------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(1)
WARNING: CPU: 0 PID: 17303 at kernel/locking/lockdep.c:203 hlock_class kernel/locking/lockdep.c:203 [inline]
WARNING: CPU: 0 PID: 17303 at kernel/locking/lockdep.c:203 hlock_class kernel/locking/lockdep.c:192 [inline]
WARNING: CPU: 0 PID: 17303 at kernel/locking/lockdep.c:203 check_wait_context kernel/locking/lockdep.c:4600 [inline]
WARNING: CPU: 0 PID: 17303 at kernel/locking/lockdep.c:203 __lock_acquire+0xe97/0x5050 kernel/locking/lockdep.c:4852
Modules linked in:
CPU: 0 PID: 17303 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:hlock_class kernel/locking/lockdep.c:203 [inline]
RIP: 0010:hlock_class kernel/locking/lockdep.c:192 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4600 [inline]
RIP: 0010:__lock_acquire+0xe97/0x5050 kernel/locking/lockdep.c:4852
Code: 08 80 45 8a e8 0a 9c 51 00 8b 05 2c 39 f1 08 85 c0 0f 85 ab f8 ff ff 48 c7 c6 c0 47 cb 87 48 c7 c7 e0 41 cb 87 e8 f4 ed fa 05 <0f> 0b 31 c0 e9 a2 f7 ff ff 8b b4 24 30 01 00 00 85 f6 0f 84 b4 02
RSP: 0018:ffffc90000b97670 EFLAGS: 00010086
RAX: 0000000000000000 RBX: ffff8881178deba0 RCX: 0000000000000000
RDX: 0000000000000003 RSI: 0000000000000004 RDI: fffff52000172ec0
RBP: ffff8881178de200 R08: 0000000000000001 R09: ffff8881f642095b
R10: ffffed103ec8412b R11: fffffffffff9f748 R12: 0000000000000001
R13: 00000000000008bb R14: 0000000000000004 R15: dffffc0000000000
FS:  00007f7cdfabf700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000055c000 CR3: 000000012ce38000 CR4: 0000000000350ef0
Call Trace:
 lock_acquire kernel/locking/lockdep.c:5512 [inline]
 lock_acquire+0x212/0x850 kernel/locking/lockdep.c:5477
 finish_lock_switch kernel/sched/core.c:4091 [inline]
 finish_task_switch.isra.0+0x13f/0x6f0 kernel/sched/core.c:4210
 context_switch kernel/sched/core.c:4342 [inline]
 __schedule+0xf6b/0x23d0 kernel/sched/core.c:5147
 preempt_schedule_irq+0xbf/0x1b0 kernel/sched/core.c:5535
 irqentry_exit+0x31/0x80 kernel/entry/common.c:426
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:695 [inline]
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:140 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5515 [inline]
RIP: 0010:lock_acquire+0x639/0x850 kernel/locking/lockdep.c:5477
Code: 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 80 01 00 00 48 83 3d 60 9f e2 07 00 74 5b fb 66 0f 1f 44 00 00 <e9> 06 fc ff ff 0f 0b e9 53 fa ff ff 0f 0b 0f 0b 0f 0b e9 e0 fe ff
RSP: 0018:ffffc90000b97ab8 EFLAGS: 00000282
RAX: 1ffffffff126e860 RBX: 1ffff92000172f59 RCX: 1ffff92000172f40
RDX: dffffc0000000000 RSI: ffffffff87cb4880 RDI: ffffffff88134180
RBP: 0000000000000001 R08: 00000000000f14b8 R09: 0000000000000001
R10: fffffbfff182fb23 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881024a6938 R14: 0000000000000000 R15: 0000000000000000
 flush_workqueue+0xed/0x1250 kernel/workqueue.c:2787
 hci_dev_open+0x129/0x290 net/bluetooth/hci_core.c:1677
 hci_sock_bind+0x310/0xfb0 net/bluetooth/hci_sock.c:1199
 __sys_bind+0x16b/0x1d0 net/socket.c:1637
 __do_sys_bind net/socket.c:1648 [inline]
 __se_sys_bind net/socket.c:1646 [inline]
 __x64_sys_bind+0x6a/0xb0 net/socket.c:1646
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4642f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7cdfabf198 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004642f9
RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000005
RBP: 00000000004f3220 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00
R13: 00007f7cdfabf6bc R14: 00000000ffffffff R15: 0000000000000003
irq event stamp: 1876
hardirqs last  enabled at (1875): [<ffffffff87781cff>] preempt_schedule_irq+0x8f/0x1b0 kernel/sched/core.c:5534
hardirqs last disabled at (1876): [<ffffffff8777fe61>] __schedule+0x13e1/0x23d0 kernel/sched/core.c:5043
softirqs last  enabled at (1872): [<ffffffff85af8f81>] lock_sock_nested+0x81/0xf0 net/core/sock.c:3060
softirqs last disabled at (1870): [<ffffffff85af8f39>] spin_lock_bh include/linux/spinlock.h:359 [inline]
softirqs last disabled at (1870): [<ffffffff85af8f39>] lock_sock_nested+0x39/0xf0 net/core/sock.c:3057
---[ end trace 4b092d9ab032d191 ]---
general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf]
CPU: 0 PID: 17303 Comm: syz-executor.2 Tainted: G        W         5.13.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4600 [inline]
RIP: 0010:__lock_acquire+0x650/0x5050 kernel/locking/lockdep.c:4852
Code: 6c 24 50 4c 01 f8 48 89 44 24 60 eb 68 4b 8d 44 6d 00 48 c1 e0 06 48 05 c0 4f ff 8b 48 8d b8 b8 00 00 00 48 89 fa 48 c1 ea 03 <42> 0f b6 14 3a 84 d2 74 06 0f 8e 12 2a 00 00 0f b6 80 b8 00 00 00
RSP: 0018:ffffc90000b97670 EFLAGS: 00010016
RAX: 0000000000000000 RBX: ffff8881178deba0 RCX: 0000000000000000
RDX: 0000000000000017 RSI: 0000000000000004 RDI: 00000000000000b8
RBP: ffff8881178de200 R08: 0000000000000001 R09: ffff8881f642095b
R10: ffffed103ec8412b R11: fffffffffff9f748 R12: 0000000000000001
R13: 00000000000008bb R14: 0000000000000004 R15: dffffc0000000000
FS:  00007f7cdfabf700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000055c000 CR3: 000000012ce38000 CR4: 0000000000350ef0
Call Trace:
 lock_acquire kernel/locking/lockdep.c:5512 [inline]
 lock_acquire+0x212/0x850 kernel/locking/lockdep.c:5477
 finish_lock_switch kernel/sched/core.c:4091 [inline]
 finish_task_switch.isra.0+0x13f/0x6f0 kernel/sched/core.c:4210
 context_switch kernel/sched/core.c:4342 [inline]
 __schedule+0xf6b/0x23d0 kernel/sched/core.c:5147
 preempt_schedule_irq+0xbf/0x1b0 kernel/sched/core.c:5535
 irqentry_exit+0x31/0x80 kernel/entry/common.c:426
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:695 [inline]
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:140 [inline]
RIP: 0010:lock_acquire kernel/locking/lockdep.c:5515 [inline]
RIP: 0010:lock_acquire+0x639/0x850 kernel/locking/lockdep.c:5477
Code: 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 80 01 00 00 48 83 3d 60 9f e2 07 00 74 5b fb 66 0f 1f 44 00 00 <e9> 06 fc ff ff 0f 0b e9 53 fa ff ff 0f 0b 0f 0b 0f 0b e9 e0 fe ff
RSP: 0018:ffffc90000b97ab8 EFLAGS: 00000282
RAX: 1ffffffff126e860 RBX: 1ffff92000172f59 RCX: 1ffff92000172f40
RDX: dffffc0000000000 RSI: ffffffff87cb4880 RDI: ffffffff88134180
RBP: 0000000000000001 R08: 00000000000f14b8 R09: 0000000000000001
R10: fffffbfff182fb23 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8881024a6938 R14: 0000000000000000 R15: 0000000000000000
 flush_workqueue+0xed/0x1250 kernel/workqueue.c:2787
 hci_dev_open+0x129/0x290 net/bluetooth/hci_core.c:1677
 hci_sock_bind+0x310/0xfb0 net/bluetooth/hci_sock.c:1199
 __sys_bind+0x16b/0x1d0 net/socket.c:1637
 __do_sys_bind net/socket.c:1648 [inline]
 __se_sys_bind net/socket.c:1646 [inline]
 __x64_sys_bind+0x6a/0xb0 net/socket.c:1646
 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4642f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7cdfabf198 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004642f9
RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000005
RBP: 00000000004f3220 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00
R13: 00007f7cdfabf6bc R14: 00000000ffffffff R15: 0000000000000003
Modules linked in:
---[ end trace 4b092d9ab032d192 ]---
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4600 [inline]
RIP: 0010:__lock_acquire+0x650/0x5050 kernel/locking/lockdep.c:4852
Code: 6c 24 50 4c 01 f8 48 89 44 24 60 eb 68 4b 8d 44 6d 00 48 c1 e0 06 48 05 c0 4f ff 8b 48 8d b8 b8 00 00 00 48 89 fa 48 c1 ea 03 <42> 0f b6 14 3a 84 d2 74 06 0f 8e 12 2a 00 00 0f b6 80 b8 00 00 00
RSP: 0018:ffffc90000b97670 EFLAGS: 00010016
RAX: 0000000000000000 RBX: ffff8881178deba0 RCX: 0000000000000000
RDX: 0000000000000017 RSI: 0000000000000004 RDI: 00000000000000b8
RBP: ffff8881178de200 R08: 0000000000000001 R09: ffff8881f642095b
R10: ffffed103ec8412b R11: fffffffffff9f748 R12: 0000000000000001
R13: 00000000000008bb R14: 0000000000000004 R15: dffffc0000000000
FS:  00007f7cdfabf700(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000055c000 CR3: 000000012ce38000 CR4: 0000000000350ef0