BUG: workqueue leaked lock or atomic: kworker/u5:6/0x00000000/4251
     last function: hci_rx_work
1 lock held by kworker/u5:6/4251:
 #0: ffff0000dcb34530 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_chan_lock include/net/bluetooth/l2cap.h:863 [inline]
 #0: ffff0000dcb34530 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_conless_channel net/bluetooth/l2cap_core.c:7801 [inline]
 #0: ffff0000dcb34530 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x584/0x6d04 net/bluetooth/l2cap_core.c:7867
CPU: 1 PID: 4251 Comm: kworker/u5:6 Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Workqueue: hci0 hci_rx_work
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 process_one_work+0xc24/0x1404 kernel/workqueue.c:2307
 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864