 ae 75 12 0c    	mov    0xc1275ae(%rip),%esi        # 0xc1275bc
   e:	45 85 f6             	test   %r14d,%r14d
  11:	0f 85 b3 fd ff ff    	jne    0xfffffdca
  17:	48 c7 c6 a0 f3 8b 89 	mov    $0xffffffff898bf3a0,%rsi
  1e:	48 c7 c7 a0 c3 8b 89 	mov    $0xffffffff898bc3a0,%rdi
  25:	e8 d2 45 8e 07       	callq  0x78e45fc
  2a:	0f 0b                	ud2     <-- trapping instruction
  2c:	e9 9c fd ff ff       	jmpq   0xfffffdcd
  31:	bd 02 00 00 00       	mov    $0x2,%ebp
  36:	e9 6e f5 ff ff       	jmpq   0xfffff5a9
  3b:	45 31 f6             	xor    %r14d,%r14d
  3e:	e9                   	.byte 0xe9
  3f:	14                   	.byte 0x14