c7d4095477eb30d0a5be8376a9e19539eb22032b1affde3c0bf2a98b728f1d9afd8ffe63a633fa7a6ba0fc600c75358d82433a030f81777ee3b468c44b7fcf570d2fd7b853677810ebc70a2fb5e87a554527931ee01ab7c60da1182c9b10", @ANYRES16=r3], 0x15) syz_emit_vhci(0x0, 0x0) 06:38:22 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x1, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) 06:38:22 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:38:22 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:38:22 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x1, 0xffffffffffffffac}, "957434631336c1152ff7f755fb396c1deb8e912154212b5916bb1d9a89a036ceeb8a7a2f86661059ff5e9a82c0a9b3b44b301b3345072e52cbb1485d3a2e1a901e4de18ebc25c27d8e455d72e55a94725d2516bb6bd61363419d0aa8b9fd6a02071f4276c38ed712da094c54645cb54af5dc06054dfa47a748facbd304a1da153344ab95c4f46e95412c69984a4ba8e61dc296a0eca5433016da48e078cb3c25dc9e85770dd429c7ec81488772cb0df5dc610d64d473e6d79e5af5beb9e0c845315b878899"}, 0xc9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ecbbc91d0c485dbf"}}}, 0x11) [ 491.006142] Bluetooth: hci6: SCO packet for unknown connection handle 1 [ 491.007934] Bluetooth: hci6: SCO packet for unknown connection handle 1 [ 491.032702] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 491.034172] debugfs: '0' already exists in 'hci2' [ 491.036337] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 491.037775] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.037806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.037821] Workqueue: hci2 hci_rx_work [ 491.037859] Call Trace: [ 491.037867] [ 491.037876] dump_stack_lvl+0xfa/0x120 [ 491.037902] sysfs_warn_dup+0x80/0xa0 [ 491.037928] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.037958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.037980] ? find_held_lock+0x2b/0x80 [ 491.038006] ? lock_release+0xc8/0x270 [ 491.038038] ? do_raw_spin_unlock+0x53/0x220 [ 491.038074] kobject_add_internal+0x24c/0x9a0 [ 491.038111] kobject_add+0x157/0x240 [ 491.038140] ? __pfx_kobject_add+0x10/0x10 [ 491.038167] ? lock_release+0xc8/0x270 [ 491.038197] ? do_raw_spin_unlock+0x53/0x220 [ 491.038232] ? kobject_put+0xaa/0x260 [ 491.038270] device_add+0x32d/0x1830 [ 491.038311] ? __pfx_device_add+0x10/0x10 [ 491.038347] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.038372] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.038406] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.038439] hci_conn_add_sysfs+0x117/0x1c0 [ 491.038466] le_conn_complete_evt+0x1246/0x1e40 [ 491.038510] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.038554] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.038591] ? __asan_memcpy+0x3d/0x60 [ 491.038625] hci_le_meta_evt+0x34b/0x530 [ 491.038656] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.038696] hci_event_packet+0x66c/0x10e0 [ 491.038732] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.038765] ? __pfx_hci_event_packet+0x10/0x10 [ 491.038799] ? mark_held_locks+0x49/0x80 [ 491.038831] ? kcov_remote_start+0x2ce/0x5a0 [ 491.038876] hci_rx_work+0x65b/0x8b0 [ 491.038915] process_one_work+0x8e1/0x1960 [ 491.038962] ? __pfx_process_one_work+0x10/0x10 [ 491.038992] ? move_linked_works+0x172/0x270 [ 491.039036] ? assign_work+0x196/0x240 [ 491.039069] worker_thread+0x67e/0xe90 [ 491.039101] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.039143] ? __pfx_worker_thread+0x10/0x10 [ 491.039176] kthread+0x3c8/0x740 [ 491.039204] ? __pfx_kthread+0x10/0x10 [ 491.039230] ? ret_from_fork+0x79/0x7a0 [ 491.039254] ? lock_release+0xc8/0x270 [ 491.039284] ? __pfx_kthread+0x10/0x10 [ 491.039313] ret_from_fork+0x67a/0x7a0 [ 491.039336] ? __pfx_ret_from_fork+0x10/0x10 [ 491.039363] ? __switch_to+0x759/0x1030 [ 491.039394] ? __pfx_kthread+0x10/0x10 [ 491.039424] ret_from_fork_asm+0x1a/0x30 [ 491.039473] [ 491.077759] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.081512] Bluetooth: hci2: failed to register connection device 06:38:22 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:38:22 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 06:38:22 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x1, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) 06:38:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x22) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000080)={{r2}, 0x1, &(0x7f0000000040)=[0x1], 0xfffffffffffffff7, 0x6, [0x4, 0x10000, 0x1000, 0x7fffffff]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 06:38:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x100000001, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x8693, 0xfffffffffffffff8}, 0x4022, 0x89, 0x40, 0x1, 0x1f, 0x6, 0x8000, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x9, r0, 0x18) lremovexattr(0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) futimesat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 06:38:22 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$VT_RELDISP(r1, 0x5605) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@loopback, 0x4e23, 0x1, 0x4e24, 0x4, 0xa, 0x0, 0x80, 0x8, 0x0, r3}, {0x0, 0x1ff, 0xa6ad, 0x8, 0x2f05, 0x8f, 0x1000, 0x9}, {0x9, 0x6, 0x8, 0x7}, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d3, 0x2b}, 0xa, @in6=@empty, 0x3501, 0x2, 0x0, 0x9, 0x8, 0x8000, 0x7f}}, 0xe8) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) [ 491.201662] debugfs: '0' already exists in 'hci2' [ 491.202930] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 491.204487] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.204519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.204535] Workqueue: hci2 hci_rx_work [ 491.204574] Call Trace: [ 491.204581] [ 491.204591] dump_stack_lvl+0xfa/0x120 [ 491.204618] sysfs_warn_dup+0x80/0xa0 [ 491.204643] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.204667] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.204688] ? find_held_lock+0x2b/0x80 [ 491.204715] ? lock_release+0xc8/0x270 [ 491.204747] ? do_raw_spin_unlock+0x53/0x220 [ 491.204795] kobject_add_internal+0x24c/0x9a0 [ 491.204832] kobject_add+0x157/0x240 [ 491.204861] ? __pfx_kobject_add+0x10/0x10 [ 491.204889] ? lock_release+0xc8/0x270 [ 491.204919] ? do_raw_spin_unlock+0x53/0x220 [ 491.204961] ? kobject_put+0xaa/0x260 [ 491.205001] device_add+0x32d/0x1830 [ 491.205041] ? __pfx_device_add+0x10/0x10 [ 491.205078] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.205103] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.205138] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.205172] hci_conn_add_sysfs+0x117/0x1c0 [ 491.205199] le_conn_complete_evt+0x1246/0x1e40 [ 491.205244] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.205288] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.205326] ? __asan_memcpy+0x3d/0x60 [ 491.205360] hci_le_meta_evt+0x34b/0x530 [ 491.205392] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.205432] hci_event_packet+0x66c/0x10e0 [ 491.205469] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.205503] ? __pfx_hci_event_packet+0x10/0x10 [ 491.205538] ? mark_held_locks+0x49/0x80 [ 491.205570] ? kcov_remote_start+0x2ce/0x5a0 [ 491.205616] hci_rx_work+0x65b/0x8b0 [ 491.205656] process_one_work+0x8e1/0x1960 [ 491.205703] ? __pfx_process_one_work+0x10/0x10 [ 491.205734] ? move_linked_works+0x172/0x270 [ 491.205779] ? assign_work+0x196/0x240 [ 491.205812] worker_thread+0x67e/0xe90 [ 491.205844] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.205887] ? __pfx_worker_thread+0x10/0x10 [ 491.205920] kthread+0x3c8/0x740 [ 491.205949] ? __pfx_kthread+0x10/0x10 [ 491.205976] ? ret_from_fork+0x79/0x7a0 [ 491.206004] ? lock_release+0xc8/0x270 [ 491.206035] ? __pfx_kthread+0x10/0x10 [ 491.206065] ret_from_fork+0x67a/0x7a0 [ 491.206089] ? __pfx_ret_from_fork+0x10/0x10 [ 491.206117] ? __switch_to+0x759/0x1030 [ 491.206149] ? __pfx_kthread+0x10/0x10 [ 491.206179] ret_from_fork_asm+0x1a/0x30 [ 491.206229] [ 491.242558] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.244651] Bluetooth: hci2: failed to register connection device [ 491.246355] debugfs: '0' already exists in 'hci2' [ 491.247472] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 491.248894] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.248924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.248939] Workqueue: hci2 hci_rx_work [ 491.248978] Call Trace: [ 491.248985] [ 491.248994] dump_stack_lvl+0xfa/0x120 [ 491.249018] sysfs_warn_dup+0x80/0xa0 [ 491.249041] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.249064] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.249086] ? find_held_lock+0x2b/0x80 [ 491.249110] ? lock_release+0xc8/0x270 [ 491.249141] ? do_raw_spin_unlock+0x53/0x220 [ 491.249178] kobject_add_internal+0x24c/0x9a0 [ 491.249218] kobject_add+0x157/0x240 [ 491.249248] ? __pfx_kobject_add+0x10/0x10 [ 491.249275] ? lock_release+0xc8/0x270 [ 491.249306] ? do_raw_spin_unlock+0x53/0x220 [ 491.249341] ? kobject_put+0xaa/0x260 [ 491.249381] device_add+0x32d/0x1830 [ 491.249420] ? __pfx_device_add+0x10/0x10 [ 491.249457] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.249480] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.249514] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.249549] hci_conn_add_sysfs+0x117/0x1c0 [ 491.249576] le_conn_complete_evt+0x1246/0x1e40 [ 491.249619] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.249664] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.249702] ? __asan_memcpy+0x3d/0x60 [ 491.249734] hci_le_meta_evt+0x34b/0x530 [ 491.249766] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.249806] hci_event_packet+0x66c/0x10e0 [ 491.249842] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.249875] ? __pfx_hci_event_packet+0x10/0x10 [ 491.249910] ? mark_held_locks+0x49/0x80 [ 491.249942] ? kcov_remote_start+0x2ce/0x5a0 [ 491.249987] hci_rx_work+0x65b/0x8b0 [ 491.250026] process_one_work+0x8e1/0x1960 [ 491.250072] ? __pfx_process_one_work+0x10/0x10 [ 491.250103] ? move_linked_works+0x172/0x270 [ 491.250148] ? assign_work+0x196/0x240 [ 491.250181] worker_thread+0x67e/0xe90 [ 491.250213] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.250255] ? __pfx_worker_thread+0x10/0x10 [ 491.250288] kthread+0x3c8/0x740 [ 491.250316] ? __pfx_kthread+0x10/0x10 [ 491.250342] ? ret_from_fork+0x79/0x7a0 [ 491.250364] ? lock_release+0xc8/0x270 [ 491.250395] ? __pfx_kthread+0x10/0x10 [ 491.250425] ret_from_fork+0x67a/0x7a0 [ 491.250449] ? __pfx_ret_from_fork+0x10/0x10 [ 491.250477] ? __switch_to+0x759/0x1030 [ 491.250507] ? __pfx_kthread+0x10/0x10 [ 491.250537] ret_from_fork_asm+0x1a/0x30 [ 491.250589] [ 491.289659] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.293544] Bluetooth: hci2: failed to register connection device [ 491.298969] debugfs: '0' already exists in 'hci3' [ 491.300160] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 491.301575] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.301605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.301619] Workqueue: hci3 hci_rx_work [ 491.301653] Call Trace: [ 491.301661] [ 491.301670] dump_stack_lvl+0xfa/0x120 06:38:22 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) [ 491.301695] sysfs_warn_dup+0x80/0xa0 [ 491.301719] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.301742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.301764] ? find_held_lock+0x2b/0x80 [ 491.301790] ? lock_release+0xc8/0x270 [ 491.301820] ? do_raw_spin_unlock+0x53/0x220 [ 491.301858] kobject_add_internal+0x24c/0x9a0 [ 491.301894] kobject_add+0x157/0x240 [ 491.301923] ? __pfx_kobject_add+0x10/0x10 [ 491.301958] ? lock_release+0xc8/0x270 [ 491.301989] ? do_raw_spin_unlock+0x53/0x220 [ 491.302024] ? kobject_put+0xaa/0x260 [ 491.302063] device_add+0x32d/0x1830 [ 491.302102] ? __pfx_device_add+0x10/0x10 [ 491.302140] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.302164] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.302197] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.302230] hci_conn_add_sysfs+0x117/0x1c0 [ 491.302257] le_conn_complete_evt+0x1246/0x1e40 [ 491.302301] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.302345] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.302383] ? __asan_memcpy+0x3d/0x60 [ 491.302417] hci_le_meta_evt+0x34b/0x530 [ 491.302448] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.302489] hci_event_packet+0x66c/0x10e0 [ 491.302525] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.302558] ? __pfx_hci_event_packet+0x10/0x10 [ 491.302593] ? mark_held_locks+0x49/0x80 [ 491.302625] ? kcov_remote_start+0x2ce/0x5a0 [ 491.302673] hci_rx_work+0x65b/0x8b0 [ 491.302713] process_one_work+0x8e1/0x1960 [ 491.302759] ? __pfx_process_one_work+0x10/0x10 [ 491.302790] ? move_linked_works+0x172/0x270 [ 491.302834] ? assign_work+0x196/0x240 [ 491.302868] worker_thread+0x67e/0xe90 [ 491.302900] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.302942] ? __pfx_worker_thread+0x10/0x10 [ 491.302975] kthread+0x3c8/0x740 [ 491.303003] ? __pfx_kthread+0x10/0x10 [ 491.303029] ? ret_from_fork+0x79/0x7a0 [ 491.303052] ? lock_release+0xc8/0x270 [ 491.303083] ? __pfx_kthread+0x10/0x10 [ 491.303113] ret_from_fork+0x67a/0x7a0 [ 491.303137] ? __pfx_ret_from_fork+0x10/0x10 [ 491.303164] ? __switch_to+0x759/0x1030 [ 491.303195] ? __pfx_kthread+0x10/0x10 [ 491.303225] ret_from_fork_asm+0x1a/0x30 [ 491.303274] [ 491.304083] debugfs: '0' already exists in 'hci5' [ 491.304921] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.304988] Bluetooth: hci3: failed to register connection device [ 491.306227] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 491.331128] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.331145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.331153] Workqueue: hci5 hci_rx_work [ 491.331170] Call Trace: [ 491.331174] [ 491.331179] dump_stack_lvl+0xfa/0x120 [ 491.331192] sysfs_warn_dup+0x80/0xa0 [ 491.331204] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.331216] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.331227] ? find_held_lock+0x2b/0x80 [ 491.331240] ? lock_release+0xc8/0x270 [ 491.331255] ? do_raw_spin_unlock+0x53/0x220 [ 491.331274] kobject_add_internal+0x24c/0x9a0 [ 491.331294] kobject_add+0x157/0x240 [ 491.331309] ? __pfx_kobject_add+0x10/0x10 [ 491.331323] ? lock_release+0xc8/0x270 [ 491.331338] ? do_raw_spin_unlock+0x53/0x220 [ 491.331356] ? kobject_put+0xaa/0x260 [ 491.331376] device_add+0x32d/0x1830 [ 491.331396] ? __pfx_device_add+0x10/0x10 [ 491.331415] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.331427] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.331444] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.331461] hci_conn_add_sysfs+0x117/0x1c0 [ 491.331475] le_conn_complete_evt+0x1246/0x1e40 [ 491.331497] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.331519] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.331538] ? __asan_memcpy+0x3d/0x60 [ 491.331555] hci_le_meta_evt+0x34b/0x530 [ 491.331571] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.331592] hci_event_packet+0x66c/0x10e0 [ 491.331610] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.331626] ? __pfx_hci_event_packet+0x10/0x10 [ 491.331644] ? mark_held_locks+0x49/0x80 [ 491.331662] ? kcov_remote_start+0x2ce/0x5a0 [ 491.331685] hci_rx_work+0x65b/0x8b0 [ 491.331705] process_one_work+0x8e1/0x1960 [ 491.331728] ? __pfx_process_one_work+0x10/0x10 [ 491.331744] ? move_linked_works+0x172/0x270 [ 491.331766] ? assign_work+0x196/0x240 [ 491.331783] worker_thread+0x67e/0xe90 [ 491.331800] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.331821] ? __pfx_worker_thread+0x10/0x10 [ 491.331838] kthread+0x3c8/0x740 [ 491.331852] ? __pfx_kthread+0x10/0x10 [ 491.331866] ? ret_from_fork+0x79/0x7a0 [ 491.331877] ? lock_release+0xc8/0x270 [ 491.331893] ? __pfx_kthread+0x10/0x10 [ 491.331908] ret_from_fork+0x67a/0x7a0 [ 491.331920] ? __pfx_ret_from_fork+0x10/0x10 [ 491.331934] ? __switch_to+0x759/0x1030 [ 491.331956] ? __pfx_kthread+0x10/0x10 [ 491.331971] ret_from_fork_asm+0x1a/0x30 [ 491.331995] [ 491.359871] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.362091] Bluetooth: hci5: failed to register connection device [ 491.371872] Bluetooth: hci5: command 0x0406 tx timeout 06:38:22 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c8000665bde6ba124ae8e2235c55"], 0x25) [ 491.462124] debugfs: '0' already exists in 'hci3' [ 491.463317] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 491.464612] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.464641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.464656] Workqueue: hci3 hci_rx_work [ 491.464693] Call Trace: [ 491.464701] [ 491.464710] dump_stack_lvl+0xfa/0x120 [ 491.464736] sysfs_warn_dup+0x80/0xa0 [ 491.464760] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.464797] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.464818] ? find_held_lock+0x2b/0x80 [ 491.464844] ? lock_release+0xc8/0x270 [ 491.464874] ? do_raw_spin_unlock+0x53/0x220 [ 491.464910] kobject_add_internal+0x24c/0x9a0 [ 491.464951] kobject_add+0x157/0x240 [ 491.464980] ? __pfx_kobject_add+0x10/0x10 [ 491.465006] ? lock_release+0xc8/0x270 [ 491.465036] ? do_raw_spin_unlock+0x53/0x220 [ 491.465071] ? kobject_put+0xaa/0x260 [ 491.465109] device_add+0x32d/0x1830 [ 491.465149] ? __pfx_device_add+0x10/0x10 [ 491.465185] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.465209] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.465242] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.465274] hci_conn_add_sysfs+0x117/0x1c0 [ 491.465300] le_conn_complete_evt+0x1246/0x1e40 [ 491.465343] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.465386] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.465423] ? __asan_memcpy+0x3d/0x60 [ 491.465455] hci_le_meta_evt+0x34b/0x530 [ 491.465485] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.465524] hci_event_packet+0x66c/0x10e0 [ 491.465559] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.465591] ? __pfx_hci_event_packet+0x10/0x10 [ 491.465625] ? mark_held_locks+0x49/0x80 [ 491.465655] ? kcov_remote_start+0x2ce/0x5a0 [ 491.465699] hci_rx_work+0x65b/0x8b0 [ 491.465738] process_one_work+0x8e1/0x1960 [ 491.465783] ? __pfx_process_one_work+0x10/0x10 [ 491.465813] ? move_linked_works+0x172/0x270 [ 491.465857] ? assign_work+0x196/0x240 [ 491.465889] worker_thread+0x67e/0xe90 [ 491.465920] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.465962] ? __pfx_worker_thread+0x10/0x10 [ 491.465998] kthread+0x3c8/0x740 [ 491.466025] ? __pfx_kthread+0x10/0x10 [ 491.466051] ? ret_from_fork+0x79/0x7a0 [ 491.466074] ? lock_release+0xc8/0x270 [ 491.466103] ? __pfx_kthread+0x10/0x10 [ 491.466132] ret_from_fork+0x67a/0x7a0 [ 491.466155] ? __pfx_ret_from_fork+0x10/0x10 [ 491.466182] ? __switch_to+0x759/0x1030 [ 491.466212] ? __pfx_kthread+0x10/0x10 [ 491.466241] ret_from_fork_asm+0x1a/0x30 [ 491.466288] [ 491.501475] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.504622] Bluetooth: hci3: failed to register connection device [ 491.509459] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 491.511434] debugfs: '0' already exists in 'hci3' [ 491.515187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 491.516603] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 491.516631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.516645] Workqueue: hci3 hci_rx_work [ 491.516681] Call Trace: [ 491.516688] [ 491.516697] dump_stack_lvl+0xfa/0x120 [ 491.516722] sysfs_warn_dup+0x80/0xa0 [ 491.516745] sysfs_create_dir_ns+0x23b/0x2a0 [ 491.516766] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 491.516799] ? find_held_lock+0x2b/0x80 [ 491.516824] ? lock_release+0xc8/0x270 [ 491.516853] ? do_raw_spin_unlock+0x53/0x220 [ 491.516888] kobject_add_internal+0x24c/0x9a0 [ 491.516921] kobject_add+0x157/0x240 [ 491.516956] ? __pfx_kobject_add+0x10/0x10 [ 491.516981] ? lock_release+0xc8/0x270 [ 491.517010] ? do_raw_spin_unlock+0x53/0x220 [ 491.517043] ? kobject_put+0xaa/0x260 [ 491.517080] device_add+0x32d/0x1830 [ 491.517118] ? __pfx_device_add+0x10/0x10 [ 491.517152] ? hci_debugfs_create_conn+0x10f/0x240 [ 491.517175] ? mgmt_send_event_skb+0x2f3/0x460 [ 491.517207] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 491.517238] hci_conn_add_sysfs+0x117/0x1c0 [ 491.517264] le_conn_complete_evt+0x1246/0x1e40 [ 491.517304] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 491.517346] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 491.517381] ? __asan_memcpy+0x3d/0x60 [ 491.517413] hci_le_meta_evt+0x34b/0x530 [ 491.517442] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 491.517479] hci_event_packet+0x66c/0x10e0 [ 491.517513] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 491.517544] ? __pfx_hci_event_packet+0x10/0x10 [ 491.517577] ? mark_held_locks+0x49/0x80 [ 491.517606] ? kcov_remote_start+0x2ce/0x5a0 [ 491.517649] hci_rx_work+0x65b/0x8b0 [ 491.517686] process_one_work+0x8e1/0x1960 [ 491.517730] ? __pfx_process_one_work+0x10/0x10 [ 491.517759] ? move_linked_works+0x172/0x270 [ 491.517801] ? assign_work+0x196/0x240 [ 491.517832] worker_thread+0x67e/0xe90 [ 491.517862] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 491.517902] ? __pfx_worker_thread+0x10/0x10 [ 491.517933] kthread+0x3c8/0x740 [ 491.517960] ? __pfx_kthread+0x10/0x10 [ 491.517984] ? ret_from_fork+0x79/0x7a0 [ 491.518007] ? lock_release+0xc8/0x270 [ 491.518036] ? __pfx_kthread+0x10/0x10 [ 491.518063] ret_from_fork+0x67a/0x7a0 [ 491.518085] ? __pfx_ret_from_fork+0x10/0x10 [ 491.518111] ? __switch_to+0x759/0x1030 [ 491.518140] ? __pfx_kthread+0x10/0x10 [ 491.518168] ret_from_fork_asm+0x1a/0x30 [ 491.518214] [ 491.557088] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.559411] Bluetooth: hci3: failed to register connection device [ 491.561315] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 491.801052] Bluetooth: hci6: command 0x0406 tx timeout [ 492.698754] Bluetooth: hci2: command 0x0406 tx timeout [ 493.401093] Bluetooth: hci5: command 0x0406 tx timeout [ 493.401152] Bluetooth: hci3: command 0x0406 tx timeout [ 493.849139] Bluetooth: hci6: command 0x0406 tx timeout [ 494.750132] Bluetooth: hci2: command 0x0406 tx timeout [ 495.449558] Bluetooth: hci5: command 0x0406 tx timeout [ 495.449621] Bluetooth: hci3: command 0x0406 tx timeout [ 495.897055] Bluetooth: hci6: command 0x0406 tx timeout [ 496.795635] Bluetooth: hci2: command 0x0406 tx timeout [ 497.497060] Bluetooth: hci5: command 0x0406 tx timeout [ 497.497155] Bluetooth: hci3: command 0x0406 tx timeout [ 497.945063] Bluetooth: hci6: command 0x0406 tx timeout [ 498.842154] Bluetooth: hci2: command 0x0406 tx timeout [ 499.545091] Bluetooth: hci5: command 0x0406 tx timeout [ 499.545115] Bluetooth: hci3: command 0x0406 tx timeout [ 499.993023] Bluetooth: hci6: command 0x0406 tx timeout [ 500.890627] Bluetooth: hci2: command 0x0406 tx timeout [ 501.594008] Bluetooth: hci5: command 0x0406 tx timeout [ 501.594892] Bluetooth: hci3: command 0x0406 tx timeout 06:38:33 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc8, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9, 0x0, 0x5}}}}, 0x10) 06:38:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x2, 0x6}) lremovexattr(0x0, 0x0) 06:38:33 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:38:33 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x13c}, @l2cap_cid_signaling={{0x138}, [@l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x9, 0x9}}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x9, 0x2}}, @l2cap_info_rsp={{0xb, 0x9, 0xea}, {0x4, 0x0, "459684fe196151e21af369f05e2bddb0abffbeb500313440ad00ceac2e6decf16579e152872f69f8b66465f4a735f9ae51e987805a87dbc16147592cce9d79ac397e62604cb63b34a9d66090a81a4d36196b557bd0cb53965cbf9cd4938001a62f71a6db49226548fab8aa8b1abf50ca174a7103784123261125fc0dd6a4e4facbb756fc380fed4a70ea5a82f9686b52129899bb6795bfefdc9f76c72aed2aa822cedf9ffe96396800fdf1997cc31c86f8228954bb657e110b36dab9e0b10a910ee3b74c3cd8bd2310423c80746caad5c8efb2df475392146d09216729ec366ee70aee12a8db"}}, @l2cap_cmd_rej_unk={{0x1, 0x94, 0x2}, {0xff78}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x6, 0x4000, 0x21}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x101, 0x8001}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x1, 0x800}}, @l2cap_create_chan_req={{0xc, 0xff, 0x5}, {0x1, 0x0, 0xa9}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0xff80, 0x401, 0x1ff, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xde, 0x2}, {0x400}}]}}, 0x141) 06:38:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0xc00000000000000) 06:38:33 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:38:33 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) 06:38:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000006c0)="b7ef9b6d33013cb7a59e60f385c059ee0a6bcd5b5f18f80081584283bee5eafbca0a574bea10360b36db4e5d846dade2d21a564f9a33cf7ca2829c386c354ec457c7cb319092bde729e3c92837581fadd7f6a32ea3f970a68031ede65a3292eb5b0d3e36a8f1d890387a49ea6f7905a03bbee12dba249704d7ac99f60c2dec8d75f4125b499e941a6599159250de1003dbc839ba78227e63681fde4e1dd87243e2cf4d84b2606861431526cd8243c9d76ed758cb413d11fb0bc7efac271b6c399caa1a1ca5", 0xc5}, {&(0x7f00000002c0)="235b2a3f809b636e8c10c8f8710b1083bbeac350d940a4346182997a2b01cb95f4a3017b4fc31e2c2f0800a038ee32a5c75a4db292d3ebf14b", 0x39}], 0x2) read(r0, &(0x7f00000001c0)=""/253, 0xfd) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) [ 501.804642] debugfs: '200' already exists in 'hci6' [ 501.806015] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:200' [ 501.807838] CPU: 0 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 501.807873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 501.807891] Workqueue: hci6 hci_rx_work [ 501.807935] Call Trace: [ 501.807952] [ 501.807962] dump_stack_lvl+0xfa/0x120 [ 501.807993] sysfs_warn_dup+0x80/0xa0 [ 501.808021] sysfs_create_dir_ns+0x23b/0x2a0 [ 501.808047] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 501.808071] ? find_held_lock+0x2b/0x80 [ 501.808101] ? lock_release+0xc8/0x270 [ 501.808136] ? do_raw_spin_unlock+0x53/0x220 [ 501.808178] kobject_add_internal+0x24c/0x9a0 [ 501.808219] kobject_add+0x157/0x240 [ 501.808252] ? __pfx_kobject_add+0x10/0x10 [ 501.808283] ? lock_release+0xc8/0x270 [ 501.808318] ? do_raw_spin_unlock+0x53/0x220 [ 501.808358] ? kobject_put+0xaa/0x260 [ 501.808402] device_add+0x32d/0x1830 [ 501.808450] ? __pfx_device_add+0x10/0x10 [ 501.808493] ? hci_debugfs_create_conn+0x10f/0x240 [ 501.808522] ? mgmt_send_event_skb+0x2f3/0x460 [ 501.808561] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 501.808598] hci_conn_add_sysfs+0x117/0x1c0 [ 501.808629] le_conn_complete_evt+0x1246/0x1e40 [ 501.808679] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 501.808729] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 501.808771] ? __asan_memcpy+0x3d/0x60 [ 501.808809] hci_le_meta_evt+0x34b/0x530 [ 501.808845] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 501.808890] hci_event_packet+0x66c/0x10e0 [ 501.808945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 501.808983] ? __pfx_hci_event_packet+0x10/0x10 [ 501.809022] ? mark_held_locks+0x49/0x80 [ 501.809057] ? kcov_remote_start+0x2ce/0x5a0 [ 501.809109] hci_rx_work+0x65b/0x8b0 [ 501.809153] process_one_work+0x8e1/0x1960 [ 501.809206] ? __pfx_process_one_work+0x10/0x10 [ 501.809241] ? move_linked_works+0x172/0x270 [ 501.809291] ? assign_work+0x196/0x240 [ 501.809328] worker_thread+0x67e/0xe90 [ 501.809364] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 501.809414] ? __pfx_worker_thread+0x10/0x10 [ 501.809451] kthread+0x3c8/0x740 [ 501.809483] ? __pfx_kthread+0x10/0x10 [ 501.809513] ? ret_from_fork+0x79/0x7a0 [ 501.809540] ? lock_release+0xc8/0x270 [ 501.809574] ? __pfx_kthread+0x10/0x10 [ 501.809607] ret_from_fork+0x67a/0x7a0 [ 501.809634] ? __pfx_ret_from_fork+0x10/0x10 [ 501.809658] ? save_fpregs_to_fpstate+0x145/0x270 [ 501.809696] ? __switch_to+0x759/0x1030 [ 501.809732] ? __pfx_kthread+0x10/0x10 [ 501.809766] ret_from_fork_asm+0x1a/0x30 [ 501.809821] [ 501.855005] kobject: kobject_add_internal failed for hci6:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.858625] Bluetooth: hci6: failed to register connection device [ 501.885733] debugfs: '0' already exists in 'hci2' [ 501.886830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 501.888350] CPU: 0 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 501.888379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 501.888392] Workqueue: hci2 hci_rx_work [ 501.888424] Call Trace: [ 501.888431] [ 501.888439] dump_stack_lvl+0xfa/0x120 [ 501.888462] sysfs_warn_dup+0x80/0xa0 [ 501.888483] sysfs_create_dir_ns+0x23b/0x2a0 [ 501.888505] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 501.888525] ? find_held_lock+0x2b/0x80 [ 501.888548] ? lock_release+0xc8/0x270 [ 501.888576] ? do_raw_spin_unlock+0x53/0x220 [ 501.888611] kobject_add_internal+0x24c/0x9a0 [ 501.888644] kobject_add+0x157/0x240 [ 501.888671] ? __pfx_kobject_add+0x10/0x10 [ 501.888697] ? lock_release+0xc8/0x270 [ 501.888726] ? do_raw_spin_unlock+0x53/0x220 [ 501.888759] ? kobject_put+0xaa/0x260 [ 501.888796] device_add+0x32d/0x1830 [ 501.888832] ? __pfx_device_add+0x10/0x10 [ 501.888867] ? hci_debugfs_create_conn+0x10f/0x240 [ 501.888889] ? mgmt_send_event_skb+0x2f3/0x460 [ 501.888921] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 501.888971] hci_conn_add_sysfs+0x117/0x1c0 [ 501.888996] le_conn_complete_evt+0x1246/0x1e40 [ 501.889037] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 501.889079] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 501.889115] ? __asan_memcpy+0x3d/0x60 [ 501.889145] hci_le_meta_evt+0x34b/0x530 [ 501.889174] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 501.889212] hci_event_packet+0x66c/0x10e0 [ 501.889245] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 501.889276] ? __pfx_hci_event_packet+0x10/0x10 [ 501.889309] ? mark_held_locks+0x49/0x80 [ 501.889338] ? kcov_remote_start+0x2ce/0x5a0 [ 501.889380] hci_rx_work+0x65b/0x8b0 [ 501.889417] process_one_work+0x8e1/0x1960 [ 501.889459] ? __pfx_process_one_work+0x10/0x10 [ 501.889488] ? move_linked_works+0x172/0x270 [ 501.889529] ? assign_work+0x196/0x240 [ 501.889560] worker_thread+0x67e/0xe90 [ 501.889590] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 501.889629] ? __pfx_worker_thread+0x10/0x10 [ 501.889660] kthread+0x3c8/0x740 [ 501.889686] ? __pfx_kthread+0x10/0x10 [ 501.889710] ? ret_from_fork+0x79/0x7a0 [ 501.889731] ? lock_release+0xc8/0x270 [ 501.889760] ? __pfx_kthread+0x10/0x10 [ 501.889788] ret_from_fork+0x67a/0x7a0 [ 501.889810] ? __pfx_ret_from_fork+0x10/0x10 [ 501.889829] ? save_fpregs_to_fpstate+0x145/0x270 [ 501.889860] ? __switch_to+0x759/0x1030 [ 501.889888] ? __pfx_kthread+0x10/0x10 [ 501.889916] ret_from_fork_asm+0x1a/0x30 [ 501.889961] [ 501.896384] debugfs: '0' already exists in 'hci3' [ 501.897001] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.897596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 501.898065] Bluetooth: hci2: failed to register connection device [ 501.898519] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 501.898540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 501.898551] Workqueue: hci3 hci_rx_work [ 501.898579] Call Trace: [ 501.898585] [ 501.898592] dump_stack_lvl+0xfa/0x120 [ 501.898611] sysfs_warn_dup+0x80/0xa0 [ 501.898630] sysfs_create_dir_ns+0x23b/0x2a0 [ 501.898645] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 501.898660] ? find_held_lock+0x2b/0x80 [ 501.898679] ? lock_release+0xc8/0x270 [ 501.898700] ? do_raw_spin_unlock+0x53/0x220 [ 501.898725] kobject_add_internal+0x24c/0x9a0 [ 501.898750] kobject_add+0x157/0x240 [ 501.898769] ? __pfx_kobject_add+0x10/0x10 [ 501.898788] ? lock_release+0xc8/0x270 [ 501.898809] ? do_raw_spin_unlock+0x53/0x220 [ 501.898832] ? kobject_put+0xaa/0x260 [ 501.898859] device_add+0x32d/0x1830 [ 501.898887] ? __pfx_device_add+0x10/0x10 [ 501.898912] ? hci_debugfs_create_conn+0x10f/0x240 [ 501.898929] ? mgmt_send_event_skb+0x2f3/0x460 [ 501.898959] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 501.898980] hci_conn_add_sysfs+0x117/0x1c0 [ 501.898999] le_conn_complete_evt+0x1246/0x1e40 [ 501.899029] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 501.899058] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 501.899083] ? __asan_memcpy+0x3d/0x60 [ 501.899108] hci_le_meta_evt+0x34b/0x530 [ 501.899129] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 501.899156] hci_event_packet+0x66c/0x10e0 [ 501.899180] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 501.899202] ? __pfx_hci_event_packet+0x10/0x10 [ 501.899225] ? mark_held_locks+0x49/0x80 [ 501.899246] ? kcov_remote_start+0x2ce/0x5a0 [ 501.899277] hci_rx_work+0x65b/0x8b0 [ 501.899303] process_one_work+0x8e1/0x1960 [ 501.899335] ? __pfx_process_one_work+0x10/0x10 [ 501.899355] ? move_linked_works+0x172/0x270 [ 501.899385] ? assign_work+0x196/0x240 [ 501.899407] worker_thread+0x67e/0xe90 [ 501.899429] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 501.899458] ? __pfx_worker_thread+0x10/0x10 [ 501.899480] kthread+0x3c8/0x740 [ 501.899499] ? __pfx_kthread+0x10/0x10 [ 501.899516] ? ret_from_fork+0x79/0x7a0 [ 501.899533] ? lock_release+0xc8/0x270 [ 501.899553] ? __pfx_kthread+0x10/0x10 [ 501.899573] ret_from_fork+0x67a/0x7a0 [ 501.899589] ? __pfx_ret_from_fork+0x10/0x10 [ 501.899607] ? __switch_to+0x759/0x1030 [ 501.899629] ? __pfx_kthread+0x10/0x10 [ 501.899649] ret_from_fork_asm+0x1a/0x30 [ 501.899682] [ 501.899733] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.947597] Bluetooth: hci3: failed to register connection device [ 501.967539] debugfs: '0' already exists in 'hci2' [ 501.968280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 501.969154] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 501.969174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 501.969183] Workqueue: hci2 hci_rx_work [ 501.969204] Call Trace: [ 501.969209] [ 501.969215] dump_stack_lvl+0xfa/0x120 [ 501.969231] sysfs_warn_dup+0x80/0xa0 [ 501.969247] sysfs_create_dir_ns+0x23b/0x2a0 [ 501.969262] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 501.969275] ? find_held_lock+0x2b/0x80 [ 501.969291] ? lock_release+0xc8/0x270 [ 501.969310] ? do_raw_spin_unlock+0x53/0x220 [ 501.969334] kobject_add_internal+0x24c/0x9a0 [ 501.969357] kobject_add+0x157/0x240 [ 501.969376] ? __pfx_kobject_add+0x10/0x10 [ 501.969393] ? lock_release+0xc8/0x270 [ 501.969413] ? do_raw_spin_unlock+0x53/0x220 [ 501.969435] ? kobject_put+0xaa/0x260 [ 501.969460] device_add+0x32d/0x1830 [ 501.969485] ? __pfx_device_add+0x10/0x10 [ 501.969509] ? hci_debugfs_create_conn+0x10f/0x240 [ 501.969524] ? mgmt_send_event_skb+0x2f3/0x460 [ 501.969546] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 501.969567] hci_conn_add_sysfs+0x117/0x1c0 [ 501.969584] le_conn_complete_evt+0x1246/0x1e40 [ 501.969611] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 501.969640] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 501.969664] ? __asan_memcpy+0x3d/0x60 [ 501.969685] hci_le_meta_evt+0x34b/0x530 [ 501.969705] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 501.969731] hci_event_packet+0x66c/0x10e0 [ 501.969756] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 501.969776] ? __pfx_hci_event_packet+0x10/0x10 [ 501.969799] ? mark_held_locks+0x49/0x80 [ 501.969818] ? kcov_remote_start+0x2ce/0x5a0 [ 501.969847] hci_rx_work+0x65b/0x8b0 [ 501.969872] process_one_work+0x8e1/0x1960 [ 501.969900] ? __pfx_process_one_work+0x10/0x10 [ 501.969920] ? move_linked_works+0x172/0x270 [ 501.969953] ? assign_work+0x196/0x240 [ 501.969974] worker_thread+0x67e/0xe90 [ 501.969994] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 501.970020] ? __pfx_worker_thread+0x10/0x10 [ 501.970041] kthread+0x3c8/0x740 [ 501.970059] ? __pfx_kthread+0x10/0x10 [ 501.970075] ? ret_from_fork+0x79/0x7a0 [ 501.970089] ? lock_release+0xc8/0x270 [ 501.970108] ? __pfx_kthread+0x10/0x10 [ 501.970127] ret_from_fork+0x67a/0x7a0 [ 501.970142] ? __pfx_ret_from_fork+0x10/0x10 [ 501.970159] ? __switch_to+0x759/0x1030 [ 501.970178] ? __pfx_kthread+0x10/0x10 [ 501.970197] ret_from_fork_asm+0x1a/0x30 [ 501.970228] [ 501.992345] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.993612] Bluetooth: hci2: failed to register connection device [ 502.041022] Bluetooth: hci6: command 0x0406 tx timeout [ 502.938063] Bluetooth: hci2: command 0x0406 tx timeout [ 503.641027] Bluetooth: hci3: command 0x0406 tx timeout [ 503.641127] Bluetooth: hci5: command 0x0406 tx timeout [ 504.089252] Bluetooth: hci6: command 0x0406 tx timeout [ 504.988847] Bluetooth: hci2: command 0x0406 tx timeout [ 505.689322] Bluetooth: hci3: command 0x0406 tx timeout [ 505.689430] Bluetooth: hci5: command 0x0406 tx timeout [ 506.137085] Bluetooth: hci6: command 0x0406 tx timeout [ 507.034754] Bluetooth: hci2: command 0x0406 tx timeout [ 507.737169] Bluetooth: hci5: command 0x0406 tx timeout [ 507.737209] Bluetooth: hci3: command 0x0406 tx timeout [ 508.185074] Bluetooth: hci6: command 0x0406 tx timeout [ 509.084118] Bluetooth: hci2: command 0x0406 tx timeout [ 509.785137] Bluetooth: hci5: command 0x0406 tx timeout [ 509.785153] Bluetooth: hci3: command 0x0406 tx timeout [ 510.233001] Bluetooth: hci6: command 0x0406 tx timeout [ 511.136540] Bluetooth: hci2: command 0x0406 tx timeout 06:38:42 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:38:42 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) 06:38:42 executing program 2: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:38:42 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x1, @none, @none, @none, 0x0, 0x0, 0x3}}}}, 0x22) 06:38:42 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) 06:38:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) 06:38:42 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:38:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/62, 0x3e) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) [ 511.199926] debugfs: '0' already exists in 'hci2' [ 511.201468] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 511.203130] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.203164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.203182] Workqueue: hci2 hci_rx_work [ 511.203224] Call Trace: [ 511.203232] [ 511.203242] dump_stack_lvl+0xfa/0x120 [ 511.203272] sysfs_warn_dup+0x80/0xa0 [ 511.203300] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.203326] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.203351] ? find_held_lock+0x2b/0x80 [ 511.203380] ? lock_release+0xc8/0x270 [ 511.203416] ? do_raw_spin_unlock+0x53/0x220 [ 511.203458] kobject_add_internal+0x24c/0x9a0 [ 511.203498] kobject_add+0x157/0x240 [ 511.203532] ? __pfx_kobject_add+0x10/0x10 [ 511.203562] ? lock_release+0xc8/0x270 [ 511.203597] ? do_raw_spin_unlock+0x53/0x220 [ 511.203636] ? kobject_put+0xaa/0x260 [ 511.203680] device_add+0x32d/0x1830 [ 511.203726] ? __pfx_device_add+0x10/0x10 [ 511.203768] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.203796] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.203835] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.203872] hci_conn_add_sysfs+0x117/0x1c0 [ 511.203902] le_conn_complete_evt+0x1246/0x1e40 [ 511.203960] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.204011] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.204054] ? __asan_memcpy+0x3d/0x60 [ 511.204092] hci_le_meta_evt+0x34b/0x530 [ 511.204128] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.204174] hci_event_packet+0x66c/0x10e0 [ 511.204215] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.204252] ? __pfx_hci_event_packet+0x10/0x10 [ 511.204292] ? mark_held_locks+0x49/0x80 [ 511.204328] ? kcov_remote_start+0x2ce/0x5a0 [ 511.204379] hci_rx_work+0x65b/0x8b0 [ 511.204424] process_one_work+0x8e1/0x1960 [ 511.204477] ? __pfx_process_one_work+0x10/0x10 [ 511.204512] ? move_linked_works+0x172/0x270 [ 511.204562] ? assign_work+0x196/0x240 [ 511.204600] worker_thread+0x67e/0xe90 [ 511.204636] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.204685] ? __pfx_worker_thread+0x10/0x10 [ 511.204722] kthread+0x3c8/0x740 [ 511.204754] ? __pfx_kthread+0x10/0x10 [ 511.204784] ? ret_from_fork+0x79/0x7a0 [ 511.204811] ? lock_release+0xc8/0x270 [ 511.204845] ? __pfx_kthread+0x10/0x10 [ 511.204879] ret_from_fork+0x67a/0x7a0 [ 511.204905] ? __pfx_ret_from_fork+0x10/0x10 [ 511.204936] ? __switch_to+0x759/0x1030 [ 511.204972] ? __pfx_kthread+0x10/0x10 [ 511.205006] ret_from_fork_asm+0x1a/0x30 [ 511.205061] [ 511.245803] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.250045] Bluetooth: hci2: failed to register connection device [ 511.251690] debugfs: '201' already exists in 'hci3' [ 511.253013] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 511.254607] CPU: 0 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.254647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.254663] Workqueue: hci3 hci_rx_work [ 511.254701] Call Trace: [ 511.254708] [ 511.254718] dump_stack_lvl+0xfa/0x120 [ 511.254744] sysfs_warn_dup+0x80/0xa0 [ 511.254769] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.254793] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.254814] ? find_held_lock+0x2b/0x80 [ 511.254841] ? lock_release+0xc8/0x270 [ 511.254872] ? do_raw_spin_unlock+0x53/0x220 [ 511.254910] kobject_add_internal+0x24c/0x9a0 [ 511.254954] kobject_add+0x157/0x240 [ 511.254984] ? __pfx_kobject_add+0x10/0x10 [ 511.255012] ? lock_release+0xc8/0x270 [ 511.255042] ? do_raw_spin_unlock+0x53/0x220 [ 511.255077] ? kobject_put+0xaa/0x260 [ 511.255116] device_add+0x32d/0x1830 [ 511.255157] ? __pfx_device_add+0x10/0x10 [ 511.255195] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.255219] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.255254] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.255287] hci_conn_add_sysfs+0x117/0x1c0 [ 511.255315] le_conn_complete_evt+0x1246/0x1e40 [ 511.255359] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.255404] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.255441] ? __asan_memcpy+0x3d/0x60 [ 511.255475] hci_le_meta_evt+0x34b/0x530 [ 511.255507] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.255547] hci_event_packet+0x66c/0x10e0 [ 511.255584] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.255618] ? __pfx_hci_event_packet+0x10/0x10 [ 511.255653] ? mark_held_locks+0x49/0x80 [ 511.255684] ? kcov_remote_start+0x2ce/0x5a0 [ 511.255731] hci_rx_work+0x65b/0x8b0 [ 511.255770] process_one_work+0x8e1/0x1960 [ 511.255817] ? __pfx_process_one_work+0x10/0x10 [ 511.255848] ? move_linked_works+0x172/0x270 [ 511.255893] ? assign_work+0x196/0x240 [ 511.255926] worker_thread+0x67e/0xe90 [ 511.255959] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.256002] ? __pfx_worker_thread+0x10/0x10 [ 511.256035] kthread+0x3c8/0x740 [ 511.256063] ? __pfx_kthread+0x10/0x10 [ 511.256090] ? ret_from_fork+0x79/0x7a0 [ 511.256113] ? lock_release+0xc8/0x270 [ 511.256144] ? __pfx_kthread+0x10/0x10 [ 511.256174] ret_from_fork+0x67a/0x7a0 [ 511.256198] ? __pfx_ret_from_fork+0x10/0x10 [ 511.256218] ? save_fpregs_to_fpstate+0x145/0x270 [ 511.256252] ? __switch_to+0x759/0x1030 [ 511.256283] ? __pfx_kthread+0x10/0x10 [ 511.256313] ret_from_fork_asm+0x1a/0x30 [ 511.256363] [ 511.262389] debugfs: '0' already exists in 'hci6' [ 511.263381] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.263677] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 511.264315] Bluetooth: hci3: failed to register connection device 06:38:42 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) [ 511.264687] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.264705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.264713] Workqueue: hci6 hci_rx_work [ 511.264736] Call Trace: [ 511.264740] [ 511.264745] dump_stack_lvl+0xfa/0x120 [ 511.264760] sysfs_warn_dup+0x80/0xa0 [ 511.264774] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.264786] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.264797] ? find_held_lock+0x2b/0x80 [ 511.264811] ? lock_release+0xc8/0x270 [ 511.264828] ? do_raw_spin_unlock+0x53/0x220 [ 511.264847] kobject_add_internal+0x24c/0x9a0 [ 511.264866] kobject_add+0x157/0x240 [ 511.264880] ? __pfx_kobject_add+0x10/0x10 [ 511.264894] ? lock_release+0xc8/0x270 [ 511.264910] ? do_raw_spin_unlock+0x53/0x220 [ 511.264927] ? kobject_put+0xaa/0x260 [ 511.264952] device_add+0x32d/0x1830 [ 511.264973] ? __pfx_device_add+0x10/0x10 [ 511.264992] ? hci_debugfs_create_conn+0x10f/0x240 06:38:42 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc9}, "d9f0da0e152fcfd1f592420c338880f2fbb991198258869ff3c9e4550bac81fa0c7508b0cfade3e5bc9ae32d26583c2f700d0a84a340b7f217293e9c516daec0f7ea4fdfe376558198d6e7be21694fe8454ab23ba8660a56f23eab0907afe61bb4bc386f23aefda7fd7c35ee9e0f4e6346436e409d997d3f3684e2c1cb29c6968f42f98987e6c77e57fa8102dc09023b098ad3ffbab69248bed271848c9aba0f787cc00d43af810b081f42ba3b6b5602c2f97113b0d2dd52cec04cb91677ff7d637ada75f5b2c21e0a"}, 0xcd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x3}}}, 0xd) 06:38:42 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0c3e1f0a000500000000000000aa000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_disconn_req={{0x6, 0x1f, 0x4}, {0x74f1, 0x4}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x101, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0xf8f, 0x5}}]}}, 0x21) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x0, 0x5}}}}, 0x11) 06:38:42 executing program 0: modify_ldt$read(0x0, &(0x7f0000000100)=""/23, 0x17) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000000)="d475440ce0a3719fa06e83c77e1d7a0f3c80dbf4baa9d69270fcdcce515eb3b304000000ee32d940bc2140f95219915b72a32f1eba2ee58608be2b28524c4d09473b2fefa31d23215de52a0a130149cb5e29a752a24f6c0a2f71c44b0d9e62e31ae0fdd11a975e3430e2a437c02c4834c81969cf014a", 0x76, 0x7ffe, 0x0, 0x1}, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140), 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x8, 0x80, 0x3f, 0x2}, {0x8, 0xf8, 0x0, 0xfffffffa}, {0x0, 0x80, 0x7b, 0x5}, {0x3f, 0x4, 0x9, 0x25c5}, {0xfffb, 0xff, 0x4, 0x9}, {0xae8, 0x7, 0x1f, 0x5}, {0x471c, 0x7, 0xff, 0xfffeffff}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) [ 511.265005] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.265023] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.265040] hci_conn_add_sysfs+0x117/0x1c0 [ 511.265054] le_conn_complete_evt+0x1246/0x1e40 [ 511.265077] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.265107] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.265126] ? __asan_memcpy+0x3d/0x60 [ 511.265144] hci_le_meta_evt+0x34b/0x530 [ 511.265160] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.265181] hci_event_packet+0x66c/0x10e0 [ 511.265199] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.265216] ? __pfx_hci_event_packet+0x10/0x10 [ 511.265233] ? mark_held_locks+0x49/0x80 [ 511.265249] ? kcov_remote_start+0x2ce/0x5a0 [ 511.265272] hci_rx_work+0x65b/0x8b0 [ 511.265292] process_one_work+0x8e1/0x1960 [ 511.265317] ? __pfx_process_one_work+0x10/0x10 [ 511.265333] ? move_linked_works+0x172/0x270 [ 511.265355] ? assign_work+0x196/0x240 [ 511.265372] worker_thread+0x67e/0xe90 [ 511.265389] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.265411] ? __pfx_worker_thread+0x10/0x10 [ 511.265428] kthread+0x3c8/0x740 [ 511.265443] ? __pfx_kthread+0x10/0x10 [ 511.265456] ? ret_from_fork+0x79/0x7a0 [ 511.265469] ? lock_release+0xc8/0x270 [ 511.265484] ? __pfx_kthread+0x10/0x10 [ 511.265499] ret_from_fork+0x67a/0x7a0 [ 511.265511] ? __pfx_ret_from_fork+0x10/0x10 [ 511.265525] ? __switch_to+0x759/0x1030 [ 511.265542] ? __pfx_kthread+0x10/0x10 [ 511.265557] ret_from_fork_asm+0x1a/0x30 [ 511.265582] [ 511.265621] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.266600] debugfs: '0' already exists in 'hci2' [ 511.266757] Bluetooth: hci6: failed to register connection device [ 511.267729] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 511.322541] debugfs: '201' already exists in 'hci3' [ 511.322610] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.322644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.322660] Workqueue: hci2 hci_rx_work [ 511.322703] Call Trace: [ 511.322711] [ 511.322721] dump_stack_lvl+0xfa/0x120 [ 511.322748] sysfs_warn_dup+0x80/0xa0 [ 511.322774] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.322798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.322820] ? find_held_lock+0x2b/0x80 [ 511.322847] ? lock_release+0xc8/0x270 [ 511.322879] ? do_raw_spin_unlock+0x53/0x220 [ 511.322917] kobject_add_internal+0x24c/0x9a0 [ 511.322962] kobject_add+0x157/0x240 [ 511.322992] ? __pfx_kobject_add+0x10/0x10 [ 511.323020] ? lock_release+0xc8/0x270 [ 511.323051] ? do_raw_spin_unlock+0x53/0x220 [ 511.323086] ? kobject_put+0xaa/0x260 [ 511.323127] device_add+0x32d/0x1830 [ 511.323168] ? __pfx_device_add+0x10/0x10 [ 511.323205] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.323230] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.323265] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.323300] hci_conn_add_sysfs+0x117/0x1c0 [ 511.323327] le_conn_complete_evt+0x1246/0x1e40 [ 511.323372] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.323417] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.323455] ? __asan_memcpy+0x3d/0x60 [ 511.323489] hci_le_meta_evt+0x34b/0x530 [ 511.323521] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.323562] hci_event_packet+0x66c/0x10e0 [ 511.323598] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.323631] ? __pfx_hci_event_packet+0x10/0x10 [ 511.323667] ? mark_held_locks+0x49/0x80 [ 511.323699] ? kcov_remote_start+0x2ce/0x5a0 [ 511.323745] hci_rx_work+0x65b/0x8b0 [ 511.323785] process_one_work+0x8e1/0x1960 [ 511.323833] ? __pfx_process_one_work+0x10/0x10 [ 511.323864] ? move_linked_works+0x172/0x270 [ 511.323909] ? assign_work+0x196/0x240 [ 511.323943] worker_thread+0x67e/0xe90 [ 511.323976] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.324019] ? __pfx_worker_thread+0x10/0x10 [ 511.324053] kthread+0x3c8/0x740 [ 511.324081] ? __pfx_kthread+0x10/0x10 [ 511.324108] ? ret_from_fork+0x79/0x7a0 [ 511.324131] ? lock_release+0xc8/0x270 [ 511.324162] ? __pfx_kthread+0x10/0x10 [ 511.324193] ret_from_fork+0x67a/0x7a0 [ 511.324217] ? __pfx_ret_from_fork+0x10/0x10 [ 511.324245] ? __switch_to+0x759/0x1030 [ 511.324277] ? __pfx_kthread+0x10/0x10 [ 511.324308] ret_from_fork_asm+0x1a/0x30 [ 511.324359] [ 511.324455] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.324852] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 511.325645] Bluetooth: hci2: failed to register connection device [ 511.325981] CPU: 1 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.325999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.326008] Workqueue: hci3 hci_rx_work [ 511.326031] Call Trace: [ 511.326035] [ 511.326040] dump_stack_lvl+0xfa/0x120 [ 511.326057] sysfs_warn_dup+0x80/0xa0 [ 511.326071] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.326084] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.326096] ? find_held_lock+0x2b/0x80 [ 511.326111] ? lock_release+0xc8/0x270 [ 511.326128] ? do_raw_spin_unlock+0x53/0x220 [ 511.326148] kobject_add_internal+0x24c/0x9a0 [ 511.326168] kobject_add+0x157/0x240 [ 511.326184] ? __pfx_kobject_add+0x10/0x10 [ 511.326198] ? lock_release+0xc8/0x270 [ 511.326214] ? do_raw_spin_unlock+0x53/0x220 [ 511.326233] ? kobject_put+0xaa/0x260 [ 511.326253] device_add+0x32d/0x1830 [ 511.326276] ? __pfx_device_add+0x10/0x10 [ 511.326296] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.326311] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.326330] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.326347] hci_conn_add_sysfs+0x117/0x1c0 [ 511.326363] le_conn_complete_evt+0x1246/0x1e40 [ 511.326389] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.326415] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.326435] ? __asan_memcpy+0x3d/0x60 [ 511.326453] hci_le_meta_evt+0x34b/0x530 [ 511.326470] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.326492] hci_event_packet+0x66c/0x10e0 [ 511.326511] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.326529] ? __pfx_hci_event_packet+0x10/0x10 [ 511.326547] ? mark_held_locks+0x49/0x80 [ 511.326563] ? kcov_remote_start+0x2ce/0x5a0 [ 511.326588] hci_rx_work+0x65b/0x8b0 [ 511.326609] process_one_work+0x8e1/0x1960 [ 511.326634] ? __pfx_process_one_work+0x10/0x10 [ 511.326650] ? move_linked_works+0x172/0x270 [ 511.326674] ? assign_work+0x196/0x240 [ 511.326691] worker_thread+0x67e/0xe90 [ 511.326708] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.326734] ? __pfx_worker_thread+0x10/0x10 [ 511.326751] kthread+0x3c8/0x740 [ 511.326767] ? __pfx_kthread+0x10/0x10 [ 511.326781] ? ret_from_fork+0x79/0x7a0 [ 511.326794] ? lock_release+0xc8/0x270 [ 511.326810] ? __pfx_kthread+0x10/0x10 [ 511.326825] ret_from_fork+0x67a/0x7a0 [ 511.326838] ? __pfx_ret_from_fork+0x10/0x10 [ 511.326848] ? save_fpregs_to_fpstate+0x145/0x270 [ 511.326866] ? __switch_to+0x759/0x1030 [ 511.326884] ? __pfx_kthread+0x10/0x10 [ 511.326899] ret_from_fork_asm+0x1a/0x30 [ 511.326925] [ 511.326965] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.378007] Bluetooth: hci3: failed to register connection device 06:38:42 executing program 2: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:38:42 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 511.430322] debugfs: '0' already exists in 'hci5' [ 511.430874] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 511.431667] CPU: 1 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.431683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.431691] Workqueue: hci5 hci_rx_work [ 511.431711] Call Trace: [ 511.431715] [ 511.431720] dump_stack_lvl+0xfa/0x120 [ 511.431734] sysfs_warn_dup+0x80/0xa0 [ 511.431748] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.431760] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.431771] ? find_held_lock+0x2b/0x80 [ 511.431785] ? lock_release+0xc8/0x270 [ 511.431801] ? do_raw_spin_unlock+0x53/0x220 [ 511.431820] kobject_add_internal+0x24c/0x9a0 [ 511.431839] kobject_add+0x157/0x240 [ 511.431854] ? __pfx_kobject_add+0x10/0x10 [ 511.431868] ? lock_release+0xc8/0x270 [ 511.431884] ? do_raw_spin_unlock+0x53/0x220 [ 511.431902] ? kobject_put+0xaa/0x260 [ 511.431923] device_add+0x32d/0x1830 [ 511.431949] ? __pfx_device_add+0x10/0x10 [ 511.431968] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.431981] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.431999] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.432016] hci_conn_add_sysfs+0x117/0x1c0 [ 511.432030] le_conn_complete_evt+0x1246/0x1e40 [ 511.432054] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.432078] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.432097] ? __asan_memcpy+0x3d/0x60 [ 511.432116] hci_le_meta_evt+0x34b/0x530 [ 511.432132] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.432153] hci_event_packet+0x66c/0x10e0 [ 511.432171] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.432188] ? __pfx_hci_event_packet+0x10/0x10 [ 511.432206] ? mark_held_locks+0x49/0x80 [ 511.432222] ? kcov_remote_start+0x2ce/0x5a0 [ 511.432247] hci_rx_work+0x65b/0x8b0 [ 511.432268] process_one_work+0x8e1/0x1960 [ 511.432293] ? __pfx_process_one_work+0x10/0x10 [ 511.432308] ? move_linked_works+0x172/0x270 [ 511.432332] ? assign_work+0x196/0x240 [ 511.432349] worker_thread+0x67e/0xe90 [ 511.432366] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.432389] ? __pfx_worker_thread+0x10/0x10 [ 511.432406] kthread+0x3c8/0x740 [ 511.432421] ? __pfx_kthread+0x10/0x10 [ 511.432434] ? ret_from_fork+0x79/0x7a0 [ 511.432446] ? lock_release+0xc8/0x270 [ 511.432462] ? __pfx_kthread+0x10/0x10 [ 511.432478] ret_from_fork+0x67a/0x7a0 [ 511.432490] ? __pfx_ret_from_fork+0x10/0x10 [ 511.432501] ? save_fpregs_to_fpstate+0x145/0x270 [ 511.432518] ? __switch_to+0x759/0x1030 [ 511.432534] ? __pfx_kthread+0x10/0x10 [ 511.432550] ret_from_fork_asm+0x1a/0x30 [ 511.432580] [ 511.432948] debugfs: '0' already exists in 'hci6' [ 511.433485] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.434936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 511.435130] Bluetooth: hci5: failed to register connection device [ 511.435434] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.435463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.435477] Workqueue: hci6 hci_rx_work [ 511.435513] Call Trace: [ 511.435520] [ 511.435529] dump_stack_lvl+0xfa/0x120 [ 511.435554] sysfs_warn_dup+0x80/0xa0 [ 511.435579] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.435601] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.435621] ? find_held_lock+0x2b/0x80 [ 511.435647] ? lock_release+0xc8/0x270 [ 511.435684] ? do_raw_spin_unlock+0x53/0x220 [ 511.435720] kobject_add_internal+0x24c/0x9a0 [ 511.435756] kobject_add+0x157/0x240 [ 511.435783] ? __pfx_kobject_add+0x10/0x10 [ 511.435809] ? lock_release+0xc8/0x270 [ 511.435839] ? do_raw_spin_unlock+0x53/0x220 [ 511.435872] ? kobject_put+0xaa/0x260 [ 511.435911] device_add+0x32d/0x1830 [ 511.435950] ? __pfx_device_add+0x10/0x10 [ 511.435985] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.436008] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.436041] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.436073] hci_conn_add_sysfs+0x117/0x1c0 [ 511.436099] le_conn_complete_evt+0x1246/0x1e40 [ 511.436142] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.436187] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.436223] ? __asan_memcpy+0x3d/0x60 [ 511.436255] hci_le_meta_evt+0x34b/0x530 [ 511.436285] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.436323] hci_event_packet+0x66c/0x10e0 [ 511.436357] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.436389] ? __pfx_hci_event_packet+0x10/0x10 [ 511.436422] ? mark_held_locks+0x49/0x80 [ 511.436452] ? kcov_remote_start+0x2ce/0x5a0 [ 511.436496] hci_rx_work+0x65b/0x8b0 [ 511.436534] process_one_work+0x8e1/0x1960 [ 511.436581] ? __pfx_process_one_work+0x10/0x10 [ 511.436610] ? move_linked_works+0x172/0x270 [ 511.436653] ? assign_work+0x196/0x240 [ 511.436685] worker_thread+0x67e/0xe90 [ 511.436716] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.436757] ? __pfx_worker_thread+0x10/0x10 [ 511.436789] kthread+0x3c8/0x740 [ 511.436816] ? __pfx_kthread+0x10/0x10 [ 511.436840] ? ret_from_fork+0x79/0x7a0 [ 511.436862] ? lock_release+0xc8/0x270 [ 511.436892] ? __pfx_kthread+0x10/0x10 [ 511.436920] ret_from_fork+0x67a/0x7a0 [ 511.436943] ? __pfx_ret_from_fork+0x10/0x10 [ 511.436970] ? __switch_to+0x759/0x1030 [ 511.436999] ? __pfx_kthread+0x10/0x10 [ 511.437027] ret_from_fork_asm+0x1a/0x30 [ 511.437076] [ 511.439399] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.505557] Bluetooth: hci6: failed to register connection device [ 511.511093] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 511.513230] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 511.517660] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 511.530717] debugfs: '0' already exists in 'hci6' [ 511.531686] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 511.532910] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.532937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.532957] Workqueue: hci6 hci_rx_work [ 511.532988] Call Trace: [ 511.532995] [ 511.533003] dump_stack_lvl+0xfa/0x120 [ 511.533025] sysfs_warn_dup+0x80/0xa0 [ 511.533047] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.533069] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.533102] ? find_held_lock+0x2b/0x80 [ 511.533125] ? lock_release+0xc8/0x270 [ 511.533154] ? do_raw_spin_unlock+0x53/0x220 [ 511.533189] kobject_add_internal+0x24c/0x9a0 [ 511.533222] kobject_add+0x157/0x240 [ 511.533250] ? __pfx_kobject_add+0x10/0x10 [ 511.533275] ? lock_release+0xc8/0x270 [ 511.533304] ? do_raw_spin_unlock+0x53/0x220 [ 511.533337] ? kobject_put+0xaa/0x260 [ 511.533374] device_add+0x32d/0x1830 [ 511.533410] ? __pfx_device_add+0x10/0x10 [ 511.533444] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.533467] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.533498] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.533529] hci_conn_add_sysfs+0x117/0x1c0 [ 511.533554] le_conn_complete_evt+0x1246/0x1e40 [ 511.533594] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.533636] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.533672] ? __asan_memcpy+0x3d/0x60 [ 511.533702] hci_le_meta_evt+0x34b/0x530 [ 511.533732] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.533769] hci_event_packet+0x66c/0x10e0 [ 511.533802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.533834] ? __pfx_hci_event_packet+0x10/0x10 [ 511.533866] ? mark_held_locks+0x49/0x80 [ 511.533896] ? kcov_remote_start+0x2ce/0x5a0 [ 511.533938] hci_rx_work+0x65b/0x8b0 [ 511.533975] process_one_work+0x8e1/0x1960 [ 511.534017] ? __pfx_process_one_work+0x10/0x10 [ 511.534046] ? move_linked_works+0x172/0x270 [ 511.534087] ? assign_work+0x196/0x240 [ 511.534118] worker_thread+0x67e/0xe90 [ 511.534148] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.534187] ? __pfx_worker_thread+0x10/0x10 [ 511.534217] kthread+0x3c8/0x740 [ 511.534244] ? __pfx_kthread+0x10/0x10 [ 511.534268] ? ret_from_fork+0x79/0x7a0 [ 511.534288] ? lock_release+0xc8/0x270 [ 511.534317] ? __pfx_kthread+0x10/0x10 [ 511.534345] ret_from_fork+0x67a/0x7a0 [ 511.534367] ? __pfx_ret_from_fork+0x10/0x10 [ 511.534393] ? __switch_to+0x759/0x1030 [ 511.534427] ? __pfx_kthread+0x10/0x10 [ 511.534455] ret_from_fork_asm+0x1a/0x30 [ 511.534500] [ 511.568831] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.572503] Bluetooth: hci6: failed to register connection device 06:38:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x1100000000000000) 06:38:42 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00aaaae7aaaa11ffffffffffff00000101000000196b"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES16], 0x96) syz_emit_vhci(&(0x7f0000001740)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x21b}, "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"}, 0x1ca) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="048303ffc807"], 0x6) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "c53dc2c2bbecfaa1e29231d10e7f99cfea492c9750be4a05cadd3784b6c4bb57426c5be8a90843a88573fc02bdb2b2b78147c3abd4eaa90f818615141cb742b48264152d7b7e3df2cf662fc4b7a3bab95d94c18f320e0140b98099581549859e78bb1ba5808d9d5dfa5e0a5def7902a76b3723a6f5993c631319997280fd4c03db4013cc8cd58bb6da782ddf27af4d66a93e1e6ca73e12fdbeaf7f9e2b7b178e6ef6142f2741689b26e5fa9f72deed38222cd7657a423349ac95f75d07ef64667b9a59c791a57600dcd29e6fb9bdf0ff5bf5f1e336f3ef5869219889998671a3e545a8e645ec1a9386b4e43eeb2f6d1a08955d729ef690e2513e8e9e65ea4ff7ce8bbe335685fac2411407cf03902f051683b2717c3c2d73fd19b61534c792267e57f8e9dad213df9e632d346886a9ed3079af34a8ece76a2877d23be0c022413daff05679be38ba35b4a915637a3b8fe5c6b07742f98d831cb039abc74a2cd4ac1c7e8f15da71309814209b7688025e8ba2d0d275074b8c28241cba7da4d64e2c86d0515d8175a6257e2dcd97d55222988387ede89bd6f8c7dc1e15ee1829463d2c4661eea9bf6622d5d402fd657b64abb9f26dd147229034387017a20010c66e683042f49976c74b04d652c5be0935643d53048983c8e67aa0e6abf04040fc6bb36624454a878d251dfd3d2a85e3834d85c856a830846839dd3418a9ae4746263076366175120b4108738d6a51883cb94338b31cb5e01550f6085bbfcca741f616d8d41bff80969f4f55eccb92fbab91c4edd12f2d98d99339db051c54aecb891fb0b8a46e111114b7af2c3c1347432e680b08e270803dd9d575ca97b8ad00cda8886c643c9b70164e81482b611a171ed8b4ce4e5fdf3b0dd098d66031e044cbe68a7adbb8b0d0002426d96c305c5896ef32a53b0791f62d3a924a85da89d487aeb0036b258ea65ff6a1d6b8a9d287dafebb786fefea79e6bc2de94b8304f320c65e73fa6ea51dee3e955f90a5a77bfe920f26dc30fc89e1e577575012c1e4757709e0d91539a35ea8800e5a3da6ea3a8a200e635847453da4bc29b94213517961b4ef9711ccaa4e337ca7f697e76972fd96f17895bebea038657a7dceb704d7130ac95892b6bde7ee66c118b0cb0237e8fa0fc80b58e9b738d9ee723c35e1f039ab32be49c11e8d7778c6358a6fb760e7914fae34516350a25515178c0a16cfed9b628ddd33c252e0a4795bc6bdc4847f1905a891b0988acd64b60fbd87996e17c28ea1623f7d9f3a04015d091e10be7a1b3267c223d847d260079a8f7199078646ab6374c1c6aad650f5c5c1696f9a3726f2fcf9a9aa5699a26821e57d7ea3598ed153e01f828d0757a3724de18f95f199d47b45fbcd420bf9130467f3d302cee36ca852d622070fb30e2ca2345a68fc64f27cb00d00807dbd6e278484e31680eb0eb822be6a1b12a7b98e34a6bf0b6ccf8637baa101e2bf4a1ea7065d55d2a3408a8aee5d09c3778b2a3986031c412a17934d2178305dce9a560159ac37b59d0d40594f997e07b475047356bf8266b990536342b2fbfcc18f22757cd095e8d71df3c4c140926bc32fbf669fc8c35907a0b8186ef383b85a3b64450207b4db5d54350529274fe8dfba2f480b68195d5be8f1bc393bd2b77b4021550cd5a72f6f33c0a179d33790f7fe9c1be1d29f02138e291ce4b19a9c20a1e7ae72c2361723a38a2e986ac0f9d8e1cdc93bfc9c575727dc31321c2d5226deb8d55391ad76206c748c2b16fbf269e5664361bf89c334731f733948045d9a5938e8b676bc0818ffd0170a566df721537618f90c5fe2d2f95afda29ca52648fbf23d9228c7856adfcaf5dcd89040781fdbc44f825be8e1c91dbb87783eef3acedb3cfa6a79944b0bf0a886c5d7d8ddddf594a843e6c1d5ab7098a095d623c4de2f4687a839e41ba8276430ed012e786986b95ce643937ec895888380e0cbd13eac8e1ea39fd763d1f94ace2bdb721f1b541511043e9cd56c1c415e13df87c2ce2d6b7ded5953088ea73b7e58c94a2f4175abc4c4358ec1bee2f5f2dc23dae60c162825f7a18d9e761c064fa6047a4199fcae6c3746b531294c1cdf30f48d5d8ef18b51d46ab31ae6c83e70b0bc6757273bc2f4644f279153d336b0045ecd52707ff5b4fbc7100adfd7933500f3dbad8f1efa512611f32e0bfcc9c1b5ac069a8a745c9678b0b870a44c3b1d2429ac7eec6e401f21beb91e3e5a0ff0aa1a9b398b2343b722842acb4e716f92aa804da248fa7d7154d275f93d87a1b6874555954c047a188b5a67ace36493560bb0e8ca7e6c64ed46b3a5b3a1dfe20531d0c07997108d17b2b8e6d4085384e58d435856fc7732913ae5caeef71f1ac3fe88a90d751dadc148badcaa15c56cdadc1b94fdc641832a005412e35cf2e9ee79548bda52b7f17b59ac0dacb483a4358548e709a672b5f1e950a92d568e8afad35f5eb6a5dfffb52012a40a672e75442f19d4488cd7fcf36a32c69c0ba2027a436837a7787c47979b93be5b52f44c0ae79555ccef8b60c754fdda9f33fbbc45cf9c147c953e91bc883d3497b93a943381ae85e76753af5932d008df4cd57e574a77508a37c2c2d1cc98de2593ca8626eb9d83809fce850341e6b99eebc2aab896071aa7da31b1f42d5deb75c95591f7247e67a80c64fe86776e2d6107e1062ffb31f9e4bcbbff8cb5cc1e857e96bcba967148df555b5f10739a9aaff1c3dbfd247c7e263239719d0bce30d5df9fa5e09bd666870209c5f1a80a90881aad6601b0ffdf722d0cc92c64e470bb0bc022d7efa7cdf4600c13d7beed2bd5423c062416501925b634915990c0b47b26a15cb5d5457e7a0bbaf003f4bde81026a88d8923b6dba275f855ea4dbd3b554346205b438d97791d23410ccd2a547d3e47e6282ec17b62e218b15769e19b50bb3a4b63494adead7943aac9033e6f5de4d619c5280f0b14d9f3a484c3e5eaeea88b462f13b2ce77c6f9b62621f42a31f8c97b8a84b8eff400958380ca52f098767ef7abac71b5aac5d582d705218cf671931646a42a18f11d68fa76372fded1ad42ff2b59a8b0e553fcda214a6eeb5ce08e8767d532aad303981382959e66e9206155857e721ec721b0aac67080c76e5d80562c26f06cb28b7c21514b10b674ecad0471b199c95dde91fa10e00a98129bedc653a7af216404ed23c690a4c13429c62293686ea7169de8c6cc3f5bafab9a41645a3e7f53f398b97c39bed167fdd6928269a4b7b4a1e4f923553e5fa097472d3599afce67ea300e9f9bb9dad60901e27c6b7115cb21d597099aa8130ff1de46341ec2a801838d78f8cbdba748d68c5a1a48defc5797ebd6e60fb68a82f690aa0589974b5a46f40e9151bae04f7c2645d36220da84df80605dd87da5f1249432c4c748c0ee4ae957910b1439b9453105c797f42a128045cdc12d473f0f2ba62c994aa3a933e7a715cea7b929937e2767b4720458b24aa2889c55694e3d51abcb1aec8c9819f9f8d2a4d8245cf591c3ef787aab8d997817890399bf7871bd56f3dc00a3aa7d8619de1dafdcfe8f16a958a85cc5ef8f76c064fe97602a54b3f804c4460fe694d94f0f86d19a6f308e4b40220031a40655fd5daa25434f5982ab3d9433698329e1aead26873aae1bac57690424417dc2c8f644e65d88e4b01845070792bc8a3b815666f1995b5d8f35923bfc096341230c3e7d7ced89c3b86f7e19e33dffb99ecc8f40c034ccf1dfc53db10648172fc4786a351a5f7c0e5e8ec30c6e01249b3c66f731b8c6b918f5ad5edf950d11266e678d9320944984979d1b4acaefa6003eeb73e9518512312eb7b6ec5badfd7121f9e15d3bf09be35b8c48a2f2392af44db2df260866a759e7b3d0a277c65d4143dfce7ba9a9fab0536624da351da5c37fb7e112003ac89e4a1eff551e35a85390d183f4ff681dc85a70a430bf7d8e70c3920fd3e69336c71374144e8942b82eaeb589fad5f75162de8e0fa16c48f19d5791d21eaff535f9c3462fafaf45cc33e10873a9be0691d3c1b6991ebdabd463e2c7b61a0a76024918d9df689b6f0063a1d86a1c3231f50b092a77f7963b88b735bbc5bab63bbef1c18e02018287f5b45b82c6b296fe946d8926f2724ab6167f19f58609d0d33953185f714078df17efbd11fe01cc61dac80ad4f492fd58b613a9fbe0865efc3c915a23f83593a9ecfe9729c15af908109528bf62bc76f3f858b8150773aff5d0eb6081d21b051214afd3cd133cfe850b997e7be6946abf874b8c2c365f86bee3b3f6846cec712a47b844c485a23f477ad8c9f14b999fc2dfdb3b38e6519bb992b04682d759a2c3d641ba661aac294fe17318bf402f3a16dbd227a6872ed2f95347f4a27d881c17d68b166f1ad6b76e6ea6b71a390caf52f04ab9fae791589b0421ea6a0e427b829b63d9a22bb4b26ba156fc10dea4aeab56953df0e7f0edcda12699546a99f8c7e08f0c321970dff98a18736ccc9635ec0a1f960a30ec3ad1adaf19e090f7968c33d94710396c6759b7ea6c5e6778d2346a52711378f09b28be6afe9d0ff09c6199d920e8785d74e8c0f400d93ddb7393628aca276a828ec5faef5a657069048e22bdd0234b21d22c042f79238d401d29ad5116cbffcb03b89e0147dc5b7ba27ce5f5b319c057f4cf427b5112cf37dc182a86a4b8aed6285279a8907fdda7469d3300d51c952241369ded3d8e24c992cdb824f49a8c2212d1a9c826e962b7f697581eb1f52231d8cdaaa6ae197cb3a6c1db5542f7811a10800db8c5b76f584158a6801c3deee7fa75635f918f9acec009f25ef5e9761147e832b5cb115e67e667d9044ac7eabce73f307fb4a9f6d7e1e9653720df51c86515f34e5ea21c7bdc011fec2809b3eef2cba46e66b3ff4da26bef15a0fe2a44e36aa2d0c44bc602e7d3970b2adb2faa219033c7957594a52b2518ce95e6a32f9932d9818303dbc0636847bd0d91da0081223283164dd7bb1f1b0d3cb2562d1cf50c7f1c8eeb63062034196a6314cccc2dde81a9d63b6f59d4588f8ff093a01f5330619d9f494862e0c816c2af6613a7df38e7a167f33c549a3ff5ec15dc8f45181222fd6f0faa29dba77c8cf208d68ba71e6a27440c7dcc777de3e44be854a8efbb80a02a1b05eeddee7a2019c79ac1628b58d6a910500f1a2034e1b8038f89a08c26aae168e83d91974badc50f959f60295b4b740c40987dc23900abd2f5bdb63a872421313213efb7747ba73bb50937d4bcab6897aecccecc4cd9e60f9b0b89f7ec8ed874f57ad03dcec9b8cbb2dcb084c09fe0a2f074ad3e68d5fc11cc1d78c2b6cd1cff0e8c6d0bb42501ae568229244b4cee4f9910ac6e87dec73e7d14d22ed24b64a7446e4752f5554cecc39475adf6eb7af563363a8a878a7ddb0567f5eb487f46e62b0cba6d32af7769f1140713256276dc25bbf64253e1e91ae8a16cd9284206d75c40e2bcfdc50f61fe61711c419c20fd50c85388f89357f1d3da434620b104a0881f485c7296fe0b3f49783137d1b2fa52e10608741ed8c79ec213db33e95687b797ad4e2009fe4e25d1c03d7a643806327b0a4abb40475131a8700af18234d6c43630d5e0ebf5cd03ce8a61e1353d9de5d9d5cb0cb7732856c689448d8162d8f0f025744d6916d4f69581ed577e1d7342b684c29cc3b32fddfac4e23a8cb13e09d6dc8742b39ce6ceb35ca8416a7713d7f076d243d5045277bc981d72a9ef0bcb7512cc5aafe77a2c70df769d38fe63f4e7d9366895537631a6fe187dba"}, 0x1004) 06:38:42 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x7f12}}, @l2cap_conf_rsp={{0x5, 0x40, 0x11}, {0x5, 0x1, 0x1, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x80}]}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x81}}]}}, 0x2b) 06:38:42 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "35196bc033c5fbfefa9cc4d11b8bb1602516cbbc492e0217e2b922bdb94dc5e85f2315a62e01d2b71912dcbfe8f854db3a28e580c0761fa8dac51ca6d429d5d7c365b26db6912f4dfc161b74b48d5fa3b3fc2be29d3ce8f8d7e977816c5475505c824ac181687c6220110a60f014f98778cf32"}, 0x77) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) [ 511.579764] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 511.687404] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 511.690340] debugfs: '0' already exists in 'hci3' [ 511.691461] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 511.692715] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.692743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.692757] Workqueue: hci3 hci_rx_work [ 511.692790] Call Trace: [ 511.692798] [ 511.692806] dump_stack_lvl+0xfa/0x120 [ 511.692830] sysfs_warn_dup+0x80/0xa0 [ 511.692853] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.692875] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.692895] ? find_held_lock+0x2b/0x80 [ 511.692919] ? lock_release+0xc8/0x270 [ 511.692955] ? do_raw_spin_unlock+0x53/0x220 [ 511.692990] kobject_add_internal+0x24c/0x9a0 [ 511.693024] kobject_add+0x157/0x240 [ 511.693052] ? __pfx_kobject_add+0x10/0x10 [ 511.693077] ? lock_release+0xc8/0x270 [ 511.693116] ? do_raw_spin_unlock+0x53/0x220 [ 511.693149] ? kobject_put+0xaa/0x260 [ 511.693186] device_add+0x32d/0x1830 [ 511.693223] ? __pfx_device_add+0x10/0x10 [ 511.693258] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.693281] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.693313] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.693344] hci_conn_add_sysfs+0x117/0x1c0 [ 511.693369] le_conn_complete_evt+0x1246/0x1e40 [ 511.693410] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.693452] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.693488] ? __asan_memcpy+0x3d/0x60 [ 511.693520] hci_le_meta_evt+0x34b/0x530 [ 511.693551] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.693589] hci_event_packet+0x66c/0x10e0 [ 511.693623] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.693655] ? __pfx_hci_event_packet+0x10/0x10 [ 511.693689] ? mark_held_locks+0x49/0x80 [ 511.693718] ? kcov_remote_start+0x2ce/0x5a0 [ 511.693762] hci_rx_work+0x65b/0x8b0 [ 511.693799] process_one_work+0x8e1/0x1960 [ 511.693843] ? __pfx_process_one_work+0x10/0x10 [ 511.693873] ? move_linked_works+0x172/0x270 [ 511.693915] ? assign_work+0x196/0x240 [ 511.693947] worker_thread+0x67e/0xe90 [ 511.693977] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.694017] ? __pfx_worker_thread+0x10/0x10 [ 511.694049] kthread+0x3c8/0x740 [ 511.694076] ? __pfx_kthread+0x10/0x10 [ 511.694101] ? ret_from_fork+0x79/0x7a0 [ 511.694123] ? lock_release+0xc8/0x270 [ 511.694152] ? __pfx_kthread+0x10/0x10 [ 511.694181] ret_from_fork+0x67a/0x7a0 [ 511.694203] ? __pfx_ret_from_fork+0x10/0x10 [ 511.694230] ? __switch_to+0x759/0x1030 [ 511.694259] ? __pfx_kthread+0x10/0x10 [ 511.694288] ret_from_fork_asm+0x1a/0x30 [ 511.694335] [ 511.698345] debugfs: '0' already exists in 'hci2' [ 511.698734] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.699193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 511.699606] Bluetooth: hci3: failed to register connection device [ 511.699993] CPU: 1 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.700011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.700020] Workqueue: hci2 hci_rx_work [ 511.700048] Call Trace: [ 511.700053] [ 511.700058] dump_stack_lvl+0xfa/0x120 [ 511.700074] sysfs_warn_dup+0x80/0xa0 [ 511.700089] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.700101] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.700113] ? find_held_lock+0x2b/0x80 [ 511.700128] ? lock_release+0xc8/0x270 [ 511.700146] ? do_raw_spin_unlock+0x53/0x220 [ 511.700165] kobject_add_internal+0x24c/0x9a0 [ 511.700184] kobject_add+0x157/0x240 [ 511.700200] ? __pfx_kobject_add+0x10/0x10 [ 511.700214] ? lock_release+0xc8/0x270 [ 511.700230] ? do_raw_spin_unlock+0x53/0x220 [ 511.700248] ? kobject_put+0xaa/0x260 [ 511.700269] device_add+0x32d/0x1830 [ 511.700291] ? __pfx_device_add+0x10/0x10 [ 511.700310] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.700324] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.700343] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.700360] hci_conn_add_sysfs+0x117/0x1c0 [ 511.700375] le_conn_complete_evt+0x1246/0x1e40 [ 511.700399] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.700422] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.700441] ? __asan_memcpy+0x3d/0x60 [ 511.700460] hci_le_meta_evt+0x34b/0x530 [ 511.700478] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.700498] hci_event_packet+0x66c/0x10e0 [ 511.700518] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.700535] ? __pfx_hci_event_packet+0x10/0x10 [ 511.700554] ? mark_held_locks+0x49/0x80 [ 511.700570] ? kcov_remote_start+0x2ce/0x5a0 [ 511.700595] hci_rx_work+0x65b/0x8b0 [ 511.700615] process_one_work+0x8e1/0x1960 [ 511.700641] ? __pfx_process_one_work+0x10/0x10 [ 511.700657] ? move_linked_works+0x172/0x270 [ 511.700680] ? assign_work+0x196/0x240 [ 511.700697] worker_thread+0x67e/0xe90 [ 511.700714] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.700738] ? __pfx_worker_thread+0x10/0x10 [ 511.700754] kthread+0x3c8/0x740 [ 511.700771] ? __pfx_kthread+0x10/0x10 [ 511.700784] ? ret_from_fork+0x79/0x7a0 [ 511.700797] ? lock_release+0xc8/0x270 [ 511.700813] ? __pfx_kthread+0x10/0x10 [ 511.700828] ret_from_fork+0x67a/0x7a0 [ 511.700840] ? __pfx_ret_from_fork+0x10/0x10 [ 511.700851] ? save_fpregs_to_fpstate+0x145/0x270 [ 511.700869] ? __switch_to+0x759/0x1030 [ 511.700885] ? __pfx_kthread+0x10/0x10 [ 511.700901] ret_from_fork_asm+0x1a/0x30 [ 511.700927] [ 511.700975] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.701326] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 511.701427] Bluetooth: hci2: failed to register connection device [ 511.740869] debugfs: '0' already exists in 'hci6' [ 511.742003] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 511.743096] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 511.743213] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.743258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.743278] Workqueue: hci6 hci_rx_work [ 511.743322] Call Trace: [ 511.743333] [ 511.743352] dump_stack_lvl+0xfa/0x120 [ 511.743386] sysfs_warn_dup+0x80/0xa0 [ 511.743419] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.743453] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.743485] ? find_held_lock+0x2b/0x80 [ 511.743521] ? lock_release+0xc8/0x270 [ 511.743566] ? do_raw_spin_unlock+0x53/0x220 [ 511.743618] kobject_add_internal+0x24c/0x9a0 [ 511.743669] kobject_add+0x157/0x240 [ 511.743711] ? __pfx_kobject_add+0x10/0x10 [ 511.743751] ? lock_release+0xc8/0x270 [ 511.743796] ? do_raw_spin_unlock+0x53/0x220 [ 511.743846] ? kobject_put+0xaa/0x260 [ 511.743903] device_add+0x32d/0x1830 [ 511.743958] ? __pfx_device_add+0x10/0x10 [ 511.744010] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.744045] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.744093] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.744140] hci_conn_add_sysfs+0x117/0x1c0 [ 511.744178] le_conn_complete_evt+0x1246/0x1e40 [ 511.744238] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.744302] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.744355] ? __asan_memcpy+0x3d/0x60 [ 511.744402] hci_le_meta_evt+0x34b/0x530 [ 511.744447] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.744504] hci_event_packet+0x66c/0x10e0 [ 511.744555] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.744603] ? __pfx_hci_event_packet+0x10/0x10 [ 511.744654] ? mark_held_locks+0x49/0x80 [ 511.744699] ? kcov_remote_start+0x2ce/0x5a0 [ 511.744762] hci_rx_work+0x65b/0x8b0 [ 511.744818] process_one_work+0x8e1/0x1960 [ 511.744881] ? __pfx_process_one_work+0x10/0x10 [ 511.744926] ? move_linked_works+0x172/0x270 [ 511.744988] ? assign_work+0x196/0x240 [ 511.745036] worker_thread+0x67e/0xe90 [ 511.745082] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.745151] ? __pfx_worker_thread+0x10/0x10 [ 511.745201] kthread+0x3c8/0x740 [ 511.745241] ? __pfx_kthread+0x10/0x10 [ 511.745279] ? ret_from_fork+0x79/0x7a0 [ 511.745311] ? lock_release+0xc8/0x270 [ 511.745355] ? __pfx_kthread+0x10/0x10 [ 511.745398] ret_from_fork+0x67a/0x7a0 [ 511.745432] ? __pfx_ret_from_fork+0x10/0x10 [ 511.745471] ? __switch_to+0x759/0x1030 [ 511.745514] ? __pfx_kthread+0x10/0x10 [ 511.745558] ret_from_fork_asm+0x1a/0x30 [ 511.745625] [ 511.746149] debugfs: '0' already exists in 'hci2' [ 511.749505] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.750291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 511.752548] Bluetooth: hci6: failed to register connection device [ 511.752725] CPU: 1 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.752761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.752778] Workqueue: hci2 hci_rx_work [ 511.752814] Call Trace: [ 511.752823] [ 511.752833] dump_stack_lvl+0xfa/0x120 [ 511.752860] sysfs_warn_dup+0x80/0xa0 [ 511.752887] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.752915] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.752946] ? find_held_lock+0x2b/0x80 [ 511.752976] ? lock_release+0xc8/0x270 [ 511.753013] ? do_raw_spin_unlock+0x53/0x220 [ 511.753058] kobject_add_internal+0x24c/0x9a0 [ 511.753107] kobject_add+0x157/0x240 [ 511.753142] ? __pfx_kobject_add+0x10/0x10 [ 511.753176] ? lock_release+0xc8/0x270 [ 511.753213] ? do_raw_spin_unlock+0x53/0x220 [ 511.753256] ? kobject_put+0xaa/0x260 [ 511.753295] device_add+0x32d/0x1830 [ 511.753341] ? __pfx_device_add+0x10/0x10 [ 511.753386] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.753415] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.753456] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.753493] hci_conn_add_sysfs+0x117/0x1c0 [ 511.753524] le_conn_complete_evt+0x1246/0x1e40 [ 511.753572] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.753622] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.753667] ? __asan_memcpy+0x3d/0x60 [ 511.753706] hci_le_meta_evt+0x34b/0x530 [ 511.753744] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.753790] hci_event_packet+0x66c/0x10e0 [ 511.753832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.753872] ? __pfx_hci_event_packet+0x10/0x10 [ 511.753914] ? mark_held_locks+0x49/0x80 [ 511.753951] ? kcov_remote_start+0x2ce/0x5a0 [ 511.754003] hci_rx_work+0x65b/0x8b0 [ 511.754049] process_one_work+0x8e1/0x1960 [ 511.754100] ? __pfx_process_one_work+0x10/0x10 [ 511.754138] ? move_linked_works+0x172/0x270 [ 511.754191] ? assign_work+0x196/0x240 [ 511.754230] worker_thread+0x67e/0xe90 [ 511.754269] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.754318] ? __pfx_worker_thread+0x10/0x10 [ 511.754357] kthread+0x3c8/0x740 [ 511.754390] ? __pfx_kthread+0x10/0x10 [ 511.754420] ? ret_from_fork+0x79/0x7a0 [ 511.754443] ? lock_release+0xc8/0x270 [ 511.754473] ? __pfx_kthread+0x10/0x10 [ 511.754503] ret_from_fork+0x67a/0x7a0 [ 511.754516] ? __pfx_ret_from_fork+0x10/0x10 [ 511.754527] ? save_fpregs_to_fpstate+0x145/0x270 [ 511.754547] ? __switch_to+0x759/0x1030 [ 511.754569] ? __pfx_kthread+0x10/0x10 [ 511.754589] ret_from_fork_asm+0x1a/0x30 [ 511.754618] [ 511.754668] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.784160] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 511.784522] Bluetooth: hci2: failed to register connection device [ 511.785939] debugfs: '0' already exists in 'hci6' [ 511.786431] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 511.788082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 511.797827] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 511.797856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 511.797870] Workqueue: hci6 hci_rx_work [ 511.797903] Call Trace: [ 511.797911] [ 511.797920] dump_stack_lvl+0xfa/0x120 [ 511.797950] sysfs_warn_dup+0x80/0xa0 [ 511.797973] sysfs_create_dir_ns+0x23b/0x2a0 [ 511.797996] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 511.798017] ? find_held_lock+0x2b/0x80 [ 511.798042] ? lock_release+0xc8/0x270 [ 511.798072] ? do_raw_spin_unlock+0x53/0x220 [ 511.798108] kobject_add_internal+0x24c/0x9a0 [ 511.798144] kobject_add+0x157/0x240 [ 511.798172] ? __pfx_kobject_add+0x10/0x10 [ 511.798198] ? lock_release+0xc8/0x270 [ 511.798228] ? do_raw_spin_unlock+0x53/0x220 [ 511.798264] ? kobject_put+0xaa/0x260 [ 511.798307] device_add+0x32d/0x1830 [ 511.798345] ? __pfx_device_add+0x10/0x10 [ 511.798381] ? hci_debugfs_create_conn+0x10f/0x240 [ 511.798404] ? mgmt_send_event_skb+0x2f3/0x460 [ 511.798436] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 511.798470] hci_conn_add_sysfs+0x117/0x1c0 [ 511.798496] le_conn_complete_evt+0x1246/0x1e40 [ 511.798539] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 511.798584] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 511.798621] ? __asan_memcpy+0x3d/0x60 [ 511.798653] hci_le_meta_evt+0x34b/0x530 [ 511.798683] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 511.798722] hci_event_packet+0x66c/0x10e0 [ 511.798757] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 511.798789] ? __pfx_hci_event_packet+0x10/0x10 [ 511.798823] ? mark_held_locks+0x49/0x80 [ 511.798854] ? kcov_remote_start+0x2ce/0x5a0 [ 511.798898] hci_rx_work+0x65b/0x8b0 [ 511.798937] process_one_work+0x8e1/0x1960 [ 511.798983] ? __pfx_process_one_work+0x10/0x10 [ 511.799014] ? move_linked_works+0x172/0x270 [ 511.799058] ? assign_work+0x196/0x240 [ 511.799091] worker_thread+0x67e/0xe90 [ 511.799121] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 511.799163] ? __pfx_worker_thread+0x10/0x10 [ 511.799195] kthread+0x3c8/0x740 [ 511.799222] ? __pfx_kthread+0x10/0x10 [ 511.799248] ? ret_from_fork+0x79/0x7a0 [ 511.799269] ? lock_release+0xc8/0x270 [ 511.799299] ? __pfx_kthread+0x10/0x10 [ 511.799329] ret_from_fork+0x67a/0x7a0 [ 511.799352] ? __pfx_ret_from_fork+0x10/0x10 [ 511.799379] ? __switch_to+0x759/0x1030 [ 511.799408] ? __pfx_kthread+0x10/0x10 [ 511.799438] ret_from_fork_asm+0x1a/0x30 [ 511.799503] [ 511.832004] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 511.833012] Bluetooth: hci3: command 0x0406 tx timeout [ 511.834109] Bluetooth: hci6: failed to register connection device [ 511.858906] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 512.281017] Bluetooth: hci6: command 0x0406 tx timeout [ 513.180085] Bluetooth: hci2: command 0x0406 tx timeout [ 513.305052] Bluetooth: hci5: command 0x0406 tx timeout [ 513.881050] Bluetooth: hci3: command 0x0406 tx timeout [ 514.329119] Bluetooth: hci6: command 0x0406 tx timeout [ 515.230103] Bluetooth: hci2: command 0x0406 tx timeout [ 515.353073] Bluetooth: hci5: command 0x0406 tx timeout [ 515.929115] Bluetooth: hci3: command 0x0406 tx timeout [ 516.377069] Bluetooth: hci6: command 0x0406 tx timeout [ 517.276395] Bluetooth: hci2: command 0x0406 tx timeout [ 517.401068] Bluetooth: hci5: command 0x0406 tx timeout [ 517.977093] Bluetooth: hci3: command 0x0406 tx timeout [ 518.425246] Bluetooth: hci6: command 0x0406 tx timeout [ 519.322838] Bluetooth: hci2: command 0x0406 tx timeout [ 519.449027] Bluetooth: hci5: command 0x0406 tx timeout [ 520.025063] Bluetooth: hci3: command 0x0406 tx timeout [ 520.473057] Bluetooth: hci6: command 0x0406 tx timeout [ 521.370541] Bluetooth: hci2: command 0x0406 tx timeout [ 522.073064] Bluetooth: hci3: command 0x0406 tx timeout [ 522.521161] Bluetooth: hci6: command 0x0406 tx timeout [ 523.419238] Bluetooth: hci2: command 0x0406 tx timeout 06:38:54 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffe07affff0000005c00000000"], 0x22) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000500)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "d28edb9bc594d9e040d19eb5c252d7b9651f13f2685adec7da3cb817bd1d0858ffb78b287137d8cd7e9b409415aeafa263a384be3c3e14a857066b70a66372254f24ac7a8cb3126daa86a72d4e7086c00120fd0a0d2172ec53e5011e02aa3ab1c948819b155ea24bb11898ac5d7e0b4d55c8129c80ddceb98b94eaa4708401"}, 0x83) 06:38:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 06:38:54 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) 06:38:54 executing program 7: prctl$PR_PAC_RESET_KEYS(0x36, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x14}, "eeb76f7c4dc8c6eaf7c18b7dffcf8cc56983ab28"}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900be5386dbf056775bee7c1a95839c73b9d7f3f894933defe4a747b582e601f983fd9d59c77f9287a1e35042a1e8913cca1738d017ae1bd0abdd1f53265ccf34a627fd2a1fe07588506674dbcabe3e5da5538c47b6373509ec9b36c71ba5db01df61f7613f3cd6f69a0dfc05cc5aa91d640f954f125f6d83c6669956fa665fe670502501f6073b8dfb98c1dc22e259197c6f59102e0549e17a5045e23f69022a5f9d06bd5f7453b28e966587085261303c949ebbcceb329310de434cdfad67a2"], 0xc2) 06:38:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xec, 0x6, 0x80000000000}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz0', "edea524517aa76f339e1d5a515384ba2a567aa076d38aa29f126eccd0ea58b8aab56794c3818a6e85774c96f611ef93e1f522f866814a94a5341ba13626828e4bd83f1a5f547e09705bc14e792b41b1c4704ed7e050467daef91c58cb9bd8062d03cd75a7fea4ba86b9e6f896242d6b44a0f2fed56fb3c408c060424436de2e788e95a61a130b89c0d221be63e45c89591d35ccde6991eefd29d71a09b655f6eef7bd531ff9a178fda78f593eabe8163e4f0d9bf70e0ad3efc94f24e697acf7f072393dfa5b855f9e7f9745d80fac77bb33f4b7a647decee5d06a34232bb2752620a48e3460a33ac9a"}, 0xed) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) r3 = signalfd4(r0, &(0x7f0000000380)={[0x9169]}, 0x8, 0x80800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) 06:38:54 executing program 1: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:38:54 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffb972ffffffff00000000000000"], 0x22) 06:38:54 executing program 2: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 523.606528] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 523.611667] debugfs: '0' already exists in 'hci3' [ 523.612814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 523.614309] CPU: 0 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 523.614342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.614358] Workqueue: hci3 hci_rx_work [ 523.614398] Call Trace: [ 523.614407] [ 523.614418] dump_stack_lvl+0xfa/0x120 [ 523.614446] sysfs_warn_dup+0x80/0xa0 [ 523.614473] sysfs_create_dir_ns+0x23b/0x2a0 [ 523.614499] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.614522] ? find_held_lock+0x2b/0x80 [ 523.614551] ? lock_release+0xc8/0x270 [ 523.614585] ? do_raw_spin_unlock+0x53/0x220 [ 523.614625] kobject_add_internal+0x24c/0x9a0 [ 523.614664] kobject_add+0x157/0x240 [ 523.614696] ? __pfx_kobject_add+0x10/0x10 [ 523.614726] ? lock_release+0xc8/0x270 [ 523.614759] ? do_raw_spin_unlock+0x53/0x220 [ 523.614797] ? kobject_put+0xaa/0x260 [ 523.614840] device_add+0x32d/0x1830 [ 523.614883] ? __pfx_device_add+0x10/0x10 [ 523.614923] ? hci_debugfs_create_conn+0x10f/0x240 [ 523.614959] ? mgmt_send_event_skb+0x2f3/0x460 [ 523.614996] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 523.615032] hci_conn_add_sysfs+0x117/0x1c0 [ 523.615061] le_conn_complete_evt+0x1246/0x1e40 [ 523.615108] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 523.615156] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 523.615197] ? __asan_memcpy+0x3d/0x60 [ 523.615233] hci_le_meta_evt+0x34b/0x530 [ 523.615267] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 523.615310] hci_event_packet+0x66c/0x10e0 [ 523.615349] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 523.615384] ? __pfx_hci_event_packet+0x10/0x10 [ 523.615421] ? mark_held_locks+0x49/0x80 [ 523.615456] ? kcov_remote_start+0x2ce/0x5a0 [ 523.615504] hci_rx_work+0x65b/0x8b0 [ 523.615547] process_one_work+0x8e1/0x1960 [ 523.615598] ? __pfx_process_one_work+0x10/0x10 [ 523.615631] ? move_linked_works+0x172/0x270 [ 523.615678] ? assign_work+0x196/0x240 [ 523.615715] worker_thread+0x67e/0xe90 [ 523.615749] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 523.615795] ? __pfx_worker_thread+0x10/0x10 [ 523.615831] kthread+0x3c8/0x740 [ 523.615862] ? __pfx_kthread+0x10/0x10 [ 523.615890] ? ret_from_fork+0x79/0x7a0 [ 523.615916] ? lock_release+0xc8/0x270 [ 523.615949] ? __pfx_kthread+0x10/0x10 [ 523.615982] ret_from_fork+0x67a/0x7a0 [ 523.616007] ? __pfx_ret_from_fork+0x10/0x10 [ 523.616037] ? __switch_to+0x759/0x1030 [ 523.616071] ? __pfx_kthread+0x10/0x10 [ 523.616103] ret_from_fork_asm+0x1a/0x30 [ 523.616156] [ 523.655512] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.659534] Bluetooth: hci3: failed to register connection device [ 523.661115] debugfs: '0' already exists in 'hci2' [ 523.662202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 523.663585] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 523.663616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.663632] Workqueue: hci2 hci_rx_work [ 523.663670] Call Trace: [ 523.663678] [ 523.663689] dump_stack_lvl+0xfa/0x120 [ 523.663715] sysfs_warn_dup+0x80/0xa0 [ 523.663740] sysfs_create_dir_ns+0x23b/0x2a0 [ 523.663765] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.663788] ? find_held_lock+0x2b/0x80 [ 523.663815] ? lock_release+0xc8/0x270 [ 523.663848] ? do_raw_spin_unlock+0x53/0x220 [ 523.663889] kobject_add_internal+0x24c/0x9a0 [ 523.663929] kobject_add+0x157/0x240 [ 523.663968] ? __pfx_kobject_add+0x10/0x10 [ 523.663997] ? lock_release+0xc8/0x270 [ 523.664030] ? do_raw_spin_unlock+0x53/0x220 [ 523.664066] ? kobject_put+0xaa/0x260 [ 523.664108] device_add+0x32d/0x1830 [ 523.664150] ? __pfx_device_add+0x10/0x10 [ 523.664188] ? hci_debugfs_create_conn+0x10f/0x240 [ 523.664215] ? mgmt_send_event_skb+0x2f3/0x460 [ 523.664250] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 523.664285] hci_conn_add_sysfs+0x117/0x1c0 [ 523.664313] le_conn_complete_evt+0x1246/0x1e40 [ 523.664359] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 523.664406] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 523.664444] ? __asan_memcpy+0x3d/0x60 [ 523.664479] hci_le_meta_evt+0x34b/0x530 [ 523.664513] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 523.664554] hci_event_packet+0x66c/0x10e0 [ 523.664591] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 523.664626] ? __pfx_hci_event_packet+0x10/0x10 [ 523.664662] ? mark_held_locks+0x49/0x80 [ 523.664695] ? kcov_remote_start+0x2ce/0x5a0 [ 523.664743] hci_rx_work+0x65b/0x8b0 [ 523.664784] process_one_work+0x8e1/0x1960 [ 523.664832] ? __pfx_process_one_work+0x10/0x10 [ 523.664864] ? move_linked_works+0x172/0x270 [ 523.664910] ? assign_work+0x196/0x240 [ 523.664946] worker_thread+0x67e/0xe90 [ 523.664979] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 523.665023] ? __pfx_worker_thread+0x10/0x10 [ 523.665058] kthread+0x3c8/0x740 [ 523.665088] ? __pfx_kthread+0x10/0x10 [ 523.665115] ? ret_from_fork+0x79/0x7a0 [ 523.665140] ? lock_release+0xc8/0x270 [ 523.665172] ? __pfx_kthread+0x10/0x10 [ 523.665204] ret_from_fork+0x67a/0x7a0 [ 523.665229] ? __pfx_ret_from_fork+0x10/0x10 [ 523.665258] ? __switch_to+0x759/0x1030 [ 523.665303] ? __pfx_kthread+0x10/0x10 [ 523.665335] ret_from_fork_asm+0x1a/0x30 [ 523.665385] [ 523.681787] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 523.682167] debugfs: '0' already exists in 'hci6' [ 523.682775] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.683539] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 523.684107] Bluetooth: hci2: failed to register connection device [ 523.684597] CPU: 1 UID: 0 PID: 301 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 523.684624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.684637] Workqueue: hci6 hci_rx_work [ 523.684673] Call Trace: [ 523.684680] [ 523.684688] dump_stack_lvl+0xfa/0x120 [ 523.684713] sysfs_warn_dup+0x80/0xa0 [ 523.684735] sysfs_create_dir_ns+0x23b/0x2a0 [ 523.684754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.684772] ? find_held_lock+0x2b/0x80 [ 523.684795] ? lock_release+0xc8/0x270 [ 523.684822] ? do_raw_spin_unlock+0x53/0x220 [ 523.684852] kobject_add_internal+0x24c/0x9a0 [ 523.684883] kobject_add+0x157/0x240 [ 523.684907] ? __pfx_kobject_add+0x10/0x10 [ 523.684930] ? lock_release+0xc8/0x270 [ 523.684962] ? do_raw_spin_unlock+0x53/0x220 [ 523.684990] ? kobject_put+0xaa/0x260 [ 523.685023] device_add+0x32d/0x1830 [ 523.685057] ? __pfx_device_add+0x10/0x10 [ 523.685088] ? hci_debugfs_create_conn+0x10f/0x240 [ 523.685110] ? mgmt_send_event_skb+0x2f3/0x460 [ 523.685139] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 523.685166] hci_conn_add_sysfs+0x117/0x1c0 [ 523.685189] le_conn_complete_evt+0x1246/0x1e40 [ 523.685226] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 523.685263] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 523.685305] ? __asan_memcpy+0x3d/0x60 [ 523.685334] hci_le_meta_evt+0x34b/0x530 [ 523.685361] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 523.685393] hci_event_packet+0x66c/0x10e0 [ 523.685424] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 523.685451] ? __pfx_hci_event_packet+0x10/0x10 [ 523.685479] ? mark_held_locks+0x49/0x80 [ 523.685505] ? kcov_remote_start+0x2ce/0x5a0 [ 523.685544] hci_rx_work+0x65b/0x8b0 [ 523.685576] process_one_work+0x8e1/0x1960 [ 523.685615] ? __pfx_process_one_work+0x10/0x10 [ 523.685640] ? move_linked_works+0x172/0x270 [ 523.685677] ? assign_work+0x196/0x240 [ 523.685705] worker_thread+0x67e/0xe90 [ 523.685731] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 523.685770] ? __pfx_worker_thread+0x10/0x10 [ 523.685798] kthread+0x3c8/0x740 [ 523.685822] ? __pfx_kthread+0x10/0x10 [ 523.685843] ? ret_from_fork+0x79/0x7a0 [ 523.685864] ? lock_release+0xc8/0x270 [ 523.685889] ? __pfx_kthread+0x10/0x10 [ 523.685914] ret_from_fork+0x67a/0x7a0 [ 523.685933] ? __pfx_ret_from_fork+0x10/0x10 [ 523.685950] ? save_fpregs_to_fpstate+0x145/0x270 [ 523.685977] ? __switch_to+0x759/0x1030 [ 523.686006] ? __pfx_kthread+0x10/0x10 [ 523.686030] ret_from_fork_asm+0x1a/0x30 [ 523.686071] [ 523.686144] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.687116] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 523.687377] Bluetooth: hci6: failed to register connection device [ 523.693517] debugfs: '0' already exists in 'hci2' [ 523.752876] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 523.754218] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 523.754248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.754264] Workqueue: hci2 hci_rx_work [ 523.754302] Call Trace: [ 523.754311] [ 523.754321] dump_stack_lvl+0xfa/0x120 [ 523.754348] sysfs_warn_dup+0x80/0xa0 [ 523.754374] sysfs_create_dir_ns+0x23b/0x2a0 [ 523.754398] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.754420] ? find_held_lock+0x2b/0x80 [ 523.754448] ? lock_release+0xc8/0x270 [ 523.754481] ? do_raw_spin_unlock+0x53/0x220 [ 523.754518] kobject_add_internal+0x24c/0x9a0 [ 523.754556] kobject_add+0x157/0x240 [ 523.754586] ? __pfx_kobject_add+0x10/0x10 [ 523.754613] ? lock_release+0xc8/0x270 [ 523.754650] ? do_raw_spin_unlock+0x53/0x220 [ 523.754695] ? kobject_put+0xaa/0x260 [ 523.754741] device_add+0x32d/0x1830 [ 523.754784] ? __pfx_device_add+0x10/0x10 [ 523.754821] ? hci_debugfs_create_conn+0x10f/0x240 [ 523.754847] ? mgmt_send_event_skb+0x2f3/0x460 [ 523.754882] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 523.754916] hci_conn_add_sysfs+0x117/0x1c0 [ 523.754953] le_conn_complete_evt+0x1246/0x1e40 [ 523.754999] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 523.755045] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 523.755084] ? __asan_memcpy+0x3d/0x60 [ 523.755118] hci_le_meta_evt+0x34b/0x530 [ 523.755151] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 523.755191] hci_event_packet+0x66c/0x10e0 [ 523.755227] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 523.755261] ? __pfx_hci_event_packet+0x10/0x10 [ 523.755296] ? mark_held_locks+0x49/0x80 [ 523.755327] ? kcov_remote_start+0x2ce/0x5a0 [ 523.755375] hci_rx_work+0x65b/0x8b0 [ 523.755415] process_one_work+0x8e1/0x1960 [ 523.755464] ? __pfx_process_one_work+0x10/0x10 [ 523.755494] ? move_linked_works+0x172/0x270 [ 523.755540] ? assign_work+0x196/0x240 [ 523.755574] worker_thread+0x67e/0xe90 [ 523.755606] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 523.755650] ? __pfx_worker_thread+0x10/0x10 [ 523.755683] kthread+0x3c8/0x740 [ 523.755712] ? __pfx_kthread+0x10/0x10 [ 523.755738] ? ret_from_fork+0x79/0x7a0 [ 523.755761] ? lock_release+0xc8/0x270 [ 523.755792] ? __pfx_kthread+0x10/0x10 [ 523.755822] ret_from_fork+0x67a/0x7a0 [ 523.755846] ? __pfx_ret_from_fork+0x10/0x10 [ 523.755874] ? __switch_to+0x759/0x1030 [ 523.755907] ? __pfx_kthread+0x10/0x10 [ 523.755938] ret_from_fork_asm+0x1a/0x30 [ 523.755989] [ 523.790162] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.792098] Bluetooth: hci2: failed to register connection device 06:38:55 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) [ 523.938644] debugfs: '0' already exists in 'hci5' [ 523.940665] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 523.942154] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 523.942183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.942199] Workqueue: hci5 hci_rx_work [ 523.942240] Call Trace: [ 523.942248] [ 523.942258] dump_stack_lvl+0xfa/0x120 [ 523.942284] sysfs_warn_dup+0x80/0xa0 [ 523.942309] sysfs_create_dir_ns+0x23b/0x2a0 [ 523.942332] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 523.942353] ? find_held_lock+0x2b/0x80 [ 523.942379] ? lock_release+0xc8/0x270 [ 523.942410] ? do_raw_spin_unlock+0x53/0x220 [ 523.942446] kobject_add_internal+0x24c/0x9a0 [ 523.942482] kobject_add+0x157/0x240 [ 523.942510] ? __pfx_kobject_add+0x10/0x10 [ 523.942537] ? lock_release+0xc8/0x270 [ 523.942566] ? do_raw_spin_unlock+0x53/0x220 [ 523.942600] ? kobject_put+0xaa/0x260 [ 523.942640] device_add+0x32d/0x1830 [ 523.942680] ? __pfx_device_add+0x10/0x10 [ 523.942716] ? hci_debugfs_create_conn+0x10f/0x240 [ 523.942741] ? mgmt_send_event_skb+0x2f3/0x460 [ 523.942774] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 523.942807] hci_conn_add_sysfs+0x117/0x1c0 [ 523.942834] le_conn_complete_evt+0x1246/0x1e40 [ 523.942878] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 523.942923] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 523.942967] ? __asan_memcpy+0x3d/0x60 [ 523.943001] hci_le_meta_evt+0x34b/0x530 [ 523.943031] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 523.943070] hci_event_packet+0x66c/0x10e0 [ 523.943105] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 523.943138] ? __pfx_hci_event_packet+0x10/0x10 [ 523.943171] ? mark_held_locks+0x49/0x80 [ 523.943202] ? kcov_remote_start+0x2ce/0x5a0 [ 523.943248] hci_rx_work+0x65b/0x8b0 [ 523.943287] process_one_work+0x8e1/0x1960 [ 523.943335] ? __pfx_process_one_work+0x10/0x10 [ 523.943364] ? move_linked_works+0x172/0x270 [ 523.943408] ? assign_work+0x196/0x240 [ 523.943441] worker_thread+0x67e/0xe90 [ 523.943472] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 523.943515] ? __pfx_worker_thread+0x10/0x10 [ 523.943548] kthread+0x3c8/0x740 [ 523.943575] ? __pfx_kthread+0x10/0x10 [ 523.943601] ? ret_from_fork+0x79/0x7a0 [ 523.943624] ? lock_release+0xc8/0x270 [ 523.943654] ? __pfx_kthread+0x10/0x10 [ 523.943683] ret_from_fork+0x67a/0x7a0 [ 523.943706] ? __pfx_ret_from_fork+0x10/0x10 [ 523.943733] ? __switch_to+0x759/0x1030 [ 523.943763] ? __pfx_kthread+0x10/0x10 [ 523.943793] ret_from_fork_asm+0x1a/0x30 [ 523.943843] [ 523.977006] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 523.979033] Bluetooth: hci5: failed to register connection device [ 524.121123] Bluetooth: hci3: command 0x0406 tx timeout [ 524.569060] Bluetooth: hci6: command 0x0406 tx timeout [ 525.472134] Bluetooth: hci2: command 0x0406 tx timeout [ 525.721413] Bluetooth: hci5: command 0x0406 tx timeout [ 526.169128] Bluetooth: hci3: command 0x0406 tx timeout [ 526.617089] Bluetooth: hci6: command 0x0406 tx timeout [ 527.525090] Bluetooth: hci2: command 0x0406 tx timeout [ 527.769179] Bluetooth: hci5: command 0x0406 tx timeout [ 528.217376] Bluetooth: hci3: command 0x0406 tx timeout [ 528.665153] Bluetooth: hci6: command 0x0406 tx timeout [ 529.562692] Bluetooth: hci2: command 0x0406 tx timeout [ 529.817038] Bluetooth: hci5: command 0x0406 tx timeout [ 530.265134] Bluetooth: hci3: command 0x0406 tx timeout [ 530.713041] Bluetooth: hci6: command 0x0406 tx timeout [ 531.610150] Bluetooth: hci2: command 0x0406 tx timeout [ 531.865016] Bluetooth: hci5: command 0x0406 tx timeout [ 532.313017] Bluetooth: hci3: command 0x0406 tx timeout 06:39:04 executing program 2: mknod$loop(0x0, 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 532.760999] Bluetooth: hci6: command 0x0406 tx timeout 06:39:04 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1363) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x98}, "71b8890ccc65b3f6eb6cacc61d2b0657abb6af23b4d17d28657f232ae64e3b998a137a2d07c8d2a471db941301357ecf1cff9d1d4ee9020327dc8cb4b7c71dd5f83d47cf56773fdd1679d10ad72d69f77c8bec48cdc57fe4ba9d6b0279bc8b87e9165fae1a487167c6dd1efc4233a937f1690f893a1844eb2858d8115d7cf3c658af71c8040d4fa7410da944af8661ec974ed8f105588f22"}, 0x9c) 06:39:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x800, 0x40, 0x5}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) lremovexattr(0x0, 0x0) 06:39:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0xbfffffffffffffff) 06:39:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x1}}}, 0xa) 06:39:04 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0x8}, {0xfadd, 0x7, [0x3, 0x6]}}}}, 0x15) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 06:39:04 executing program 1: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:04 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xbc1, 0xfffe}}]}}, 0x3a) [ 532.793624] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 532.793910] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 532.821558] debugfs: '0' already exists in 'hci3' [ 532.822964] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 532.823644] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 532.823661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.823669] Workqueue: hci3 hci_rx_work [ 532.823695] Call Trace: [ 532.823700] [ 532.823705] dump_stack_lvl+0xfa/0x120 [ 532.823726] sysfs_warn_dup+0x80/0xa0 [ 532.823746] sysfs_create_dir_ns+0x23b/0x2a0 [ 532.823762] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 532.823774] ? find_held_lock+0x2b/0x80 [ 532.823790] ? lock_release+0xc8/0x270 [ 532.823808] ? do_raw_spin_unlock+0x53/0x220 [ 532.823829] kobject_add_internal+0x24c/0x9a0 [ 532.823851] kobject_add+0x157/0x240 [ 532.823867] ? __pfx_kobject_add+0x10/0x10 [ 532.823884] ? lock_release+0xc8/0x270 [ 532.823901] ? do_raw_spin_unlock+0x53/0x220 [ 532.823921] ? kobject_put+0xaa/0x260 [ 532.823943] device_add+0x32d/0x1830 [ 532.823966] ? __pfx_device_add+0x10/0x10 [ 532.823986] ? hci_debugfs_create_conn+0x10f/0x240 [ 532.824001] ? mgmt_send_event_skb+0x2f3/0x460 [ 532.824020] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 532.824037] hci_conn_add_sysfs+0x117/0x1c0 [ 532.824052] le_conn_complete_evt+0x1246/0x1e40 [ 532.824077] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 532.824100] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 532.824120] ? __asan_memcpy+0x3d/0x60 [ 532.824141] hci_le_meta_evt+0x34b/0x530 [ 532.824160] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 532.824182] hci_event_packet+0x66c/0x10e0 [ 532.824202] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 532.824222] ? __pfx_hci_event_packet+0x10/0x10 [ 532.824242] ? mark_held_locks+0x49/0x80 [ 532.824260] ? kcov_remote_start+0x2ce/0x5a0 [ 532.824287] hci_rx_work+0x65b/0x8b0 [ 532.824309] process_one_work+0x8e1/0x1960 [ 532.824340] ? __pfx_process_one_work+0x10/0x10 [ 532.824357] ? move_linked_works+0x172/0x270 [ 532.824381] ? assign_work+0x196/0x240 [ 532.824399] worker_thread+0x67e/0xe90 [ 532.824416] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 532.824440] ? __pfx_worker_thread+0x10/0x10 [ 532.824462] kthread+0x3c8/0x740 [ 532.824479] ? __pfx_kthread+0x10/0x10 [ 532.824493] ? ret_from_fork+0x79/0x7a0 [ 532.824507] ? lock_release+0xc8/0x270 [ 532.824523] ? __pfx_kthread+0x10/0x10 [ 532.824539] ret_from_fork+0x67a/0x7a0 [ 532.824552] ? __pfx_ret_from_fork+0x10/0x10 [ 532.824566] ? __switch_to+0x759/0x1030 [ 532.824585] ? __pfx_kthread+0x10/0x10 [ 532.824601] ret_from_fork_asm+0x1a/0x30 [ 532.824629] [ 532.844012] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 532.845666] Bluetooth: hci3: failed to register connection device 06:39:04 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 06:39:04 executing program 2: mknod$loop(0x0, 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0xf5ffffff00000000) 06:39:04 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x7f}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "63e1cc2dcf0076740f921323a7ebb91599e79f7191642ca7b8d9aba39bbf95c93f7aab09ad9c7c1dad88bc70f3110fe7790907e7cfdc03b895c9e24cedc1e3c08c1636dbdeb4aaf8bd0cf6248ae93b439cac542331bbc3356794425f620267e54726044556af08132fd8bba7db2dc28c98746b014f95163633a8f772e98f67b690aa6afab2f99bdd36763c823578458033dc610f58a2f895bebe8052d3c81b44c5fb6a1a2cc429b7174a7aaae08283509fd0763e62c8682339d428e8aa876c5918d911d48ebf48386aa1c3ebb49947773e665fd53d526d4ac0633a22870fc0718bcdb259ce7c697e2b0fa8a97cf0bcd6396d9609ec2e03f1da33a69d0a572f4b66b297bf599661b707e65fc9e37b550903a0b728622f5dc75f45791aea0026e820a25b2f9e0c0f80bdeec1cebd7bfc0a6016f8b97d8f6c01a9f297f22c7af0a79fd8c95d8a4c6226937fd26787a5545032e514d9ba77fdc4d8256dd611e5f2cc71f5011814de173206e25a1b0a9d6e7acf1cf42bf82660e39e65493525938a021e52795a4a96ab0e03b1cb79592394adaaec1a06c296ac62f8655a7d3086467994e71ec75cd2fbda9ed820c9cda41ec52e3ea2827efd082b20b7bbd43cb6ce9273ef0629b157ba226dc6564cfa45823f96e724293c260f1f9497d889ffa9633fa7c057e0baab1123b51f88066a78f88006440f80f2d25b2f71b0de945b9ea8374fcdb2b17b6abb189f8f57ecf3812db97f706847b701385222f2a1cbc0d6b47409fa10ac80b8206a8de0334bf735d67c1d66d6dce5112b92894444efe48c537355c8bf0f5bf79bcf935af0921bbb4739c494280eed266d8ae5f9202fc6adffb731fe12e4da30eb0c57eb4815c2cbfa8cb31066927d4085d00cb186f5db9f66adf57b26a1c774430d6c5ad63d46357b030c263948364d4f40d7e5feb93a3ce421c4e0c8f9ba6c8e6a6eee89e5666bcae226e80b4f821f08636ee13883cb348a65ec3284f93187103703db5f9601ff426606dff056bec78eeeca653840db62fc12e901e1d723d8034696d0190e02442a961c09cfb082b240d0e236715ccf85bdbe7c715e3b451b89737aeb5bbf17dfef4707c50c157ae38df4ecc877027360da45929144f7060039a3f4e5dd5565074ef3db69cf4dffed02e0cdc702ba5bb8a7614ad0c0a4594f9057a131edc0dfa0628de1ecd1ab3e5fe9760339f7fbea4b07adec5c5481a44edd757044c303ab1bb60258e927751337f84a52d1063316e8b41b2e0f40059e8cc042becd7f4371d8aac7c4ed35a3313476ed00034d03b836dd1bdcd583c4959874e3c0a94d855e8f8c1606d8b98270b8316690dcc49bca59373cd727011f2d99520e45c8fc42203aaf5a81e05d7c20916aaf9d4d11852a8b0161b97f393bed69d5929f96de9263700fa6ff0408a46dd03afbabf04e499448bebe7d3ad02b837e8cdfa802ff3e00ed4becfd1ff3dd394d47a92a35c09775e57263360eeebd6d3406fbbb43147148f59f712db7ba811d161fcd3acc6fdcffc847f6b3334989f81011b8ff56cd6d335339aea65950b277b47f01077fc6495f87d8b25b949d4d15f97889055a26eb7c1704861d54a30b83dda1ff67120f83da6090c0fc6895a72d33a2862a851cfe69ec65d18204eb2617ca1e4a8702bc64cfc54bff9083fd909bcd040a47f19668bfff70a1b004e471ea022359dce0d913335d47be1519bc94b35cc48952d9f18666c5e5eb4d3eb97e60b36a5ec0ccbed8e287e8a4d5a88225f1639fd609738a57bba68f0d87f3c86f883caaad779e4f19ce4892d386c8fec211fb3aa9e935d5b4b55f2be4a7898a534b8be1fbc0e085cb738b52381e811825644a854b858accc196b84c78422764ad84fb23d060f483f0d4450888720e8ede5a205db69e54da7120295f63ff82e4cb3c39e0f3ee71b29df2f012b51f049595ce0027f9ed623edd294ecfe07868a91731a3ee65517c5d9a4c565d9718624caa0cbc8195e54567748b28536b29cbb594943014704d2d4077b6104dafa142a94476a721c07c75c39b0532522ceb612f3bf0854307433fec80b3c6ac5cfe048689bfc877939da0e4842fe95f9fa73c8ecfcbaca6175a590c076e1ae014fb8e43580b21f5282b400f2fb18c4fac920b4bb35a6850a0d95677438e98c16ce30bb85d08fd1f6a56c523ada85b5f99ab404b6e7a4262cb86aed19f0eec9b020ba9a8b8ed9d9a27c4bd23a50623e5d4187cfe38b6cef92298960ff74d981905f87b6252165a8dc3663f86e761e3eb088d7ab3fbae951c09a7ec9e6fbadee8dd9ed0ae674ac91889f6eeb0b38a3edc0fd413e2cee215aa522fadf9b4c29bb106ee6726164c379fa9a865eea590ebc78a4ed2e469c12c89bb625422663dd31e069e7255aea5a6e814c61b9a73cbefbef309f1f520f9f6a9293f42bf2223dde5aec089af4534680e48626a2b6997b74dcab1a210096661c8dfa5ad24bee5bfa95c073de3bc036d32d19d775775f4d4ec6219e7b55b23296b7d2be8a4dff4fc8cdf308f9ce7805e72989270bf3642fe397170c77ca3602b56fc4b30d9570aef1a74b268d4fecb3fccb5a477353764f3d8e941c527096b57fc5af38296062deec8bb7c9ba2f09c56a5029623edca9ddda6a1f9c1ebeb8ec1070561b659552ff3b772d08b3dc4f7e93e053e7ca153cfe5c390662823faf32bc5d96a7bba233edd76fb90ec38461967602fdcfc6f906c0e14f42d5314ab126f08009d2b55c3ea99743a99ddb13f8a1ee228103dc643909c371d89823e91e7869ad78579b98c64dda5def89e87c42121ef978b7e1fe871f2bd5d166aa0e0e823cd5fc5bf0577bff54f652dfd4d1cc5e8f7ad240d21b0e6382bd327bdd278ec18dd80feddee0e8641838da4c22c2b0345e9e8f2ef84a911472978415fcb8c6cc466b6d77ff072fdee5b3876f6513c6bd7bff49d30b50840698fc2b04138a0ab7156260eb07fa4524507d377851e332b607f279a02b247927c9a5ac6c84efc58ecf77f590d667c625f4989acb11ef4e8ae2c5eca856301b18e8c63b31bfab8075ab4c4b40f1caf406be8cf390fe110988d5289968e21c04623b18f778e25ef15128af9c5ebf3bd2886140d6f90a52b059f326f3f2413b7a7d6a101b54cd95fd4a6278914aead81227979d5ed37ea885b001090c5352c43cb41ec79f2da6d69d9cb741f458532e28423f9abc43c81ec1788cc76c5b4649562877f9d3811670e484fa4590246745e83053ec9457d6b771ed52ca49c9851bafe44358c7e99e32521ac6e292ab212a787f7f5ea01f0a400f57a0cc82002e8882a4bb90dda86ffb89d33b665a1c1ee9ac7eac596ff94fd3c0ddd43f39d662673783ea720bb2ce0415c97deab103fe1a7431f5bcaea62afcf5bca8589ef1844a87b9cd1b95129547f203fab778ea3dc6df1cb023fcb871ac5f8d30f583ce94781a21854299561184c6794e7450c2c944eae0ede2e2a1a7ec146ba15201db3b6909ace270dce5b7c34ec0ca59325997a42aa5e48728df311d04912ac6606b5017c66e509dffe1031ddb420d97a0c80596b20413c7d662a2186d13afb501bb4159ff0991727ffd9e7935c1f886aa21b774f2ed6c2187be950f12c2a77b496c98a05fbba22c74c840f53fdb8acb21d5525b698a3232d2b055e05471144f9a7499b839a44540c55a2d08d23c3dad1872579a87d79b1e60b27a3c5a094e1db72c372d5d2f3bded54d10cea54eb5e41d18c74acb5fccc4be3e758e386467fd19a94e9f3ee6d979c2ab5ee1c93c1805c09df8b4297d6d447b0a265c056df3448a744ac1dd7808eb3800428c5374efa1e09bc8e9ac6aaeccbafb39444ade6bc8248bf7427ca4969a5f67917d7ae3d396e2e832f18f0e358d4beed5065e2186b7018889a2bd036c2fc8e87ab182afdd76076236441e74eb543eedf20ca6a06aa70092d40a08ed2d1b40c8b1a36985c34c03c0e723e2605a686b7a404ed338f8ec88fb5d21e25d0d878655449259854b48b62434aac7e749010ff370d6a530e4972e84a99f0f7841c1508996f38d1bb30897eda2b1fa694f01948d68fe815ef399f86ecbbdc30fd17eaf87236eb1544eee322e722f5da11bd036abf492bbf8190fada234772f1eb894ae5c70d7a90f470a983ac3c70eae457998ccfb5e497a08aa05ff168b58d51e4afceb05a03f40d45d50a96de74089c178d477e4036a37a4297842f2f06d96ecba7f890f4f1db8b92ccc12a66b84626145307a64972a133c72886732caab5c19da9fe136c70a48e90f914f5f58cf7d3758d84a94ca3ec3a56144abea4075a3b784aa4072b875e524cb79d9d7cefaf6d00fbcf8b4d60f1ae7d5173f39f0c0c4e1374e234d8f0fad923b36109f77c7d6e42656b7625923845baba4163c0b09288548f213114c18b2d8855f241b5b93234018240291f4172cc0c4b3e947a1cb9bdbbeff2306aeb079e5adcbbfd3ceab3f21592d3496463168cf885acacec1db0fdd909887a1346e46c33ad50ffd9df151519b45043cc548bd4ee17f31e30d7b53ff0ad3b5d5dd8a7717211c6d89ae52f3f37efd77176fa98d5e8b7997c6bb167c58a6b5f5469942102bb1424f9dce502a5baaf8f50737b375b5c2c61aa1e5525dec33e08f6c3dd342190d00811b5c48189084e4b63d3c34fd9d6373ec012cd0d8586f691ac6e83f2e65860d0d8586bb2470728fd384cd86e1ad5957611c447381812f675e662fb9e2b1cabd5a30b8ff06423d1623299bb0965493c3cfc35c8b33f6bd1ed178f50900fa630dea6a5a7ff47cb436f42fb7fc8359d918233e2448c03e90d0e5b60b89ea78c495ab0d2a1225f447394f61d9e7b9666e9918d1c62ba8c6b7be61d6efdb7cb185bc9f7596b92410ed94096e466542ddf1cf8e9f0d163322a214ec07b9d10bc5e6df21f3ed66ba6583983ca4573c8e111f8fe81b5cae346292f610d5c8b3f86b90b9fbb7146c324c9f52ba87f2916b1fd95376b6bcdd08bf09f769cca0470a704dfd99d1b08397d784f0ebdda5a7dbec2efc271c743156539d6fea667c7d094aee0ce1c351a6a2513cd75d2e212fd357edd8f00df32d97eefffb8f22a276401e796bfddc90b6d4c6b199dbe58032f6654a31f024dc0508d0e21e5cea23e49995f5d3132892d9b28cdef7a39bb7b8ae724f0ee83ae00e27892704a9bca59d115ed3a2fff2291b18cffb8995bbc52661bf9003cf9bcdfef35d427a76de717779e4ac8f3890a99d0fdf1d6f20bb0a64271865abe89a7ebf4e7d02f0a55577094dd82d15dada3230665b46b4b6d02ee6a1d079c016d3bf79426964a6aeeb64d1122bdccf53a6b68bdf8d9fd78c6707317370c66b78bd922449d2e526f3eef63954a5f4d95104a81e3e94041e343f156d95ebff8fe0974d0482a2ab3ad6b9682ccefd088c85d57f6834d54104774a1ff9db94c485d39ce9ce0f4917222de670414b949a2d66ce5e1d8932d7e502c6d6182c02d4841dd32eee9308b7410609b8d24bf375db4d4c7cf4a59dc5a84b991f2171fd19d1e43ff96b3221f5f9be9bdae62e247f4c947ef6048eaa08fa996743874a7aa634cf4465ba9c483749ffb575a7d83c7cfa44889ad44120736594028f07dc1da86c42952bdd93ccedeee815b41b5e8a264006430a733bf2a407105d420a6316f05043ff12f27f073c3c7ac26a096f666624dd40e5e56d8992a40888c31e3780c4f5a129c26f42974c01ae6c3273e3092d55d10f76c6352766fe854a543917466573686e2aeb30e0b8e025fe1021237cbb2173ce0e076a063ad"}, 0x1004) syz_emit_vhci(0x0, 0x0) 06:39:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x5) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x3) 06:39:04 executing program 4: r0 = memfd_secret(0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x100, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20044842) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) [ 532.974079] debugfs: '0' already exists in 'hci3' [ 532.974681] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 532.975390] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 532.975406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.975416] Workqueue: hci3 hci_rx_work [ 532.975441] Call Trace: [ 532.975446] [ 532.975452] dump_stack_lvl+0xfa/0x120 [ 532.975469] sysfs_warn_dup+0x80/0xa0 [ 532.975487] sysfs_create_dir_ns+0x23b/0x2a0 [ 532.975505] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 532.975517] ? find_held_lock+0x2b/0x80 [ 532.975534] ? lock_release+0xc8/0x270 [ 532.975552] ? do_raw_spin_unlock+0x53/0x220 [ 532.975572] kobject_add_internal+0x24c/0x9a0 [ 532.975592] kobject_add+0x157/0x240 [ 532.975608] ? __pfx_kobject_add+0x10/0x10 [ 532.975623] ? lock_release+0xc8/0x270 [ 532.975639] ? do_raw_spin_unlock+0x53/0x220 [ 532.975658] ? kobject_put+0xaa/0x260 [ 532.975679] device_add+0x32d/0x1830 [ 532.975702] ? __pfx_device_add+0x10/0x10 [ 532.975721] ? hci_debugfs_create_conn+0x10f/0x240 [ 532.975736] ? mgmt_send_event_skb+0x2f3/0x460 [ 532.975754] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 532.975772] hci_conn_add_sysfs+0x117/0x1c0 [ 532.975787] le_conn_complete_evt+0x1246/0x1e40 [ 532.975812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 532.975836] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 532.975857] ? __asan_memcpy+0x3d/0x60 [ 532.975877] hci_le_meta_evt+0x34b/0x530 [ 532.975894] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 532.975916] hci_event_packet+0x66c/0x10e0 [ 532.975941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 532.975958] ? __pfx_hci_event_packet+0x10/0x10 [ 532.975977] ? mark_held_locks+0x49/0x80 [ 532.975994] ? kcov_remote_start+0x2ce/0x5a0 [ 532.976020] hci_rx_work+0x65b/0x8b0 [ 532.976041] process_one_work+0x8e1/0x1960 [ 532.976068] ? __pfx_process_one_work+0x10/0x10 [ 532.976084] ? move_linked_works+0x172/0x270 [ 532.976109] ? assign_work+0x196/0x240 [ 532.976127] worker_thread+0x67e/0xe90 [ 532.976145] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 532.976168] ? __pfx_worker_thread+0x10/0x10 [ 532.976187] kthread+0x3c8/0x740 [ 532.976204] ? __pfx_kthread+0x10/0x10 [ 532.976221] ? ret_from_fork+0x79/0x7a0 [ 532.976235] ? lock_release+0xc8/0x270 [ 532.976252] ? __pfx_kthread+0x10/0x10 [ 532.976267] ret_from_fork+0x67a/0x7a0 [ 532.976280] ? __pfx_ret_from_fork+0x10/0x10 [ 532.976295] ? __switch_to+0x759/0x1030 [ 532.976314] ? __pfx_kthread+0x10/0x10 [ 532.976330] ret_from_fork_asm+0x1a/0x30 [ 532.976358] [ 532.994706] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 532.995837] Bluetooth: hci3: failed to register connection device [ 532.998576] debugfs: '0' already exists in 'hci3' [ 532.999254] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 532.999928] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 532.999947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.999955] Workqueue: hci3 hci_rx_work [ 532.999976] Call Trace: [ 532.999982] [ 532.999987] dump_stack_lvl+0xfa/0x120 [ 533.000000] sysfs_warn_dup+0x80/0xa0 [ 533.000012] sysfs_create_dir_ns+0x23b/0x2a0 [ 533.000024] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 533.000036] ? find_held_lock+0x2b/0x80 [ 533.000049] ? lock_release+0xc8/0x270 [ 533.000065] ? do_raw_spin_unlock+0x53/0x220 [ 533.000085] kobject_add_internal+0x24c/0x9a0 [ 533.000104] kobject_add+0x157/0x240 [ 533.000119] ? __pfx_kobject_add+0x10/0x10 [ 533.000134] ? lock_release+0xc8/0x270 [ 533.000150] ? do_raw_spin_unlock+0x53/0x220 [ 533.000168] ? kobject_put+0xaa/0x260 [ 533.000189] device_add+0x32d/0x1830 [ 533.000210] ? __pfx_device_add+0x10/0x10 [ 533.000229] ? hci_debugfs_create_conn+0x10f/0x240 [ 533.000242] ? mgmt_send_event_skb+0x2f3/0x460 [ 533.000259] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 533.000278] hci_conn_add_sysfs+0x117/0x1c0 [ 533.000292] le_conn_complete_evt+0x1246/0x1e40 [ 533.000315] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 533.000340] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 533.000360] ? __asan_memcpy+0x3d/0x60 [ 533.000377] hci_le_meta_evt+0x34b/0x530 [ 533.000394] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 533.000415] hci_event_packet+0x66c/0x10e0 [ 533.000434] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 533.000451] ? __pfx_hci_event_packet+0x10/0x10 [ 533.000470] ? mark_held_locks+0x49/0x80 [ 533.000487] ? kcov_remote_start+0x2ce/0x5a0 [ 533.000510] hci_rx_work+0x65b/0x8b0 [ 533.000532] process_one_work+0x8e1/0x1960 [ 533.000557] ? __pfx_process_one_work+0x10/0x10 [ 533.000573] ? move_linked_works+0x172/0x270 [ 533.000597] ? assign_work+0x196/0x240 [ 533.000615] worker_thread+0x67e/0xe90 [ 533.000631] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 533.000654] ? __pfx_worker_thread+0x10/0x10 [ 533.000673] kthread+0x3c8/0x740 [ 533.000687] ? __pfx_kthread+0x10/0x10 [ 533.000701] ? ret_from_fork+0x79/0x7a0 [ 533.000713] ? lock_release+0xc8/0x270 [ 533.000729] ? __pfx_kthread+0x10/0x10 [ 533.000745] ret_from_fork+0x67a/0x7a0 [ 533.000758] ? __pfx_ret_from_fork+0x10/0x10 [ 533.000772] ? __switch_to+0x759/0x1030 [ 533.000789] ? __pfx_kthread+0x10/0x10 [ 533.000805] ret_from_fork_asm+0x1a/0x30 [ 533.000831] [ 533.019034] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 533.020214] Bluetooth: hci3: failed to register connection device 06:39:04 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:04 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 533.187427] debugfs: '0' already exists in 'hci6' [ 533.188649] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 533.189359] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 533.189376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 533.189384] Workqueue: hci6 hci_rx_work [ 533.189409] Call Trace: [ 533.189415] [ 533.189430] dump_stack_lvl+0xfa/0x120 [ 533.189447] sysfs_warn_dup+0x80/0xa0 [ 533.189462] sysfs_create_dir_ns+0x23b/0x2a0 [ 533.189475] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 533.189487] ? find_held_lock+0x2b/0x80 [ 533.189502] ? lock_release+0xc8/0x270 [ 533.189520] ? do_raw_spin_unlock+0x53/0x220 [ 533.189540] kobject_add_internal+0x24c/0x9a0 [ 533.189560] kobject_add+0x157/0x240 [ 533.189576] ? __pfx_kobject_add+0x10/0x10 [ 533.189590] ? lock_release+0xc8/0x270 [ 533.189606] ? do_raw_spin_unlock+0x53/0x220 [ 533.189625] ? kobject_put+0xaa/0x260 [ 533.189647] device_add+0x32d/0x1830 [ 533.189669] ? __pfx_device_add+0x10/0x10 [ 533.189689] ? hci_debugfs_create_conn+0x10f/0x240 [ 533.189703] ? mgmt_send_event_skb+0x2f3/0x460 [ 533.189721] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 533.189739] hci_conn_add_sysfs+0x117/0x1c0 [ 533.189754] le_conn_complete_evt+0x1246/0x1e40 [ 533.189778] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 533.189803] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 533.189824] ? __asan_memcpy+0x3d/0x60 [ 533.189843] hci_le_meta_evt+0x34b/0x530 [ 533.189860] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 533.189882] hci_event_packet+0x66c/0x10e0 [ 533.189902] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 533.189919] ? __pfx_hci_event_packet+0x10/0x10 [ 533.189942] ? mark_held_locks+0x49/0x80 [ 533.189959] ? kcov_remote_start+0x2ce/0x5a0 [ 533.189985] hci_rx_work+0x65b/0x8b0 [ 533.190006] process_one_work+0x8e1/0x1960 [ 533.190032] ? __pfx_process_one_work+0x10/0x10 [ 533.190049] ? move_linked_works+0x172/0x270 [ 533.190073] ? assign_work+0x196/0x240 [ 533.190091] worker_thread+0x67e/0xe90 [ 533.190108] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 533.190132] ? __pfx_worker_thread+0x10/0x10 [ 533.190156] kthread+0x3c8/0x740 [ 533.190171] ? __pfx_kthread+0x10/0x10 [ 533.190186] ? ret_from_fork+0x79/0x7a0 [ 533.190199] ? lock_release+0xc8/0x270 [ 533.190215] ? __pfx_kthread+0x10/0x10 [ 533.190231] ret_from_fork+0x67a/0x7a0 [ 533.190244] ? __pfx_ret_from_fork+0x10/0x10 [ 533.190259] ? __switch_to+0x759/0x1030 [ 533.190278] ? __pfx_kthread+0x10/0x10 [ 533.190293] ret_from_fork_asm+0x1a/0x30 [ 533.190321] [ 533.208425] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 533.209491] Bluetooth: hci6: failed to register connection device [ 533.210242] debugfs: '0' already exists in 'hci5' [ 533.210795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 533.211501] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 533.211518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 533.211527] Workqueue: hci5 hci_rx_work [ 533.211544] Call Trace: [ 533.211549] [ 533.211554] dump_stack_lvl+0xfa/0x120 [ 533.211567] sysfs_warn_dup+0x80/0xa0 [ 533.211580] sysfs_create_dir_ns+0x23b/0x2a0 [ 533.211593] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 533.211605] ? find_held_lock+0x2b/0x80 [ 533.211619] ? lock_release+0xc8/0x270 [ 533.211635] ? do_raw_spin_unlock+0x53/0x220 [ 533.211655] kobject_add_internal+0x24c/0x9a0 [ 533.211674] kobject_add+0x157/0x240 [ 533.211690] ? __pfx_kobject_add+0x10/0x10 [ 533.211705] ? lock_release+0xc8/0x270 [ 533.211721] ? do_raw_spin_unlock+0x53/0x220 [ 533.211740] ? kobject_put+0xaa/0x260 [ 533.211762] device_add+0x32d/0x1830 [ 533.211782] ? __pfx_device_add+0x10/0x10 [ 533.211802] ? hci_debugfs_create_conn+0x10f/0x240 [ 533.211815] ? mgmt_send_event_skb+0x2f3/0x460 [ 533.211832] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 533.211850] hci_conn_add_sysfs+0x117/0x1c0 [ 533.211864] le_conn_complete_evt+0x1246/0x1e40 [ 533.211888] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 533.211912] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 533.211933] ? __asan_memcpy+0x3d/0x60 [ 533.211955] hci_le_meta_evt+0x34b/0x530 [ 533.211971] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 533.211993] hci_event_packet+0x66c/0x10e0 [ 533.212012] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 533.212030] ? __pfx_hci_event_packet+0x10/0x10 [ 533.212049] ? mark_held_locks+0x49/0x80 [ 533.212066] ? kcov_remote_start+0x2ce/0x5a0 [ 533.212090] hci_rx_work+0x65b/0x8b0 [ 533.212112] process_one_work+0x8e1/0x1960 [ 533.212138] ? __pfx_process_one_work+0x10/0x10 [ 533.212154] ? move_linked_works+0x172/0x270 [ 533.212179] ? assign_work+0x196/0x240 [ 533.212197] worker_thread+0x67e/0xe90 [ 533.212214] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 533.212236] ? __pfx_worker_thread+0x10/0x10 [ 533.212254] kthread+0x3c8/0x740 [ 533.212269] ? __pfx_kthread+0x10/0x10 [ 533.212283] ? ret_from_fork+0x79/0x7a0 [ 533.212297] ? __pfx_kthread+0x10/0x10 [ 533.212313] ret_from_fork+0x67a/0x7a0 [ 533.212326] ? __pfx_ret_from_fork+0x10/0x10 [ 533.212337] ? save_fpregs_to_fpstate+0x145/0x270 [ 533.212355] ? __switch_to+0x759/0x1030 [ 533.212371] ? __pfx_kthread+0x10/0x10 [ 533.212387] ret_from_fork_asm+0x1a/0x30 [ 533.212414] [ 533.230675] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 533.231758] Bluetooth: hci5: failed to register connection device 06:39:04 executing program 2: mknod$loop(0x0, 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 533.361793] debugfs: '0' already exists in 'hci3' [ 533.362474] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 533.363189] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 533.363206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 533.363216] Workqueue: hci3 hci_rx_work [ 533.363241] Call Trace: [ 533.363246] [ 533.363252] dump_stack_lvl+0xfa/0x120 [ 533.363273] sysfs_warn_dup+0x80/0xa0 [ 533.363289] sysfs_create_dir_ns+0x23b/0x2a0 [ 533.363301] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 533.363314] ? find_held_lock+0x2b/0x80 [ 533.363329] ? lock_release+0xc8/0x270 [ 533.363347] ? do_raw_spin_unlock+0x53/0x220 [ 533.363366] kobject_add_internal+0x24c/0x9a0 [ 533.363386] kobject_add+0x157/0x240 [ 533.363402] ? __pfx_kobject_add+0x10/0x10 [ 533.363416] ? lock_release+0xc8/0x270 [ 533.363433] ? do_raw_spin_unlock+0x53/0x220 [ 533.363451] ? kobject_put+0xaa/0x260 [ 533.363473] device_add+0x32d/0x1830 [ 533.363496] ? __pfx_device_add+0x10/0x10 [ 533.363516] ? hci_debugfs_create_conn+0x10f/0x240 [ 533.363530] ? mgmt_send_event_skb+0x2f3/0x460 [ 533.363549] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 533.363567] hci_conn_add_sysfs+0x117/0x1c0 [ 533.363583] le_conn_complete_evt+0x1246/0x1e40 [ 533.363608] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 533.363632] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 533.363652] ? hci_le_meta_evt+0x144/0x530 [ 533.363672] hci_le_meta_evt+0x34b/0x530 [ 533.363688] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 533.363710] hci_event_packet+0x66c/0x10e0 [ 533.363730] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 533.363747] ? __pfx_hci_event_packet+0x10/0x10 [ 533.363766] ? mark_held_locks+0x49/0x80 [ 533.363783] ? kcov_remote_start+0x2ce/0x5a0 [ 533.363808] hci_rx_work+0x65b/0x8b0 [ 533.363835] process_one_work+0x8e1/0x1960 [ 533.363864] ? __pfx_process_one_work+0x10/0x10 [ 533.363880] ? move_linked_works+0x172/0x270 [ 533.363905] ? assign_work+0x196/0x240 [ 533.363923] worker_thread+0x67e/0xe90 [ 533.363945] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 533.363969] ? __pfx_worker_thread+0x10/0x10 [ 533.363987] kthread+0x3c8/0x740 [ 533.364003] ? __pfx_kthread+0x10/0x10 [ 533.364017] ? ret_from_fork+0x79/0x7a0 [ 533.364033] ? __pfx_kthread+0x10/0x10 [ 533.364049] ret_from_fork+0x67a/0x7a0 [ 533.364061] ? __pfx_ret_from_fork+0x10/0x10 [ 533.364072] ? save_fpregs_to_fpstate+0x145/0x270 [ 533.364090] ? __switch_to+0x759/0x1030 [ 533.364109] ? __pfx_kthread+0x10/0x10 [ 533.364125] ret_from_fork_asm+0x1a/0x30 [ 533.364153] [ 533.383008] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 533.384083] Bluetooth: hci3: failed to register connection device [ 533.385020] debugfs: '0' already exists in 'hci3' [ 533.385588] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 533.386416] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 533.386433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 533.386440] Workqueue: hci3 hci_rx_work [ 533.386457] Call Trace: [ 533.386461] [ 533.386466] dump_stack_lvl+0xfa/0x120 [ 533.386479] sysfs_warn_dup+0x80/0xa0 [ 533.386491] sysfs_create_dir_ns+0x23b/0x2a0 [ 533.386503] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 533.386514] ? find_held_lock+0x2b/0x80 [ 533.386527] ? lock_release+0xc8/0x270 [ 533.386544] ? do_raw_spin_unlock+0x53/0x220 [ 533.386563] kobject_add_internal+0x24c/0x9a0 [ 533.386582] kobject_add+0x157/0x240 [ 533.386597] ? __pfx_kobject_add+0x10/0x10 [ 533.386611] ? lock_release+0xc8/0x270 [ 533.386628] ? do_raw_spin_unlock+0x53/0x220 [ 533.386646] ? kobject_put+0xaa/0x260 [ 533.386667] device_add+0x32d/0x1830 [ 533.386687] ? __pfx_device_add+0x10/0x10 [ 533.386707] ? hci_debugfs_create_conn+0x10f/0x240 [ 533.386719] ? mgmt_send_event_skb+0x2f3/0x460 [ 533.386736] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 533.386754] hci_conn_add_sysfs+0x117/0x1c0 [ 533.386768] le_conn_complete_evt+0x1246/0x1e40 [ 533.386791] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 533.386815] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 533.386835] ? __asan_memcpy+0x3d/0x60 [ 533.386854] hci_le_meta_evt+0x34b/0x530 [ 533.386870] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 533.386891] hci_event_packet+0x66c/0x10e0 [ 533.386911] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 533.386928] ? __pfx_hci_event_packet+0x10/0x10 [ 533.386951] ? mark_held_locks+0x49/0x80 [ 533.386968] ? kcov_remote_start+0x2ce/0x5a0 [ 533.386997] hci_rx_work+0x65b/0x8b0 [ 533.387021] process_one_work+0x8e1/0x1960 [ 533.387045] ? __pfx_process_one_work+0x10/0x10 [ 533.387062] ? move_linked_works+0x172/0x270 [ 533.387085] ? assign_work+0x196/0x240 [ 533.387103] worker_thread+0x67e/0xe90 [ 533.387120] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 533.387143] ? __pfx_worker_thread+0x10/0x10 [ 533.387161] kthread+0x3c8/0x740 [ 533.387176] ? __pfx_kthread+0x10/0x10 [ 533.387190] ? ret_from_fork+0x79/0x7a0 [ 533.387204] ? __pfx_kthread+0x10/0x10 [ 533.387220] ret_from_fork+0x67a/0x7a0 [ 533.387232] ? __pfx_ret_from_fork+0x10/0x10 [ 533.387243] ? save_fpregs_to_fpstate+0x145/0x270 [ 533.387261] ? __switch_to+0x759/0x1030 [ 533.387276] ? __pfx_kthread+0x10/0x10 [ 533.387292] ret_from_fork_asm+0x1a/0x30 [ 533.387319] [ 533.405998] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 533.407136] Bluetooth: hci3: failed to register connection device [ 533.658716] Bluetooth: hci2: command 0x0406 tx timeout [ 534.361020] Bluetooth: hci3: command 0x0406 tx timeout [ 534.809003] Bluetooth: hci6: command 0x0406 tx timeout [ 534.873033] Bluetooth: hci5: command 0x0406 tx timeout [ 535.708746] Bluetooth: hci2: command 0x0406 tx timeout [ 536.409145] Bluetooth: hci3: command 0x0406 tx timeout [ 536.857068] Bluetooth: hci6: command 0x0406 tx timeout [ 536.921258] Bluetooth: hci5: command 0x0406 tx timeout [ 537.756336] Bluetooth: hci2: command 0x0406 tx timeout [ 538.457276] Bluetooth: hci3: command 0x0406 tx timeout [ 538.905101] Bluetooth: hci6: command 0x0406 tx timeout [ 538.969137] Bluetooth: hci5: command 0x0406 tx timeout [ 539.804380] Bluetooth: hci2: command 0x0406 tx timeout [ 540.505170] Bluetooth: hci3: command 0x0406 tx timeout [ 540.953099] Bluetooth: hci6: command 0x0406 tx timeout [ 541.017049] Bluetooth: hci5: command 0x0406 tx timeout [ 541.852079] Bluetooth: hci2: command 0x0406 tx timeout [ 542.553069] Bluetooth: hci3: command 0x0406 tx timeout [ 543.001070] Bluetooth: hci6: command 0x0406 tx timeout [ 543.905038] Bluetooth: hci2: command 0x0406 tx timeout 06:39:15 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:15 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r0, @ANYRESDEC=r0], 0x2c, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x80, 0xa, &(0x7f00000017c0)=[{&(0x7f0000000100)="cc88744fe8ca5c3dec991b56f48970dc731aed6e328bedcbf62965cf14f634f9fde40edf5c29c5f0cbdf4771dc2055d6e3ddbec579219d1a", 0x38, 0x8000}, {&(0x7f00000002c0)="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", 0x1000, 0x4}, {&(0x7f0000000140)="8fd0c8789608299823f96c706d769d73d2b231a99949ca38c4459b4f7af860cba99b7fab7651d4a7170b640d44ad5e716b92b3410ed056584c", 0x39, 0x100000000}, {&(0x7f0000000180)="8d0517df6e40e1c54cce518433aa55718b29fed19cf31e5a907d53fc57a9b9b833e9d40020ed8e917a250d435c96540ddec7e536fd4fe859d497", 0x3a, 0x80000000}, {&(0x7f00000012c0)="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", 0xfd, 0x81}, {&(0x7f00000013c0)="104901702a6239494add986fd038d6ad9634fa8caee2e5b9b7aa4262dabf12e0bc1c6841fe103b44f5e0f6a50a0221c95cd219ddeb35b09fa160bfef71b47e5254c272d057112fa1e68e7d877469542773f10be1578df119def1cf7c8480d949765aacd2877ba88c0033549a7b411e4f3042ca13ff8e8068c06b2d481c5ac804d4482e73a8b119190ecb199d490edd", 0x8f, 0x3}, {&(0x7f0000001480)="ba7dae701d90e5cc21afc75275c5e10fec3f037aeb7ee7a54ebb", 0x1a, 0x1ff}, {&(0x7f00000014c0)="d5de996dec45501ecfc4028feb725588aaf6648adcb0a7eac22ca1ffc574705015cf7d05fb301932dfa8c8748d01056aaca2068060f6f196c222f7bfd8cf2cca41624b63b1ef96787a64eb3a684a459425de1f4df45f2408caa7598765ef3e61294cd8509685a4ff1a67a4e1206e0eb78847368135508f34b87311fbb6432518f500e4339b7d47d6a02eb032f9137784d75d0ed7ca8816137dfb5e31597ec69e2d3c6666f8b2881d4b22ae63fd8457c95487336296c97e86a049d7938a79234e2494b69fb82a1e77f4bc42df40fd06da9c0d587bab1cc9be3b65ef", 0xdb, 0x3}, {&(0x7f00000015c0)="3a7fb7183c742742382d2962886a3f70dd9cd8c11bf7cb685be2faf0655378c4f67fcea87e01e3d85345bd475d7ccdfdd9a14926dfd09584d54dc5d9b793219a6534baf8c0776da4630265db7f65d092725bd203872f39e9925e13e68f8973822833da34a3dd7be0c87d0333b51a4b18f689e6fdbf6da4daeeb57f701238d19e98e33936b034703b9d057f1ffce5460b4e9dfa5beeaf54bc43743df0d0e685446291225119525fceb0617b0a33b2bc42a76fbccf4a4d506f0447367f68ff4bd83eeaf85a986014ed26c06aa3c8a4379d0c9f3da648bc17d7d09148b63c02", 0xde, 0xff}, {&(0x7f00000016c0)="e147e8cece6f0444ca9eb8c18186f191d2a7788fdf9e67998b7f0cfafe718b310cbc013aac2a891d8053a3d4de8c2e80089ac61f4340793abbf45d76223776a39defd78a86f198a7133f379e1dd8c0ccf7d8e1c52507c8aa161a346a4efa28fe082c8666dfe782adbee47412bb9697dec2e97dbde289ef8361773e7d81cadaa4ffcaa14b53ea0975f269cd81957609195185e04ec90f8af8e586e3cf371b8f31a769d927d4f8bd2e35297494e1207261123b637af07011b5c3114acd148dce571d31d176435a7c888cc4c28713e8dc75568d8831a8d4741507a6595f5247c5b23ca96c927c148edd6b2533491c63", 0xee, 0x3}], 0x2480, &(0x7f00000018c0)={[{@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x37, 0x2d, 0x74, 0x34, 0x39]}}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x37]}}, {@gid={'gid', 0x3d, r0}}, {@size={'size', 0x3d, [0x25, 0x67, 0x59, 0x70, 0x1c]}}], [{@seclabel}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x36, 0x36, 0x39, 0x39, 0x61, 0x65, 0x39], 0x2d, [0x39, 0x63, 0x34, 0x65], 0x2d, [0x34, 0x55, 0x61, 0x64], 0x2d, [0x69, 0x38, 0x63, 0x65], 0x2d, [0x61, 0x34, 0x34, 0x36, 0x32, 0x37, 0x31, 0x31]}}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x66, 0x66, 0x31, 0x37, 0x32, 0x63, 0x39], 0x2d, [0x39, 0x38, 0x61, 0x31], 0x2d, [0x31, 0x37, 0x34, 0x31], 0x2d, [0x62, 0x34, 0x35, 0x31], 0x2d, [0xc110cb852e5f0ec5, 0x61, 0x65, 0x62, 0x39, 0x39, 0x35, 0x38]}}}]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c900b63097cf797cd117a69eaa1d221b24b46121d477a1530a16e1f7fa5629b58f3875b6504f30cdfac33b4fce74fe84561f0c0d3f375a19d7c859e3aaaecf7ef46a484830a9295df32a53f66d9615509d8d721b1e99fea7f0c9d9f6cc0cb53530f088a8da239825ca079556d92a0df64a79da201966998ffeab6e6c0bb3cc1b10bf16557803cf1567843150eb9febac8cc43af6c7839382948d17b7773a682848d814c4cc682a87836f778f840ed853d8fd7df7401742d0a6f82f31d168d8647e63a3617ad833a111"], 0xba) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 06:39:15 executing program 1: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:15 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:15 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e000000aaaaaaaaaaffff00000000000000"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) 06:39:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x55, 0x5, 0xa0, 0x4, 0x0, 0x101, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffff73c}, 0x1408, 0x0, 0x3f, 0x2, 0xfff, 0x6, 0xd5e, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0x9, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:39:15 executing program 7: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="046c62809a31eaba3e1f0a0000060000aaaaaaaaaa00ffffffffffffffffffffffff00000000020000"], 0x8) syz_emit_vhci(0x0, 0x0) 06:39:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0xfdffffff00000000) 06:39:15 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 06:39:15 executing program 7: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x80000000, 0x8, 0x6, 0x56b, 0x7, 0x8]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x40, 0x1}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x9}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7f, 0xb}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x18}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x85}, 0x4008044) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eff1792bc9158e31da0ae0a17e70c72093bc97f9e7b77ddf1c42effffffffffffffffffff00"/59], 0x22) syz_emit_vhci(0x0, 0x0) 06:39:15 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x7, 0x800, 0x9}}}}, 0xd) [ 544.215710] loop4: detected capacity change from 0 to 264192 [ 544.240334] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 544.254492] loop4: detected capacity change from 0 to 264192 06:39:15 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0xffffffffffffffbf) 06:39:15 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x4}}, 0x9) [ 544.270029] debugfs: '0' already exists in 'hci6' [ 544.271342] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 544.272758] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 544.272790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 544.272806] Workqueue: hci6 hci_rx_work [ 544.272846] Call Trace: [ 544.272855] [ 544.272865] dump_stack_lvl+0xfa/0x120 [ 544.272893] sysfs_warn_dup+0x80/0xa0 [ 544.272920] sysfs_create_dir_ns+0x23b/0x2a0 [ 544.272952] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 544.272975] ? find_held_lock+0x2b/0x80 [ 544.273005] ? lock_release+0xc8/0x270 [ 544.273039] ? do_raw_spin_unlock+0x53/0x220 [ 544.273078] kobject_add_internal+0x24c/0x9a0 [ 544.273117] kobject_add+0x157/0x240 [ 544.273149] ? __pfx_kobject_add+0x10/0x10 [ 544.273179] ? lock_release+0xc8/0x270 [ 544.273212] ? do_raw_spin_unlock+0x53/0x220 [ 544.273250] ? kobject_put+0xaa/0x260 [ 544.273295] device_add+0x32d/0x1830 [ 544.273339] ? __pfx_device_add+0x10/0x10 [ 544.273379] ? hci_debugfs_create_conn+0x10f/0x240 [ 544.273405] ? mgmt_send_event_skb+0x2f3/0x460 [ 544.273440] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 544.273476] hci_conn_add_sysfs+0x117/0x1c0 [ 544.273505] le_conn_complete_evt+0x1246/0x1e40 [ 544.273552] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 544.273615] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 544.273655] ? __asan_memcpy+0x3d/0x60 [ 544.273692] hci_le_meta_evt+0x34b/0x530 [ 544.273725] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 544.273768] hci_event_packet+0x66c/0x10e0 [ 544.273805] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 544.273841] ? __pfx_hci_event_packet+0x10/0x10 [ 544.273877] ? mark_held_locks+0x49/0x80 [ 544.273911] ? kcov_remote_start+0x2ce/0x5a0 [ 544.273960] hci_rx_work+0x65b/0x8b0 [ 544.274003] process_one_work+0x8e1/0x1960 [ 544.274054] ? __pfx_process_one_work+0x10/0x10 [ 544.274086] ? move_linked_works+0x172/0x270 [ 544.274134] ? assign_work+0x196/0x240 [ 544.274170] worker_thread+0x67e/0xe90 [ 544.274204] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 544.274249] ? __pfx_worker_thread+0x10/0x10 [ 544.274285] kthread+0x3c8/0x740 [ 544.274315] ? __pfx_kthread+0x10/0x10 [ 544.274342] ? ret_from_fork+0x79/0x7a0 [ 544.274367] ? lock_release+0xc8/0x270 [ 544.274400] ? __pfx_kthread+0x10/0x10 [ 544.274431] ret_from_fork+0x67a/0x7a0 [ 544.274457] ? __pfx_ret_from_fork+0x10/0x10 [ 544.274487] ? __switch_to+0x759/0x1030 [ 544.274519] ? __pfx_kthread+0x10/0x10 [ 544.274551] ret_from_fork_asm+0x1a/0x30 [ 544.274605] [ 544.313160] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 544.317375] Bluetooth: hci6: failed to register connection device [ 544.322785] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 544.356141] debugfs: '0' already exists in 'hci5' [ 544.360386] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' 06:39:15 executing program 4: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 06:39:15 executing program 0: getpgrp(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f730800000000a6aaec85aaaa8f00ffffffffffffffffffffffff001c000000"], 0x22) [ 544.361881] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 544.361911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 544.361927] Workqueue: hci5 hci_rx_work [ 544.361972] Call Trace: [ 544.361981] [ 544.361990] dump_stack_lvl+0xfa/0x120 [ 544.362018] sysfs_warn_dup+0x80/0xa0 [ 544.362044] sysfs_create_dir_ns+0x23b/0x2a0 [ 544.362067] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 544.362089] ? find_held_lock+0x2b/0x80 [ 544.362116] ? lock_release+0xc8/0x270 [ 544.362147] ? do_raw_spin_unlock+0x53/0x220 [ 544.362188] kobject_add_internal+0x24c/0x9a0 [ 544.362226] kobject_add+0x157/0x240 [ 544.362255] ? __pfx_kobject_add+0x10/0x10 [ 544.362282] ? lock_release+0xc8/0x270 [ 544.362312] ? do_raw_spin_unlock+0x53/0x220 [ 544.362346] ? kobject_put+0xaa/0x260 [ 544.362387] device_add+0x32d/0x1830 [ 544.362427] ? __pfx_device_add+0x10/0x10 [ 544.362464] ? hci_debugfs_create_conn+0x10f/0x240 [ 544.362489] ? mgmt_send_event_skb+0x2f3/0x460 [ 544.362523] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 544.362556] hci_conn_add_sysfs+0x117/0x1c0 [ 544.362584] le_conn_complete_evt+0x1246/0x1e40 [ 544.362628] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 544.362674] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 544.362711] ? __asan_memcpy+0x3d/0x60 [ 544.362746] hci_le_meta_evt+0x34b/0x530 [ 544.362776] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 544.362816] hci_event_packet+0x66c/0x10e0 [ 544.362852] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 544.362885] ? __pfx_hci_event_packet+0x10/0x10 [ 544.362919] ? mark_held_locks+0x49/0x80 [ 544.362950] ? kcov_remote_start+0x2ce/0x5a0 [ 544.362997] hci_rx_work+0x65b/0x8b0 [ 544.363036] process_one_work+0x8e1/0x1960 [ 544.363084] ? __pfx_process_one_work+0x10/0x10 [ 544.363115] ? move_linked_works+0x172/0x270 [ 544.363159] ? assign_work+0x196/0x240 [ 544.363193] worker_thread+0x67e/0xe90 [ 544.363225] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 544.363268] ? __pfx_worker_thread+0x10/0x10 [ 544.363301] kthread+0x3c8/0x740 [ 544.363329] ? __pfx_kthread+0x10/0x10 [ 544.363355] ? ret_from_fork+0x79/0x7a0 [ 544.363379] ? lock_release+0xc8/0x270 [ 544.363410] ? __pfx_kthread+0x10/0x10 [ 544.363440] ret_from_fork+0x67a/0x7a0 [ 544.363463] ? __pfx_ret_from_fork+0x10/0x10 [ 544.363491] ? __switch_to+0x759/0x1030 [ 544.363522] ? __pfx_kthread+0x10/0x10 [ 544.363551] ret_from_fork_asm+0x1a/0x30 [ 544.363602] [ 544.397888] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 544.402442] Bluetooth: hci5: failed to register connection device 06:39:15 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:15 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000002000aaaab0aaaa00ffffffffffffffffffffbfff00000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) [ 544.487382] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 544.603290] Bluetooth: hci3: command 0x0406 tx timeout [ 545.049371] Bluetooth: hci6: command 0x0406 tx timeout [ 545.948597] Bluetooth: hci2: command 0x0406 tx timeout [ 546.201194] Bluetooth: hci5: command 0x0406 tx timeout [ 546.649102] Bluetooth: hci3: command 0x0406 tx timeout [ 547.097076] Bluetooth: hci6: command 0x0406 tx timeout [ 548.000210] Bluetooth: hci2: command 0x0406 tx timeout [ 548.249239] Bluetooth: hci5: command 0x0406 tx timeout [ 548.697164] Bluetooth: hci3: command 0x0406 tx timeout [ 549.145128] Bluetooth: hci6: command 0x0406 tx timeout [ 550.044384] Bluetooth: hci2: command 0x0406 tx timeout [ 550.297138] Bluetooth: hci5: command 0x0406 tx timeout [ 550.745094] Bluetooth: hci3: command 0x0406 tx timeout [ 551.193005] Bluetooth: hci6: command 0x0406 tx timeout [ 552.092205] Bluetooth: hci2: command 0x0406 tx timeout [ 552.345031] Bluetooth: hci5: command 0x0406 tx timeout [ 552.793086] Bluetooth: hci3: command 0x0406 tx timeout [ 553.241188] Bluetooth: hci6: command 0x0406 tx timeout [ 554.141670] Bluetooth: hci2: command 0x0406 tx timeout 06:39:25 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x5f5}, {0x6, [{@none, 0x40, 0x87, "ee376b", 0xfff9, 0x9, "8cf9eec2ac6d5eff39dcfac2c8b692fdf98986724bce1b0a88f2b7e1723737cf2bb1bc0163ffa647bae96f94e7ee58d59d6d7a718ea984f4eee06a1f498ffdaa44f7df4180a7177a683a8910083977e8ef6047dc94052b14c54d37224a12d7063671db6346a9daf69efefac60fb2b4389620c533272f07dc4d36cab4688dff203096179af59e85d9b2065292022ef99c75c36f7c08ccece96a24ce727f23a97c2e6fe0ecc2f324a67ad2ffba358baaca51fcd928a3ef381508bdb8829ab2a399c55cdbad77de3f89b3c1c2f60e0807406724a957efc1f87d46658861a00aa464f1a6984294edbbdaba1c1ee4fa1380c4"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x1, "2dc3f7", 0x1, 0x3, "3bd8a84a3436b97792268812d46e6bcad817442295bd132a538ee10e6e7e8dd655b5ff5c0ba98e3af83f5106510d6bc83dc086f0e388061637e20c9e71970a22686cf76ca1687b60751c4d46366dc61d3490708c521b3e1f1d9fabe881ede7457e7cb5e2f6ebfaeabe7a9467b6ea13242441a7a05569d28d12c8a64ce3207e647fc5486a031e9986ad4bef511e3408d28521a395bc2c533505357071500c67bc184efc3d279de6865fa1c92d6d3cd01c66d5956499e6e94413465d682ad64e08ae8e8a728304195633e56cbdbf3c45f277c8605d537ae5031a863c57a29c352e6f576ec06005c1900d743c7f3f80ea75"}, {@any, 0x0, 0x5, "ecd61a", 0x2, 0x1, "752b0b1b3fc98bde0c93ab0a6d25d430f8842cea187eaf9268a98a4329dc63533e9be5cbb420ac26c33574581f17e776bdf4f58798ce7f7ee0228576b3a331d1cf4adef60a5b4567b93558fa7959ffa2bf920588d1a5274752fe8a530d4acf5bad4c80932e0068eb49c9e443d0872bf505f55f6f071305abc6e9e4667cd10aa7e8cc8b37f9cdba4f59733c9682760d92cbe524601c98d359c5dfcf03596c7711d3b7f9e65e5a1748c34cd9521e1c7f66fc559c44ad6a9da04acc27e60975a95ef75ec95b27bab4e01d75b1fdb6cbf755e8c58b292e5d9b96d2dc772461328966291a96c1dba8425629f5ebaf8ce1094d"}, {@none, 0x1, 0x9, "b41ab5", 0x7, 0x7f, "55d69d4b64ec0498852e143fac9d4f6f5ecb6d738c72e7c4d39bce7763bd0a08bb40d249f610fd5286a79ddcedb2c99be5a3daa481ec1f64c29a0464b244dd76295a2da2e10e5731e2048f9cf0eed08da0e211772efdd061e8ea49dd0f12b4a69c2bddc92cd957e8e400c4f7f2581f3c0fd83247136028adc899f58f4ff0fa9e5fdea8187fd7ada065c527f0c1ef9d0b9ec354c938ac4194ac085fabe11eee20f8186092c09e3f65da10f93eae47c41098b1e71de768c168ee123df5b39fb4f8d11cf54218dc2ddbed031fe33c0e37aa01bb48741ccd5dae50003053fe2fac2997a2fab7358252d929a57f7dc6db720f"}, {@any, 0x80, 0x5, "90ea12", 0x6af9, 0x6, "c1935d87aadf7b60e58b67ba91a06af59a220f0fc1a0571b415b2e7d244d187cf8bf12cae086480fa6b73fb7f7a18776849fab915706b009a52d7e3a2933906a1dcf58adfc4e20bdc0102347fb5cf561d1da96a318164e107a53f367533b9009ef6a79aff78e77940bc4fa6c4a7737248696263c9bf8f62d467a1814c6a39ed030adf3f776e109e5cd7f5c49bc68f70b4183e6cfc17de7bcf45b5e35342b39ef54c5ac1354cd40cdc659c323f2174b3c8eb7dc7c5770d46d9ad926d91a1b85037904c2cd4fd6fa953c5c9320d290aeb894862e987ceaf582aac61023028918a1a976b1b11ce0adf17168cc5718fa8e8f"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x80, "8fce75", 0x6, 0x20, "16f7b868dedef3d3f45cc33da5d09d4899726a511a2db02f22c95ce14183e0045084496194359c56a22bd1135abdb7d402707dcd0117e0896708683444b295d34ed100bcc0976abbc0ce4467088bdde9e9def2b7b1725bf6d1dc39608aad4a141f32e7b1ac36e65ddafe2a17125c00bb9131ab2c5df23cccf8fdd38f024ea8c30d75696f4b194909d91db8b1e49f2265d105d16a70eadac865cd1ef1866a3cb14191bd4c1b432f27246ed5ca3ca405396e63292817d4b87a64ac9284997af03cc0bc2d1e82bdde2f710c5dbfdada1197fee155a72e11228230013c3750f181bbbdeab017141b29934077b18ff6184d8e"}]}}}, 0x5f8) 06:39:25 executing program 1: r0 = inotify_init1(0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x100) 06:39:25 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x63}, "a5c9f175db9e3d2a55a62a683e5f656e4c5f8192ccc062d4ac7af6a8eaa4ce32ad30685bbeaed6a808c7648754ab4486e09abd7490c6e313145208321bd1f5221df91e414b53d7b83e52a85a9fe7cec05fea778afc1ae45f5970df697ca1c837db8211"}, 0x67) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x1, 0x2d}, "b02e5be058c076fd1ccc11acd59c50bb555cc53b7a002e73dc048984753459884b659fcf5327f31828acbb1e9f"}, 0x31) 06:39:25 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xad, 0x3, 0x3, 0x38}, @l2cap_cid_signaling={{0x34}, [@l2cap_disconn_rsp={{0x7, 0xf9, 0x4}, {0x25, 0x8}}, @l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0x8001, 0xffff}}, @l2cap_info_req={{0xa, 0x3, 0x2}, {0x7}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x400, 0x3ff}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x7, 0x40}}, @l2cap_info_req={{0xa, 0x81, 0x2}, {0x5}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x8000, 0x100}}]}}, 0x3d) 06:39:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2621, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x7f22903bcfdc5cde) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:39:25 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x4}}, 0x9) [ 554.517845] debugfs: '0' already exists in 'hci3' [ 554.519335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 554.520588] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.520617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.520631] Workqueue: hci3 hci_rx_work [ 554.520668] Call Trace: [ 554.520677] [ 554.520686] dump_stack_lvl+0xfa/0x120 [ 554.520712] sysfs_warn_dup+0x80/0xa0 [ 554.520736] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.520758] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.520779] ? find_held_lock+0x2b/0x80 [ 554.520804] ? lock_release+0xc8/0x270 [ 554.520834] ? do_raw_spin_unlock+0x53/0x220 [ 554.520868] kobject_add_internal+0x24c/0x9a0 [ 554.520902] kobject_add+0x157/0x240 [ 554.520929] ? __pfx_kobject_add+0x10/0x10 [ 554.520962] ? lock_release+0xc8/0x270 [ 554.520990] ? do_raw_spin_unlock+0x53/0x220 [ 554.521023] ? kobject_put+0xaa/0x260 [ 554.521059] device_add+0x32d/0x1830 [ 554.521097] ? __pfx_device_add+0x10/0x10 [ 554.521131] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.521155] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.521187] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.521218] hci_conn_add_sysfs+0x117/0x1c0 [ 554.521244] le_conn_complete_evt+0x1246/0x1e40 [ 554.521285] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.521326] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.521361] ? __asan_memcpy+0x3d/0x60 [ 554.521393] hci_le_meta_evt+0x34b/0x530 [ 554.521423] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.521459] hci_event_packet+0x66c/0x10e0 [ 554.521493] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.521524] ? __pfx_hci_event_packet+0x10/0x10 [ 554.521556] ? mark_held_locks+0x49/0x80 [ 554.521586] ? kcov_remote_start+0x2ce/0x5a0 [ 554.521629] hci_rx_work+0x65b/0x8b0 [ 554.521665] process_one_work+0x8e1/0x1960 [ 554.521708] ? __pfx_process_one_work+0x10/0x10 [ 554.521737] ? move_linked_works+0x172/0x270 [ 554.521790] ? assign_work+0x196/0x240 [ 554.521821] worker_thread+0x67e/0xe90 [ 554.521850] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.521890] ? __pfx_worker_thread+0x10/0x10 [ 554.521921] kthread+0x3c8/0x740 [ 554.521948] ? __pfx_kthread+0x10/0x10 [ 554.521972] ? ret_from_fork+0x79/0x7a0 [ 554.521995] ? lock_release+0xc8/0x270 [ 554.522024] ? __pfx_kthread+0x10/0x10 [ 554.522051] ret_from_fork+0x67a/0x7a0 [ 554.522073] ? __pfx_ret_from_fork+0x10/0x10 [ 554.522099] ? __switch_to+0x759/0x1030 [ 554.522129] ? __pfx_kthread+0x10/0x10 [ 554.522157] ret_from_fork_asm+0x1a/0x30 [ 554.522203] [ 554.555738] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.558549] Bluetooth: hci3: failed to register connection device [ 554.561482] Bluetooth: hci3: ACL packet for unknown connection handle 173 [ 554.568110] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 554.568505] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 554.569762] debugfs: '0' already exists in 'hci2' [ 554.571682] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 554.573145] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.573173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.573186] Workqueue: hci2 hci_rx_work [ 554.573218] Call Trace: [ 554.573225] [ 554.573234] dump_stack_lvl+0xfa/0x120 [ 554.573257] sysfs_warn_dup+0x80/0xa0 [ 554.573279] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.573300] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.573320] ? find_held_lock+0x2b/0x80 [ 554.573343] ? lock_release+0xc8/0x270 [ 554.573372] ? do_raw_spin_unlock+0x53/0x220 [ 554.573405] kobject_add_internal+0x24c/0x9a0 [ 554.573438] kobject_add+0x157/0x240 [ 554.573465] ? __pfx_kobject_add+0x10/0x10 [ 554.573489] ? lock_release+0xc8/0x270 [ 554.573518] ? do_raw_spin_unlock+0x53/0x220 [ 554.573550] ? kobject_put+0xaa/0x260 [ 554.573586] device_add+0x32d/0x1830 [ 554.573622] ? __pfx_device_add+0x10/0x10 [ 554.573656] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.573678] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.573709] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.573739] hci_conn_add_sysfs+0x117/0x1c0 [ 554.573775] le_conn_complete_evt+0x1246/0x1e40 [ 554.573814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.573855] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.573889] ? __asan_memcpy+0x3d/0x60 [ 554.573919] hci_le_meta_evt+0x34b/0x530 [ 554.573953] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.573989] hci_event_packet+0x66c/0x10e0 [ 554.574021] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.574052] ? __pfx_hci_event_packet+0x10/0x10 [ 554.574083] ? mark_held_locks+0x49/0x80 [ 554.574112] ? kcov_remote_start+0x2ce/0x5a0 [ 554.574152] hci_rx_work+0x65b/0x8b0 [ 554.574188] process_one_work+0x8e1/0x1960 [ 554.574230] ? __pfx_process_one_work+0x10/0x10 [ 554.574258] ? move_linked_works+0x172/0x270 [ 554.574297] ? assign_work+0x196/0x240 [ 554.574327] worker_thread+0x67e/0xe90 [ 554.574356] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.574395] ? __pfx_worker_thread+0x10/0x10 [ 554.574425] kthread+0x3c8/0x740 [ 554.574450] ? __pfx_kthread+0x10/0x10 [ 554.574474] ? ret_from_fork+0x79/0x7a0 [ 554.574500] ? __pfx_kthread+0x10/0x10 [ 554.574527] ret_from_fork+0x67a/0x7a0 [ 554.574549] ? __pfx_ret_from_fork+0x10/0x10 [ 554.574568] ? save_fpregs_to_fpstate+0x145/0x270 [ 554.574598] ? __switch_to+0x759/0x1030 [ 554.574627] ? __pfx_kthread+0x10/0x10 [ 554.574654] ret_from_fork_asm+0x1a/0x30 [ 554.574698] [ 554.606189] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.608116] Bluetooth: hci2: failed to register connection device [ 554.609286] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 554.609345] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 554.611308] debugfs: '0' already exists in 'hci3' [ 554.613145] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 554.614320] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.614346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.614359] Workqueue: hci3 hci_rx_work [ 554.614389] Call Trace: [ 554.614396] [ 554.614404] dump_stack_lvl+0xfa/0x120 [ 554.614426] sysfs_warn_dup+0x80/0xa0 [ 554.614447] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.614468] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.614488] ? find_held_lock+0x2b/0x80 [ 554.614510] ? lock_release+0xc8/0x270 [ 554.614537] ? do_raw_spin_unlock+0x53/0x220 [ 554.614571] kobject_add_internal+0x24c/0x9a0 [ 554.614602] kobject_add+0x157/0x240 [ 554.614629] ? __pfx_kobject_add+0x10/0x10 [ 554.614653] ? lock_release+0xc8/0x270 [ 554.614681] ? do_raw_spin_unlock+0x53/0x220 [ 554.614713] ? kobject_put+0xaa/0x260 [ 554.614748] device_add+0x32d/0x1830 [ 554.614783] ? __pfx_device_add+0x10/0x10 [ 554.614815] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.614837] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.614868] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.614897] hci_conn_add_sysfs+0x117/0x1c0 [ 554.614921] le_conn_complete_evt+0x1246/0x1e40 [ 554.614967] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.615007] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.615041] ? __asan_memcpy+0x3d/0x60 [ 554.615070] hci_le_meta_evt+0x34b/0x530 [ 554.615098] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.615135] hci_event_packet+0x66c/0x10e0 [ 554.615167] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.615197] ? __pfx_hci_event_packet+0x10/0x10 [ 554.615228] ? mark_held_locks+0x49/0x80 [ 554.615257] ? kcov_remote_start+0x2ce/0x5a0 [ 554.615296] hci_rx_work+0x65b/0x8b0 [ 554.615331] process_one_work+0x8e1/0x1960 [ 554.615372] ? __pfx_process_one_work+0x10/0x10 [ 554.615400] ? move_linked_works+0x172/0x270 [ 554.615439] ? assign_work+0x196/0x240 [ 554.615469] worker_thread+0x67e/0xe90 [ 554.615498] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.615535] ? __pfx_worker_thread+0x10/0x10 [ 554.615564] kthread+0x3c8/0x740 [ 554.615590] ? __pfx_kthread+0x10/0x10 [ 554.615614] ? ret_from_fork+0x79/0x7a0 [ 554.615638] ? __pfx_kthread+0x10/0x10 [ 554.615665] ret_from_fork+0x67a/0x7a0 [ 554.615686] ? __pfx_ret_from_fork+0x10/0x10 [ 554.615705] ? save_fpregs_to_fpstate+0x145/0x270 [ 554.615735] ? __switch_to+0x759/0x1030 [ 554.615762] ? __pfx_kthread+0x10/0x10 [ 554.615789] ret_from_fork_asm+0x1a/0x30 [ 554.615831] [ 554.646737] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.648475] Bluetooth: hci3: failed to register connection device [ 554.653272] Bluetooth: hci3: ACL packet for unknown connection handle 173 06:39:25 executing program 1: r0 = inotify_init1(0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x0, 0x2, 0x9, 0x0, 0x6, 0x21804, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x0, 0x6, 0x9, 0x7f, 0xa8a, 0x3, 0x0, 0xfffffffc, 0x0, 0xffffffffffffe3e8}, 0xffffffffffffffff, 0x10, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) close_range(r3, r5, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f00000001c0)=0xfffffffb, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe29b}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:39:26 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x6, 0xfffb, 0x4, 0x401}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x51, 0xc9, 0x4, 0xffff}}}, 0x9) 06:39:26 executing program 4: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)={'L+'}, 0x16, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x101000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r2, r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) bind$802154_raw(r4, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a01ff000000aaaaaaaaaa00ffff0bf4d61197a52cc75bffff40000000001fffff00000000000000"], 0x22) 06:39:26 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x4}}, 0x9) 06:39:26 executing program 7: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x28c000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffffffff07000000000000006b6b91194b04f709d0d8872c410323a5e542867c22a12eb18a4da0372a56286723688e700500a59cdb0fa7d6c4dc3fb55747aa671a8c6e495517a55fe5aea14d96122e6d966a7306772bab3c0c77c90f8441077b97dbf23ba3cff9449420e426d065f1eb7af47f5faf48a83eb21c4f827275dfc0122d9a7fd155b5cc3ec9396f8bdc2fde714b650700d93ce8d20af5f2fd57d377f5d863f2ada426"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x79}, "e435a10ce6055cb7ab56b51c3775ca9c99b4e2e7e41e0931843c366216c09a8db6733a9cb67af9f68caf446c4ce8a63a7435ee00cb50a7ab50290cbb1813b3f013c6dde2312062ed4c000f84e0b37321ad2d6e4bf5b4b7aa1629e3daf460c8827ab84abd1ff891d102baf30a7e1d2cd633d6c6f75fc687e6fe"}, 0x7d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x3f, 0x2, [{0xc9, 0x2}, {0x0, 0x8001, 0x3}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x1, 0xc9, 0x81, 0x3, 0x1, 0x4}}}, 0xc) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x81, 0x3}, {0x8, 0x4}}, @l2cap_conf_rsp={{0x5, 0x52}, {0x67, 0x4, 0x7, [@l2cap_conf_efs={0x6, 0x0, {0xba, 0x2, 0x1, 0x1, 0x5, 0xffff}}, @l2cap_conf_mtu={0x1, 0x0, 0x1}, @l2cap_conf_fcs, @l2cap_conf_flushto={0x2, 0x0, 0x6}, @l2cap_conf_fcs, @l2cap_conf_efs={0x6, 0x0, {0xa1, 0x2, 0x81, 0x84, 0x7fff, 0x80000001}}, @l2cap_conf_flushto={0x2, 0x0, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffc, 0x9}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x18}, {0x6ab7, 0xfff, 0x6, 0x1, [0xbc, 0x101, 0x8, 0xfffc, 0x3ff, 0x3f, 0x7, 0x0]}}}}, 0x25) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(0x0, 0x0) 06:39:26 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 554.823300] debugfs: '0' already exists in 'hci3' [ 554.824210] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 554.825303] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.825328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.825341] Workqueue: hci3 hci_rx_work [ 554.825375] Call Trace: [ 554.825382] [ 554.825391] dump_stack_lvl+0xfa/0x120 [ 554.825414] sysfs_warn_dup+0x80/0xa0 [ 554.825435] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.825455] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.825472] ? find_held_lock+0x2b/0x80 [ 554.825494] ? lock_release+0xc8/0x270 [ 554.825521] ? do_raw_spin_unlock+0x53/0x220 [ 554.825551] kobject_add_internal+0x24c/0x9a0 [ 554.825581] kobject_add+0x157/0x240 [ 554.825604] ? __pfx_kobject_add+0x10/0x10 [ 554.825626] ? lock_release+0xc8/0x270 [ 554.825651] ? do_raw_spin_unlock+0x53/0x220 [ 554.825680] ? kobject_put+0xaa/0x260 [ 554.825711] device_add+0x32d/0x1830 [ 554.825744] ? __pfx_device_add+0x10/0x10 [ 554.825790] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.825811] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.825840] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.825866] hci_conn_add_sysfs+0x117/0x1c0 [ 554.825889] le_conn_complete_evt+0x1246/0x1e40 [ 554.825925] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.825967] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.825997] ? __asan_memcpy+0x3d/0x60 [ 554.826025] hci_le_meta_evt+0x34b/0x530 [ 554.826051] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.826083] hci_event_packet+0x66c/0x10e0 [ 554.826113] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.826140] ? __pfx_hci_event_packet+0x10/0x10 [ 554.826182] hci_rx_work+0x65b/0x8b0 [ 554.826213] process_one_work+0x8e1/0x1960 [ 554.826251] ? __pfx_process_one_work+0x10/0x10 [ 554.826276] ? move_linked_works+0x172/0x270 [ 554.826312] ? assign_work+0x196/0x240 [ 554.826339] worker_thread+0x67e/0xe90 [ 554.826365] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.826400] ? __pfx_worker_thread+0x10/0x10 [ 554.826427] kthread+0x3c8/0x740 [ 554.826454] ? __pfx_kthread+0x10/0x10 [ 554.826476] ? ret_from_fork+0x79/0x7a0 [ 554.826499] ? __pfx_kthread+0x10/0x10 [ 554.826523] ret_from_fork+0x67a/0x7a0 [ 554.826542] ? __pfx_ret_from_fork+0x10/0x10 [ 554.826559] ? save_fpregs_to_fpstate+0x145/0x270 [ 554.826586] ? __switch_to+0x759/0x1030 [ 554.826613] ? __pfx_kthread+0x10/0x10 [ 554.826637] ret_from_fork_asm+0x1a/0x30 [ 554.826677] [ 554.853832] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.858107] Bluetooth: hci3: failed to register connection device [ 554.859139] Bluetooth: hci3: command 0x0406 tx timeout 06:39:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x8000) close_range(r0, 0xffffffffffffffff, 0x0) [ 554.870089] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 554.875213] debugfs: '0' already exists in 'hci2' [ 554.876997] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 554.878169] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.878192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.878204] Workqueue: hci2 hci_rx_work [ 554.878230] Call Trace: [ 554.878236] [ 554.878243] dump_stack_lvl+0xfa/0x120 [ 554.878262] sysfs_warn_dup+0x80/0xa0 [ 554.878280] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.878298] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.878315] ? find_held_lock+0x2b/0x80 [ 554.878335] ? lock_release+0xc8/0x270 [ 554.878359] ? do_raw_spin_unlock+0x53/0x220 [ 554.878387] kobject_add_internal+0x24c/0x9a0 [ 554.878415] kobject_add+0x157/0x240 [ 554.878437] ? __pfx_kobject_add+0x10/0x10 [ 554.878458] ? lock_release+0xc8/0x270 [ 554.878482] ? do_raw_spin_unlock+0x53/0x220 [ 554.878509] ? kobject_put+0xaa/0x260 [ 554.878539] device_add+0x32d/0x1830 [ 554.878570] ? __pfx_device_add+0x10/0x10 [ 554.878598] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.878617] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.878642] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.878668] hci_conn_add_sysfs+0x117/0x1c0 [ 554.878689] le_conn_complete_evt+0x1246/0x1e40 [ 554.878722] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.878757] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.878785] ? __asan_memcpy+0x3d/0x60 [ 554.878811] hci_le_meta_evt+0x34b/0x530 [ 554.878835] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.878865] hci_event_packet+0x66c/0x10e0 [ 554.878893] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.878919] ? __pfx_hci_event_packet+0x10/0x10 [ 554.878952] ? mark_held_locks+0x49/0x80 [ 554.878976] ? kcov_remote_start+0x2ce/0x5a0 [ 554.879013] hci_rx_work+0x65b/0x8b0 [ 554.879043] process_one_work+0x8e1/0x1960 [ 554.879079] ? __pfx_process_one_work+0x10/0x10 [ 554.879102] ? move_linked_works+0x172/0x270 [ 554.879137] ? assign_work+0x196/0x240 [ 554.879162] worker_thread+0x67e/0xe90 [ 554.879187] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.879219] ? __pfx_worker_thread+0x10/0x10 [ 554.879245] kthread+0x3c8/0x740 [ 554.879266] ? __pfx_kthread+0x10/0x10 [ 554.879287] ? ret_from_fork+0x79/0x7a0 [ 554.879308] ? __pfx_kthread+0x10/0x10 [ 554.879331] ret_from_fork+0x67a/0x7a0 [ 554.879349] ? __pfx_ret_from_fork+0x10/0x10 [ 554.879366] ? save_fpregs_to_fpstate+0x145/0x270 [ 554.879391] ? __switch_to+0x759/0x1030 [ 554.879415] ? __pfx_kthread+0x10/0x10 [ 554.879438] ret_from_fork_asm+0x1a/0x30 [ 554.879475] [ 554.880650] debugfs: '0' already exists in 'hci5' [ 554.881834] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.882722] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 554.882840] Bluetooth: hci2: failed to register connection device [ 554.883207] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.883236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.883252] Workqueue: hci5 hci_rx_work [ 554.883291] Call Trace: [ 554.883300] [ 554.883309] dump_stack_lvl+0xfa/0x120 [ 554.883335] sysfs_warn_dup+0x80/0xa0 [ 554.883359] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.883382] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.883402] ? find_held_lock+0x2b/0x80 [ 554.883436] ? lock_release+0xc8/0x270 [ 554.883466] ? do_raw_spin_unlock+0x53/0x220 [ 554.883501] kobject_add_internal+0x24c/0x9a0 [ 554.883535] kobject_add+0x157/0x240 [ 554.883563] ? __pfx_kobject_add+0x10/0x10 [ 554.883589] ? lock_release+0xc8/0x270 [ 554.883619] ? do_raw_spin_unlock+0x53/0x220 [ 554.883652] ? kobject_put+0xaa/0x260 [ 554.883689] device_add+0x32d/0x1830 [ 554.883729] ? __pfx_device_add+0x10/0x10 [ 554.883764] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.883788] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.883821] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.883852] hci_conn_add_sysfs+0x117/0x1c0 [ 554.883878] le_conn_complete_evt+0x1246/0x1e40 [ 554.883919] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.883962] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.883998] ? __asan_memcpy+0x3d/0x60 [ 554.884030] hci_le_meta_evt+0x34b/0x530 [ 554.884060] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.884098] hci_event_packet+0x66c/0x10e0 [ 554.884132] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.884164] ? __pfx_hci_event_packet+0x10/0x10 [ 554.884198] ? mark_held_locks+0x49/0x80 [ 554.884228] ? kcov_remote_start+0x2ce/0x5a0 [ 554.884271] hci_rx_work+0x65b/0x8b0 [ 554.884309] process_one_work+0x8e1/0x1960 [ 554.884353] ? __pfx_process_one_work+0x10/0x10 [ 554.884383] ? move_linked_works+0x172/0x270 [ 554.884425] ? assign_work+0x196/0x240 [ 554.884457] worker_thread+0x67e/0xe90 [ 554.884487] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.884528] ? __pfx_worker_thread+0x10/0x10 [ 554.884559] kthread+0x3c8/0x740 [ 554.884587] ? __pfx_kthread+0x10/0x10 [ 554.884611] ? ret_from_fork+0x79/0x7a0 [ 554.884635] ? lock_release+0xc8/0x270 06:39:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000140)={0x80c, {{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @loopback}}}, 0x108) fcntl$dupfd(r2, 0x0, r2) sendfile(r1, r2, &(0x7f0000000000)=0x5, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x100000001, 0x20, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) [ 554.884664] ? __pfx_kthread+0x10/0x10 [ 554.884693] ret_from_fork+0x67a/0x7a0 [ 554.884716] ? __pfx_ret_from_fork+0x10/0x10 [ 554.884742] ? __switch_to+0x759/0x1030 [ 554.884772] ? __pfx_kthread+0x10/0x10 [ 554.884801] ret_from_fork_asm+0x1a/0x30 [ 554.884847] [ 554.884919] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.886152] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 554.886483] Bluetooth: hci5: failed to register connection device [ 554.918019] debugfs: '0' already exists in 'hci3' [ 554.928155] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 554.928467] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 554.929822] debugfs: '0' already exists in 'hci2' [ 554.930169] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 554.930576] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.930600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.930613] Workqueue: hci3 hci_rx_work [ 554.930641] Call Trace: [ 554.930647] [ 554.930654] dump_stack_lvl+0xfa/0x120 [ 554.930673] sysfs_warn_dup+0x80/0xa0 [ 554.930693] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.930711] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.930727] ? find_held_lock+0x2b/0x80 [ 554.930747] ? lock_release+0xc8/0x270 [ 554.930770] ? do_raw_spin_unlock+0x53/0x220 [ 554.930798] kobject_add_internal+0x24c/0x9a0 [ 554.930825] kobject_add+0x157/0x240 [ 554.930847] ? __pfx_kobject_add+0x10/0x10 [ 554.930868] ? lock_release+0xc8/0x270 [ 554.930891] ? do_raw_spin_unlock+0x53/0x220 [ 554.930918] ? kobject_put+0xaa/0x260 [ 554.930955] device_add+0x32d/0x1830 [ 554.930985] ? __pfx_device_add+0x10/0x10 [ 554.931012] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.931032] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.931057] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.931083] hci_conn_add_sysfs+0x117/0x1c0 [ 554.931103] le_conn_complete_evt+0x1246/0x1e40 [ 554.931137] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.931170] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.931199] ? __asan_memcpy+0x3d/0x60 [ 554.931224] hci_le_meta_evt+0x34b/0x530 [ 554.931248] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.931278] hci_event_packet+0x66c/0x10e0 [ 554.931306] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.931331] ? __pfx_hci_event_packet+0x10/0x10 [ 554.931358] ? mark_held_locks+0x49/0x80 [ 554.931381] ? kcov_remote_start+0x2ce/0x5a0 [ 554.931417] hci_rx_work+0x65b/0x8b0 [ 554.931446] process_one_work+0x8e1/0x1960 [ 554.931481] ? __pfx_process_one_work+0x10/0x10 [ 554.931505] ? move_linked_works+0x172/0x270 [ 554.931538] ? assign_work+0x196/0x240 [ 554.931563] worker_thread+0x67e/0xe90 [ 554.931587] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.931619] ? __pfx_worker_thread+0x10/0x10 [ 554.931645] kthread+0x3c8/0x740 [ 554.931665] ? __pfx_kthread+0x10/0x10 [ 554.931685] ? ret_from_fork+0x79/0x7a0 [ 554.931706] ? __pfx_kthread+0x10/0x10 [ 554.931729] ret_from_fork+0x67a/0x7a0 [ 554.931747] ? __pfx_ret_from_fork+0x10/0x10 [ 554.931763] ? save_fpregs_to_fpstate+0x145/0x270 [ 554.931788] ? __switch_to+0x759/0x1030 [ 554.931811] ? __pfx_kthread+0x10/0x10 [ 554.931834] ret_from_fork_asm+0x1a/0x30 [ 554.931870] [ 554.932102] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.932636] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 554.932666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 554.932682] Workqueue: hci2 hci_rx_work [ 554.932721] Call Trace: [ 554.932729] [ 554.932739] dump_stack_lvl+0xfa/0x120 [ 554.932765] sysfs_warn_dup+0x80/0xa0 [ 554.932790] sysfs_create_dir_ns+0x23b/0x2a0 [ 554.932812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 554.932833] ? find_held_lock+0x2b/0x80 [ 554.932859] ? lock_release+0xc8/0x270 [ 554.932890] ? do_raw_spin_unlock+0x53/0x220 [ 554.932926] kobject_add_internal+0x24c/0x9a0 [ 554.932967] kobject_add+0x157/0x240 [ 554.932995] ? __pfx_kobject_add+0x10/0x10 [ 554.933021] ? lock_release+0xc8/0x270 [ 554.933050] ? do_raw_spin_unlock+0x53/0x220 [ 554.933084] ? kobject_put+0xaa/0x260 [ 554.933121] device_add+0x32d/0x1830 [ 554.933161] ? __pfx_device_add+0x10/0x10 [ 554.933196] ? hci_debugfs_create_conn+0x10f/0x240 [ 554.933220] ? mgmt_send_event_skb+0x2f3/0x460 [ 554.933254] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 554.933286] hci_conn_add_sysfs+0x117/0x1c0 [ 554.933312] le_conn_complete_evt+0x1246/0x1e40 [ 554.933354] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 554.933397] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 554.933433] ? __asan_memcpy+0x3d/0x60 [ 554.933466] hci_le_meta_evt+0x34b/0x530 [ 554.933496] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 554.933534] hci_event_packet+0x66c/0x10e0 [ 554.933568] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 554.933600] ? __pfx_hci_event_packet+0x10/0x10 [ 554.933633] ? mark_held_locks+0x49/0x80 [ 554.933663] ? kcov_remote_start+0x2ce/0x5a0 [ 554.933707] hci_rx_work+0x65b/0x8b0 [ 554.933745] process_one_work+0x8e1/0x1960 [ 554.933803] ? __pfx_process_one_work+0x10/0x10 [ 554.933833] ? move_linked_works+0x172/0x270 [ 554.933876] ? assign_work+0x196/0x240 [ 554.933908] worker_thread+0x67e/0xe90 [ 554.933938] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 554.933979] ? __pfx_worker_thread+0x10/0x10 [ 554.934010] kthread+0x3c8/0x740 [ 554.934038] ? __pfx_kthread+0x10/0x10 [ 554.934063] ? ret_from_fork+0x79/0x7a0 [ 554.934087] ? lock_release+0xc8/0x270 [ 554.934116] ? __pfx_kthread+0x10/0x10 [ 554.934145] ret_from_fork+0x67a/0x7a0 [ 554.934168] ? __pfx_ret_from_fork+0x10/0x10 [ 554.934194] ? __switch_to+0x759/0x1030 [ 554.934224] ? __pfx_kthread+0x10/0x10 [ 554.934252] ret_from_fork_asm+0x1a/0x30 [ 554.934299] [ 554.934366] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.934609] Bluetooth: hci3: failed to register connection device [ 554.935220] Bluetooth: hci2: failed to register connection device [ 554.936644] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 554.963754] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 555.024378] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 555.290031] Bluetooth: hci6: command 0x0406 tx timeout [ 556.189201] Bluetooth: hci2: command 0x0406 tx timeout [ 556.569081] Bluetooth: hci5: command 0x0406 tx timeout [ 556.889178] Bluetooth: hci3: command 0x0406 tx timeout [ 557.337001] Bluetooth: hci6: command 0x0406 tx timeout [ 558.234315] Bluetooth: hci2: command 0x0406 tx timeout [ 558.617016] Bluetooth: hci5: command 0x0406 tx timeout [ 558.937038] Bluetooth: hci3: command 0x0406 tx timeout [ 559.385062] Bluetooth: hci6: command 0x0406 tx timeout [ 560.282750] Bluetooth: hci2: command 0x0406 tx timeout [ 560.665110] Bluetooth: hci5: command 0x0406 tx timeout [ 560.985083] Bluetooth: hci3: command 0x0406 tx timeout [ 561.433051] Bluetooth: hci6: command 0x0406 tx timeout [ 562.333310] Bluetooth: hci2: command 0x0406 tx timeout [ 562.713078] Bluetooth: hci5: command 0x0406 tx timeout [ 563.033102] Bluetooth: hci3: command 0x0406 tx timeout [ 563.482028] Bluetooth: hci6: command 0x0406 tx timeout [ 564.388071] Bluetooth: hci2: command 0x0406 tx timeout 06:39:36 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1e, 0xc8, 0x9}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0xff, 0xc9, 0x1}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04140658c80000ff017f5cad4d7883483f45e33e45a88141336b7100d7fdce1424f0c3811bfb82fe2e8827100af46ce01b43e7761cec16e31fcbc2da645de6362cbf148c52073ab3cee43b2d15"], 0x9) 06:39:36 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00ffffffffa868ffffff00"/34], 0x22) 06:39:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="b5ae96b2be407238d4ff48165ddb1a6b7fd725a31efbe98f95efa0bc26f687e3a28471c680d48cd18583aa7389dfb96251d18c1ff0f67c324f9a3bde9f", 0x3d) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:39:36 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0xff, 0x9, 0x7f, 0x0, 0x9, 0x4030, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x7ff, 0x9, 0x5, 0x848, 0x0, 0x5, 0x0, 0x8, 0x0, 0x909}, 0xffffffffffffffff, 0xd, r0, 0xe) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="000000002b303030303030e2dd69c8cc303006ab3030303030303030303174"]) close_range(r1, 0xffffffffffffffff, 0x0) 06:39:36 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:36 executing program 4: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x22) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) 06:39:36 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:36 executing program 1: r0 = inotify_init1(0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 565.021337] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 565.024059] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff 06:39:36 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="d700ffff75b8247b6d73f3eb1affff6eccad0000000000"], 0x22) [ 565.070866] debugfs: '0' already exists in 'hci3' [ 565.072243] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 565.073727] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.073757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.073773] Workqueue: hci3 hci_rx_work [ 565.073810] Call Trace: [ 565.073818] [ 565.073827] dump_stack_lvl+0xfa/0x120 [ 565.073853] sysfs_warn_dup+0x80/0xa0 [ 565.073878] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.073900] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.073933] ? find_held_lock+0x2b/0x80 [ 565.073965] ? lock_release+0xc8/0x270 [ 565.073996] ? do_raw_spin_unlock+0x53/0x220 [ 565.074031] kobject_add_internal+0x24c/0x9a0 [ 565.074065] kobject_add+0x157/0x240 [ 565.074093] ? __pfx_kobject_add+0x10/0x10 [ 565.074120] ? lock_release+0xc8/0x270 [ 565.074149] ? do_raw_spin_unlock+0x53/0x220 [ 565.074182] ? kobject_put+0xaa/0x260 [ 565.074220] device_add+0x32d/0x1830 [ 565.074259] ? __pfx_device_add+0x10/0x10 [ 565.074294] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.074318] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.074351] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.074382] hci_conn_add_sysfs+0x117/0x1c0 [ 565.074408] le_conn_complete_evt+0x1246/0x1e40 [ 565.074450] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.074492] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.074528] ? __asan_memcpy+0x3d/0x60 [ 565.074561] hci_le_meta_evt+0x34b/0x530 [ 565.074591] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.074628] hci_event_packet+0x66c/0x10e0 [ 565.074663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.074694] ? __pfx_hci_event_packet+0x10/0x10 [ 565.074727] ? mark_held_locks+0x49/0x80 [ 565.074757] ? kcov_remote_start+0x2ce/0x5a0 [ 565.074800] hci_rx_work+0x65b/0x8b0 [ 565.074838] process_one_work+0x8e1/0x1960 [ 565.074882] ? __pfx_process_one_work+0x10/0x10 [ 565.074912] ? move_linked_works+0x172/0x270 [ 565.074954] ? assign_work+0x196/0x240 [ 565.074986] worker_thread+0x67e/0xe90 [ 565.075016] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.075056] ? __pfx_worker_thread+0x10/0x10 [ 565.075088] kthread+0x3c8/0x740 [ 565.075115] ? __pfx_kthread+0x10/0x10 [ 565.075140] ? ret_from_fork+0x79/0x7a0 [ 565.075163] ? lock_release+0xc8/0x270 [ 565.075191] ? __pfx_kthread+0x10/0x10 [ 565.075220] ret_from_fork+0x67a/0x7a0 [ 565.075243] ? __pfx_ret_from_fork+0x10/0x10 [ 565.075269] ? __switch_to+0x759/0x1030 [ 565.075298] ? __pfx_kthread+0x10/0x10 [ 565.075327] ret_from_fork_asm+0x1a/0x30 [ 565.075373] [ 565.110216] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.113792] Bluetooth: hci3: failed to register connection device [ 565.129970] Bluetooth: hci3: command 0x0406 tx timeout 06:39:36 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:36 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffa5eeeb09125653b4301600183cc0ab5ede024ac8870e5a11a3ff6beff2887ba930fbef46349daed27a59f9abc6723f81d6eeeb9f6f54c0dcbab982c3c6b9221d61d5dc6f594e4409a3"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x94}, "88d058508d4cb774ddf8b98e33e913c8c2e17f6c58a6bd5e80a16eb44b9adc0d21994e594f228b34c2ee778e1a5d9ae6946f70be1f4df9826a99a1b4dbf920ebc55c65f9dff3a06a081ec1f8259241ddbdb7a0956f5d2b9076e5f8b013fe3e52d0540c160ff31090b7c658c9bbecde0af63762dc1f9d951fee347e8a058f3f6fa87770d0cfce2c7a595bf175b7b8cbe91ec55602"}, 0x98) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x1, 0xe}, {0x40, 0x4, 0x3ff, 0x4, [0x7b5, 0xbb6, 0x8001]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x5}, {0x6, 0xc9, 0x22}}}}, 0xa) 06:39:36 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:36 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1f, 0x3, 0x2, 0x5, 0x384, 0x9}) [ 565.167079] debugfs: '0' already exists in 'hci3' [ 565.169180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 565.170719] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.170748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.170763] Workqueue: hci3 hci_rx_work [ 565.170799] Call Trace: [ 565.170807] [ 565.170817] dump_stack_lvl+0xfa/0x120 [ 565.170844] sysfs_warn_dup+0x80/0xa0 [ 565.170868] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.170890] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.170911] ? find_held_lock+0x2b/0x80 [ 565.170944] ? lock_release+0xc8/0x270 [ 565.170974] ? do_raw_spin_unlock+0x53/0x220 [ 565.171010] kobject_add_internal+0x24c/0x9a0 [ 565.171045] kobject_add+0x157/0x240 [ 565.171074] ? __pfx_kobject_add+0x10/0x10 [ 565.171100] ? lock_release+0xc8/0x270 [ 565.171130] ? do_raw_spin_unlock+0x53/0x220 [ 565.171164] ? kobject_put+0xaa/0x260 [ 565.171203] device_add+0x32d/0x1830 [ 565.171243] ? __pfx_device_add+0x10/0x10 [ 565.171279] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.171303] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.171337] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.171369] hci_conn_add_sysfs+0x117/0x1c0 [ 565.171396] le_conn_complete_evt+0x1246/0x1e40 [ 565.171439] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.171484] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.171521] ? __asan_memcpy+0x3d/0x60 [ 565.171554] hci_le_meta_evt+0x34b/0x530 [ 565.171585] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.171624] hci_event_packet+0x66c/0x10e0 [ 565.171659] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.171691] ? __pfx_hci_event_packet+0x10/0x10 [ 565.171725] ? mark_held_locks+0x49/0x80 [ 565.171756] ? kcov_remote_start+0x2ce/0x5a0 [ 565.171801] hci_rx_work+0x65b/0x8b0 [ 565.171840] process_one_work+0x8e1/0x1960 [ 565.171891] ? __pfx_process_one_work+0x10/0x10 [ 565.171921] ? move_linked_works+0x172/0x270 [ 565.171965] ? assign_work+0x196/0x240 [ 565.171998] worker_thread+0x67e/0xe90 [ 565.172029] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.172071] ? __pfx_worker_thread+0x10/0x10 [ 565.172103] kthread+0x3c8/0x740 [ 565.172130] ? __pfx_kthread+0x10/0x10 [ 565.172156] ? ret_from_fork+0x79/0x7a0 [ 565.172178] ? lock_release+0xc8/0x270 [ 565.172208] ? __pfx_kthread+0x10/0x10 [ 565.172237] ret_from_fork+0x67a/0x7a0 [ 565.172260] ? __pfx_ret_from_fork+0x10/0x10 [ 565.172287] ? __switch_to+0x759/0x1030 [ 565.172317] ? __pfx_kthread+0x10/0x10 [ 565.172346] ret_from_fork_asm+0x1a/0x30 [ 565.172395] [ 565.207839] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.212076] Bluetooth: hci3: failed to register connection device 06:39:36 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 565.244168] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 565.245378] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 565.248989] Bluetooth: hci6: unexpected event for opcode 0x1405 [ 565.251754] debugfs: '0' already exists in 'hci6' [ 565.252980] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 565.254232] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.254260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.254275] Workqueue: hci6 hci_rx_work [ 565.254309] Call Trace: [ 565.254317] [ 565.254327] dump_stack_lvl+0xfa/0x120 [ 565.254352] sysfs_warn_dup+0x80/0xa0 [ 565.254382] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.254405] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.254425] ? find_held_lock+0x2b/0x80 [ 565.254451] ? lock_release+0xc8/0x270 [ 565.254481] ? do_raw_spin_unlock+0x53/0x220 [ 565.254518] kobject_add_internal+0x24c/0x9a0 [ 565.254553] kobject_add+0x157/0x240 [ 565.254581] ? __pfx_kobject_add+0x10/0x10 [ 565.254608] ? lock_release+0xc8/0x270 [ 565.254638] ? do_raw_spin_unlock+0x53/0x220 [ 565.254671] ? kobject_put+0xaa/0x260 [ 565.254712] device_add+0x32d/0x1830 [ 565.254751] ? __pfx_device_add+0x10/0x10 [ 565.254787] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.254811] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.254844] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.254877] hci_conn_add_sysfs+0x117/0x1c0 [ 565.254904] le_conn_complete_evt+0x1246/0x1e40 [ 565.254954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.254999] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.255035] ? __asan_memcpy+0x3d/0x60 [ 565.255068] hci_le_meta_evt+0x34b/0x530 [ 565.255099] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.255138] hci_event_packet+0x66c/0x10e0 [ 565.255173] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.255205] ? __pfx_hci_event_packet+0x10/0x10 [ 565.255239] ? mark_held_locks+0x49/0x80 [ 565.255270] ? kcov_remote_start+0x2ce/0x5a0 [ 565.255315] hci_rx_work+0x65b/0x8b0 [ 565.255354] process_one_work+0x8e1/0x1960 [ 565.255400] ? __pfx_process_one_work+0x10/0x10 [ 565.255429] ? move_linked_works+0x172/0x270 [ 565.255473] ? assign_work+0x196/0x240 [ 565.255506] worker_thread+0x67e/0xe90 [ 565.255537] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.255579] ? __pfx_worker_thread+0x10/0x10 [ 565.255611] kthread+0x3c8/0x740 [ 565.255639] ? __pfx_kthread+0x10/0x10 [ 565.255664] ? ret_from_fork+0x79/0x7a0 [ 565.255687] ? lock_release+0xc8/0x270 [ 565.255716] ? __pfx_kthread+0x10/0x10 [ 565.255745] ret_from_fork+0x67a/0x7a0 [ 565.255769] ? __pfx_ret_from_fork+0x10/0x10 [ 565.255796] ? __switch_to+0x759/0x1030 [ 565.255825] ? __pfx_kthread+0x10/0x10 [ 565.255855] ret_from_fork_asm+0x1a/0x30 [ 565.255905] [ 565.288787] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.290668] Bluetooth: hci6: failed to register connection device [ 565.291989] debugfs: '0' already exists in 'hci5' [ 565.292988] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 565.294238] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.294266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.294280] Workqueue: hci5 hci_rx_work [ 565.294311] Call Trace: [ 565.294319] [ 565.294328] dump_stack_lvl+0xfa/0x120 [ 565.294351] sysfs_warn_dup+0x80/0xa0 [ 565.294374] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.294397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.294418] ? find_held_lock+0x2b/0x80 [ 565.294442] ? lock_release+0xc8/0x270 [ 565.294472] ? do_raw_spin_unlock+0x53/0x220 [ 565.294508] kobject_add_internal+0x24c/0x9a0 [ 565.294543] kobject_add+0x157/0x240 [ 565.294572] ? __pfx_kobject_add+0x10/0x10 [ 565.294598] ? lock_release+0xc8/0x270 [ 565.294628] ? do_raw_spin_unlock+0x53/0x220 [ 565.294662] ? kobject_put+0xaa/0x260 [ 565.294702] device_add+0x32d/0x1830 [ 565.294740] ? __pfx_device_add+0x10/0x10 [ 565.294776] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.294799] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.294832] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.294865] hci_conn_add_sysfs+0x117/0x1c0 [ 565.294891] le_conn_complete_evt+0x1246/0x1e40 [ 565.294934] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.294987] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.295023] ? __asan_memcpy+0x3d/0x60 [ 565.295055] hci_le_meta_evt+0x34b/0x530 [ 565.295085] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.295124] hci_event_packet+0x66c/0x10e0 [ 565.295160] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.295192] ? __pfx_hci_event_packet+0x10/0x10 [ 565.295226] ? mark_held_locks+0x49/0x80 [ 565.295257] ? kcov_remote_start+0x2ce/0x5a0 [ 565.295301] hci_rx_work+0x65b/0x8b0 [ 565.295340] process_one_work+0x8e1/0x1960 [ 565.295386] ? __pfx_process_one_work+0x10/0x10 [ 565.295416] ? move_linked_works+0x172/0x270 [ 565.295459] ? assign_work+0x196/0x240 [ 565.295492] worker_thread+0x67e/0xe90 [ 565.295524] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.295564] ? __pfx_worker_thread+0x10/0x10 [ 565.295597] kthread+0x3c8/0x740 [ 565.295625] ? __pfx_kthread+0x10/0x10 [ 565.295650] ? ret_from_fork+0x79/0x7a0 [ 565.295672] ? lock_release+0xc8/0x270 [ 565.295701] ? __pfx_kthread+0x10/0x10 [ 565.295731] ret_from_fork+0x67a/0x7a0 [ 565.295754] ? __pfx_ret_from_fork+0x10/0x10 [ 565.295781] ? __switch_to+0x759/0x1030 [ 565.295810] ? __pfx_kthread+0x10/0x10 [ 565.295840] ret_from_fork_asm+0x1a/0x30 [ 565.295889] [ 565.331485] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.335410] Bluetooth: hci5: failed to register connection device [ 565.336807] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 565.336870] Bluetooth: hci6: ACL packet for unknown connection handle 201 06:39:36 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a000007ed4f426e3b0a1fd4bc00e900aaaaaaaaaa00ffffffffffffffffff"], 0x22) syz_emit_vhci(0x0, 0x0) 06:39:36 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x6, 0x6, 0x4}}}}, 0xd) 06:39:36 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x0, 0x25}, {0x9, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:36 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x190, 0x3, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x4d, 0x8}, {0x5, 0x2, 0x2, 0x4}}}}, 0x15) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x15f}, @l2cap_cid_signaling={{0x15b}, [@l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0x8000, 0x8, 0xb, 0x8001}}, @l2cap_info_rsp={{0xb, 0x3c, 0x70}, {0x0, 0x200, "da506ee826c28c9588e8ddddea6781ec387a72882f5bae7c84e880de4354011c0513e1ba2e37f4080db431d781f73b5dfc29e0d0a8d2069fec046257aaf8d62295a36c6e052c7be35ad6f184d8b772ef81873088d6e7969bf2500ca8276a0f84c2820819ad982f703964a8f1"}}, @l2cap_cmd_rej_unk={{0x1, 0xcd, 0x2}, {0x81}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x5, 0x3}}, @l2cap_info_rsp={{0xb, 0x8, 0x13}, {0x9, 0x8, "d56180805843f942e39026c0c89df5"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7f, 0x2}}, @l2cap_info_rsp={{0xb, 0xf7, 0xac}, {0x2, 0x3, "7dea09ef8e34eac031aab8beed6f4759a9bac5ea0187652ed5fe201a5529f7263a01523e34be17463ad950d6b5c333a394b0508da2d86667bd564b7b9ff255deeacb5ca13e0343a9fd8a8b140ed136f891540124d6127b3e5ba1115ad514b6fffa43601d8ddb6065d1de21cc7239d9800843491e916238a817336cfe5721ac9fab3fea975620e9b88c3fa798788a085fc49e29d9ce034a6d13dc12c61adfe70547ad4c1b904e6ea2"}}]}}, 0x164) [ 565.393887] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 565.415459] debugfs: '0' already exists in 'hci6' [ 565.416679] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 565.417988] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.418017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.418032] Workqueue: hci6 hci_rx_work [ 565.418068] Call Trace: [ 565.418077] [ 565.418086] dump_stack_lvl+0xfa/0x120 [ 565.418112] sysfs_warn_dup+0x80/0xa0 [ 565.418136] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.418158] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.418179] ? find_held_lock+0x2b/0x80 [ 565.418205] ? lock_release+0xc8/0x270 [ 565.418234] ? do_raw_spin_unlock+0x53/0x220 [ 565.418270] kobject_add_internal+0x24c/0x9a0 [ 565.418304] kobject_add+0x157/0x240 [ 565.418332] ? __pfx_kobject_add+0x10/0x10 [ 565.418358] ? lock_release+0xc8/0x270 [ 565.418388] ? do_raw_spin_unlock+0x53/0x220 [ 565.418422] ? kobject_put+0xaa/0x260 [ 565.418459] device_add+0x32d/0x1830 [ 565.418498] ? __pfx_device_add+0x10/0x10 [ 565.418533] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.418557] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.418590] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.418621] hci_conn_add_sysfs+0x117/0x1c0 [ 565.418648] le_conn_complete_evt+0x1246/0x1e40 [ 565.418689] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.418732] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.418767] ? __asan_memcpy+0x3d/0x60 [ 565.418800] hci_le_meta_evt+0x34b/0x530 [ 565.418829] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.418869] hci_event_packet+0x66c/0x10e0 [ 565.418907] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.418946] ? __pfx_hci_event_packet+0x10/0x10 [ 565.418979] ? mark_held_locks+0x49/0x80 [ 565.419009] ? kcov_remote_start+0x2ce/0x5a0 [ 565.419053] hci_rx_work+0x65b/0x8b0 [ 565.419090] process_one_work+0x8e1/0x1960 [ 565.419134] ? __pfx_process_one_work+0x10/0x10 [ 565.419164] ? move_linked_works+0x172/0x270 [ 565.419206] ? assign_work+0x196/0x240 [ 565.419238] worker_thread+0x67e/0xe90 [ 565.419268] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.419308] ? __pfx_worker_thread+0x10/0x10 [ 565.419340] kthread+0x3c8/0x740 [ 565.419367] ? __pfx_kthread+0x10/0x10 [ 565.419392] ? ret_from_fork+0x79/0x7a0 [ 565.419415] ? lock_release+0xc8/0x270 [ 565.419444] ? __pfx_kthread+0x10/0x10 [ 565.419477] ret_from_fork+0x67a/0x7a0 [ 565.419500] ? __pfx_ret_from_fork+0x10/0x10 [ 565.419527] ? __switch_to+0x759/0x1030 [ 565.419556] ? __pfx_kthread+0x10/0x10 [ 565.419585] ret_from_fork_asm+0x1a/0x30 [ 565.419632] [ 565.452471] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.454454] Bluetooth: hci6: failed to register connection device [ 565.457596] debugfs: '0' already exists in 'hci5' [ 565.458624] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 565.459860] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.459888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.459902] Workqueue: hci5 hci_rx_work [ 565.459933] Call Trace: [ 565.459946] [ 565.459955] dump_stack_lvl+0xfa/0x120 [ 565.459979] sysfs_warn_dup+0x80/0xa0 [ 565.460002] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.460024] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.460045] ? find_held_lock+0x2b/0x80 [ 565.460069] ? lock_release+0xc8/0x270 [ 565.460098] ? do_raw_spin_unlock+0x53/0x220 [ 565.460134] kobject_add_internal+0x24c/0x9a0 [ 565.460168] kobject_add+0x157/0x240 [ 565.460196] ? __pfx_kobject_add+0x10/0x10 [ 565.460223] ? lock_release+0xc8/0x270 [ 565.460252] ? do_raw_spin_unlock+0x53/0x220 [ 565.460286] ? kobject_put+0xaa/0x260 [ 565.460324] device_add+0x32d/0x1830 [ 565.460361] ? __pfx_device_add+0x10/0x10 [ 565.460396] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.460419] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.460452] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.460483] hci_conn_add_sysfs+0x117/0x1c0 [ 565.460509] le_conn_complete_evt+0x1246/0x1e40 [ 565.460550] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.460593] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.460629] ? __asan_memcpy+0x3d/0x60 [ 565.460660] hci_le_meta_evt+0x34b/0x530 [ 565.460690] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.460728] hci_event_packet+0x66c/0x10e0 [ 565.460762] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.460794] ? __pfx_hci_event_packet+0x10/0x10 [ 565.460827] ? mark_held_locks+0x49/0x80 [ 565.460857] ? kcov_remote_start+0x2ce/0x5a0 [ 565.460900] hci_rx_work+0x65b/0x8b0 [ 565.460937] process_one_work+0x8e1/0x1960 [ 565.460981] ? __pfx_process_one_work+0x10/0x10 [ 565.461010] ? move_linked_works+0x172/0x270 [ 565.461052] ? assign_work+0x196/0x240 [ 565.461084] worker_thread+0x67e/0xe90 [ 565.461115] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.461154] ? __pfx_worker_thread+0x10/0x10 [ 565.461186] kthread+0x3c8/0x740 [ 565.461213] ? __pfx_kthread+0x10/0x10 [ 565.461238] ? ret_from_fork+0x79/0x7a0 [ 565.461260] ? lock_release+0xc8/0x270 [ 565.461289] ? __pfx_kthread+0x10/0x10 [ 565.461318] ret_from_fork+0x67a/0x7a0 [ 565.461340] ? __pfx_ret_from_fork+0x10/0x10 [ 565.461367] ? __switch_to+0x759/0x1030 [ 565.461396] ? __pfx_kthread+0x10/0x10 [ 565.461425] ret_from_fork_asm+0x1a/0x30 [ 565.461471] [ 565.494159] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.496148] Bluetooth: hci5: failed to register connection device [ 565.497326] Bluetooth: hci6: ACL packet for unknown connection handle 400 [ 565.498404] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 565.499720] debugfs: '0' already exists in 'hci6' [ 565.500708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 565.501966] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 565.501995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.502009] Workqueue: hci6 hci_rx_work [ 565.502039] Call Trace: [ 565.502047] [ 565.502057] dump_stack_lvl+0xfa/0x120 [ 565.502080] sysfs_warn_dup+0x80/0xa0 [ 565.502102] sysfs_create_dir_ns+0x23b/0x2a0 [ 565.502125] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.502145] ? find_held_lock+0x2b/0x80 [ 565.502169] ? lock_release+0xc8/0x270 [ 565.502198] ? do_raw_spin_unlock+0x53/0x220 [ 565.502234] kobject_add_internal+0x24c/0x9a0 [ 565.502268] kobject_add+0x157/0x240 [ 565.502295] ? __pfx_kobject_add+0x10/0x10 [ 565.502322] ? lock_release+0xc8/0x270 [ 565.502351] ? do_raw_spin_unlock+0x53/0x220 [ 565.502385] ? kobject_put+0xaa/0x260 [ 565.502422] device_add+0x32d/0x1830 [ 565.502459] ? __pfx_device_add+0x10/0x10 [ 565.502494] ? hci_debugfs_create_conn+0x10f/0x240 [ 565.502517] ? mgmt_send_event_skb+0x2f3/0x460 [ 565.502549] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 565.502581] hci_conn_add_sysfs+0x117/0x1c0 [ 565.502606] le_conn_complete_evt+0x1246/0x1e40 [ 565.502647] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 565.502689] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 565.502725] ? __asan_memcpy+0x3d/0x60 [ 565.502756] hci_le_meta_evt+0x34b/0x530 [ 565.502786] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 565.502824] hci_event_packet+0x66c/0x10e0 [ 565.502858] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 565.502890] ? __pfx_hci_event_packet+0x10/0x10 [ 565.502923] ? mark_held_locks+0x49/0x80 [ 565.502960] ? kcov_remote_start+0x2ce/0x5a0 [ 565.503003] hci_rx_work+0x65b/0x8b0 [ 565.503040] process_one_work+0x8e1/0x1960 [ 565.503083] ? __pfx_process_one_work+0x10/0x10 [ 565.503113] ? move_linked_works+0x172/0x270 [ 565.503154] ? assign_work+0x196/0x240 [ 565.503186] worker_thread+0x67e/0xe90 [ 565.503216] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 565.503256] ? __pfx_worker_thread+0x10/0x10 [ 565.503287] kthread+0x3c8/0x740 [ 565.503314] ? __pfx_kthread+0x10/0x10 [ 565.503339] ? ret_from_fork+0x79/0x7a0 [ 565.503361] ? lock_release+0xc8/0x270 [ 565.503390] ? __pfx_kthread+0x10/0x10 [ 565.503418] ret_from_fork+0x67a/0x7a0 [ 565.503441] ? __pfx_ret_from_fork+0x10/0x10 [ 565.503467] ? __switch_to+0x759/0x1030 [ 565.503496] ? __pfx_kthread+0x10/0x10 [ 565.503525] ret_from_fork_asm+0x1a/0x30 [ 565.503571] [ 565.539493] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 565.543198] Bluetooth: hci6: failed to register connection device [ 565.544449] Bluetooth: hci6: ACL packet for unknown connection handle 400 [ 565.545526] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 566.426201] Bluetooth: hci2: command 0x0406 tx timeout [ 567.193096] Bluetooth: hci3: command 0x0406 tx timeout [ 567.193177] Bluetooth: hci5: command 0x0406 tx timeout [ 568.476713] Bluetooth: hci2: command 0x0406 tx timeout [ 569.241414] Bluetooth: hci5: command 0x0406 tx timeout [ 569.241922] Bluetooth: hci3: command 0x0406 tx timeout [ 569.305041] Bluetooth: hci6: command 0x0406 tx timeout [ 570.524111] Bluetooth: hci2: command 0x0406 tx timeout [ 571.289115] Bluetooth: hci3: command 0x0406 tx timeout [ 571.289151] Bluetooth: hci5: command 0x0406 tx timeout [ 571.353155] Bluetooth: hci6: command 0x0406 tx timeout [ 572.570114] Bluetooth: hci2: command 0x0406 tx timeout [ 573.337082] Bluetooth: hci5: command 0x0406 tx timeout [ 573.337122] Bluetooth: hci3: command 0x0406 tx timeout [ 573.408897] Bluetooth: hci6: command 0x0406 tx timeout [ 574.619040] Bluetooth: hci2: command 0x0406 tx timeout 06:39:46 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x5, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:46 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:46 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @none, 0x81, 0x1}, 0xe) close_range(r1, 0xffffffffffffffff, 0x0) 06:39:46 executing program 4: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000140)=0x5, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x79a}}, './file0\x00'}) bind(r2, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80) 06:39:46 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 06:39:46 executing program 7: syz_emit_vhci(0x0, 0x0) 06:39:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@private, @loopback}, &(0x7f00000001c0)=0x8) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x6, 0xed, 0x81, 0x8, 0x0, 0x80000000, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x31, 0x4, @perf_config_ext={0x15, 0x8}, 0x794764e8389ebe6d, 0x1, 0x8, 0x4, 0x3, 0x7, 0x8, 0x0, 0x7fff, 0x0, 0x3f8}, r1, 0x1, r1, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000440)={'NETMAP\x00'}, &(0x7f0000000580)=0x1e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0xe}, 0x8400, 0x0, 0x2, 0x9}, 0xffffffffffffffff, 0x3, r2, 0x0) r4 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r7 = openat$incfs(r4, &(0x7f0000000280)='.log\x00', 0x0, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r9 = syz_open_dev$mouse(&(0x7f0000000040), 0x82, 0x40101) pidfd_getfd(r6, r9, 0x0) lremovexattr(0x0, 0x0) 06:39:46 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 574.815588] debugfs: '0' already exists in 'hci6' [ 574.816510] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 574.817480] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 574.817503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 574.817515] Workqueue: hci6 hci_rx_work [ 574.817547] Call Trace: [ 574.817553] [ 574.817560] dump_stack_lvl+0xfa/0x120 [ 574.817581] sysfs_warn_dup+0x80/0xa0 [ 574.817601] sysfs_create_dir_ns+0x23b/0x2a0 [ 574.817618] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 574.817634] ? find_held_lock+0x2b/0x80 [ 574.817654] ? lock_release+0xc8/0x270 [ 574.817678] ? do_raw_spin_unlock+0x53/0x220 [ 574.817704] kobject_add_internal+0x24c/0x9a0 [ 574.817731] kobject_add+0x157/0x240 [ 574.817752] ? __pfx_kobject_add+0x10/0x10 [ 574.817772] ? lock_release+0xc8/0x270 [ 574.817795] ? do_raw_spin_unlock+0x53/0x220 [ 574.817820] ? kobject_put+0xaa/0x260 [ 574.817848] device_add+0x32d/0x1830 [ 574.817878] ? __pfx_device_add+0x10/0x10 [ 574.817905] ? hci_debugfs_create_conn+0x10f/0x240 [ 574.817924] ? mgmt_send_event_skb+0x2f3/0x460 [ 574.817956] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 574.817980] hci_conn_add_sysfs+0x117/0x1c0 [ 574.818000] le_conn_complete_evt+0x1246/0x1e40 [ 574.818032] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 574.818073] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 574.818101] ? __asan_memcpy+0x3d/0x60 [ 574.818126] hci_le_meta_evt+0x34b/0x530 [ 574.818150] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 574.818179] hci_event_packet+0x66c/0x10e0 [ 574.818205] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 574.818229] ? __pfx_hci_event_packet+0x10/0x10 [ 574.818254] ? mark_held_locks+0x49/0x80 [ 574.818277] ? kcov_remote_start+0x2ce/0x5a0 [ 574.818310] hci_rx_work+0x65b/0x8b0 [ 574.818338] process_one_work+0x8e1/0x1960 [ 574.818373] ? __pfx_process_one_work+0x10/0x10 [ 574.818395] ? move_linked_works+0x172/0x270 [ 574.818428] ? assign_work+0x196/0x240 [ 574.818452] worker_thread+0x67e/0xe90 [ 574.818475] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 574.818506] ? __pfx_worker_thread+0x10/0x10 [ 574.818530] kthread+0x3c8/0x740 [ 574.818551] ? __pfx_kthread+0x10/0x10 [ 574.818570] ? ret_from_fork+0x79/0x7a0 [ 574.818588] ? lock_release+0xc8/0x270 [ 574.818611] ? __pfx_kthread+0x10/0x10 [ 574.818632] ret_from_fork+0x67a/0x7a0 [ 574.818649] ? __pfx_ret_from_fork+0x10/0x10 [ 574.818669] ? __switch_to+0x759/0x1030 [ 574.818693] ? __pfx_kthread+0x10/0x10 [ 574.818715] ret_from_fork_asm+0x1a/0x30 [ 574.818751] [ 574.845102] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 574.847361] Bluetooth: hci6: failed to register connection device 06:39:46 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:46 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03ac00880737101dc4eed3324c8443faad4d876033dfccf66e28bd4bc4b0c978915376b100f66411f5b5936e33bad58c595d77031974dc6dc5a6f1305c5d42e1cb743c60422b4b75630ec950c0b7b563f3ddf973945567d7f022de787d18e39aaa569c9326c63bb2f231a910b52684d66fa262011d27dea2786d5ca145b700"/140], 0x8c) [ 574.917222] debugfs: '0' already exists in 'hci2' [ 574.917850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 574.919438] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 574.919455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 574.919465] Workqueue: hci2 hci_rx_work [ 574.919490] Call Trace: [ 574.919495] [ 574.919501] dump_stack_lvl+0xfa/0x120 [ 574.919517] sysfs_warn_dup+0x80/0xa0 [ 574.919533] sysfs_create_dir_ns+0x23b/0x2a0 [ 574.919546] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 574.919557] ? find_held_lock+0x2b/0x80 [ 574.919574] ? lock_release+0xc8/0x270 [ 574.919592] ? do_raw_spin_unlock+0x53/0x220 [ 574.919612] kobject_add_internal+0x24c/0x9a0 [ 574.919633] kobject_add+0x157/0x240 [ 574.919650] ? __pfx_kobject_add+0x10/0x10 [ 574.919665] ? lock_release+0xc8/0x270 [ 574.919682] ? do_raw_spin_unlock+0x53/0x220 [ 574.919701] ? kobject_put+0xaa/0x260 [ 574.919724] device_add+0x32d/0x1830 [ 574.919748] ? __pfx_device_add+0x10/0x10 [ 574.919768] ? hci_debugfs_create_conn+0x10f/0x240 [ 574.919783] ? mgmt_send_event_skb+0x2f3/0x460 [ 574.919803] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 574.919822] hci_conn_add_sysfs+0x117/0x1c0 [ 574.919838] le_conn_complete_evt+0x1246/0x1e40 [ 574.919864] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 574.919890] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 574.919911] ? __asan_memcpy+0x3d/0x60 [ 574.919931] hci_le_meta_evt+0x34b/0x530 [ 574.919954] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 574.919976] hci_event_packet+0x66c/0x10e0 [ 574.919996] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 574.920015] ? __pfx_hci_event_packet+0x10/0x10 [ 574.920034] ? mark_held_locks+0x49/0x80 [ 574.920051] ? kcov_remote_start+0x2ce/0x5a0 [ 574.920078] hci_rx_work+0x65b/0x8b0 [ 574.920100] process_one_work+0x8e1/0x1960 [ 574.920129] ? __pfx_process_one_work+0x10/0x10 [ 574.920146] ? move_linked_works+0x172/0x270 [ 574.920172] ? assign_work+0x196/0x240 [ 574.920191] worker_thread+0x67e/0xe90 [ 574.920209] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 574.920234] ? __pfx_worker_thread+0x10/0x10 [ 574.920252] kthread+0x3c8/0x740 [ 574.920268] ? __pfx_kthread+0x10/0x10 [ 574.920283] ? ret_from_fork+0x79/0x7a0 [ 574.920297] ? lock_release+0xc8/0x270 [ 574.920314] ? __pfx_kthread+0x10/0x10 [ 574.920331] ret_from_fork+0x67a/0x7a0 [ 574.920345] ? __pfx_ret_from_fork+0x10/0x10 [ 574.920360] ? __switch_to+0x759/0x1030 [ 574.920379] ? __pfx_kthread+0x10/0x10 [ 574.920396] ret_from_fork_asm+0x1a/0x30 [ 574.920425] [ 574.940136] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 574.941861] Bluetooth: hci2: failed to register connection device [ 574.942817] debugfs: '0' already exists in 'hci2' [ 574.943459] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 574.944165] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 574.944181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 574.944189] Workqueue: hci2 hci_rx_work [ 574.944207] Call Trace: [ 574.944211] [ 574.944217] dump_stack_lvl+0xfa/0x120 [ 574.944230] sysfs_warn_dup+0x80/0xa0 [ 574.944242] sysfs_create_dir_ns+0x23b/0x2a0 [ 574.944255] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 574.944267] ? find_held_lock+0x2b/0x80 [ 574.944280] ? lock_release+0xc8/0x270 [ 574.944297] ? do_raw_spin_unlock+0x53/0x220 [ 574.944317] kobject_add_internal+0x24c/0x9a0 [ 574.944337] kobject_add+0x157/0x240 [ 574.944353] ? __pfx_kobject_add+0x10/0x10 [ 574.944367] ? lock_release+0xc8/0x270 [ 574.944384] ? do_raw_spin_unlock+0x53/0x220 [ 574.944403] ? kobject_put+0xaa/0x260 [ 574.944425] device_add+0x32d/0x1830 [ 574.944446] ? __pfx_device_add+0x10/0x10 [ 574.944466] ? hci_debugfs_create_conn+0x10f/0x240 [ 574.944479] ? mgmt_send_event_skb+0x2f3/0x460 [ 574.944497] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 574.944515] hci_conn_add_sysfs+0x117/0x1c0 [ 574.944530] le_conn_complete_evt+0x1246/0x1e40 [ 574.944554] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 574.944579] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 574.944600] ? __asan_memcpy+0x3d/0x60 [ 574.944617] hci_le_meta_evt+0x34b/0x530 [ 574.944633] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 574.944656] hci_event_packet+0x66c/0x10e0 [ 574.944675] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 574.944693] ? __pfx_hci_event_packet+0x10/0x10 [ 574.944712] ? mark_held_locks+0x49/0x80 [ 574.944730] ? kcov_remote_start+0x2ce/0x5a0 [ 574.944755] hci_rx_work+0x65b/0x8b0 [ 574.944776] process_one_work+0x8e1/0x1960 [ 574.944802] ? __pfx_process_one_work+0x10/0x10 [ 574.944819] ? move_linked_works+0x172/0x270 [ 574.944843] ? assign_work+0x196/0x240 [ 574.944861] worker_thread+0x67e/0xe90 [ 574.944879] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 574.944901] ? __pfx_worker_thread+0x10/0x10 [ 574.944920] kthread+0x3c8/0x740 [ 574.944939] ? __pfx_kthread+0x10/0x10 [ 574.944953] ? ret_from_fork+0x79/0x7a0 [ 574.944966] ? lock_release+0xc8/0x270 [ 574.944982] ? __pfx_kthread+0x10/0x10 [ 574.944999] ret_from_fork+0x67a/0x7a0 [ 574.945012] ? __pfx_ret_from_fork+0x10/0x10 [ 574.945027] ? __switch_to+0x759/0x1030 [ 574.945043] ? __pfx_kthread+0x10/0x10 [ 574.945059] ret_from_fork_asm+0x1a/0x30 [ 574.945087] [ 574.963613] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 574.964659] Bluetooth: hci2: failed to register connection device 06:39:46 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0x22) [ 574.980312] Bluetooth: hci6: SCO packet for unknown connection handle 172 06:39:46 executing program 4: syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0xd1, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xfd, 0x9, 0x0, 0xff}, 0xf8, &(0x7f0000000140)={0x5, 0xf, 0xf8, 0x5, [@generic={0xc6, 0x10, 0x4, "98efe2a70de3d57a3d385bef31412362168ff3ad494c747271e4661bd4907ad46fcd684be554891208fa04e1b0b19d9fc3469ae8492e06d4bec8d07bae7471f0358328ba5199be0d8dd916f541094fe0b73ef2d59469779d086d0d31cea42b9a11a8b9a0d6d7f8cadc48a6c0533358e7f86f983663b4dda7a06868642e25cf03772e43128f0db124c1f3d52ebe2ed60d8ab7267fd1c9b00fa96bb130c298083148ff7e1fd754a6c76e2638a2546d640a957fae3ec4504d905ecbfd366439ec4b760a92"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x100, 0xf0f, 0xffe0, [0xffc000, 0x30, 0xff0000, 0xff0030, 0xff000f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0xb, 0x7fff}]}, 0x7, [{0xf1, &(0x7f0000000240)=@string={0xf1, 0x3, "8dad953796869f7caae57b8e6fe9e2e4d937a5d4fbdd7dbfc6f5cf573be808a19faafec951fe7c063400ab4d10a67e554a87984e9c4f94218a6a872eb592e7023f4a95b28b9f3ce152a553ea440075d8b610df48820b54c3de96f8b4debba70d6ad7233de53036907dc8be52d92927cd48eb379dc65f7933dc9a9f5b87819e18f7ab4510c719fbc5b2a238d7857f74dc1ff489eea8a62923340269d675b25bac46bfe1f7a75fa59bd900a5c87afccf18a661cef602650a40462b2b425604bbab4b0cb824eb576e9eb3601f820ce854e1f01f172c43c7b9a9c0ee04080af4ba14bba76805147a3ea336d5bd77b61b24"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44f}}, {0xa1, &(0x7f0000000380)=@string={0xa1, 0x3, "323d2e888a7ab6773b622d5efabca52ffc88c2b4d505583bf6e2ab08f883e2c5ba0b084458af4d251dfa5e0de677c3a7a680f4dbac4f3c87f32cd026bd45d7b0ae20bf00db017e05d9320ca9dc6d377fab907d954926f514defe2a28a7aaee8374f715df121e9157e7b7414de89d6a9eea2b0dc5b417a5a13bd81a8dd09ef8e2f6e322dca056105a7b454fea216c090b58cd32950b553f777c0fc0d6c26777"}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "c7745b3fccdd946f15505cd756d73a7f47da5a8584324538be71990f65deb5c573daab042d7ff9a83095f4fe416e99769bd8f946a74b5fa8b810e8728b449139a42a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0xf2, &(0x7f0000000540)=@string={0xf2, 0x3, "ae12bf36d8fcfbcde7811f1c35f6fc8cf4248692d4066784bdda31cafd9670f1fa522813f8465fb24ce4de935da83feeaa6044489357d62df0d2bff8df5ba94729ad6392136b64d6d652a7f24930d388b569b0ef2c6153feca0ad6124ad3ab2ffd5dbdef91f31c387f1efd50f3fad7d38a4b7485c9a552906911e3e1f8c3eb56372be295be0cae9339f62614166753c1a36b8dd69793059fa42f068aa031ebdea8a91794e30babd790390d601a974a9fd42a07affdb8140ccbcda9d1558e7e843a884fe9e933f3e6548c3492e28db2b27ec269627bc83b3957623e08dd92bcc5e3a1f3de72dc0d2f945ac9ef378e9383"}}]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_usb_connect(0x4, 0x674, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0xa2, 0x0, 0x40, 0xca33, 0x7ab3, 0x6c4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x662, 0x3, 0x6, 0xae, 0xc0, 0x80, [{{0x9, 0x4, 0x8c, 0xc0, 0x10, 0x8, 0x2, 0x0, 0xed, [], [{{0x9, 0x5, 0x8, 0x2, 0x10, 0x20, 0x6, 0xff, [@generic={0x97, 0x8, "8b3235af8db3c5653107395e9cc489236a5f8a1ce94e984b3508e1b126f85313ca6cf77d7e4d88184a75192739a81110733189f07b36d0563abaeb01c165a4dab5cf3bb393dd6ab54ec4ef0666a1aff1b7dbb6c07150432b8221b7a3a9408d5f7ed3553057a7a69881c2e388e37320d56bf1c99cd2879d92d18099fa47fa3254ee56ddf6331ac11d2f3b841ba833a2164028f0deff"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xa441}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x17, 0xf0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x4, 0x55}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x7, 0x40, 0x7}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x20, 0x3, 0x3f, [@generic={0x2d, 0x9, "c49d5be00ca6a8e2ad353294ee594465be6815e7db34bf24d639d912d0ad4e75cb47b48d89c24a8071ab9e"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x197, 0xff, 0x80}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x20, 0x1, 0x2, [@generic={0xc5, 0x21, "5609ffab8b3a56505d18726ec25ddb5591ae2df818c6b467bb18876448a05943544c8bdd437fb957ab2b619ea69d0dd03564e0e17f935ad955a445a1b65dd9673f3031d4502e7d23fa95a5b6b159e7dd6f0da5506c1d8e420db0c9f739b7d0568c56719cd51efe611f0287e782709957ded68960a3b313f41a5d09d3b31fdc827ef2c4ecd4171ab8c8ed19ad70c7bd21ed9933a06a7fb49554fd1aa0f5b0a5c4e92768798b79144b1bda4d0d3cf88373fd63353b0cd991b4964dd9beca2b3197a4f294"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x80, 0x58, 0x4, [@generic={0xc4, 0x11, "c6fd84c92776182f242cd639980a386be783a5a9768a3855bca5d44f73ff4ba6f277de6b9c54d728d7fbab43ee5c58224fc4021b4ff6bde7827c36b79fccbb0277f763cc05345eb8379244e90033fc095c036fe13097da829a3af35e93df2565e2b0331d41b759a2ae13cccffe245ee258e96202a2570f6c901a962b489f78611c86f8fd77baed1b93294e5b051b176ab481ffae5621994c869ac955ea13494895c370375abd54508b0d67eee1ae16faee1e5f960fd0188f62d886d6545fee5fd82a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x5, 0x3f, 0x3}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x81, 0x1, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x20, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0xfb, [@generic={0x75, 0x5, "818f2dd979f09186e27bc856bfcb85187fdecca2e3ccada8633c7d30129946f4c8f5f913eb4ccf95627e41b0faeef0cc3b7fb2c37a8878c698c166d7e04ee630c31848c88b8607936fcbb39e13263f2cd0c08d25b67bb54ac6e67d89b1a2ccc73adffe09650d4f0a148a5ee1737651076ae528"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xdf, 0x6b, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x7f, 0x8, [@generic={0x41, 0x0, "b94ceba15ac882da1ff20da7156cc0763b4242f65ff654f95969f9259bf9814864a933da23bf327c3fbec73dbe3c0d440cc02992b8061b536a9a3df22d743a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x80, 0x4, 0x1f}}]}}, {{0x9, 0x4, 0x8b, 0x9, 0x4, 0x81, 0x9d, 0x7a, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x40, 0x3f, 0x4b, [@generic={0x2f, 0xf, "c30ba441d65719600686d301ae473da16ba444cb1b2240fa15741a8f4eb86aacf82df9111b5d54f871f77eabee"}, @generic={0xba, 0x23, "3476f4894404c9098b24d3355745541ed2c075203cdcbd64b3093bb6b6efd37c82ac73d529f528601fa03608c5a5ec4c9e3f1fb6779ee6b98ac8592053d4fd426c022f0052b7d48ff10da6909407661a0280a3545fc5281eeb53a3220ce6ec65ba710d363fd14fb0ee925d590ab0db635be2aa588d1cbd1144cfecd930825d34126e77ea04710cc22b081cf0af6bd3849b9ff4f93eb8d44e563aaedcce5d7e2a40be859c903be307349a2c79234d3834225b8b03e86bd0f5"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x1, 0xc9, [@generic={0x5f, 0x11, "6144aff1cdfa1ba6e71ec54c9b0f1873fa704544b060aa63c23faec7b27c3e80104c9838d53fc3e75b977224df60e62b9bf226844b3093ec5883b70e5c80b6d9e378ff3ceb7e82a97f17ac5631c7ef089ff6605e7eaad04b16851a9289"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xd9a}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x77, 0xaf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @generic={0xbd, 0x11, "1c9501418ba9ed1be945d3cf1dfeeb518e1402ec9a0a6ac23601e8175596573671cfd71fa7988761d4c312bac55e5f03111481452b7386b97503b7210d47e48d8e7f6b3361289c15552db2987f4bcf0e8456e5a524d64c8de060ab609e9645f1cd5ba157fe2f76165d3912702eb1822685e3164e3c1103f01bfae741d1331c291e281f24f224f1ae89ef23e96580b72e4af803ce8b9d6dc93d40666cfe9ca06ec2ec9b3830249eda4e56962bf372c7b8a79776b0a3903209ab2a38"}]}}]}}, {{0x9, 0x4, 0x72, 0xff, 0x1, 0x37, 0x63, 0x98, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0637"}, {0x5, 0x24, 0x0, 0xf49a}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x7f, 0x0, 0x1f}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7f}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "aed79f5603"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0xe65, 0x81}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x93, 0xd0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x32}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x1, 0x3, 0xff, 0x0, 0x8}, 0x3d, &(0x7f0000000d80)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xa7, 0x3, 0x7103, 0xf0f, 0x400, [0x0, 0xff0030, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x37, 0x5, 0x8, 0xf0f, 0x28, [0xf0, 0x0, 0xffff30, 0xff0000, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x423}}, {0xdf, &(0x7f0000000e00)=@string={0xdf, 0x3, "3482e3aded27f5e584da3baeb03b8655c7e2e12ec6aee12bd3d70716ca198a13cacef4751ba1dab091dd4e0a5d17eed85a38b5592026a597ecfbc38c51967d871944ef3ca5283b4b1fcebe6d64378d337d52d3f3b80f4a631a7c5c2c98385c84a302593a02b77b088dd27fc7f49bfaf262c683bd9d5707d1c40cbdf6b85e618dbe2505f6df56f37256ff68aad63e82995a22cfe66bcfe7d5889ed09a7f16e808126ba9f2c9e979c9117a6ed159f9c801056f6673f4adbedafe57045a246ac1ee3064f99510f8d3799fd83b320bc26a9de5cf8b2c1aec4d987d615318d4"}}, {0xf6, &(0x7f0000000f00)=@string={0xf6, 0x3, "8c8b30b69c5af5ebb571609ccde45eca4921a5278ff1599e86d5d286e6f6b52f760509148107171d920c2255997692b928f9799e6ccadbc751e40d867bbda03fb5fb93894b86537c7178fb5255e959b368039f7b2b31e0fac92db935b745db7f573f1034e9ca2c34ed877ced2217b9ae890d134a5a725af2552e92987bc55b65f61a3981de7345eaff580fddb778237a85caded5b568ba555b26601c88e8adf6e18dcd330177ec63416a2e6da8877f0f79a01c2889272659a1693622a37fd6f6a46d61f7c9bd992dd53332f1ff2503ee6b505950311fd452b695c8953a813dde802efb5a3e686f58fa0e8e009067a95736cb329d"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x444}}]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "3a81d2", 0x2}}}, 0xd) 06:39:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2f42c0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:39:46 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:46 executing program 7: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/87, 0x57}], 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x58022df, 0x121480) r3 = open(&(0x7f0000001700)='./file0\x00', 0x141800, 0x81) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000700)={0x0, 0x2}) dup2(0xffffffffffffffff, r1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_open_dev$sg(&(0x7f0000000680), 0x10000, 0x563a00) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000008dcc000059080000", @ANYRES32=r2, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 574.980609] Bluetooth: hci6: SCO packet for unknown connection handle 172 [ 575.055276] debugfs: '0' already exists in 'hci5' [ 575.056471] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 575.057259] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.057276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.057285] Workqueue: hci5 hci_rx_work [ 575.057310] Call Trace: [ 575.057318] [ 575.057324] dump_stack_lvl+0xfa/0x120 [ 575.057340] sysfs_warn_dup+0x80/0xa0 [ 575.057355] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.057368] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.057379] ? find_held_lock+0x2b/0x80 [ 575.057395] ? lock_release+0xc8/0x270 [ 575.057412] ? do_raw_spin_unlock+0x53/0x220 [ 575.057431] kobject_add_internal+0x24c/0x9a0 [ 575.057451] kobject_add+0x157/0x240 [ 575.057466] ? __pfx_kobject_add+0x10/0x10 [ 575.057481] ? lock_release+0xc8/0x270 [ 575.057497] ? do_raw_spin_unlock+0x53/0x220 [ 575.057515] ? kobject_put+0xaa/0x260 [ 575.057535] device_add+0x32d/0x1830 [ 575.057558] ? __pfx_device_add+0x10/0x10 [ 575.057577] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.057592] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.057611] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.057629] hci_conn_add_sysfs+0x117/0x1c0 [ 575.057644] le_conn_complete_evt+0x1246/0x1e40 [ 575.057667] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.057690] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.057710] ? __asan_memcpy+0x3d/0x60 [ 575.057729] hci_le_meta_evt+0x34b/0x530 [ 575.057747] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.057767] hci_event_packet+0x66c/0x10e0 [ 575.057786] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.057804] ? __pfx_hci_event_packet+0x10/0x10 [ 575.057822] ? mark_held_locks+0x49/0x80 [ 575.057838] ? kcov_remote_start+0x2ce/0x5a0 [ 575.057864] hci_rx_work+0x65b/0x8b0 [ 575.057884] process_one_work+0x8e1/0x1960 [ 575.057909] ? __pfx_process_one_work+0x10/0x10 [ 575.057926] ? move_linked_works+0x172/0x270 [ 575.057954] ? assign_work+0x196/0x240 [ 575.057971] worker_thread+0x67e/0xe90 [ 575.057988] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.058011] ? __pfx_worker_thread+0x10/0x10 [ 575.058028] kthread+0x3c8/0x740 [ 575.058044] ? __pfx_kthread+0x10/0x10 [ 575.058058] ? ret_from_fork+0x79/0x7a0 [ 575.058078] ? lock_release+0xc8/0x270 [ 575.058094] ? __pfx_kthread+0x10/0x10 [ 575.058110] ret_from_fork+0x67a/0x7a0 [ 575.058122] ? __pfx_ret_from_fork+0x10/0x10 [ 575.058136] ? __switch_to+0x759/0x1030 [ 575.058155] ? __pfx_kthread+0x10/0x10 [ 575.058170] ret_from_fork_asm+0x1a/0x30 [ 575.058197] [ 575.076365] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.077484] Bluetooth: hci5: failed to register connection device [ 575.130776] debugfs: '0' already exists in 'hci2' [ 575.131488] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 575.132193] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.132209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.132218] Workqueue: hci2 hci_rx_work [ 575.132242] Call Trace: [ 575.132248] [ 575.132253] dump_stack_lvl+0xfa/0x120 [ 575.132270] sysfs_warn_dup+0x80/0xa0 [ 575.132284] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.132297] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.132308] ? find_held_lock+0x2b/0x80 [ 575.132323] ? lock_release+0xc8/0x270 [ 575.132341] ? do_raw_spin_unlock+0x53/0x220 [ 575.132360] kobject_add_internal+0x24c/0x9a0 [ 575.132380] kobject_add+0x157/0x240 [ 575.132395] ? __pfx_kobject_add+0x10/0x10 [ 575.132410] ? lock_release+0xc8/0x270 [ 575.132426] ? do_raw_spin_unlock+0x53/0x220 [ 575.132445] ? kobject_put+0xaa/0x260 [ 575.132465] device_add+0x32d/0x1830 [ 575.132488] ? __pfx_device_add+0x10/0x10 [ 575.132507] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.132521] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.132540] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.132557] hci_conn_add_sysfs+0x117/0x1c0 [ 575.132572] le_conn_complete_evt+0x1246/0x1e40 [ 575.132596] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.132619] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.132639] ? __asan_memcpy+0x3d/0x60 [ 575.132657] hci_le_meta_evt+0x34b/0x530 [ 575.132675] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.132695] hci_event_packet+0x66c/0x10e0 [ 575.132714] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.132731] ? __pfx_hci_event_packet+0x10/0x10 [ 575.132749] ? mark_held_locks+0x49/0x80 [ 575.132766] ? kcov_remote_start+0x2ce/0x5a0 [ 575.132790] hci_rx_work+0x65b/0x8b0 [ 575.132810] process_one_work+0x8e1/0x1960 [ 575.132836] ? __pfx_process_one_work+0x10/0x10 [ 575.132852] ? move_linked_works+0x172/0x270 [ 575.132876] ? assign_work+0x196/0x240 [ 575.132893] worker_thread+0x67e/0xe90 [ 575.132910] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.132933] ? __pfx_worker_thread+0x10/0x10 [ 575.132955] kthread+0x3c8/0x740 [ 575.132970] ? __pfx_kthread+0x10/0x10 [ 575.132984] ? ret_from_fork+0x79/0x7a0 [ 575.132997] ? lock_release+0xc8/0x270 [ 575.133013] ? __pfx_kthread+0x10/0x10 [ 575.133029] ret_from_fork+0x67a/0x7a0 [ 575.133041] ? __pfx_ret_from_fork+0x10/0x10 [ 575.133055] ? __switch_to+0x759/0x1030 [ 575.133074] ? __pfx_kthread+0x10/0x10 [ 575.133089] ret_from_fork_asm+0x1a/0x30 [ 575.133115] [ 575.151166] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.152197] Bluetooth: hci2: failed to register connection device [ 575.157319] debugfs: '0' already exists in 'hci2' [ 575.157901] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 575.158615] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.158631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.158639] Workqueue: hci2 hci_rx_work [ 575.158659] Call Trace: [ 575.158664] [ 575.158669] dump_stack_lvl+0xfa/0x120 [ 575.158683] sysfs_warn_dup+0x80/0xa0 [ 575.158695] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.158707] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.158718] ? find_held_lock+0x2b/0x80 [ 575.158731] ? lock_release+0xc8/0x270 [ 575.158747] ? do_raw_spin_unlock+0x53/0x220 [ 575.158766] kobject_add_internal+0x24c/0x9a0 [ 575.158785] kobject_add+0x157/0x240 [ 575.158800] ? __pfx_kobject_add+0x10/0x10 [ 575.158814] ? lock_release+0xc8/0x270 [ 575.158830] ? do_raw_spin_unlock+0x53/0x220 [ 575.158848] ? kobject_put+0xaa/0x260 [ 575.158868] device_add+0x32d/0x1830 [ 575.158889] ? __pfx_device_add+0x10/0x10 [ 575.158908] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.158921] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.158943] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.158960] hci_conn_add_sysfs+0x117/0x1c0 [ 575.158975] le_conn_complete_evt+0x1246/0x1e40 [ 575.158997] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.159020] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.159039] ? __asan_memcpy+0x3d/0x60 [ 575.159057] hci_le_meta_evt+0x34b/0x530 [ 575.159073] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.159093] hci_event_packet+0x66c/0x10e0 [ 575.159112] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.159129] ? __pfx_hci_event_packet+0x10/0x10 [ 575.159147] ? mark_held_locks+0x49/0x80 [ 575.159163] ? kcov_remote_start+0x2ce/0x5a0 [ 575.159187] hci_rx_work+0x65b/0x8b0 [ 575.159207] process_one_work+0x8e1/0x1960 [ 575.159231] ? __pfx_process_one_work+0x10/0x10 [ 575.159247] ? move_linked_works+0x172/0x270 [ 575.159270] ? assign_work+0x196/0x240 [ 575.159287] worker_thread+0x67e/0xe90 [ 575.159303] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.159325] ? __pfx_worker_thread+0x10/0x10 [ 575.159342] kthread+0x3c8/0x740 [ 575.159356] ? __pfx_kthread+0x10/0x10 [ 575.159370] ? ret_from_fork+0x79/0x7a0 [ 575.159382] ? lock_release+0xc8/0x270 [ 575.159397] ? __pfx_kthread+0x10/0x10 [ 575.159413] ret_from_fork+0x67a/0x7a0 [ 575.159425] ? __pfx_ret_from_fork+0x10/0x10 [ 575.159439] ? __switch_to+0x759/0x1030 [ 575.159455] ? __pfx_kthread+0x10/0x10 [ 575.159470] ret_from_fork_asm+0x1a/0x30 [ 575.159495] [ 575.177561] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.178599] Bluetooth: hci2: failed to register connection device [ 575.216456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.226743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.229490] debugfs: '0' already exists in 'hci3' [ 575.230640] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 575.230655] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.230672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.230681] Workqueue: hci3 hci_rx_work [ 575.230704] Call Trace: [ 575.230708] [ 575.230713] dump_stack_lvl+0xfa/0x120 [ 575.230729] sysfs_warn_dup+0x80/0xa0 [ 575.230744] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.230756] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.230768] ? find_held_lock+0x2b/0x80 [ 575.230783] ? lock_release+0xc8/0x270 [ 575.230800] ? do_raw_spin_unlock+0x53/0x220 [ 575.230819] kobject_add_internal+0x24c/0x9a0 [ 575.230839] kobject_add+0x157/0x240 [ 575.230854] ? __pfx_kobject_add+0x10/0x10 [ 575.230868] ? lock_release+0xc8/0x270 [ 575.230884] ? do_raw_spin_unlock+0x53/0x220 [ 575.230902] ? kobject_put+0xaa/0x260 [ 575.230922] device_add+0x32d/0x1830 [ 575.230950] ? __pfx_device_add+0x10/0x10 [ 575.230969] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.230983] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.231001] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.231018] hci_conn_add_sysfs+0x117/0x1c0 [ 575.231033] le_conn_complete_evt+0x1246/0x1e40 [ 575.231057] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.231080] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.231099] ? __asan_memcpy+0x3d/0x60 [ 575.231117] hci_le_meta_evt+0x34b/0x530 [ 575.231135] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.231155] hci_event_packet+0x66c/0x10e0 [ 575.231174] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.231192] ? __pfx_hci_event_packet+0x10/0x10 [ 575.231210] ? mark_held_locks+0x49/0x80 [ 575.231227] ? kcov_remote_start+0x2ce/0x5a0 [ 575.231251] hci_rx_work+0x65b/0x8b0 [ 575.231272] process_one_work+0x8e1/0x1960 [ 575.231296] ? __pfx_process_one_work+0x10/0x10 [ 575.231312] ? move_linked_works+0x172/0x270 [ 575.231335] ? assign_work+0x196/0x240 [ 575.231352] worker_thread+0x67e/0xe90 [ 575.231369] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.231392] ? __pfx_worker_thread+0x10/0x10 [ 575.231409] kthread+0x3c8/0x740 [ 575.231424] ? __pfx_kthread+0x10/0x10 [ 575.231437] ? ret_from_fork+0x79/0x7a0 [ 575.231450] ? lock_release+0xc8/0x270 [ 575.231466] ? __pfx_kthread+0x10/0x10 [ 575.231481] ret_from_fork+0x67a/0x7a0 [ 575.231494] ? __pfx_ret_from_fork+0x10/0x10 [ 575.231508] ? __switch_to+0x759/0x1030 [ 575.231526] ? __pfx_kthread+0x10/0x10 [ 575.231542] ret_from_fork_asm+0x1a/0x30 [ 575.231568] [ 575.232520] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.232546] Bluetooth: hci3: failed to register connection device [ 575.246283] debugfs: '0' already exists in 'hci6' [ 575.246437] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 575.246448] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.246463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.246471] Workqueue: hci6 hci_rx_work [ 575.246489] Call Trace: [ 575.246493] [ 575.246498] dump_stack_lvl+0xfa/0x120 [ 575.246512] sysfs_warn_dup+0x80/0xa0 [ 575.246525] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.246537] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.246549] ? find_held_lock+0x2b/0x80 [ 575.246562] ? lock_release+0xc8/0x270 [ 575.246578] ? do_raw_spin_unlock+0x53/0x220 [ 575.246597] kobject_add_internal+0x24c/0x9a0 [ 575.246616] kobject_add+0x157/0x240 [ 575.246631] ? __pfx_kobject_add+0x10/0x10 [ 575.246646] ? lock_release+0xc8/0x270 [ 575.246662] ? do_raw_spin_unlock+0x53/0x220 [ 575.246680] ? kobject_put+0xaa/0x260 [ 575.246700] device_add+0x32d/0x1830 [ 575.246721] ? __pfx_device_add+0x10/0x10 [ 575.246739] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.246752] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.246770] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.246787] hci_conn_add_sysfs+0x117/0x1c0 [ 575.246801] le_conn_complete_evt+0x1246/0x1e40 [ 575.246823] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.246849] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.246869] ? __asan_memcpy+0x3d/0x60 [ 575.246886] hci_le_meta_evt+0x34b/0x530 [ 575.246903] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.246924] hci_event_packet+0x66c/0x10e0 [ 575.246946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.246963] ? __pfx_hci_event_packet+0x10/0x10 [ 575.246981] ? mark_held_locks+0x49/0x80 [ 575.246998] ? kcov_remote_start+0x2ce/0x5a0 [ 575.247021] hci_rx_work+0x65b/0x8b0 [ 575.247041] process_one_work+0x8e1/0x1960 [ 575.247065] ? __pfx_process_one_work+0x10/0x10 [ 575.247081] ? move_linked_works+0x172/0x270 [ 575.247104] ? assign_work+0x196/0x240 [ 575.247121] worker_thread+0x67e/0xe90 [ 575.247138] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.247159] ? __pfx_worker_thread+0x10/0x10 [ 575.247176] kthread+0x3c8/0x740 [ 575.247191] ? __pfx_kthread+0x10/0x10 [ 575.247205] ? ret_from_fork+0x79/0x7a0 [ 575.247217] ? lock_release+0xc8/0x270 [ 575.247233] ? __pfx_kthread+0x10/0x10 [ 575.247248] ret_from_fork+0x67a/0x7a0 [ 575.247261] ? __pfx_ret_from_fork+0x10/0x10 [ 575.247275] ? __switch_to+0x759/0x1030 [ 575.247292] ? __pfx_kthread+0x10/0x10 [ 575.247308] ret_from_fork_asm+0x1a/0x30 [ 575.247333] [ 575.247384] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.247407] Bluetooth: hci6: failed to register connection device [ 575.263400] Bluetooth: hci6: connection err: -111 [ 575.266755] debugfs: '0' already exists in 'hci3' [ 575.266911] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 575.266923] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.266945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.266954] Workqueue: hci3 hci_rx_work [ 575.266973] Call Trace: [ 575.266977] [ 575.266983] dump_stack_lvl+0xfa/0x120 [ 575.266997] sysfs_warn_dup+0x80/0xa0 [ 575.267010] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.267023] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.267034] ? find_held_lock+0x2b/0x80 [ 575.267048] ? lock_release+0xc8/0x270 [ 575.267064] ? do_raw_spin_unlock+0x53/0x220 [ 575.267084] kobject_add_internal+0x24c/0x9a0 [ 575.267103] kobject_add+0x157/0x240 [ 575.267119] ? __pfx_kobject_add+0x10/0x10 [ 575.267133] ? lock_release+0xc8/0x270 [ 575.267149] ? do_raw_spin_unlock+0x53/0x220 [ 575.267167] ? kobject_put+0xaa/0x260 [ 575.267188] device_add+0x32d/0x1830 [ 575.267209] ? __pfx_device_add+0x10/0x10 [ 575.267228] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.267241] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.267259] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.267276] hci_conn_add_sysfs+0x117/0x1c0 [ 575.267290] le_conn_complete_evt+0x1246/0x1e40 [ 575.267313] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.267336] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.267356] ? __asan_memcpy+0x3d/0x60 [ 575.267373] hci_le_meta_evt+0x34b/0x530 [ 575.267390] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.267411] hci_event_packet+0x66c/0x10e0 [ 575.267429] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.267447] ? __pfx_hci_event_packet+0x10/0x10 [ 575.267465] ? mark_held_locks+0x49/0x80 [ 575.267481] ? kcov_remote_start+0x2ce/0x5a0 [ 575.267506] hci_rx_work+0x65b/0x8b0 [ 575.267526] process_one_work+0x8e1/0x1960 [ 575.267550] ? __pfx_process_one_work+0x10/0x10 [ 575.267566] ? move_linked_works+0x172/0x270 [ 575.267589] ? assign_work+0x196/0x240 [ 575.267607] worker_thread+0x67e/0xe90 [ 575.267623] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.267645] ? __pfx_worker_thread+0x10/0x10 [ 575.267662] kthread+0x3c8/0x740 [ 575.267677] ? __pfx_kthread+0x10/0x10 [ 575.267690] ? ret_from_fork+0x79/0x7a0 [ 575.267703] ? lock_release+0xc8/0x270 [ 575.267719] ? __pfx_kthread+0x10/0x10 [ 575.267735] ret_from_fork+0x67a/0x7a0 [ 575.267747] ? __pfx_ret_from_fork+0x10/0x10 [ 575.267762] ? __switch_to+0x759/0x1030 [ 575.267778] ? __pfx_kthread+0x10/0x10 [ 575.267793] ret_from_fork_asm+0x1a/0x30 [ 575.267818] [ 575.268075] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.268099] Bluetooth: hci3: failed to register connection device [ 575.385584] Bluetooth: hci3: command 0x0406 tx timeout [ 575.386027] Bluetooth: hci5: command 0x0406 tx timeout [ 575.449091] Bluetooth: hci6: command 0x0406 tx timeout [ 575.767764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.769832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.771835] debugfs: '0' already exists in 'hci6' [ 575.773487] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 575.775077] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 575.775112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 575.775130] Workqueue: hci6 hci_rx_work [ 575.775173] Call Trace: [ 575.775183] [ 575.775194] dump_stack_lvl+0xfa/0x120 [ 575.775225] sysfs_warn_dup+0x80/0xa0 [ 575.775253] sysfs_create_dir_ns+0x23b/0x2a0 [ 575.775280] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 575.775305] ? find_held_lock+0x2b/0x80 [ 575.775336] ? lock_release+0xc8/0x270 [ 575.775372] ? do_raw_spin_unlock+0x53/0x220 [ 575.775415] kobject_add_internal+0x24c/0x9a0 [ 575.775455] kobject_add+0x157/0x240 [ 575.775489] ? __pfx_kobject_add+0x10/0x10 [ 575.775521] ? lock_release+0xc8/0x270 [ 575.775556] ? do_raw_spin_unlock+0x53/0x220 [ 575.775596] ? kobject_put+0xaa/0x260 [ 575.775641] device_add+0x32d/0x1830 [ 575.775688] ? __pfx_device_add+0x10/0x10 [ 575.775730] ? hci_debugfs_create_conn+0x10f/0x240 [ 575.775759] ? mgmt_send_event_skb+0x2f3/0x460 [ 575.775799] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 575.775837] hci_conn_add_sysfs+0x117/0x1c0 [ 575.775868] le_conn_complete_evt+0x1246/0x1e40 [ 575.775918] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 575.775978] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 575.776021] ? __asan_memcpy+0x3d/0x60 [ 575.776060] hci_le_meta_evt+0x34b/0x530 [ 575.776096] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 575.776142] hci_event_packet+0x66c/0x10e0 [ 575.776183] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 575.776222] ? __pfx_hci_event_packet+0x10/0x10 [ 575.776262] ? mark_held_locks+0x49/0x80 [ 575.776298] ? kcov_remote_start+0x2ce/0x5a0 [ 575.776351] hci_rx_work+0x65b/0x8b0 [ 575.776396] process_one_work+0x8e1/0x1960 [ 575.776449] ? __pfx_process_one_work+0x10/0x10 [ 575.776484] ? move_linked_works+0x172/0x270 [ 575.776535] ? assign_work+0x196/0x240 [ 575.776574] worker_thread+0x67e/0xe90 [ 575.776610] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 575.776659] ? __pfx_worker_thread+0x10/0x10 [ 575.776697] kthread+0x3c8/0x740 [ 575.776730] ? __pfx_kthread+0x10/0x10 [ 575.776760] ? ret_from_fork+0x79/0x7a0 [ 575.776787] ? lock_release+0xc8/0x270 [ 575.776822] ? __pfx_kthread+0x10/0x10 [ 575.776857] ret_from_fork+0x67a/0x7a0 [ 575.776884] ? __pfx_ret_from_fork+0x10/0x10 [ 575.776916] ? __switch_to+0x759/0x1030 [ 575.776952] ? __pfx_kthread+0x10/0x10 [ 575.776986] ret_from_fork_asm+0x1a/0x30 [ 575.777042] [ 575.817120] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.819696] Bluetooth: hci6: failed to register connection device [ 575.821532] Bluetooth: hci6: connection err: -111 [ 576.666655] Bluetooth: hci2: command 0x0406 tx timeout [ 577.433248] Bluetooth: hci5: command 0x0406 tx timeout [ 577.434175] Bluetooth: hci3: command 0x0406 tx timeout [ 577.497095] Bluetooth: hci6: command 0x0406 tx timeout [ 578.714779] Bluetooth: hci2: command 0x0406 tx timeout [ 579.480997] Bluetooth: hci3: command 0x0406 tx timeout [ 579.481143] Bluetooth: hci5: command 0x0406 tx timeout [ 579.545190] Bluetooth: hci6: command 0x0406 tx timeout [ 580.765880] Bluetooth: hci2: command 0x0406 tx timeout [ 581.529138] Bluetooth: hci3: command 0x0406 tx timeout [ 581.529270] Bluetooth: hci5: command 0x0406 tx timeout [ 581.593141] Bluetooth: hci6: command 0x0406 tx timeout [ 582.811748] Bluetooth: hci2: command 0x0406 tx timeout [ 583.577043] Bluetooth: hci5: command 0x0406 tx timeout [ 583.577074] Bluetooth: hci3: command 0x0406 tx timeout [ 583.641648] Bluetooth: hci6: command 0x0406 tx timeout [ 584.862479] Bluetooth: hci2: command 0x0406 tx timeout 06:39:56 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:56 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00c8000040aaaaaaaaaa00ffffffffffff0000000800000000fdff000000"], 0x22) syz_emit_vhci(0x0, 0x0) 06:39:56 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "7767783d488a216e4c0a87d08ae13ebd03e2d5230eca3f49f1cbd6fc67acff125fa382d46967118c10f352da2908f11cd3c74adb4606a0150002e2baa5bfdee70e9cd8f9bfa8ab224175bf72c08d6674bcd4c2f8e852c111bb594c0f72ed3275112658b2b0c3de874ef7cacfee78b127744cd3d5b8b1fe1a506b62b91c7d97c5a50f2b1c41ee0a426d527fd9661daa3905cb95f239117445265ced534b4fbbe32fc53cfa4d80a8325ef2838efd3901341b5d688edc0a78dae7fd3a02b6b603b204fd83b66d1616fd160988e49d8227fe6582604955e643663181bdb8604458b5fd388f1db303ca4b207e5ed79d370fb96b99cf1050c4a2b102006975296b"}, 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xca}, "b74edea7e05c9aa936d82f459b0a62738f1ac77499aab871898eacc19bd57db7e47d5c42f79e1ad4f483704f0eac1975bdb36542c25e4a193e2c4b83ccafdaeb55855f9252e274d521910fe11f8ac5124066f2a3b57a4fd8ccd44087352e2d4e22782a7df0e7d51f6fa024a9c0c5141334a370aaea0b85ca892b20624d9b91d120791f4a969cb8f56e0d6307c1d0c1eb03213faa565947cc7c0b6fa7be44df6bdc0288ca020d83380d97c47b1de68e419cd795c5edebbc48cf5e9d1665e370762e294603512a5688a11b"}, 0xce) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x47}, {0x5, [{@any, 0x0, 0x34, '6tx', 0x3, 0xfd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x8, "ee8a7f", 0x7fff, 0xfb}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x6, "e645fe", 0x8, 0x6}, {@any, 0x3f, 0x4, "b2b921", 0x0, 0x7f}, {@none, 0x7f, 0x0, "f4d9f9", 0x7, 0x2}]}}}, 0x4a) 06:39:56 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:39:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x1000, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @remote}}}, 0x108) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000007be1e0000000000000000070000020c000240000000a54c38cbb5e2044b241300000000050c00064000000000000000070940010073797a310000000008000540000004020c000240000000cd7a052fe49df0af4ac7e0860000000fff0c00024000000000000003ff"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:39:56 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:39:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000000100040000007f956b433f520abd5a94a60000000008000000", @ANYRES32=r2, @ANYRES64=r1], 0x2c, 0x0) fchown(r0, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xf9, 0xc9, 0x0, 0x3, "f7567c560fed8be8"}}}, 0x10) 06:39:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0xde4, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x64}}}}, [@NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x4]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0xc, 0x0, 0xb, 0x1, 0x24, 0x36, 0x48, 0x0, 0x48, 0x4, 0x30, 0x2, 0x36, 0x1, 0x1, 0x60, 0x6c, 0x6, 0x19, 0xb, 0x9, 0x1b, 0x30, 0x36, 0xc, 0x0]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x9, 0x2, 0x48, 0x6, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x5}, {0x5, 0x7}, {0x1}, {0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x3, 0x1}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x7, 0x2}, {0x5, 0xa}, {0x1}, {0x1, 0xa}, {0x6, 0x4}, {0x4, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x7, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x9}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x9}, {0x3}, {0x1}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3}, {0x1, 0x4}, {0x2}, {0x6, 0x4}, {0x7, 0x4}, {0x1}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x36, 0x12, 0x9754dfb1cc4178f4, 0x9, 0x48, 0x1, 0x60, 0xb, 0x9, 0x60, 0x4, 0x24, 0x2d32dadb4028c2fd, 0x0, 0x18, 0x9, 0x62f18815702ff03f, 0x6, 0x1, 0x48, 0x6c, 0x25, 0x48, 0x9, 0x6c, 0x30, 0x3, 0x30, 0x1b, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x534, 0x8, 0x9, 0x8, 0x8, 0x1efd, 0x9]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x3}, {0x5, 0x4}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x12, 0x30, 0x48, 0x60, 0x0, 0x6, 0x3, 0x0, 0x36, 0x3, 0xc, 0x24, 0x1, 0x821a8991e605e603, 0x6c, 0x3, 0x48, 0x6, 0x3, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0xb, 0x5, 0x24, 0x60, 0x60, 0x2, 0x24, 0xb, 0x9, 0x12, 0x5, 0x9, 0x48, 0x7a]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x5, 0x1, 0x4, 0x16, 0xb, 0x6c, 0x4, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x9, 0x16, 0x12]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xca, 0x8, 0x8, 0x8302, 0x3, 0x2, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x60, 0xc, 0x9, 0x6c, 0x36, 0xb, 0x5, 0x17, 0x36, 0x16, 0x5, 0x60, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0x180, 0x0, 0xfffc, 0x8000, 0x2, 0x8001]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x2}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x8}, {0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x7}, {0x6, 0x5}, {0x3, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x6}, {0x4, 0x4}, {}, {0x6}, {0x4, 0x5}, {0x0, 0x3}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x4, 0x12, 0x1, 0x6, 0x30, 0x1, 0x60, 0x2, 0x1, 0x0, 0x2, 0x16, 0x1b]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffc, 0xad, 0xfd, 0xff, 0x6, 0x7ae, 0x4]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x19}, {0x5, 0x4}, {0x7, 0x5}, {0x4, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x2}, {0x4, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x7}, {}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x1, 0xb, 0x36, 0x5, 0x30, 0x5, 0x6c, 0xc, 0x6, 0x6, 0x6, 0x36, 0x18, 0x4, 0x4, 0x48, 0x60, 0x2]}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x3, 0x71f, 0x2, 0x7, 0x200, 0x1]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0xb, 0x18, 0xc, 0x0]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x4, 0xc, 0x6c, 0x6c, 0x5, 0x6c, 0x43, 0x60, 0x18, 0x12, 0x76, 0xb, 0x2e, 0x36, 0x4, 0x9, 0x4, 0x24, 0x30, 0xb, 0x18, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf7b5, 0x3, 0x0, 0x4, 0x6, 0x2, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x0, 0x9, 0x6, 0x8, 0x8, 0x7b13, 0x5]}}]}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x8}, {0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x8}, {0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0x1a}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {}, {0x2, 0x3}, {0x6, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x4, 0x3}, {0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x6}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x2, 0x36, 0x36, 0x12, 0x5, 0x2, 0x6c, 0x4, 0x9, 0xb, 0x4, 0x48, 0x7, 0x36, 0x24, 0x16, 0x18]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x6}, {0x7, 0x4}, {0x6, 0x5}, {0x3, 0xa}, {0x5}, {0x4, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x2}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x5}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0xa}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x3, 0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0x9}, {}, {0x3, 0x6}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x9}, {0x3, 0x8}, {0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x7}, {0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x6}, {0x5, 0x2}, {}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x7}, {0x3, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x30, 0x1, 0x3]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x5}, {0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x5}, {0x2, 0x7}, {0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x6}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0xfff8, 0x7, 0x6, 0x7ff, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x1f, 0x4000, 0x0, 0x5, 0x2, 0xc8]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x0, 0xb, 0x18, 0x2, 0x6, 0x2, 0x3, 0x1b, 0xc, 0x5, 0x12, 0x24, 0x36, 0x6, 0x18, 0x24, 0x6, 0x2, 0x48, 0x48, 0x36, 0x4, 0x9, 0x2, 0x1, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x30, 0x4, 0x60, 0x3, 0x6, 0x6, 0x4, 0x5, 0x36, 0x4, 0x19, 0x16, 0x6c, 0x9, 0x5, 0x4, 0x48, 0x1, 0x30, 0x30]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x3, 0x5}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d, 0xfc00, 0x6, 0x7f2, 0x1, 0x8001, 0x9d, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x8}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x8001, 0xb0, 0x7, 0xd659, 0x668, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x9, 0x9, 0x18, 0xc, 0x9, 0x3, 0x36, 0x16, 0x1b, 0x48, 0x1b, 0x9, 0x16, 0x2, 0x24, 0x1, 0x3, 0x26, 0x36, 0x1, 0x60, 0x5, 0x3, 0x2, 0xb, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x37, 0x2, 0x3, 0x1ff, 0x7, 0x9, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1ff, 0x5, 0x1, 0x2, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0x800, 0x7, 0x400, 0x3f, 0x6, 0x81]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x4}, {0x0, 0xa}, {0x6}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0x19}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x4}, {0x4, 0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x7, 0x6}, {0x7, 0x2}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x7}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x9}, {0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {}, {0x3, 0x3}, {0x5, 0x1}, {0x4}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x5, 0x4}, {0x5, 0xa}, {0x4, 0x1}, {0x3}, {0x1, 0x9}, {0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x9}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x6}, {}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x9}, {0x6, 0x4}, {0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {}, {0x2, 0x4}, {0x3, 0x7}, {0x6, 0x4}, {0x5, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x6, 0x4}, {}, {0x4, 0x6}, {0x2, 0x1}, {0x6}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x5, 0x6c, 0x9, 0x6c, 0x3, 0x16, 0x5, 0x1b, 0x36, 0x0, 0x38, 0xb, 0x12, 0xd, 0x1, 0xb, 0x1, 0x60, 0x36, 0x16, 0x16, 0x18, 0x48, 0x4, 0x4, 0x2, 0x18]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0xb, 0x60, 0x12, 0x1, 0x1, 0xc, 0x60, 0xc, 0x12, 0x3, 0x6]}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x9, 0x30, 0x30, 0x12, 0x6c, 0x16, 0xc, 0x36, 0x18, 0x6c, 0x1, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x16, 0x12, 0x1, 0x2, 0x36, 0x16, 0xb, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0x8, 0x36f, 0x200, 0x81, 0x0, 0x80]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x1b, 0x12, 0x16, 0x1a, 0x18, 0x6c, 0x1, 0x48, 0x7e, 0x36, 0x5, 0xc, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xae1, 0x8, 0x5, 0xfff8, 0x0, 0x400, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x9}, {0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x5}, {0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x6}, {0x7, 0x5}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x1}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x6, 0x1}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x3}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x2, 0xe735c8cbd3e7e2ca, 0x3, 0x16, 0x9, 0x12, 0x9, 0x16, 0x2, 0x3, 0x60, 0xc, 0xc, 0x12, 0xc, 0x5, 0xc, 0x30, 0x5, 0x60, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x4}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x5, 0x9}, {0x1}, {0x5, 0x8}, {0x7, 0x5}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1, 0xf000, 0xf045, 0x6, 0x1, 0x8001, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0xa}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x1, 0x37, 0x0, 0xffa5, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x1}, {0x4, 0xa}, {0x1, 0xa}, {0x4}, {0x4, 0x6}, {0x7, 0xa}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x1b, 0x24, 0x48, 0x4, 0x6c, 0x30, 0x16, 0x30, 0x1b, 0x6]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x36, 0xc, 0x1b, 0x6c, 0x30, 0x16, 0x1b, 0x12, 0x4, 0xc, 0xc, 0x1, 0x3, 0xa563799c16775abc, 0x17, 0x0, 0xc, 0x41, 0x16, 0x18, 0x16, 0x12, 0x16, 0x48, 0x16, 0xc, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x7}, {0x5, 0x3}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x8}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x60, 0x16, 0x24, 0x4, 0x24, 0xc, 0x9, 0x5, 0x4, 0x0, 0x3163b81bb578dadd, 0x1b, 0x6, 0x1, 0x18, 0x48, 0x6, 0x12, 0x9]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2997, 0x5, 0x6, 0xd488, 0xea3, 0x401, 0x1fe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x30, 0x5, 0x36, 0x36, 0x9, 0x36, 0x9]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x3, 0x1, 0x18, 0xb, 0x12, 0x0, 0x6c, 0x6, 0x5]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x8}, {0x7, 0x8}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x5}, {0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x6}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x2}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x16, 0x9, 0xc, 0x6c, 0x16, 0x3, 0x1, 0x6]}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x1, 0xa94, 0xa358, 0x4, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x5ad, 0x7, 0x5c8f, 0x6, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6971, 0x2, 0x7ff, 0x1, 0x7, 0x100, 0x4]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x48, 0x18, 0x4d, 0x12, 0xc, 0x6, 0x4, 0x24, 0x14, 0xb, 0x30, 0x6c, 0x18, 0x2, 0x1f, 0x4, 0x24, 0x6, 0x30, 0x5, 0x12, 0x48, 0xc, 0x2, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x0, 0x7ff, 0x4, 0x54d, 0x2, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x40, 0x1, 0x7, 0xf79, 0x4, 0x8]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8000, 0xffc1, 0x9, 0x0, 0x800, 0xc69b, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0xb3c, 0x7, 0x7ff, 0x7, 0x9, 0x800]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x6, 0x12, 0x7d63a2215bcd3a1f]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2a, 0x2, 0x6, 0x2, 0xb, 0x1, 0x6c, 0x6c, 0x1b, 0x36, 0x1b, 0x12, 0x0, 0x44, 0x60, 0x60, 0xc, 0x1, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x3a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd9d3, 0x4, 0x8001, 0x0, 0x5, 0x7, 0x9e34, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x957, 0x3, 0x9, 0x49, 0x0, 0xb11, 0x29c, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x884c, 0x3, 0x7, 0x81, 0x0, 0x8000, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x175, 0x4, 0x1, 0x9f2, 0x20, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x1b, 0x6, 0x12, 0x48, 0x6, 0x48]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x1}, {}, {0x0, 0x1}, {0x6, 0x8}, {0x7}, {0x1}, {0x3, 0x6}, {}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0xb}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x1}, {0x4, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x4}, {0x5}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x7}, {0x7}, {}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x1}, {0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x4, 0x8}, {0x5}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0xa}, {}, {0x4, 0x5}, {0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x3}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x3}, {0x7, 0x5}, {0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7, 0x2, 0xc09, 0x0, 0x7, 0x7, 0x8]}}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x9, 0xa4b0, 0x5, 0x9, 0xfe01, 0x7f]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x9}, {0x0, 0x6}, {0x2}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x5}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x8}, {0x2, 0xa}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x6}, {0x5, 0xa}, {0x5, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x8}, {0x6}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x2, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x9, 0xb, 0x48, 0x3]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x7, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x4}, {0x2, 0x2}, {0x5}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x5}, {0x7, 0x9}, {0x3, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0xa}, {0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x14}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x2, 0x60, 0x36, 0x9, 0x24, 0x30, 0x5, 0x3, 0x60, 0xe, 0x1, 0x6c, 0x1, 0x5, 0x36, 0xb, 0x6, 0x60, 0x5, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7f, 0x20, 0x7, 0x5, 0x0, 0xc6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa4, 0x5, 0x9, 0x25e, 0x7f, 0x1f, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0xa0d, 0x9, 0x8, 0x0, 0x1, 0x80]}}]}, @NL80211_BAND_60GHZ={0x134, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x5}, {0x1, 0x6}, {0x3, 0xa}, {0x6, 0x8}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0x3}, {}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x6}, {0x7, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x6}, {0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x7}, {0x6, 0x4}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x3}, {0x1}, {0x3, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x6, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x9, 0x0, 0x5, 0x60, 0xc, 0x3, 0x36, 0xc, 0x48, 0x2, 0x36, 0x3, 0x1, 0x16, 0x4, 0x5, 0x4, 0x48, 0x48, 0x60, 0x30, 0x4, 0x48, 0x0, 0xc, 0x3, 0x4, 0x30, 0x9, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0x5, 0x2}, {0x5, 0x6}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0x6}, {0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x7}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0x7}, {0x5, 0x8}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ee, 0x5, 0x3, 0x2, 0x81, 0x1124, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x9, 0x401, 0x0, 0x5, 0x400, 0x2]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x48, 0x18, 0x3, 0x24, 0x1b, 0x9, 0xb, 0x1b, 0x36, 0x12, 0x1, 0xc, 0x36, 0x3, 0x6, 0x5]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x7}, {0x1, 0x2}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x7}, {0x6}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x61, 0x3, 0x24, 0x5c, 0x1b, 0x24, 0xc, 0x36]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x0, 0x48, 0x2, 0x9, 0xc, 0x1b, 0x16, 0x18, 0x18, 0x9]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0xde4}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)=']\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) [ 585.247521] debugfs: '0' already exists in 'hci2' [ 585.248810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 585.250373] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 585.250408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.250428] Workqueue: hci2 hci_rx_work [ 585.250471] Call Trace: [ 585.250481] [ 585.250492] dump_stack_lvl+0xfa/0x120 [ 585.250522] sysfs_warn_dup+0x80/0xa0 [ 585.250551] sysfs_create_dir_ns+0x23b/0x2a0 [ 585.250579] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 585.250604] ? find_held_lock+0x2b/0x80 [ 585.250635] ? lock_release+0xc8/0x270 [ 585.250672] ? do_raw_spin_unlock+0x53/0x220 [ 585.250715] kobject_add_internal+0x24c/0x9a0 [ 585.250756] kobject_add+0x157/0x240 [ 585.250790] ? __pfx_kobject_add+0x10/0x10 [ 585.250821] ? lock_release+0xc8/0x270 [ 585.250857] ? do_raw_spin_unlock+0x53/0x220 [ 585.250897] ? kobject_put+0xaa/0x260 [ 585.250950] device_add+0x32d/0x1830 [ 585.250997] ? __pfx_device_add+0x10/0x10 [ 585.251039] ? hci_debugfs_create_conn+0x10f/0x240 [ 585.251068] ? mgmt_send_event_skb+0x2f3/0x460 [ 585.251108] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 585.251145] hci_conn_add_sysfs+0x117/0x1c0 [ 585.251177] le_conn_complete_evt+0x1246/0x1e40 [ 585.251228] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 585.251279] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 585.251323] ? __asan_memcpy+0x3d/0x60 [ 585.251361] hci_le_meta_evt+0x34b/0x530 [ 585.251398] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 585.251444] hci_event_packet+0x66c/0x10e0 [ 585.251485] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 585.251523] ? __pfx_hci_event_packet+0x10/0x10 [ 585.251564] ? mark_held_locks+0x49/0x80 [ 585.251600] ? kcov_remote_start+0x2ce/0x5a0 [ 585.251652] hci_rx_work+0x65b/0x8b0 [ 585.251697] process_one_work+0x8e1/0x1960 [ 585.251751] ? __pfx_process_one_work+0x10/0x10 [ 585.251787] ? move_linked_works+0x172/0x270 [ 585.251838] ? assign_work+0x196/0x240 [ 585.251877] worker_thread+0x67e/0xe90 [ 585.251913] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 585.251962] ? __pfx_worker_thread+0x10/0x10 [ 585.252000] kthread+0x3c8/0x740 [ 585.252033] ? __pfx_kthread+0x10/0x10 [ 585.252064] ? ret_from_fork+0x79/0x7a0 [ 585.252091] ? lock_release+0xc8/0x270 [ 585.252126] ? __pfx_kthread+0x10/0x10 [ 585.252160] ret_from_fork+0x67a/0x7a0 [ 585.252187] ? __pfx_ret_from_fork+0x10/0x10 [ 585.252219] ? __switch_to+0x759/0x1030 [ 585.252255] ? __pfx_kthread+0x10/0x10 [ 585.252289] ret_from_fork_asm+0x1a/0x30 [ 585.252345] [ 585.256298] debugfs: '200' already exists in 'hci3' [ 585.256730] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.257011] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 585.257569] Bluetooth: hci2: failed to register connection device [ 585.257823] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 585.257839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.257848] Workqueue: hci3 hci_rx_work [ 585.257872] Call Trace: [ 585.257877] [ 585.257882] dump_stack_lvl+0xfa/0x120 [ 585.257898] sysfs_warn_dup+0x80/0xa0 [ 585.257912] sysfs_create_dir_ns+0x23b/0x2a0 [ 585.257924] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 585.257940] ? find_held_lock+0x2b/0x80 [ 585.257954] ? lock_release+0xc8/0x270 [ 585.257971] ? do_raw_spin_unlock+0x53/0x220 [ 585.257990] kobject_add_internal+0x24c/0x9a0 [ 585.258009] kobject_add+0x157/0x240 [ 585.258024] ? __pfx_kobject_add+0x10/0x10 [ 585.258038] ? lock_release+0xc8/0x270 [ 585.258054] ? do_raw_spin_unlock+0x53/0x220 [ 585.258072] ? kobject_put+0xaa/0x260 [ 585.258092] device_add+0x32d/0x1830 [ 585.258114] ? __pfx_device_add+0x10/0x10 [ 585.258133] ? hci_debugfs_create_conn+0x10f/0x240 [ 585.258147] ? mgmt_send_event_skb+0x2f3/0x460 [ 585.258165] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 585.258182] hci_conn_add_sysfs+0x117/0x1c0 [ 585.258197] le_conn_complete_evt+0x1246/0x1e40 06:39:56 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x1, @fixed, @none, @none}}}}, 0x22) [ 585.258232] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 585.258255] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 585.258274] ? __asan_memcpy+0x3d/0x60 [ 585.258293] hci_le_meta_evt+0x34b/0x530 [ 585.258309] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 585.258330] hci_event_packet+0x66c/0x10e0 [ 585.258348] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 585.258365] ? __pfx_hci_event_packet+0x10/0x10 [ 585.258383] ? mark_held_locks+0x49/0x80 [ 585.258399] ? kcov_remote_start+0x2ce/0x5a0 06:39:56 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x3, 0xc9, "1eb1b4", "8a05ad", "4d94b7", "fcee67", 0x6, 0x7, 0x80, 0x81, 0x39, 0x8, 0xe3, 0x9, 0x2000, 0x7ff}}}}, 0x20) syz_emit_vhci(0x0, 0x0) [ 585.258424] hci_rx_work+0x65b/0x8b0 [ 585.258444] process_one_work+0x8e1/0x1960 [ 585.258469] ? __pfx_process_one_work+0x10/0x10 [ 585.258485] ? move_linked_works+0x172/0x270 [ 585.258508] ? assign_work+0x196/0x240 [ 585.258525] worker_thread+0x67e/0xe90 [ 585.258542] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 585.258565] ? __pfx_worker_thread+0x10/0x10 [ 585.258582] kthread+0x3c8/0x740 [ 585.258597] ? __pfx_kthread+0x10/0x10 [ 585.258610] ? ret_from_fork+0x79/0x7a0 [ 585.258624] ? lock_release+0xc8/0x270 [ 585.258640] ? __pfx_kthread+0x10/0x10 [ 585.258655] ret_from_fork+0x67a/0x7a0 [ 585.258667] ? __pfx_ret_from_fork+0x10/0x10 [ 585.258681] ? __switch_to+0x759/0x1030 [ 585.258698] ? __pfx_kthread+0x10/0x10 [ 585.258713] ret_from_fork_asm+0x1a/0x30 [ 585.258738] [ 585.258780] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.261319] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 585.261448] Bluetooth: hci3: failed to register connection device [ 585.262208] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 585.340407] debugfs: '0' already exists in 'hci2' [ 585.340719] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 585.340743] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 585.340773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.340790] Workqueue: hci2 hci_rx_work [ 585.340830] Call Trace: 06:39:56 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}]}}]}}, 0x2e) [ 585.340839] [ 585.340848] dump_stack_lvl+0xfa/0x120 [ 585.340877] sysfs_warn_dup+0x80/0xa0 [ 585.340903] sysfs_create_dir_ns+0x23b/0x2a0 [ 585.340928] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 585.340960] ? find_held_lock+0x2b/0x80 [ 585.340987] ? lock_release+0xc8/0x270 [ 585.341021] ? do_raw_spin_unlock+0x53/0x220 [ 585.341059] kobject_add_internal+0x24c/0x9a0 [ 585.341097] kobject_add+0x157/0x240 [ 585.341127] ? __pfx_kobject_add+0x10/0x10 [ 585.341155] ? lock_release+0xc8/0x270 [ 585.341187] ? do_raw_spin_unlock+0x53/0x220 [ 585.341223] ? kobject_put+0xaa/0x260 [ 585.341263] device_add+0x32d/0x1830 [ 585.341305] ? __pfx_device_add+0x10/0x10 [ 585.341342] ? hci_debugfs_create_conn+0x10f/0x240 [ 585.341369] ? mgmt_send_event_skb+0x2f3/0x460 06:39:56 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 585.341404] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 585.341439] hci_conn_add_sysfs+0x117/0x1c0 [ 585.341467] le_conn_complete_evt+0x1246/0x1e40 [ 585.341512] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 585.341558] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 585.341597] ? __asan_memcpy+0x3d/0x60 [ 585.341631] hci_le_meta_evt+0x34b/0x530 [ 585.341664] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 585.341706] hci_event_packet+0x66c/0x10e0 [ 585.341743] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 585.341777] ? __pfx_hci_event_packet+0x10/0x10 [ 585.341813] ? mark_held_locks+0x49/0x80 [ 585.341845] ? kcov_remote_start+0x2ce/0x5a0 [ 585.341892] hci_rx_work+0x65b/0x8b0 [ 585.341933] process_one_work+0x8e1/0x1960 [ 585.341981] ? __pfx_process_one_work+0x10/0x10 [ 585.342012] ? move_linked_works+0x172/0x270 [ 585.342058] ? assign_work+0x196/0x240 [ 585.342092] worker_thread+0x67e/0xe90 [ 585.342125] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 585.342169] ? __pfx_worker_thread+0x10/0x10 [ 585.342202] kthread+0x3c8/0x740 [ 585.342245] ? __pfx_kthread+0x10/0x10 [ 585.342272] ? ret_from_fork+0x79/0x7a0 [ 585.342297] ? lock_release+0xc8/0x270 [ 585.342328] ? __pfx_kthread+0x10/0x10 [ 585.342359] ret_from_fork+0x67a/0x7a0 [ 585.342383] ? __pfx_ret_from_fork+0x10/0x10 [ 585.342411] ? __switch_to+0x759/0x1030 [ 585.342443] ? __pfx_kthread+0x10/0x10 [ 585.342474] ret_from_fork_asm+0x1a/0x30 [ 585.342524] [ 585.342609] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.342655] Bluetooth: hci2: failed to register connection device [ 585.342857] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 585.342916] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 585.373447] debugfs: '0' already exists in 'hci2' [ 585.373760] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 585.373784] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 585.373815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.373831] Workqueue: hci2 hci_rx_work [ 585.373871] Call Trace: [ 585.373880] [ 585.373890] dump_stack_lvl+0xfa/0x120 [ 585.373919] sysfs_warn_dup+0x80/0xa0 [ 585.373954] sysfs_create_dir_ns+0x23b/0x2a0 [ 585.373979] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 585.374002] ? find_held_lock+0x2b/0x80 [ 585.374029] ? lock_release+0xc8/0x270 [ 585.374062] ? do_raw_spin_unlock+0x53/0x220 [ 585.374101] kobject_add_internal+0x24c/0x9a0 [ 585.374139] kobject_add+0x157/0x240 [ 585.374169] ? __pfx_kobject_add+0x10/0x10 [ 585.374198] ? lock_release+0xc8/0x270 [ 585.374243] ? do_raw_spin_unlock+0x53/0x220 [ 585.374279] ? kobject_put+0xaa/0x260 [ 585.374320] device_add+0x32d/0x1830 [ 585.374363] ? __pfx_device_add+0x10/0x10 [ 585.374401] ? hci_debugfs_create_conn+0x10f/0x240 [ 585.374427] ? mgmt_send_event_skb+0x2f3/0x460 [ 585.374464] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 585.374498] hci_conn_add_sysfs+0x117/0x1c0 [ 585.374527] le_conn_complete_evt+0x1246/0x1e40 [ 585.374572] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 585.374619] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 585.374658] ? __asan_memcpy+0x3d/0x60 [ 585.374693] hci_le_meta_evt+0x34b/0x530 [ 585.374726] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 585.374767] hci_event_packet+0x66c/0x10e0 [ 585.374804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 585.374839] ? __pfx_hci_event_packet+0x10/0x10 [ 585.374875] ? mark_held_locks+0x49/0x80 [ 585.374908] ? kcov_remote_start+0x2ce/0x5a0 [ 585.374955] hci_rx_work+0x65b/0x8b0 [ 585.374996] process_one_work+0x8e1/0x1960 [ 585.375045] ? __pfx_process_one_work+0x10/0x10 [ 585.375077] ? move_linked_works+0x172/0x270 [ 585.375123] ? assign_work+0x196/0x240 [ 585.375158] worker_thread+0x67e/0xe90 [ 585.375191] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 585.375235] ? __pfx_worker_thread+0x10/0x10 [ 585.375270] kthread+0x3c8/0x740 [ 585.375299] ? __pfx_kthread+0x10/0x10 [ 585.375327] ? ret_from_fork+0x79/0x7a0 [ 585.375351] ? lock_release+0xc8/0x270 [ 585.375383] ? __pfx_kthread+0x10/0x10 [ 585.375414] ret_from_fork+0x67a/0x7a0 [ 585.375438] ? __pfx_ret_from_fork+0x10/0x10 [ 585.375467] ? __switch_to+0x759/0x1030 [ 585.375499] ? __pfx_kthread+0x10/0x10 [ 585.375530] ret_from_fork_asm+0x1a/0x30 [ 585.375580] [ 585.375681] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.375729] Bluetooth: hci2: failed to register connection device [ 585.386568] debugfs: '0' already exists in 'hci2' [ 585.386842] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 585.386863] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 585.386893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.386909] Workqueue: hci2 hci_rx_work [ 585.386950] Call Trace: [ 585.386958] [ 585.386968] dump_stack_lvl+0xfa/0x120 [ 585.386994] sysfs_warn_dup+0x80/0xa0 [ 585.387018] sysfs_create_dir_ns+0x23b/0x2a0 [ 585.387043] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 585.387065] ? find_held_lock+0x2b/0x80 [ 585.387092] ? lock_release+0xc8/0x270 [ 585.387124] ? do_raw_spin_unlock+0x53/0x220 [ 585.387162] kobject_add_internal+0x24c/0x9a0 [ 585.387199] kobject_add+0x157/0x240 [ 585.387230] ? __pfx_kobject_add+0x10/0x10 [ 585.387258] ? lock_release+0xc8/0x270 [ 585.387290] ? do_raw_spin_unlock+0x53/0x220 [ 585.387328] ? kobject_put+0xaa/0x260 [ 585.387369] device_add+0x32d/0x1830 [ 585.387409] ? __pfx_device_add+0x10/0x10 [ 585.387447] ? hci_debugfs_create_conn+0x10f/0x240 [ 585.387472] ? mgmt_send_event_skb+0x2f3/0x460 [ 585.387507] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 585.387541] hci_conn_add_sysfs+0x117/0x1c0 [ 585.387569] le_conn_complete_evt+0x1246/0x1e40 [ 585.387614] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 585.387661] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 585.387700] ? __asan_memcpy+0x3d/0x60 [ 585.387734] hci_le_meta_evt+0x34b/0x530 [ 585.387766] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 585.387807] hci_event_packet+0x66c/0x10e0 [ 585.387844] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 585.387879] ? __pfx_hci_event_packet+0x10/0x10 [ 585.387915] ? mark_held_locks+0x49/0x80 [ 585.387948] ? kcov_remote_start+0x2ce/0x5a0 [ 585.387994] hci_rx_work+0x65b/0x8b0 [ 585.388034] process_one_work+0x8e1/0x1960 [ 585.388081] ? __pfx_process_one_work+0x10/0x10 [ 585.388113] ? move_linked_works+0x172/0x270 [ 585.388159] ? assign_work+0x196/0x240 [ 585.388193] worker_thread+0x67e/0xe90 [ 585.388226] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 585.388268] ? __pfx_worker_thread+0x10/0x10 [ 585.388303] kthread+0x3c8/0x740 [ 585.388331] ? __pfx_kthread+0x10/0x10 [ 585.388359] ? ret_from_fork+0x79/0x7a0 [ 585.388382] ? lock_release+0xc8/0x270 [ 585.388414] ? __pfx_kthread+0x10/0x10 [ 585.388445] ret_from_fork+0x67a/0x7a0 [ 585.388469] ? __pfx_ret_from_fork+0x10/0x10 [ 585.388498] ? __switch_to+0x759/0x1030 [ 585.388529] ? __pfx_kthread+0x10/0x10 [ 585.388560] ret_from_fork_asm+0x1a/0x30 [ 585.388610] [ 585.388840] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.388885] Bluetooth: hci2: failed to register connection device [ 585.391736] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 585.392171] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 585.431367] debugfs: '0' already exists in 'hci5' [ 585.431678] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 585.431701] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 585.431731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.431748] Workqueue: hci5 hci_rx_work [ 585.431786] Call Trace: [ 585.431794] [ 585.431804] dump_stack_lvl+0xfa/0x120 [ 585.431832] sysfs_warn_dup+0x80/0xa0 [ 585.431857] sysfs_create_dir_ns+0x23b/0x2a0 [ 585.431882] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 585.431904] ? find_held_lock+0x2b/0x80 [ 585.431932] ? lock_release+0xc8/0x270 [ 585.431973] ? do_raw_spin_unlock+0x53/0x220 [ 585.432012] kobject_add_internal+0x24c/0x9a0 [ 585.432051] kobject_add+0x157/0x240 [ 585.432084] ? __pfx_kobject_add+0x10/0x10 [ 585.432115] ? lock_release+0xc8/0x270 [ 585.432147] ? do_raw_spin_unlock+0x53/0x220 [ 585.432184] ? kobject_put+0xaa/0x260 [ 585.432225] device_add+0x32d/0x1830 [ 585.432268] ? __pfx_device_add+0x10/0x10 [ 585.432307] ? hci_debugfs_create_conn+0x10f/0x240 [ 585.432332] ? mgmt_send_event_skb+0x2f3/0x460 [ 585.432368] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 585.432403] hci_conn_add_sysfs+0x117/0x1c0 [ 585.432432] le_conn_complete_evt+0x1246/0x1e40 [ 585.432478] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 585.432525] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 585.432565] ? __asan_memcpy+0x3d/0x60 [ 585.432599] hci_le_meta_evt+0x34b/0x530 [ 585.432633] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 585.432675] hci_event_packet+0x66c/0x10e0 [ 585.432713] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 585.432748] ? __pfx_hci_event_packet+0x10/0x10 [ 585.432784] ? mark_held_locks+0x49/0x80 [ 585.432817] ? kcov_remote_start+0x2ce/0x5a0 [ 585.432865] hci_rx_work+0x65b/0x8b0 [ 585.432907] process_one_work+0x8e1/0x1960 [ 585.432955] ? __pfx_process_one_work+0x10/0x10 [ 585.432988] ? move_linked_works+0x172/0x270 [ 585.433034] ? assign_work+0x196/0x240 [ 585.433069] worker_thread+0x67e/0xe90 [ 585.433104] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 585.433150] ? __pfx_worker_thread+0x10/0x10 [ 585.433185] kthread+0x3c8/0x740 [ 585.433215] ? __pfx_kthread+0x10/0x10 [ 585.433242] ? ret_from_fork+0x79/0x7a0 [ 585.433267] ? lock_release+0xc8/0x270 [ 585.433299] ? __pfx_kthread+0x10/0x10 [ 585.433331] ret_from_fork+0x67a/0x7a0 [ 585.433355] ? __pfx_ret_from_fork+0x10/0x10 [ 585.433384] ? __switch_to+0x759/0x1030 [ 585.433417] ? __pfx_kthread+0x10/0x10 [ 585.433448] ret_from_fork_asm+0x1a/0x30 [ 585.433500] [ 585.433604] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 585.433650] Bluetooth: hci5: failed to register connection device [ 585.625336] Bluetooth: hci5: command 0x0406 tx timeout [ 585.626393] Bluetooth: hci3: command 0x0406 tx timeout [ 585.689160] Bluetooth: hci6: command 0x0406 tx timeout [ 586.906873] Bluetooth: hci2: command 0x0406 tx timeout [ 587.673063] Bluetooth: hci3: command 0x0406 tx timeout [ 587.673987] Bluetooth: hci5: command 0x0406 tx timeout [ 587.737982] Bluetooth: hci6: command 0x0406 tx timeout [ 588.954393] Bluetooth: hci2: command 0x0406 tx timeout [ 589.721115] Bluetooth: hci5: command 0x0406 tx timeout [ 589.721133] Bluetooth: hci3: command 0x0406 tx timeout [ 589.785045] Bluetooth: hci6: command 0x0406 tx timeout [ 591.004144] Bluetooth: hci2: command 0x0406 tx timeout [ 591.769028] Bluetooth: hci3: command 0x0406 tx timeout [ 591.770079] Bluetooth: hci5: command 0x0406 tx timeout [ 591.833045] Bluetooth: hci6: command 0x0406 tx timeout [ 593.050175] Bluetooth: hci2: command 0x0406 tx timeout 06:40:04 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "c91e69", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:40:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xc3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x0, 0xd303, 0x1, 0x1, 0x1, [{0x7f, 0x5b3f, 0x1, '\x00', 0x1}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:40:04 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:04 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:04 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{}, {0xa000, 0x101}}}, 0x55) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@any, 0x80, 0x5, 0x1, "fbd8e8", 0x7fff, 0x20}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f, 0x6, 0x2, "061e60", 0x0, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x7, 0x5, ',6x', 0x0, 0x7}, {@none, 0x5, 0x9, 0x5, "fa7814", 0x2, 0x80}, {@none, 0x20, 0x3e, 0x5, "02b9f2", 0x9, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff, 0x80, 0xff, "a021d5", 0x0, 0x7}, {@none, 0x4, 0x8, 0x1f, "1ae30e", 0x1ff, 0x8}]}}}, 0x6d) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:40:04 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}]}}]}}, 0x2e) 06:40:04 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0x10, r1) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x4, 0x9, 0x20, 0x0, 0x2, 0x99180, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0x6}, 0x5904b, 0x200, 0x0, 0x9, 0x20200, 0x6, 0x2, 0x0, 0x7fffffff, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r0, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x20, 0x9, 0x5, 0x1, 0x0, 0x0, 0x2041, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x9, 0x800}, 0x9140, 0x9, 0x3, 0x5, 0xfff, 0x8, 0xe7, 0x0, 0x80, 0x0, 0x7}, r1, 0x9, r2, 0x3) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 06:40:04 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061080)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "26dbb28c343087"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062080)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000062280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "1bb05a59c8e09c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000064280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065680)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}, {r2, r3}, {}, {}, {}, {}, {}, {r5, r6}, {0x0, r7}], 0x7, "70c6d8b2c5d315"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005f080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000060080)={{0x0, 0x1f, 0x3, 0x5, 0x3, 0x0, 0x6, 0xffff, 0x5, 0x984, 0x800, 0x4, 0x6, 0x10001, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061080)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "26dbb28c343087"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062080)={0x0}) [ 593.674275] debugfs: '0' already exists in 'hci2' [ 593.674925] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 593.675704] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 593.675720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.675729] Workqueue: hci2 hci_rx_work [ 593.675754] Call Trace: [ 593.675759] [ 593.675765] dump_stack_lvl+0xfa/0x120 [ 593.675781] sysfs_warn_dup+0x80/0xa0 [ 593.675796] sysfs_create_dir_ns+0x23b/0x2a0 [ 593.675808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 593.675820] ? find_held_lock+0x2b/0x80 [ 593.675835] ? lock_release+0xc8/0x270 [ 593.675852] ? do_raw_spin_unlock+0x53/0x220 [ 593.675871] kobject_add_internal+0x24c/0x9a0 [ 593.675892] kobject_add+0x157/0x240 [ 593.675907] ? __pfx_kobject_add+0x10/0x10 [ 593.675921] ? lock_release+0xc8/0x270 [ 593.675941] ? do_raw_spin_unlock+0x53/0x220 [ 593.675960] ? kobject_put+0xaa/0x260 [ 593.675981] device_add+0x32d/0x1830 [ 593.676004] ? __pfx_device_add+0x10/0x10 [ 593.676023] ? hci_debugfs_create_conn+0x10f/0x240 [ 593.676037] ? mgmt_send_event_skb+0x2f3/0x460 [ 593.676056] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 593.676073] hci_conn_add_sysfs+0x117/0x1c0 [ 593.676089] le_conn_complete_evt+0x1246/0x1e40 [ 593.676112] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 593.676135] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 593.676155] ? __asan_memcpy+0x3d/0x60 [ 593.676174] hci_le_meta_evt+0x34b/0x530 [ 593.676191] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 593.676212] hci_event_packet+0x66c/0x10e0 [ 593.676231] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 593.676248] ? __pfx_hci_event_packet+0x10/0x10 [ 593.676267] ? mark_held_locks+0x49/0x80 [ 593.676283] ? kcov_remote_start+0x2ce/0x5a0 [ 593.676308] hci_rx_work+0x65b/0x8b0 [ 593.676329] process_one_work+0x8e1/0x1960 [ 593.676354] ? __pfx_process_one_work+0x10/0x10 [ 593.676370] ? move_linked_works+0x172/0x270 [ 593.676394] ? assign_work+0x196/0x240 [ 593.676411] worker_thread+0x67e/0xe90 [ 593.676428] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 593.676451] ? __pfx_worker_thread+0x10/0x10 [ 593.676468] kthread+0x3c8/0x740 [ 593.676484] ? __pfx_kthread+0x10/0x10 [ 593.676498] ? ret_from_fork+0x79/0x7a0 [ 593.676514] ? __pfx_kthread+0x10/0x10 [ 593.676529] ret_from_fork+0x67a/0x7a0 [ 593.676542] ? __pfx_ret_from_fork+0x10/0x10 [ 593.676553] ? save_fpregs_to_fpstate+0x145/0x270 [ 593.676570] ? __switch_to+0x759/0x1030 [ 593.676589] ? __pfx_kthread+0x10/0x10 [ 593.676604] ret_from_fork_asm+0x1a/0x30 [ 593.676631] [ 593.695359] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 593.696526] Bluetooth: hci2: failed to register connection device ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000062280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "1bb05a59c8e09c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000064280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065680)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {r9, r10}, {r12, r13}, {}, {}, {}, {}, {}, {r15, r16}, {0x0, r17}], 0x7, "70c6d8b2c5d315"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050d40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r16}], 0x3f, "a6f57a2c994c31"}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @remote, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00062dbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="140102803c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003000600000004000400080006005fe128e2393dbb6a962fb2742d16d2a90e3946f5f6d09c28b093ddf16fcf2dcc1ccbde848c2b1a6417826fe9ad91e8172d4b8b58c0a2f16df0f9f6d66cd7462806887b3896b062be5322c38caab3e7913a2d35b71e1e4b830d3dce1b27829bcad2ce222d2414cb3752080e2f1651369c0f62cf26bfac9cc6d98a95802bfdfef39f85", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000100ff3f05000000c10902030800000009004c12d7661372c60600040300000040000702e06900003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r18, @ANYBLOB], 0x130}, 0x1, 0x0, 0x0, 0x4044810}, 0x80) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffe0ffffffffff000000000000004e6183313fee8a3db9fe1eda77fb716693aed6217463263d6b31166707e41542866fa7b879da09fe89659198f731f46132494996db58537ac145"], 0x22) [ 593.714802] Bluetooth: hci3: unexpected event 0x01 length: 82 > 1 06:40:05 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xac0, 0x400) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fcdbdf250c0000003400018008000300000000001400020076657468315f6d6163767461700000001400020073797a6b616c6c657230000000000000f400038004000100100003800c000180080002002f27230008000200ff000000b40005000788bc228f5b61a0914ed8c733904f5177dd146d4e41998e8dc6c8f3cdb7cc9e51146ca1cfb27c36df5521af22b4bd461695e6bc46edd507f2c44be299c3a46d47eaaf08781fffee0df3ce562f6d6c4593e388d4ce18a76758b8ce492b2d2971860996ad8782bc97f4aca2b4ba16ce07eaa38c55caf214320ab347d67260a528e265009738648a01154af6375d524ed6ad37423c59ab4ecab06b29be58713a277063d2127cb1b470d8b9160c35c0485819ba3f1cb0cb40a1130d0004005f687bd07eba992de2000000080002000500000008000200f9ffffff6a3891a5f85638c117239e64e152f123c364d1360266e6cece504a67bd95bd1598d381b8314616cc044adf0580310c848807e062133ef36fc33be2feebca2bfd0198ec73b802d4252538e60debd4d7a46bca955c0cd1c9db5e783295cf1f19946b16d53f2234db732e8efa690e1c96cfc9e836042997523a417078055b219b64fc3faa"], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xfffffffffffffe63}, @l2cap_cid_signaling={{0x1d6}, [@l2cap_move_chan_rsp={{0xf, 0x7b, 0x4}, {0x4, 0x1}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0xffff, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0xb4, 0x4}}, @l2cap_info_rsp={{0xb, 0x4, 0xfc}, {0x80, 0x401, "59cb3cb4df10323fc107959a3cf93a8d99f07b57483eb6c53e827856b9b4c3922dac6ba0b02cecbf971b0a89e58b703086953558ac342dff76990016ea5ea4641aa94c65bfc3a9e49dcf954ae984189f8c7ca5ffba835feb73d7f75ba12b3c2f9739639b7bbb0f24c9f7e481eb4824824d5800e977e0155a7295321b5e14f36fa8a9016e62bb1035c6337f7cd26ebe0117fe230297d7fc276901a4ea57062fafd79ab118751495706d03b97ebb33e38e2826e04c57170fb4b3b5f35cdf41bddc8a135d66147480d3da81374ff80a76601bdc2ed36ab01a3df029da886a58bb6d486e5ac61ac699072e1c8a831f0a730acbc642359ae41a52"}}, @l2cap_info_rsp={{0xb, 0x6, 0x8c}, {0xbe4, 0x478, "6538538eb6d80d7dba6eab7157d6b4b4d1655164d813af33bc6c44c0a89095ed897eacc832d503f3eb6e5d389c772b244988afdb7f63fae33e38135a17c0f1014c52f2ad1e16ee34723fe0c3f3f0fcf6b9f7fbac15b0e8bd5fa6071e01c1a6883b85bbb3fdaae807e0522184f06d3904fd408a1e3db737726c668ff25b422bcddbcbc269177d7b72"}}, @l2cap_move_chan_rsp={{0xf, 0x7f, 0x4}, {0x9, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x8001, 0xffc1, 0xea, 0x1}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x2, 0xd8}}, @l2cap_conn_rsp={{0x3, 0x9, 0x8}, {0xb76f, 0xbc2b, 0xd85, 0x6}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x1ff, 0x6}}]}}, 0x1df) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x83}, @l2cap_cid_signaling={{0x7f}, [@l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x81, 0x8}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x1f, 0x40}}, @l2cap_conn_rsp={{0x3, 0x8d, 0x8}, {0x2, 0x5, 0x20, 0x1000}}, @l2cap_move_chan_req={{0xe, 0xff, 0x3}, {0x1, 0x40}}, @l2cap_info_rsp={{0xb, 0xa2, 0x58}, {0x3, 0xff, "f166ee989a7d77a5c13d4edc9faf1ea93c5833b009a07834c12ea97587807c667aa9dbb82a5b4e4862b4dbf0f12f85817da359cd922d0164adb883ff97c0fd0183c4e97ee3c737328dbc02b9857c01a332a9d5bf"}}]}}, 0x88) pipe2(&(0x7f0000000340), 0x80000) [ 593.715441] Bluetooth: hci3: unexpected event 0x01 length: 82 > 1 [ 593.741565] debugfs: '0' already exists in 'hci6' [ 593.743779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 593.745165] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 593.745210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.745234] Workqueue: hci6 hci_rx_work [ 593.745289] Call Trace: [ 593.745301] [ 593.745315] dump_stack_lvl+0xfa/0x120 [ 593.745354] sysfs_warn_dup+0x80/0xa0 [ 593.745389] sysfs_create_dir_ns+0x23b/0x2a0 [ 593.745427] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 593.745460] ? find_held_lock+0x2b/0x80 [ 593.745500] ? lock_release+0xc8/0x270 [ 593.745550] ? do_raw_spin_unlock+0x53/0x220 [ 593.745611] kobject_add_internal+0x24c/0x9a0 [ 593.745669] kobject_add+0x157/0x240 [ 593.745716] ? __pfx_kobject_add+0x10/0x10 [ 593.745761] ? lock_release+0xc8/0x270 [ 593.745809] ? do_raw_spin_unlock+0x53/0x220 [ 593.745864] ? kobject_put+0xaa/0x260 [ 593.745925] device_add+0x32d/0x1830 [ 593.745996] ? __pfx_device_add+0x10/0x10 [ 593.746049] ? hci_debugfs_create_conn+0x10f/0x240 [ 593.746087] ? mgmt_send_event_skb+0x2f3/0x460 [ 593.746142] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 593.746194] hci_conn_add_sysfs+0x117/0x1c0 [ 593.746238] le_conn_complete_evt+0x1246/0x1e40 [ 593.746303] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 593.746383] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 593.746443] ? __asan_memcpy+0x3d/0x60 [ 593.746497] hci_le_meta_evt+0x34b/0x530 [ 593.746549] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 593.746613] hci_event_packet+0x66c/0x10e0 [ 593.746670] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 593.746726] ? __pfx_hci_event_packet+0x10/0x10 [ 593.746784] ? mark_held_locks+0x49/0x80 [ 593.746833] ? kcov_remote_start+0x2ce/0x5a0 [ 593.746901] hci_rx_work+0x65b/0x8b0 [ 593.746963] process_one_work+0x8e1/0x1960 [ 593.747032] ? __pfx_process_one_work+0x10/0x10 [ 593.747080] ? move_linked_works+0x172/0x270 [ 593.747149] ? assign_work+0x196/0x240 [ 593.747202] worker_thread+0x67e/0xe90 [ 593.747254] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 593.747322] ? __pfx_worker_thread+0x10/0x10 [ 593.747376] kthread+0x3c8/0x740 [ 593.747422] ? __pfx_kthread+0x10/0x10 [ 593.747465] ? ret_from_fork+0x79/0x7a0 [ 593.747501] ? lock_release+0xc8/0x270 [ 593.747548] ? __pfx_kthread+0x10/0x10 [ 593.747595] ret_from_fork+0x67a/0x7a0 [ 593.747634] ? __pfx_ret_from_fork+0x10/0x10 [ 593.747673] ? __switch_to+0x759/0x1030 [ 593.747723] ? __pfx_kthread+0x10/0x10 [ 593.747774] ret_from_fork_asm+0x1a/0x30 [ 593.747846] [ 593.786181] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 593.790171] Bluetooth: hci6: failed to register connection device 06:40:05 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:05 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 593.817178] Bluetooth: hci3: command 0x0406 tx timeout [ 593.817637] Bluetooth: hci5: command 0x0406 tx timeout [ 593.823599] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 593.825426] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 593.827885] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 593.829221] Bluetooth: hci2: ACL packet for unknown connection handle 201 06:40:05 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x8, 0x1}, {0x16, 0x3}, 0x6, 0x2, 0xeb}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="063e9c7dea46b9442bf36ed31ed764634a2ffc836dc7b5b6f61f0a00000000"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 06:40:05 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}]}}]}}, 0x2e) [ 593.881014] Bluetooth: hci6: command 0x0406 tx timeout 06:40:05 executing program 4: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40481040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @any, @none}}}}, 0x22) 06:40:05 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @any, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}}, 0x22) 06:40:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x2, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000, 0x6}, {&(0x7f0000000200)="2145696a9561a7efbe31b7c5386c3a359a64ee9a66bb411eb2bb2c7f4b18430948bea984", 0x24, 0x5}], 0x201000, &(0x7f0000000340)=ANY=[@ANYBLOB="6f626a5f726f6c6572652c484d6a5f747970653d2c666f776e65723c00000000000000000000000000665d2943a22e0a3c16a66f74310319018379f8957b7f", @ANYRESDEC=0xee00, @ANYBLOB=',obj_user=-,smackfsdef=\x00,dont_hash,fscontext=root,\x00']) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) write$tcp_mem(r3, &(0x7f0000000000)={0x6c1d, 0x20, 0x800, 0x20, 0x2}, 0x48) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000300)) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) lremovexattr(0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f0000000280)) 06:40:05 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 593.935629] debugfs: '0' already exists in 'hci5' [ 593.937162] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 593.940054] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 593.940086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.940103] Workqueue: hci5 hci_rx_work [ 593.940144] Call Trace: [ 593.940152] [ 593.940163] dump_stack_lvl+0xfa/0x120 [ 593.940191] sysfs_warn_dup+0x80/0xa0 [ 593.940218] sysfs_create_dir_ns+0x23b/0x2a0 [ 593.940242] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 593.940265] ? find_held_lock+0x2b/0x80 [ 593.940293] ? lock_release+0xc8/0x270 [ 593.940327] ? do_raw_spin_unlock+0x53/0x220 [ 593.940366] kobject_add_internal+0x24c/0x9a0 [ 593.940404] kobject_add+0x157/0x240 [ 593.940435] ? __pfx_kobject_add+0x10/0x10 [ 593.940463] ? lock_release+0xc8/0x270 [ 593.940496] ? do_raw_spin_unlock+0x53/0x220 [ 593.940532] ? kobject_put+0xaa/0x260 [ 593.940575] device_add+0x32d/0x1830 [ 593.940618] ? __pfx_device_add+0x10/0x10 [ 593.940657] ? hci_debugfs_create_conn+0x10f/0x240 [ 593.940683] ? mgmt_send_event_skb+0x2f3/0x460 [ 593.940719] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 593.940754] hci_conn_add_sysfs+0x117/0x1c0 [ 593.940784] le_conn_complete_evt+0x1246/0x1e40 [ 593.940836] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 593.940885] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 593.940925] ? __asan_memcpy+0x3d/0x60 [ 593.940967] hci_le_meta_evt+0x34b/0x530 [ 593.941000] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 593.941042] hci_event_packet+0x66c/0x10e0 [ 593.941080] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 593.941117] ? __pfx_hci_event_packet+0x10/0x10 [ 593.941153] ? mark_held_locks+0x49/0x80 [ 593.941186] ? kcov_remote_start+0x2ce/0x5a0 [ 593.941235] hci_rx_work+0x65b/0x8b0 [ 593.941277] process_one_work+0x8e1/0x1960 [ 593.941328] ? __pfx_process_one_work+0x10/0x10 [ 593.941360] ? move_linked_works+0x172/0x270 [ 593.941407] ? assign_work+0x196/0x240 [ 593.941443] worker_thread+0x67e/0xe90 [ 593.941476] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 593.941521] ? __pfx_worker_thread+0x10/0x10 [ 593.941556] kthread+0x3c8/0x740 [ 593.941586] ? __pfx_kthread+0x10/0x10 [ 593.941613] ? ret_from_fork+0x79/0x7a0 [ 593.941637] ? lock_release+0xc8/0x270 [ 593.941670] ? __pfx_kthread+0x10/0x10 [ 593.941701] ret_from_fork+0x67a/0x7a0 [ 593.941726] ? __pfx_ret_from_fork+0x10/0x10 [ 593.941755] ? __switch_to+0x759/0x1030 [ 593.941788] ? __pfx_kthread+0x10/0x10 [ 593.941820] ret_from_fork_asm+0x1a/0x30 [ 593.941873] [ 593.976931] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 593.983864] Bluetooth: hci5: failed to register connection device [ 594.009428] debugfs: '0' already exists in 'hci6' [ 594.010566] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 594.011931] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 594.011968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.011985] Workqueue: hci6 hci_rx_work [ 594.012023] Call Trace: [ 594.012032] [ 594.012042] dump_stack_lvl+0xfa/0x120 [ 594.012068] sysfs_warn_dup+0x80/0xa0 [ 594.012094] sysfs_create_dir_ns+0x23b/0x2a0 [ 594.012119] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 594.012141] ? find_held_lock+0x2b/0x80 [ 594.012168] ? lock_release+0xc8/0x270 [ 594.012200] ? do_raw_spin_unlock+0x53/0x220 [ 594.012238] kobject_add_internal+0x24c/0x9a0 [ 594.012275] kobject_add+0x157/0x240 [ 594.012306] ? __pfx_kobject_add+0x10/0x10 [ 594.012334] ? lock_release+0xc8/0x270 [ 594.012365] ? do_raw_spin_unlock+0x53/0x220 [ 594.012401] ? kobject_put+0xaa/0x260 [ 594.012442] device_add+0x32d/0x1830 [ 594.012483] ? __pfx_device_add+0x10/0x10 [ 594.012521] ? hci_debugfs_create_conn+0x10f/0x240 [ 594.012547] ? mgmt_send_event_skb+0x2f3/0x460 [ 594.012583] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 594.012617] hci_conn_add_sysfs+0x117/0x1c0 [ 594.012645] le_conn_complete_evt+0x1246/0x1e40 [ 594.012690] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 594.012736] hci_le_enh_conn_complete_evt+0x22f/0x2e0 06:40:05 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x8c) [ 594.012774] ? __asan_memcpy+0x3d/0x60 [ 594.012809] hci_le_meta_evt+0x34b/0x530 [ 594.012841] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 594.012882] hci_event_packet+0x66c/0x10e0 [ 594.012919] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 594.012954] ? __pfx_hci_event_packet+0x10/0x10 [ 594.012990] ? mark_held_locks+0x49/0x80 [ 594.013023] ? kcov_remote_start+0x2ce/0x5a0 [ 594.013069] hci_rx_work+0x65b/0x8b0 [ 594.013110] process_one_work+0x8e1/0x1960 [ 594.013157] ? __pfx_process_one_work+0x10/0x10 [ 594.013189] ? move_linked_works+0x172/0x270 [ 594.013234] ? assign_work+0x196/0x240 [ 594.013269] worker_thread+0x67e/0xe90 [ 594.013302] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 594.013345] ? __pfx_worker_thread+0x10/0x10 [ 594.013379] kthread+0x3c8/0x740 [ 594.013408] ? __pfx_kthread+0x10/0x10 [ 594.013435] ? ret_from_fork+0x79/0x7a0 [ 594.013459] ? lock_release+0xc8/0x270 [ 594.013491] ? __pfx_kthread+0x10/0x10 [ 594.013522] ret_from_fork+0x67a/0x7a0 [ 594.013546] ? __pfx_ret_from_fork+0x10/0x10 [ 594.013574] ? __switch_to+0x759/0x1030 [ 594.013606] ? __pfx_kthread+0x10/0x10 [ 594.013637] ret_from_fork_asm+0x1a/0x30 [ 594.013688] [ 594.039212] debugfs: '0' already exists in 'hci2' [ 594.039473] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 594.039838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 594.040681] Bluetooth: hci6: failed to register connection device [ 594.041067] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 594.041085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.041095] Workqueue: hci2 hci_rx_work [ 594.041120] Call Trace: [ 594.041125] [ 594.041131] dump_stack_lvl+0xfa/0x120 [ 594.041147] sysfs_warn_dup+0x80/0xa0 [ 594.041162] sysfs_create_dir_ns+0x23b/0x2a0 [ 594.041174] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 594.041186] ? find_held_lock+0x2b/0x80 [ 594.041201] ? lock_release+0xc8/0x270 [ 594.041218] ? do_raw_spin_unlock+0x53/0x220 [ 594.041237] kobject_add_internal+0x24c/0x9a0 [ 594.041257] kobject_add+0x157/0x240 [ 594.041272] ? __pfx_kobject_add+0x10/0x10 [ 594.041287] ? lock_release+0xc8/0x270 [ 594.041303] ? do_raw_spin_unlock+0x53/0x220 [ 594.041321] ? kobject_put+0xaa/0x260 [ 594.041342] device_add+0x32d/0x1830 [ 594.041365] ? __pfx_device_add+0x10/0x10 [ 594.041384] ? hci_debugfs_create_conn+0x10f/0x240 [ 594.041399] ? mgmt_send_event_skb+0x2f3/0x460 [ 594.041418] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 594.041435] hci_conn_add_sysfs+0x117/0x1c0 [ 594.041450] le_conn_complete_evt+0x1246/0x1e40 [ 594.041474] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 594.041497] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 594.041516] ? __asan_memcpy+0x3d/0x60 [ 594.041535] hci_le_meta_evt+0x34b/0x530 [ 594.041553] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 594.041574] hci_event_packet+0x66c/0x10e0 [ 594.041593] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 594.041610] ? __pfx_hci_event_packet+0x10/0x10 [ 594.041628] ? mark_held_locks+0x49/0x80 [ 594.041645] ? kcov_remote_start+0x2ce/0x5a0 [ 594.041670] hci_rx_work+0x65b/0x8b0 [ 594.041690] process_one_work+0x8e1/0x1960 [ 594.041716] ? __pfx_process_one_work+0x10/0x10 [ 594.041732] ? move_linked_works+0x172/0x270 [ 594.041756] ? assign_work+0x196/0x240 [ 594.041774] worker_thread+0x67e/0xe90 [ 594.041791] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 594.041814] ? __pfx_worker_thread+0x10/0x10 [ 594.041831] kthread+0x3c8/0x740 [ 594.041847] ? __pfx_kthread+0x10/0x10 [ 594.041861] ? ret_from_fork+0x79/0x7a0 [ 594.041875] ? lock_release+0xc8/0x270 [ 594.041891] ? __pfx_kthread+0x10/0x10 [ 594.041907] ret_from_fork+0x67a/0x7a0 [ 594.041919] ? __pfx_ret_from_fork+0x10/0x10 [ 594.041939] ? __switch_to+0x759/0x1030 [ 594.041959] ? __pfx_kthread+0x10/0x10 [ 594.041974] ret_from_fork_asm+0x1a/0x30 [ 594.042000] [ 594.042040] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 594.042842] debugfs: '0' already exists in 'hci6' [ 594.042924] Bluetooth: hci2: failed to register connection device [ 594.043819] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 594.044485] debugfs: '0' already exists in 'hci2' [ 594.044820] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 594.044851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.044867] Workqueue: hci6 hci_rx_work [ 594.044902] Call Trace: [ 594.044910] [ 594.044920] dump_stack_lvl+0xfa/0x120 [ 594.044952] sysfs_warn_dup+0x80/0xa0 [ 594.044977] sysfs_create_dir_ns+0x23b/0x2a0 [ 594.045001] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 594.045023] ? find_held_lock+0x2b/0x80 [ 594.045049] ? lock_release+0xc8/0x270 [ 594.045081] ? do_raw_spin_unlock+0x53/0x220 [ 594.045119] kobject_add_internal+0x24c/0x9a0 [ 594.045155] kobject_add+0x157/0x240 [ 594.045186] ? __pfx_kobject_add+0x10/0x10 [ 594.045214] ? lock_release+0xc8/0x270 [ 594.045245] ? do_raw_spin_unlock+0x53/0x220 [ 594.045282] ? kobject_put+0xaa/0x260 [ 594.045325] device_add+0x32d/0x1830 [ 594.045366] ? __pfx_device_add+0x10/0x10 [ 594.045403] ? hci_debugfs_create_conn+0x10f/0x240 [ 594.045429] ? mgmt_send_event_skb+0x2f3/0x460 [ 594.045463] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 594.045497] hci_conn_add_sysfs+0x117/0x1c0 [ 594.045525] le_conn_complete_evt+0x1246/0x1e40 [ 594.045569] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 594.045615] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 594.045654] ? __asan_memcpy+0x3d/0x60 [ 594.045687] hci_le_meta_evt+0x34b/0x530 [ 594.045720] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 594.045761] hci_event_packet+0x66c/0x10e0 [ 594.045798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 594.045832] ? __pfx_hci_event_packet+0x10/0x10 [ 594.045867] ? mark_held_locks+0x49/0x80 [ 594.045899] ? kcov_remote_start+0x2ce/0x5a0 [ 594.045945] hci_rx_work+0x65b/0x8b0 [ 594.045986] process_one_work+0x8e1/0x1960 [ 594.046033] ? __pfx_process_one_work+0x10/0x10 [ 594.046064] ? move_linked_works+0x172/0x270 [ 594.046109] ? assign_work+0x196/0x240 [ 594.046145] worker_thread+0x67e/0xe90 [ 594.046178] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 594.046221] ? __pfx_worker_thread+0x10/0x10 [ 594.046254] kthread+0x3c8/0x740 [ 594.046283] ? __pfx_kthread+0x10/0x10 [ 594.046310] ? ret_from_fork+0x79/0x7a0 [ 594.046334] ? lock_release+0xc8/0x270 [ 594.046377] ? __pfx_kthread+0x10/0x10 [ 594.046407] ret_from_fork+0x67a/0x7a0 [ 594.046432] ? __pfx_ret_from_fork+0x10/0x10 [ 594.046460] ? __switch_to+0x759/0x1030 [ 594.046492] ? __pfx_kthread+0x10/0x10 [ 594.046522] ret_from_fork_asm+0x1a/0x30 [ 594.046572] [ 594.046765] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 594.047870] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 594.049023] Bluetooth: hci6: failed to register connection device [ 594.049493] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 594.049510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.049517] Workqueue: hci2 hci_rx_work [ 594.049535] Call Trace: [ 594.049539] [ 594.049544] dump_stack_lvl+0xfa/0x120 [ 594.049556] sysfs_warn_dup+0x80/0xa0 [ 594.049568] sysfs_create_dir_ns+0x23b/0x2a0 [ 594.049580] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 594.049592] ? find_held_lock+0x2b/0x80 [ 594.049604] ? lock_release+0xc8/0x270 [ 594.049621] ? do_raw_spin_unlock+0x53/0x220 [ 594.049640] kobject_add_internal+0x24c/0x9a0 [ 594.049658] kobject_add+0x157/0x240 [ 594.049673] ? __pfx_kobject_add+0x10/0x10 [ 594.049688] ? lock_release+0xc8/0x270 [ 594.049704] ? do_raw_spin_unlock+0x53/0x220 [ 594.049723] ? kobject_put+0xaa/0x260 [ 594.049743] device_add+0x32d/0x1830 [ 594.049763] ? __pfx_device_add+0x10/0x10 [ 594.049782] ? hci_debugfs_create_conn+0x10f/0x240 [ 594.049794] ? mgmt_send_event_skb+0x2f3/0x460 [ 594.049812] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 594.049830] hci_conn_add_sysfs+0x117/0x1c0 [ 594.049844] le_conn_complete_evt+0x1246/0x1e40 [ 594.049866] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 594.049889] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 594.049908] ? __asan_memcpy+0x3d/0x60 [ 594.049925] hci_le_meta_evt+0x34b/0x530 [ 594.049946] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 594.049966] hci_event_packet+0x66c/0x10e0 [ 594.049985] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 594.050002] ? __pfx_hci_event_packet+0x10/0x10 [ 594.050020] ? mark_held_locks+0x49/0x80 [ 594.050036] ? kcov_remote_start+0x2ce/0x5a0 [ 594.050059] hci_rx_work+0x65b/0x8b0 [ 594.050079] process_one_work+0x8e1/0x1960 [ 594.050102] ? __pfx_process_one_work+0x10/0x10 [ 594.050118] ? move_linked_works+0x172/0x270 [ 594.050141] ? assign_work+0x196/0x240 [ 594.050158] worker_thread+0x67e/0xe90 [ 594.050175] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 594.050196] ? __pfx_worker_thread+0x10/0x10 [ 594.050213] kthread+0x3c8/0x740 [ 594.050227] ? __pfx_kthread+0x10/0x10 [ 594.050241] ? ret_from_fork+0x79/0x7a0 [ 594.050252] ? lock_release+0xc8/0x270 [ 594.050268] ? __pfx_kthread+0x10/0x10 [ 594.050284] ret_from_fork+0x67a/0x7a0 [ 594.050296] ? __pfx_ret_from_fork+0x10/0x10 [ 594.050311] ? __switch_to+0x759/0x1030 [ 594.050326] ? __pfx_kthread+0x10/0x10 [ 594.050342] ret_from_fork_asm+0x1a/0x30 [ 594.050380] [ 594.050416] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 594.085620] loop3: detected capacity change from 0 to 8 [ 594.086059] Bluetooth: hci2: failed to register connection device [ 594.214484] debugfs: '0' already exists in 'hci3' [ 594.215096] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 594.215767] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 594.215783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.215791] Workqueue: hci3 hci_rx_work [ 594.215813] Call Trace: [ 594.215817] [ 594.215822] dump_stack_lvl+0xfa/0x120 [ 594.215837] sysfs_warn_dup+0x80/0xa0 [ 594.215852] sysfs_create_dir_ns+0x23b/0x2a0 [ 594.215864] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 594.215876] ? find_held_lock+0x2b/0x80 [ 594.215890] ? lock_release+0xc8/0x270 [ 594.215906] ? do_raw_spin_unlock+0x53/0x220 [ 594.215926] kobject_add_internal+0x24c/0x9a0 [ 594.215949] kobject_add+0x157/0x240 [ 594.215965] ? __pfx_kobject_add+0x10/0x10 [ 594.215979] ? lock_release+0xc8/0x270 [ 594.215996] ? do_raw_spin_unlock+0x53/0x220 [ 594.216014] ? kobject_put+0xaa/0x260 [ 594.216034] device_add+0x32d/0x1830 [ 594.216056] ? __pfx_device_add+0x10/0x10 [ 594.216076] ? hci_debugfs_create_conn+0x10f/0x240 [ 594.216089] ? mgmt_send_event_skb+0x2f3/0x460 [ 594.216108] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 594.216125] hci_conn_add_sysfs+0x117/0x1c0 [ 594.216140] le_conn_complete_evt+0x1246/0x1e40 [ 594.216163] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 594.216186] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 594.216207] ? __asan_memcpy+0x3d/0x60 [ 594.216224] hci_le_meta_evt+0x34b/0x530 [ 594.216240] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 594.216261] hci_event_packet+0x66c/0x10e0 [ 594.216279] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 594.216297] ? __pfx_hci_event_packet+0x10/0x10 [ 594.216315] ? mark_held_locks+0x49/0x80 [ 594.216331] ? kcov_remote_start+0x2ce/0x5a0 [ 594.216355] hci_rx_work+0x65b/0x8b0 [ 594.216375] process_one_work+0x8e1/0x1960 [ 594.216400] ? __pfx_process_one_work+0x10/0x10 [ 594.216416] ? move_linked_works+0x172/0x270 [ 594.216439] ? assign_work+0x196/0x240 [ 594.216456] worker_thread+0x67e/0xe90 [ 594.216473] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 594.216495] ? __pfx_worker_thread+0x10/0x10 [ 594.216513] kthread+0x3c8/0x740 [ 594.216527] ? __pfx_kthread+0x10/0x10 [ 594.216541] ? ret_from_fork+0x79/0x7a0 [ 594.216554] ? lock_release+0xc8/0x270 [ 594.216569] ? __pfx_kthread+0x10/0x10 [ 594.216585] ret_from_fork+0x67a/0x7a0 [ 594.216597] ? __pfx_ret_from_fork+0x10/0x10 [ 594.216612] ? __switch_to+0x759/0x1030 [ 594.216630] ? __pfx_kthread+0x10/0x10 [ 594.216646] ret_from_fork_asm+0x1a/0x30 [ 594.216672] [ 594.234860] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 594.235901] Bluetooth: hci3: failed to register connection device [ 594.240851] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 594.242929] debugfs: '0' already exists in 'hci3' [ 594.243481] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 594.244171] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 594.244186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.244193] Workqueue: hci3 hci_rx_work [ 594.244211] Call Trace: [ 594.244215] [ 594.244220] dump_stack_lvl+0xfa/0x120 [ 594.244233] sysfs_warn_dup+0x80/0xa0 [ 594.244245] sysfs_create_dir_ns+0x23b/0x2a0 [ 594.244257] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 594.244268] ? find_held_lock+0x2b/0x80 [ 594.244281] ? lock_release+0xc8/0x270 [ 594.244297] ? do_raw_spin_unlock+0x53/0x220 [ 594.244316] kobject_add_internal+0x24c/0x9a0 [ 594.244335] kobject_add+0x157/0x240 [ 594.244350] ? __pfx_kobject_add+0x10/0x10 [ 594.244364] ? lock_release+0xc8/0x270 [ 594.244380] ? do_raw_spin_unlock+0x53/0x220 [ 594.244398] ? kobject_put+0xaa/0x260 [ 594.244418] device_add+0x32d/0x1830 [ 594.244438] ? __pfx_device_add+0x10/0x10 [ 594.244457] ? hci_debugfs_create_conn+0x10f/0x240 [ 594.244469] ? mgmt_send_event_skb+0x2f3/0x460 [ 594.244487] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 594.244504] hci_conn_add_sysfs+0x117/0x1c0 [ 594.244518] le_conn_complete_evt+0x1246/0x1e40 [ 594.244540] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 594.244563] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 594.244582] ? __asan_memcpy+0x3d/0x60 [ 594.244599] hci_le_meta_evt+0x34b/0x530 [ 594.244615] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 594.244636] hci_event_packet+0x66c/0x10e0 [ 594.244654] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 594.244672] ? __pfx_hci_event_packet+0x10/0x10 [ 594.244690] ? mark_held_locks+0x49/0x80 [ 594.244706] ? kcov_remote_start+0x2ce/0x5a0 [ 594.244729] hci_rx_work+0x65b/0x8b0 [ 594.244749] process_one_work+0x8e1/0x1960 [ 594.244773] ? __pfx_process_one_work+0x10/0x10 [ 594.244789] ? move_linked_works+0x172/0x270 [ 594.244812] ? assign_work+0x196/0x240 [ 594.244829] worker_thread+0x67e/0xe90 [ 594.244846] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 594.244867] ? __pfx_worker_thread+0x10/0x10 [ 594.244884] kthread+0x3c8/0x740 [ 594.244899] ? __pfx_kthread+0x10/0x10 [ 594.244912] ? ret_from_fork+0x79/0x7a0 [ 594.244924] ? lock_release+0xc8/0x270 [ 594.244944] ? __pfx_kthread+0x10/0x10 [ 594.244959] ret_from_fork+0x67a/0x7a0 [ 594.244972] ? __pfx_ret_from_fork+0x10/0x10 [ 594.244986] ? __switch_to+0x759/0x1030 [ 594.245002] ? __pfx_kthread+0x10/0x10 [ 594.245017] ret_from_fork_asm+0x1a/0x30 [ 594.245043] [ 594.263524] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 594.264619] Bluetooth: hci3: failed to register connection device [ 594.265744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 595.098637] Bluetooth: hci2: command 0x0406 tx timeout [ 595.865029] Bluetooth: hci5: command 0x0406 tx timeout [ 595.865547] Bluetooth: hci3: command 0x0406 tx timeout [ 595.930024] Bluetooth: hci6: command 0x0406 tx timeout [ 597.146159] Bluetooth: hci2: command 0x0406 tx timeout [ 597.913221] Bluetooth: hci5: command 0x0406 tx timeout [ 597.914357] Bluetooth: hci3: command 0x0406 tx timeout [ 597.977056] Bluetooth: hci6: command 0x0406 tx timeout [ 599.196191] Bluetooth: hci2: command 0x0406 tx timeout [ 599.961154] Bluetooth: hci5: command 0x0406 tx timeout [ 599.962264] Bluetooth: hci3: command 0x0406 tx timeout [ 600.025036] Bluetooth: hci6: command 0x0406 tx timeout [ 601.242173] Bluetooth: hci2: command 0x0406 tx timeout [ 602.009065] Bluetooth: hci3: command 0x0406 tx timeout [ 602.009120] Bluetooth: hci5: command 0x0406 tx timeout [ 602.073101] Bluetooth: hci6: command 0x0406 tx timeout 06:40:14 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffff0e75ffffffff00000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) 06:40:14 executing program 5: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='uid_map\x00') r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9b, 0x40, 0x8, 0x7, 0x0, 0x20, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x27, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x40040, 0x4, 0x5, 0x3, 0x3, 0x6, 0xcc, 0x0, 0x7fffffff}, r0, 0x7, r1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x23, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff9e3, 0x2, @perf_config_ext={0x1, 0x8}, 0x2080, 0x62, 0xebee, 0x4, 0x763bdaa, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r2, 0x1) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x6, @any, 0xf73}, 0xe) close_range(r3, 0xffffffffffffffff, 0x0) 06:40:14 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2}]}}]}}, 0x32) 06:40:14 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:14 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="243e1f0a0000000000aaaaaaaaaa00ffffffffffff12000000ffff00000000000000"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x2a}, {0x20, 0xc8, 0x8}}}, 0x7) 06:40:14 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a00f4000000aaaaaaaaaa00efffffff000000000000e10000000000000000d94a5a0a01feffffffffffffee637f"], 0x22) 06:40:14 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/229, 0xe5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0xfff}, 0x1c) lremovexattr(0x0, 0x0) [ 603.233151] debugfs: '244' already exists in 'hci2' [ 603.234461] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:244' [ 603.236196] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 603.236232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.236250] Workqueue: hci2 hci_rx_work [ 603.236293] Call Trace: [ 603.236302] [ 603.236314] dump_stack_lvl+0xfa/0x120 [ 603.236344] sysfs_warn_dup+0x80/0xa0 [ 603.236373] sysfs_create_dir_ns+0x23b/0x2a0 [ 603.236400] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 603.236425] ? find_held_lock+0x2b/0x80 [ 603.236455] ? lock_release+0xc8/0x270 [ 603.236491] ? do_raw_spin_unlock+0x53/0x220 [ 603.236534] kobject_add_internal+0x24c/0x9a0 [ 603.236576] kobject_add+0x157/0x240 [ 603.236610] ? __pfx_kobject_add+0x10/0x10 [ 603.236645] ? lock_release+0xc8/0x270 [ 603.236680] ? do_raw_spin_unlock+0x53/0x220 [ 603.236720] ? kobject_put+0xaa/0x260 [ 603.236765] device_add+0x32d/0x1830 [ 603.236811] ? __pfx_device_add+0x10/0x10 [ 603.236853] ? hci_debugfs_create_conn+0x10f/0x240 [ 603.236882] ? mgmt_send_event_skb+0x2f3/0x460 [ 603.236922] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 603.236969] hci_conn_add_sysfs+0x117/0x1c0 [ 603.237001] le_conn_complete_evt+0x1246/0x1e40 [ 603.237051] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 603.237102] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 603.237145] ? __asan_memcpy+0x3d/0x60 [ 603.237183] hci_le_meta_evt+0x34b/0x530 [ 603.237219] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 603.237265] hci_event_packet+0x66c/0x10e0 [ 603.237306] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 603.237344] ? __pfx_hci_event_packet+0x10/0x10 [ 603.237384] ? mark_held_locks+0x49/0x80 [ 603.237420] ? kcov_remote_start+0x2ce/0x5a0 [ 603.237472] hci_rx_work+0x65b/0x8b0 [ 603.237517] process_one_work+0x8e1/0x1960 [ 603.237570] ? __pfx_process_one_work+0x10/0x10 [ 603.237606] ? move_linked_works+0x172/0x270 [ 603.237656] ? assign_work+0x196/0x240 [ 603.237694] worker_thread+0x67e/0xe90 [ 603.237731] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 603.237779] ? __pfx_worker_thread+0x10/0x10 [ 603.237817] kthread+0x3c8/0x740 [ 603.237850] ? __pfx_kthread+0x10/0x10 [ 603.237879] ? ret_from_fork+0x79/0x7a0 [ 603.237906] ? lock_release+0xc8/0x270 [ 603.237941] ? __pfx_kthread+0x10/0x10 [ 603.237975] ret_from_fork+0x67a/0x7a0 [ 603.238003] ? __pfx_ret_from_fork+0x10/0x10 [ 603.238034] ? __switch_to+0x759/0x1030 [ 603.238069] ? __pfx_kthread+0x10/0x10 [ 603.238104] ret_from_fork_asm+0x1a/0x30 [ 603.238161] [ 603.275532] kobject: kobject_add_internal failed for hci2:244 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.277465] Bluetooth: hci2: failed to register connection device [ 603.291284] Bluetooth: hci2: command 0x0406 tx timeout [ 603.299569] debugfs: '0' already exists in 'hci3' [ 603.300992] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 603.302232] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 603.302260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.302275] Workqueue: hci3 hci_rx_work [ 603.302309] Call Trace: [ 603.302317] [ 603.302326] dump_stack_lvl+0xfa/0x120 [ 603.302350] sysfs_warn_dup+0x80/0xa0 [ 603.302374] sysfs_create_dir_ns+0x23b/0x2a0 [ 603.302397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 603.302417] ? find_held_lock+0x2b/0x80 [ 603.302443] ? lock_release+0xc8/0x270 [ 603.302472] ? do_raw_spin_unlock+0x53/0x220 [ 603.302524] kobject_add_internal+0x24c/0x9a0 [ 603.302559] kobject_add+0x157/0x240 [ 603.302587] ? __pfx_kobject_add+0x10/0x10 [ 603.302613] ? lock_release+0xc8/0x270 [ 603.302642] ? do_raw_spin_unlock+0x53/0x220 [ 603.302676] ? kobject_put+0xaa/0x260 [ 603.302714] device_add+0x32d/0x1830 [ 603.302753] ? __pfx_device_add+0x10/0x10 [ 603.302788] ? hci_debugfs_create_conn+0x10f/0x240 [ 603.302812] ? mgmt_send_event_skb+0x2f3/0x460 [ 603.302845] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 603.302877] hci_conn_add_sysfs+0x117/0x1c0 [ 603.302903] le_conn_complete_evt+0x1246/0x1e40 [ 603.302952] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 603.302995] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 603.303031] ? __asan_memcpy+0x3d/0x60 [ 603.303063] hci_le_meta_evt+0x34b/0x530 [ 603.303094] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 603.303132] hci_event_packet+0x66c/0x10e0 [ 603.303166] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 603.303198] ? __pfx_hci_event_packet+0x10/0x10 [ 603.303231] ? mark_held_locks+0x49/0x80 [ 603.303261] ? kcov_remote_start+0x2ce/0x5a0 [ 603.303305] hci_rx_work+0x65b/0x8b0 [ 603.303343] process_one_work+0x8e1/0x1960 [ 603.303387] ? __pfx_process_one_work+0x10/0x10 [ 603.303416] ? move_linked_works+0x172/0x270 [ 603.303458] ? assign_work+0x196/0x240 [ 603.303490] worker_thread+0x67e/0xe90 [ 603.303521] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 603.303561] ? __pfx_worker_thread+0x10/0x10 [ 603.303593] kthread+0x3c8/0x740 [ 603.303619] ? __pfx_kthread+0x10/0x10 [ 603.303645] ? ret_from_fork+0x79/0x7a0 [ 603.303667] ? lock_release+0xc8/0x270 [ 603.303697] ? __pfx_kthread+0x10/0x10 [ 603.303725] ret_from_fork+0x67a/0x7a0 [ 603.303747] ? __pfx_ret_from_fork+0x10/0x10 [ 603.303774] ? __switch_to+0x759/0x1030 [ 603.303803] ? __pfx_kthread+0x10/0x10 [ 603.303832] ret_from_fork_asm+0x1a/0x30 [ 603.303878] [ 603.336339] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.338214] Bluetooth: hci3: failed to register connection device 06:40:14 executing program 0: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000380)=""/24, 0x18}, {&(0x7f0000001e00)=""/180, 0xb4}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/98, 0x62}, {&(0x7f0000000480)}, {&(0x7f0000001700)=""/69, 0x45}, {&(0x7f0000001780)=""/217, 0xd9}, {&(0x7f0000001880)=""/158, 0x9e}, {&(0x7f0000001940)=""/127, 0x7f}], 0xa, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x40000000) sendmsg$nl_xfrm(r1, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)=@expire={0x10c, 0x18, 0x400, 0x70bd29, 0x25dfdbfd, {{{@in6=@loopback, @in6=@private1, 0x4e22, 0x5a1a, 0x4e24, 0x800, 0xa, 0x30, 0x100, 0x57, 0x0, 0xee01}, {@in=@broadcast, 0x4d3, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x1, 0x1, 0x9, 0x2, 0x2, 0x2, 0x6}, {0x6, 0x1, 0x1, 0xfffffffffffffff7}, {0xc3, 0x0, 0x80}, 0x70bd2c, 0x3500, 0xa, 0x3, 0x3, 0x40}, 0x1}, [@srcaddr={0x14, 0xd, @in6=@remote}]}, 0x10c}}, 0x800) r2 = dup2(r0, r0) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3c14c384a0d7bceb}}}, 0xb8}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900edb7148624804e209b0738cb2502e59136ca57d3674347f9a4d22730b219729c12a665a35118cc9f2f53c56b9fd3d732bbec5a9755bf38cdf96b544c44e7bb1c7fcda4e353fae638a85322de4273eabd97c61a4109000000d45dcd9e5051ba119ddc885ed7e3909875fc90460d1c90c11808f74830ac3579bad355be877d9c8344cc59931a3ef48bb1a34776d705bc91d44553be6ba1febd8922d7d678a3196180e3b77522c7e9a3edf2740fbadf52446060bc29507c78d78fc54b82cbd45bf3bc5878dd9530488c1eb003f83baa8f7080b549f0f1a3cd3f850f2b4bdba9c5a59c44f2e27586a3c33fc43ff73b39"], 0xf1) [ 603.355342] debugfs: '0' already exists in 'hci3' [ 603.356387] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 603.357633] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 603.357661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.357675] Workqueue: hci3 hci_rx_work [ 603.357706] Call Trace: [ 603.357713] [ 603.357722] dump_stack_lvl+0xfa/0x120 [ 603.357745] sysfs_warn_dup+0x80/0xa0 [ 603.357767] sysfs_create_dir_ns+0x23b/0x2a0 [ 603.357790] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 603.357811] ? find_held_lock+0x2b/0x80 [ 603.357835] ? lock_release+0xc8/0x270 [ 603.357864] ? do_raw_spin_unlock+0x53/0x220 [ 603.357900] kobject_add_internal+0x24c/0x9a0 [ 603.357934] kobject_add+0x157/0x240 [ 603.357969] ? __pfx_kobject_add+0x10/0x10 [ 603.357995] ? lock_release+0xc8/0x270 [ 603.358024] ? do_raw_spin_unlock+0x53/0x220 [ 603.358058] ? kobject_put+0xaa/0x260 [ 603.358096] device_add+0x32d/0x1830 [ 603.358133] ? __pfx_device_add+0x10/0x10 [ 603.358168] ? hci_debugfs_create_conn+0x10f/0x240 [ 603.358191] ? mgmt_send_event_skb+0x2f3/0x460 [ 603.358223] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 603.358255] hci_conn_add_sysfs+0x117/0x1c0 [ 603.358281] le_conn_complete_evt+0x1246/0x1e40 [ 603.358322] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 603.358364] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 603.358400] ? __asan_memcpy+0x3d/0x60 [ 603.358432] hci_le_meta_evt+0x34b/0x530 [ 603.358461] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 603.358511] hci_event_packet+0x66c/0x10e0 [ 603.358545] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 603.358577] ? __pfx_hci_event_packet+0x10/0x10 [ 603.358610] ? mark_held_locks+0x49/0x80 [ 603.358640] ? kcov_remote_start+0x2ce/0x5a0 [ 603.358683] hci_rx_work+0x65b/0x8b0 [ 603.358720] process_one_work+0x8e1/0x1960 [ 603.358764] ? __pfx_process_one_work+0x10/0x10 [ 603.358794] ? move_linked_works+0x172/0x270 [ 603.358835] ? assign_work+0x196/0x240 [ 603.358867] worker_thread+0x67e/0xe90 [ 603.358897] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 603.358936] ? __pfx_worker_thread+0x10/0x10 [ 603.358968] kthread+0x3c8/0x740 [ 603.358994] ? __pfx_kthread+0x10/0x10 [ 603.359019] ? ret_from_fork+0x79/0x7a0 [ 603.359041] ? lock_release+0xc8/0x270 [ 603.359070] ? __pfx_kthread+0x10/0x10 [ 603.359098] ret_from_fork+0x67a/0x7a0 [ 603.359121] ? __pfx_ret_from_fork+0x10/0x10 [ 603.359147] ? __switch_to+0x759/0x1030 [ 603.359176] ? __pfx_kthread+0x10/0x10 [ 603.359204] ret_from_fork_asm+0x1a/0x30 [ 603.359250] [ 603.394635] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.398391] Bluetooth: hci3: failed to register connection device 06:40:14 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 603.443530] debugfs: '0' already exists in 'hci2' [ 603.444788] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 603.446289] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 603.446318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.446333] Workqueue: hci2 hci_rx_work [ 603.446367] Call Trace: [ 603.446375] [ 603.446384] dump_stack_lvl+0xfa/0x120 [ 603.446409] sysfs_warn_dup+0x80/0xa0 [ 603.446433] sysfs_create_dir_ns+0x23b/0x2a0 [ 603.446455] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 603.446476] ? find_held_lock+0x2b/0x80 [ 603.446515] ? lock_release+0xc8/0x270 [ 603.446545] ? do_raw_spin_unlock+0x53/0x220 [ 603.446581] kobject_add_internal+0x24c/0x9a0 [ 603.446616] kobject_add+0x157/0x240 [ 603.446645] ? __pfx_kobject_add+0x10/0x10 [ 603.446671] ? lock_release+0xc8/0x270 [ 603.446701] ? do_raw_spin_unlock+0x53/0x220 [ 603.446735] ? kobject_put+0xaa/0x260 [ 603.446774] device_add+0x32d/0x1830 [ 603.446814] ? __pfx_device_add+0x10/0x10 [ 603.446850] ? hci_debugfs_create_conn+0x10f/0x240 [ 603.446873] ? mgmt_send_event_skb+0x2f3/0x460 [ 603.446905] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 603.446945] hci_conn_add_sysfs+0x117/0x1c0 [ 603.446972] le_conn_complete_evt+0x1246/0x1e40 [ 603.447015] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 603.447060] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 603.447097] ? __asan_memcpy+0x3d/0x60 [ 603.447129] hci_le_meta_evt+0x34b/0x530 [ 603.447159] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 603.447198] hci_event_packet+0x66c/0x10e0 [ 603.447234] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 603.447266] ? __pfx_hci_event_packet+0x10/0x10 [ 603.447300] ? mark_held_locks+0x49/0x80 [ 603.447330] ? kcov_remote_start+0x2ce/0x5a0 [ 603.447375] hci_rx_work+0x65b/0x8b0 [ 603.447414] process_one_work+0x8e1/0x1960 [ 603.447460] ? __pfx_process_one_work+0x10/0x10 [ 603.447490] ? move_linked_works+0x172/0x270 [ 603.447534] ? assign_work+0x196/0x240 [ 603.447567] worker_thread+0x67e/0xe90 [ 603.447598] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 603.447639] ? __pfx_worker_thread+0x10/0x10 [ 603.447672] kthread+0x3c8/0x740 [ 603.447699] ? __pfx_kthread+0x10/0x10 [ 603.447724] ? ret_from_fork+0x79/0x7a0 [ 603.447746] ? lock_release+0xc8/0x270 [ 603.447776] ? __pfx_kthread+0x10/0x10 [ 603.447805] ret_from_fork+0x67a/0x7a0 [ 603.447828] ? __pfx_ret_from_fork+0x10/0x10 [ 603.447855] ? __switch_to+0x759/0x1030 [ 603.447885] ? __pfx_kthread+0x10/0x10 [ 603.447914] ret_from_fork_asm+0x1a/0x30 [ 603.447963] [ 603.480673] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.482533] Bluetooth: hci2: failed to register connection device [ 603.492931] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 603.493230] debugfs: '0' already exists in 'hci2' [ 603.501043] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 603.502284] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 603.502313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.502328] Workqueue: hci2 hci_rx_work [ 603.502362] Call Trace: [ 603.502370] [ 603.502380] dump_stack_lvl+0xfa/0x120 [ 603.502404] sysfs_warn_dup+0x80/0xa0 [ 603.502428] sysfs_create_dir_ns+0x23b/0x2a0 [ 603.502450] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 603.502471] ? find_held_lock+0x2b/0x80 [ 603.502508] ? lock_release+0xc8/0x270 [ 603.502537] ? do_raw_spin_unlock+0x53/0x220 [ 603.502573] kobject_add_internal+0x24c/0x9a0 [ 603.502607] kobject_add+0x157/0x240 [ 603.502635] ? __pfx_kobject_add+0x10/0x10 [ 603.502661] ? lock_release+0xc8/0x270 [ 603.502691] ? do_raw_spin_unlock+0x53/0x220 [ 603.502724] ? kobject_put+0xaa/0x260 [ 603.502761] device_add+0x32d/0x1830 [ 603.502800] ? __pfx_device_add+0x10/0x10 [ 603.502834] ? hci_debugfs_create_conn+0x10f/0x240 [ 603.502858] ? mgmt_send_event_skb+0x2f3/0x460 [ 603.502890] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 603.502921] hci_conn_add_sysfs+0x117/0x1c0 [ 603.502954] le_conn_complete_evt+0x1246/0x1e40 [ 603.502996] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 603.503039] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 603.503075] ? __asan_memcpy+0x3d/0x60 [ 603.503106] hci_le_meta_evt+0x34b/0x530 [ 603.503136] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 603.503174] hci_event_packet+0x66c/0x10e0 [ 603.503208] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 603.503240] ? __pfx_hci_event_packet+0x10/0x10 [ 603.503273] ? mark_held_locks+0x49/0x80 [ 603.503303] ? kcov_remote_start+0x2ce/0x5a0 [ 603.503347] hci_rx_work+0x65b/0x8b0 [ 603.503384] process_one_work+0x8e1/0x1960 [ 603.503428] ? __pfx_process_one_work+0x10/0x10 [ 603.503458] ? move_linked_works+0x172/0x270 [ 603.503500] ? assign_work+0x196/0x240 [ 603.503531] worker_thread+0x67e/0xe90 [ 603.503562] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 603.503602] ? __pfx_worker_thread+0x10/0x10 [ 603.503633] kthread+0x3c8/0x740 [ 603.503660] ? __pfx_kthread+0x10/0x10 [ 603.503686] ? ret_from_fork+0x79/0x7a0 [ 603.503708] ? lock_release+0xc8/0x270 [ 603.503738] ? __pfx_kthread+0x10/0x10 [ 603.503766] ret_from_fork+0x67a/0x7a0 [ 603.503789] ? __pfx_ret_from_fork+0x10/0x10 [ 603.503815] ? __switch_to+0x759/0x1030 [ 603.503845] ? __pfx_kthread+0x10/0x10 [ 603.503874] ret_from_fork_asm+0x1a/0x30 [ 603.503920] [ 603.536484] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.538345] Bluetooth: hci2: failed to register connection device 06:40:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="a3000000009e616ef79c5e0aabad25c18147d8c1ec2a2b86608a5ac396a704f96556bdce343de66d1ac5efebe9f07ae57ea465092062c62779b8e2994e1c74cbfe8318fbb28d4d313b2d542d4adc7d56397a41199dd5a91167752f96b4398b283467d4c55f5b40177306dbff0434a6b96353b386df143f"], 0x5) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x8, 0x2}, {0x6}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x79, 0xff00}}, @l2cap_conn_rsp={{0x3, 0xce, 0x8}, {0x2, 0xdea, 0x0, 0x2}}]}}, 0x1d) 06:40:14 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x54}, @l2cap_cid_signaling={{0x50}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x9, 0x0, 0x7f}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xc3a}}, @l2cap_conn_req={{0x2, 0x20, 0x4}, {0x1fb, 0x3f}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x0, 0xfffb}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x7fff, 0x2000}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x3ff, 0x9, 0x2, 0x157}}, @l2cap_cmd_rej_unk={{0x1, 0x81, 0x2}, {0x4}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x2, 0x6, 0x4, 0x8}}, @l2cap_disconn_req={{0x6, 0xf7, 0x4}, {0x6, 0x9b92}}]}}, 0x59) 06:40:14 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2}]}}]}}, 0x32) 06:40:14 executing program 1: inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:40:15 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ea31e0cafc00f299742d7e2aaaaaaaa00"/37], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x200, 0x3}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x33}, "4bb4f01982aa86f98f71b39c983e7ec020937479b89a5e6c24bca58b245618550084d5fa4b4e3206dcd69abd881febbc72ed26"}, 0x37) 06:40:15 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r3 = dup2(r0, r0) fcntl$dupfd(r2, 0x406, r3) lremovexattr(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000200)=@v3={0x3000000, [{0x1}, {0x4}], r4}, 0x18, 0x0) [ 603.543259] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 603.681925] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 603.705842] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 603.708008] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 603.710591] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 603.719411] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 603.721636] Bluetooth: hci6: ACL packet for unknown connection handle 201 06:40:15 executing program 5: perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) dup(r0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x6}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 603.756380] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 603.758268] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 603.795260] debugfs: '0' already exists in 'hci5' [ 603.796313] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 603.797667] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 603.797696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 603.797711] Workqueue: hci5 hci_rx_work [ 603.797749] Call Trace: [ 603.797757] [ 603.797766] dump_stack_lvl+0xfa/0x120 [ 603.797792] sysfs_warn_dup+0x80/0xa0 [ 603.797817] sysfs_create_dir_ns+0x23b/0x2a0 [ 603.797840] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 603.797861] ? find_held_lock+0x2b/0x80 [ 603.797887] ? lock_release+0xc8/0x270 [ 603.797918] ? do_raw_spin_unlock+0x53/0x220 [ 603.797961] kobject_add_internal+0x24c/0x9a0 [ 603.797996] kobject_add+0x157/0x240 [ 603.798024] ? __pfx_kobject_add+0x10/0x10 [ 603.798050] ? lock_release+0xc8/0x270 [ 603.798079] ? do_raw_spin_unlock+0x53/0x220 [ 603.798113] ? kobject_put+0xaa/0x260 [ 603.798150] device_add+0x32d/0x1830 [ 603.798190] ? __pfx_device_add+0x10/0x10 [ 603.798225] ? hci_debugfs_create_conn+0x10f/0x240 [ 603.798250] ? mgmt_send_event_skb+0x2f3/0x460 [ 603.798284] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 603.798315] hci_conn_add_sysfs+0x117/0x1c0 [ 603.798342] le_conn_complete_evt+0x1246/0x1e40 [ 603.798384] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 603.798426] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 603.798462] ? __asan_memcpy+0x3d/0x60 [ 603.798494] hci_le_meta_evt+0x34b/0x530 [ 603.798537] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 603.798575] hci_event_packet+0x66c/0x10e0 [ 603.798609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 603.798642] ? __pfx_hci_event_packet+0x10/0x10 [ 603.798675] ? mark_held_locks+0x49/0x80 [ 603.798704] ? kcov_remote_start+0x2ce/0x5a0 [ 603.798748] hci_rx_work+0x65b/0x8b0 [ 603.798786] process_one_work+0x8e1/0x1960 [ 603.798831] ? __pfx_process_one_work+0x10/0x10 [ 603.798861] ? move_linked_works+0x172/0x270 [ 603.798903] ? assign_work+0x196/0x240 [ 603.798935] worker_thread+0x67e/0xe90 [ 603.798965] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 603.799007] ? __pfx_worker_thread+0x10/0x10 [ 603.799038] kthread+0x3c8/0x740 [ 603.799066] ? __pfx_kthread+0x10/0x10 [ 603.799091] ? ret_from_fork+0x79/0x7a0 [ 603.799114] ? lock_release+0xc8/0x270 [ 603.799143] ? __pfx_kthread+0x10/0x10 [ 603.799172] ret_from_fork+0x67a/0x7a0 [ 603.799194] ? __pfx_ret_from_fork+0x10/0x10 [ 603.799221] ? __switch_to+0x759/0x1030 [ 603.799251] ? __pfx_kthread+0x10/0x10 [ 603.799280] ret_from_fork_asm+0x1a/0x30 [ 603.799326] [ 603.834231] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.838247] Bluetooth: hci5: failed to register connection device [ 604.057065] Bluetooth: hci3: command 0x0406 tx timeout [ 604.120997] Bluetooth: hci6: command tx timeout [ 605.340261] Bluetooth: hci2: command 0x0406 tx timeout [ 605.593376] Bluetooth: hci5: command 0x0406 tx timeout [ 606.105044] Bluetooth: hci3: command 0x0406 tx timeout [ 606.169003] Bluetooth: hci6: command tx timeout [ 607.386778] Bluetooth: hci2: command 0x0406 tx timeout [ 607.641041] Bluetooth: hci5: command 0x0406 tx timeout [ 608.153185] Bluetooth: hci3: command 0x0406 tx timeout [ 608.217139] Bluetooth: hci6: command tx timeout [ 609.435748] Bluetooth: hci2: command 0x0406 tx timeout [ 609.689051] Bluetooth: hci5: command 0x0406 tx timeout [ 610.201038] Bluetooth: hci3: command 0x0406 tx timeout [ 610.265017] Bluetooth: hci6: command tx timeout [ 611.487765] Bluetooth: hci2: command 0x0406 tx timeout [ 611.737040] Bluetooth: hci5: command 0x0406 tx timeout [ 612.249049] Bluetooth: hci3: command 0x0406 tx timeout [ 612.313021] Bluetooth: hci6: command tx timeout 06:40:24 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x5, 0xc8, 0x6, 0x1, 0x2, 0x3}}}, 0xc) 06:40:24 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x74, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "bcc68b5cf123e9fd45f6a417f8b057e4d5d9a421b37ea35a61aabe7f467bea306e8caeebec9dfc9ce405ad7a0f103e9bbeb78e78ee19b4920c5be408a393141455b32e4b4b3f4dbca63893f83517866588b08dbcbea236d3e084c505b6fc5fb98a0c45f73ac2133d7db86266b88350f9133d5a0cb997c94e035870a8b7bfc5bbb2391a218bc35d837e391f6c2a7a7729f931f1d2994f198e66563e1c56666a2f8719130f2317958724e10e956178e65f9fc563446dc22daa75d44e9151768d6e803ac93addf3a4ca155dd9b181b8958d9873eb482389205735c7b0c5380c965fb044453ee73e52fc9f5b410a2433f03d3cc1d99c558700"}}}, 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x47}, "43e1645247a8492599347b35949bfcaf33e517eab11800014eee3d5900e86d45ec694e5a33c961121a679bdfb39f9a991d7c44bdbda828ff7bd6cd992c4b2f0ee559cfc18b5cd2"}, 0x4b) 06:40:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x80, 0x6, 0x5, 0xff, 0x0, 0x6, 0x80011, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x6}, 0x8010, 0x5, 0x8001, 0x6, 0x152, 0x50, 0x0, 0x0, 0x6, 0x0, 0x100000000}, 0xffffffffffffffff, 0x8, r2, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:40:24 executing program 1: inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:40:24 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2}]}}]}}, 0x32) 06:40:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x100000000000003, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:40:24 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="49be58898fb1f9cecf0807224e4c4e5a61b861f5d85e"], 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x39}, @l2cap_cid_signaling={{0xffffffffffffff76}, [@l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x1, 0x99}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x1}}, @l2cap_info_rsp={{0xb, 0x2, 0x11}, {0x6, 0x1, "d3853385437183477faf7eaff0"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_disconn_rsp={{0x7, 0x6}, {0xff, 0xe}}]}}, 0x3e) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 612.700653] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 612.734254] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 612.740452] Bluetooth: hci2: ACL packet for unknown connection handle 200 06:40:24 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:40:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) fstat(r1, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaa9f1ccfa4ffffffffffffffffffffffff00000000000000"], 0x22) [ 612.767575] debugfs: '0' already exists in 'hci3' [ 612.769252] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 612.770487] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 612.770516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.770531] Workqueue: hci3 hci_rx_work [ 612.770569] Call Trace: [ 612.770577] [ 612.770586] dump_stack_lvl+0xfa/0x120 [ 612.770613] sysfs_warn_dup+0x80/0xa0 [ 612.770648] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.770671] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.770692] ? find_held_lock+0x2b/0x80 [ 612.770718] ? lock_release+0xc8/0x270 [ 612.770748] ? do_raw_spin_unlock+0x53/0x220 [ 612.770784] kobject_add_internal+0x24c/0x9a0 [ 612.770818] kobject_add+0x157/0x240 [ 612.770847] ? __pfx_kobject_add+0x10/0x10 [ 612.770873] ? lock_release+0xc8/0x270 [ 612.770902] ? do_raw_spin_unlock+0x53/0x220 [ 612.770942] ? kobject_put+0xaa/0x260 [ 612.770980] device_add+0x32d/0x1830 [ 612.771019] ? __pfx_device_add+0x10/0x10 [ 612.771055] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.771079] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.771112] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.771144] hci_conn_add_sysfs+0x117/0x1c0 [ 612.771170] le_conn_complete_evt+0x1246/0x1e40 [ 612.771212] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.771255] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.771291] ? __asan_memcpy+0x3d/0x60 [ 612.771324] hci_le_meta_evt+0x34b/0x530 [ 612.771354] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.771392] hci_event_packet+0x66c/0x10e0 [ 612.771426] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.771458] ? __pfx_hci_event_packet+0x10/0x10 [ 612.771491] ? mark_held_locks+0x49/0x80 [ 612.771521] ? kcov_remote_start+0x2ce/0x5a0 [ 612.771565] hci_rx_work+0x65b/0x8b0 [ 612.771602] process_one_work+0x8e1/0x1960 [ 612.771647] ? __pfx_process_one_work+0x10/0x10 [ 612.771677] ? move_linked_works+0x172/0x270 [ 612.771719] ? assign_work+0x196/0x240 [ 612.771751] worker_thread+0x67e/0xe90 [ 612.771781] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.771822] ? __pfx_worker_thread+0x10/0x10 [ 612.771853] kthread+0x3c8/0x740 [ 612.771881] ? __pfx_kthread+0x10/0x10 [ 612.771906] ? ret_from_fork+0x79/0x7a0 [ 612.771929] ? lock_release+0xc8/0x270 [ 612.771958] ? __pfx_kthread+0x10/0x10 [ 612.771986] ret_from_fork+0x67a/0x7a0 [ 612.772009] ? __pfx_ret_from_fork+0x10/0x10 [ 612.772035] ? __switch_to+0x759/0x1030 [ 612.772065] ? __pfx_kthread+0x10/0x10 [ 612.772094] ret_from_fork_asm+0x1a/0x30 [ 612.772140] [ 612.804222] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.806038] Bluetooth: hci3: failed to register connection device [ 612.809602] debugfs: '0' already exists in 'hci3' [ 612.810724] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 612.812047] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 612.812075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.812089] Workqueue: hci3 hci_rx_work [ 612.812120] Call Trace: [ 612.812127] [ 612.812136] dump_stack_lvl+0xfa/0x120 [ 612.812165] sysfs_warn_dup+0x80/0xa0 [ 612.812187] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.812210] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.812230] ? find_held_lock+0x2b/0x80 [ 612.812254] ? lock_release+0xc8/0x270 [ 612.812283] ? do_raw_spin_unlock+0x53/0x220 [ 612.812318] kobject_add_internal+0x24c/0x9a0 [ 612.812352] kobject_add+0x157/0x240 [ 612.812381] ? __pfx_kobject_add+0x10/0x10 [ 612.812407] ? lock_release+0xc8/0x270 [ 612.812436] ? do_raw_spin_unlock+0x53/0x220 [ 612.812470] ? kobject_put+0xaa/0x260 [ 612.812507] device_add+0x32d/0x1830 [ 612.812544] ? __pfx_device_add+0x10/0x10 [ 612.812579] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.812602] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.812634] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.812666] hci_conn_add_sysfs+0x117/0x1c0 [ 612.812697] le_conn_complete_evt+0x1246/0x1e40 [ 612.812738] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.812780] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.812817] ? __asan_memcpy+0x3d/0x60 [ 612.812847] hci_le_meta_evt+0x34b/0x530 [ 612.812877] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.812916] hci_event_packet+0x66c/0x10e0 [ 612.812950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.812982] ? __pfx_hci_event_packet+0x10/0x10 [ 612.813016] ? mark_held_locks+0x49/0x80 [ 612.813046] ? kcov_remote_start+0x2ce/0x5a0 [ 612.813088] hci_rx_work+0x65b/0x8b0 [ 612.813126] process_one_work+0x8e1/0x1960 [ 612.813170] ? __pfx_process_one_work+0x10/0x10 [ 612.813199] ? move_linked_works+0x172/0x270 [ 612.813241] ? assign_work+0x196/0x240 [ 612.813273] worker_thread+0x67e/0xe90 [ 612.813303] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.813343] ? __pfx_worker_thread+0x10/0x10 [ 612.813375] kthread+0x3c8/0x740 [ 612.813401] ? __pfx_kthread+0x10/0x10 [ 612.813426] ? ret_from_fork+0x79/0x7a0 [ 612.813447] ? lock_release+0xc8/0x270 [ 612.813476] ? __pfx_kthread+0x10/0x10 [ 612.813505] ret_from_fork+0x67a/0x7a0 [ 612.813528] ? __pfx_ret_from_fork+0x10/0x10 [ 612.813555] ? __switch_to+0x759/0x1030 [ 612.813583] ? __pfx_kthread+0x10/0x10 [ 612.813612] ret_from_fork_asm+0x1a/0x30 [ 612.813658] [ 612.848284] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.851806] Bluetooth: hci3: failed to register connection device 06:40:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, r0, 0x0) [ 612.892127] debugfs: '0' already exists in 'hci5' [ 612.893931] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 612.895229] CPU: 0 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 612.895257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.895272] Workqueue: hci5 hci_rx_work [ 612.895303] Call Trace: [ 612.895311] [ 612.895320] dump_stack_lvl+0xfa/0x120 [ 612.895343] sysfs_warn_dup+0x80/0xa0 [ 612.895366] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.895388] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.895409] ? find_held_lock+0x2b/0x80 [ 612.895433] ? lock_release+0xc8/0x270 [ 612.895462] ? do_raw_spin_unlock+0x53/0x220 [ 612.895498] kobject_add_internal+0x24c/0x9a0 [ 612.895532] kobject_add+0x157/0x240 [ 612.895559] ? __pfx_kobject_add+0x10/0x10 [ 612.895586] ? lock_release+0xc8/0x270 [ 612.895615] ? do_raw_spin_unlock+0x53/0x220 [ 612.895648] ? kobject_put+0xaa/0x260 [ 612.895686] device_add+0x32d/0x1830 [ 612.895723] ? __pfx_device_add+0x10/0x10 [ 612.895758] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.895781] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.895814] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.895846] hci_conn_add_sysfs+0x117/0x1c0 [ 612.895871] le_conn_complete_evt+0x1246/0x1e40 [ 612.895912] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.895962] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.895998] ? __asan_memcpy+0x3d/0x60 [ 612.896029] hci_le_meta_evt+0x34b/0x530 [ 612.896059] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.896097] hci_event_packet+0x66c/0x10e0 [ 612.896131] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.896163] ? __pfx_hci_event_packet+0x10/0x10 [ 612.896196] ? mark_held_locks+0x49/0x80 [ 612.896226] ? kcov_remote_start+0x2ce/0x5a0 [ 612.896268] hci_rx_work+0x65b/0x8b0 [ 612.896306] process_one_work+0x8e1/0x1960 [ 612.896349] ? __pfx_process_one_work+0x10/0x10 [ 612.896378] ? move_linked_works+0x172/0x270 [ 612.896420] ? assign_work+0x196/0x240 [ 612.896452] worker_thread+0x67e/0xe90 [ 612.896482] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.896522] ? __pfx_worker_thread+0x10/0x10 [ 612.896553] kthread+0x3c8/0x740 [ 612.896580] ? __pfx_kthread+0x10/0x10 [ 612.896605] ? ret_from_fork+0x79/0x7a0 [ 612.896631] ? __pfx_kthread+0x10/0x10 [ 612.896660] ret_from_fork+0x67a/0x7a0 [ 612.896682] ? __pfx_ret_from_fork+0x10/0x10 [ 612.896702] ? save_fpregs_to_fpstate+0x145/0x270 [ 612.896734] ? __switch_to+0x759/0x1030 [ 612.896763] ? __pfx_kthread+0x10/0x10 [ 612.896791] ret_from_fork_asm+0x1a/0x30 [ 612.896838] [ 612.931698] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.935356] Bluetooth: hci5: failed to register connection device 06:40:24 executing program 1: inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:40:24 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) [ 612.937930] debugfs: '0' already exists in 'hci6' [ 612.938941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 612.940181] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 612.940210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.940225] Workqueue: hci6 hci_rx_work [ 612.940256] Call Trace: [ 612.940264] [ 612.940273] dump_stack_lvl+0xfa/0x120 [ 612.940296] sysfs_warn_dup+0x80/0xa0 [ 612.940318] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.940341] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.940362] ? find_held_lock+0x2b/0x80 [ 612.940386] ? lock_release+0xc8/0x270 [ 612.940415] ? do_raw_spin_unlock+0x53/0x220 [ 612.940450] kobject_add_internal+0x24c/0x9a0 [ 612.940484] kobject_add+0x157/0x240 [ 612.940512] ? __pfx_kobject_add+0x10/0x10 [ 612.940539] ? lock_release+0xc8/0x270 [ 612.940568] ? do_raw_spin_unlock+0x53/0x220 [ 612.940602] ? kobject_put+0xaa/0x260 [ 612.940640] device_add+0x32d/0x1830 [ 612.940677] ? __pfx_device_add+0x10/0x10 [ 612.940712] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.940736] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.940768] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.940799] hci_conn_add_sysfs+0x117/0x1c0 [ 612.940825] le_conn_complete_evt+0x1246/0x1e40 [ 612.940866] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.940909] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.940957] ? __asan_memcpy+0x3d/0x60 [ 612.940988] hci_le_meta_evt+0x34b/0x530 [ 612.941017] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.941056] hci_event_packet+0x66c/0x10e0 [ 612.941090] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.941122] ? __pfx_hci_event_packet+0x10/0x10 [ 612.941156] ? mark_held_locks+0x49/0x80 [ 612.941186] ? kcov_remote_start+0x2ce/0x5a0 [ 612.941229] hci_rx_work+0x65b/0x8b0 [ 612.941266] process_one_work+0x8e1/0x1960 [ 612.941309] ? __pfx_process_one_work+0x10/0x10 [ 612.941339] ? move_linked_works+0x172/0x270 [ 612.941380] ? assign_work+0x196/0x240 [ 612.941413] worker_thread+0x67e/0xe90 [ 612.941443] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.941483] ? __pfx_worker_thread+0x10/0x10 [ 612.941514] kthread+0x3c8/0x740 [ 612.941541] ? __pfx_kthread+0x10/0x10 [ 612.941566] ? ret_from_fork+0x79/0x7a0 [ 612.941587] ? lock_release+0xc8/0x270 [ 612.941617] ? __pfx_kthread+0x10/0x10 [ 612.941645] ret_from_fork+0x67a/0x7a0 [ 612.941668] ? __pfx_ret_from_fork+0x10/0x10 [ 612.941695] ? __switch_to+0x759/0x1030 [ 612.941724] ? __pfx_kthread+0x10/0x10 [ 612.941752] ret_from_fork_asm+0x1a/0x30 [ 612.941798] [ 612.974757] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.976648] Bluetooth: hci6: failed to register connection device 06:40:24 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = dup3(r0, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001200)=[{&(0x7f0000001100)=""/254, 0xfe}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f1a7300000000ffffffffffec00000000000000ffffffffff00000000000000", @ANYRES16, @ANYRESOCT, @ANYRESHEX], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) syz_emit_vhci(0x0, 0x0) 06:40:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@usrjquota, 0x22}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:40:24 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) [ 613.050395] Bluetooth: hci3: unexpected subevent 0x1a length: 30 > 6 [ 613.062254] No source specified [ 613.065877] Bluetooth: hci3: unexpected subevent 0x1a length: 30 > 6 [ 613.071108] No source specified [ 613.076618] debugfs: '0' already exists in 'hci5' [ 613.078518] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 613.079792] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 613.079821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 613.079835] Workqueue: hci5 hci_rx_work [ 613.079871] Call Trace: [ 613.079879] [ 613.079887] dump_stack_lvl+0xfa/0x120 [ 613.079913] sysfs_warn_dup+0x80/0xa0 [ 613.079943] sysfs_create_dir_ns+0x23b/0x2a0 [ 613.079966] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 613.079987] ? find_held_lock+0x2b/0x80 [ 613.080012] ? lock_release+0xc8/0x270 [ 613.080041] ? do_raw_spin_unlock+0x53/0x220 [ 613.080077] kobject_add_internal+0x24c/0x9a0 [ 613.080111] kobject_add+0x157/0x240 [ 613.080139] ? __pfx_kobject_add+0x10/0x10 [ 613.080165] ? lock_release+0xc8/0x270 [ 613.080195] ? do_raw_spin_unlock+0x53/0x220 [ 613.080228] ? kobject_put+0xaa/0x260 [ 613.080266] device_add+0x32d/0x1830 [ 613.080304] ? __pfx_device_add+0x10/0x10 [ 613.080338] ? hci_debugfs_create_conn+0x10f/0x240 [ 613.080363] ? mgmt_send_event_skb+0x2f3/0x460 [ 613.080396] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 613.080427] hci_conn_add_sysfs+0x117/0x1c0 [ 613.080453] le_conn_complete_evt+0x1246/0x1e40 [ 613.080494] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 613.080537] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 613.080573] ? __asan_memcpy+0x3d/0x60 [ 613.080605] hci_le_meta_evt+0x34b/0x530 [ 613.080635] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 613.080673] hci_event_packet+0x66c/0x10e0 [ 613.080707] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 613.080739] ? __pfx_hci_event_packet+0x10/0x10 [ 613.080772] ? mark_held_locks+0x49/0x80 [ 613.080803] ? kcov_remote_start+0x2ce/0x5a0 [ 613.080846] hci_rx_work+0x65b/0x8b0 [ 613.080883] process_one_work+0x8e1/0x1960 [ 613.080928] ? __pfx_process_one_work+0x10/0x10 [ 613.080957] ? move_linked_works+0x172/0x270 [ 613.081000] ? assign_work+0x196/0x240 [ 613.081031] worker_thread+0x67e/0xe90 [ 613.081062] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 613.081102] ? __pfx_worker_thread+0x10/0x10 [ 613.081134] kthread+0x3c8/0x740 [ 613.081162] ? __pfx_kthread+0x10/0x10 [ 613.081187] ? ret_from_fork+0x79/0x7a0 [ 613.081209] ? lock_release+0xc8/0x270 [ 613.081238] ? __pfx_kthread+0x10/0x10 [ 613.081267] ret_from_fork+0x67a/0x7a0 [ 613.081289] ? __pfx_ret_from_fork+0x10/0x10 [ 613.081315] ? __switch_to+0x759/0x1030 [ 613.081345] ? __pfx_kthread+0x10/0x10 [ 613.081374] ret_from_fork_asm+0x1a/0x30 [ 613.081421] [ 613.114165] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 613.115999] Bluetooth: hci5: failed to register connection device [ 613.531445] Bluetooth: hci2: command 0x0406 tx timeout [ 614.297066] Bluetooth: hci3: command 0x0406 tx timeout [ 614.362008] Bluetooth: hci6: command tx timeout [ 614.745065] Bluetooth: hci5: command 0x0406 tx timeout [ 615.580555] Bluetooth: hci2: command 0x0406 tx timeout [ 616.345071] Bluetooth: hci3: command 0x0406 tx timeout [ 616.409024] Bluetooth: hci6: command 0x2016 tx timeout [ 616.793102] Bluetooth: hci5: command 0x0406 tx timeout [ 617.627164] Bluetooth: hci2: command 0x0406 tx timeout [ 618.393159] Bluetooth: hci3: command 0x0406 tx timeout [ 618.457093] Bluetooth: hci6: command 0x2016 tx timeout [ 618.841078] Bluetooth: hci5: command 0x0406 tx timeout [ 619.676037] Bluetooth: hci2: command 0x0406 tx timeout [ 620.441038] Bluetooth: hci3: command 0x0406 tx timeout [ 620.506007] Bluetooth: hci6: command 0x2016 tx timeout [ 620.889017] Bluetooth: hci5: command 0x0406 tx timeout 06:40:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) dup2(r0, r2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 06:40:32 executing program 4: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) 06:40:32 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x21}, "0c04d15f6798a3859f156ff7d40036b815d4cab9636911fd00a70b67f111df59cc"}, 0x25) 06:40:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="5e0e3cf2d20f71c3b4fd1fda9b07ad7eb00b87f42a784e571b61091a9e07a61395679870ffa7b323be8aad66ae48c1301de163d103a2a33c561fef5bde9a17a85ddff9f35282cd1b709cdbeff8836944b7caef56d58afdeb6342c83cda1de023cf834f72319f554105fe78d096f48467cf350862b51572115a6dd97143dc0a", @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r0], 0x22) syz_emit_vhci(0x0, 0x0) 06:40:32 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:40:32 executing program 1: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) 06:40:32 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, 0x0, 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:32 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0x10, r1) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x8, 0xff, 0x1, 0x7, 0x0, 0x8, 0x4c025, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40400, 0xe79b, 0x3, 0x4, 0x3, 0x401, 0x1f, 0x0, 0xffffffff, 0x0, 0xfffffffffffffff7}, r1, 0x4, 0xffffffffffffffff, 0x9) process_vm_writev(r1, &(0x7f0000002500)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/84, 0x54}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/134, 0x86}, {&(0x7f0000002340)=""/154, 0x9a}, {&(0x7f0000002400)=""/223, 0xdf}], 0x6, &(0x7f0000003ac0)=[{&(0x7f0000002580)=""/106, 0x6a}, {&(0x7f0000002600)=""/165, 0xa5}, {&(0x7f00000026c0)=""/162, 0xa2}, {&(0x7f0000002780)=""/137, 0x89}, {&(0x7f0000002840)=""/33, 0x21}, {&(0x7f0000002880)=""/117, 0x75}, {&(0x7f0000002900)=""/4, 0x4}, {&(0x7f0000002940)=""/131, 0x83}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/134, 0x86}], 0xa, 0x0) r2 = fork() ptrace(0x10, r2) ptrace(0x10, r2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0x6, 0x81, 0x40, 0x0, 0xe38, 0xa, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x5102, 0xeea4, 0x0, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x1, 0x0, 0x8}, r2, 0x10, 0xffffffffffffffff, 0xb) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000003b80)={'#! ', './file0', [{}, {0x20, '%%]-*%}-($%{*'}, {0x20, '\\'}, {0x20, ')(-'}, {0x20, '['}, {0x20, '\x06]}'}, {0x20, '{^(,'}, {0x20, '^-'}, {}], 0xa, "63e3c56e556da61e2d9ea08539767c116a2c728a9b2d021d185446aa3572f079e1776b1b4f00681625c89f3e5bc2ca392ec41b0282c11b62145a85ede0a95b7b9f5ba282d531ebcf9eb549e8b926a8be024a3986eaf47299b92ef34812f42a881d8af76248fe14f24adfbe9777437d9fc9646d3d59427d345c9d174fe5f28279d6643b5918a43bba320d89e9ad9c1299a7001af38688dec50abecfb8e27cfb725f8943748b26f3c3f97d04b5cdb1a33f6ab86d19c6c5aed966959fa811be05780efc91b22d641f6fa7896743dfafa8e4e14a07f88e4a134fadd4bc21ac4ec6e81fd16af8d3eca7a026e620b24be289fc8cc4881349a8bf16ba4dad1668d2ac8727773b20b7940b40b865fb704116d337069aedcb01dc30713ee7cdbc2dde2cd76f446a4963bfbdb5547c5bcb05d53607e1c36f71de73808420c21a40249b35a5d1e210bf9f23f1031e380897c447ae6bc84528769da9c01b979cb668c90f9522185a0107e5470e6b6c00b3aae64e637b4fa1dc17c2699fc0ff44a0215af2617719e8ffe433b2463b80e0e8f0c4d444dc2332fd7ffef95b52a75b43032bda554ffe66611135beabde2da817b0529e421168447cae1be878f29bbc7caa090327e0b81f3fdcea60029db85d9f6b067c973d1dc6b634ab23eeaff9c88212b8abd1ad7661ce7f24af5a3ed64893c649c5d55440d8d4ef62c0fa7502652e8bd0056255dceb8eb722f69dde04e0acf8242dae07b96b82a450e6ec51adb21759df7237ca4d26b79c230b69fb597ded786a161c5cc617528a6638572d08ae3832d2e71d5800ea66d7e06f75d5e833c28bbe057201a8bcb96049d03c8a700e61941a87a3124f8db47ee343c8edb93821f0df4620004e8be59c34e86426c0b2aae81dd6c745f2bbbc2c182b80c4899f83fbe3252b8f3b34eb82a54f155b9606cec899204fe338c6b4d2b0eac9fa07f044fc29d399579938ed4b06a858650c21f02aa57c27609c5fa7c5ad2fdac3d15a54f3ee86a2f144255c981e67955e3acfad845d89f56da15920ced8e7de20bd83b230afcb4579ad91555407037464fda5017643453835de834d60165584f4f2061bfb3d7444cd0e4a04547dd0d00373a389beb729a6bc034b1eaf09705693db15f6f60888571815541f46e7375a16cf159f99c730fe3b2e301026770ed97e14296184145be4aa1c88feb080a086302296492a5e6b8c9979e4dd71f55411f5f06c7ea2abeebfa9ac3d58b55a13b406d587f44fce0c1e8f45b9d4495cf19db8a31c7eafbe53dea908622c9ba099afa087a3dfa89719cbfd724cf48aa5975233939e9d9210488c1728603c527c71056097bd590e0bbff5b1b29a3fd3931414c465bfccd77808f776017877692e4cf0da08727baee64ffdbbda440a904b65a3163f23c07158a16619a09fd91ec73439857c0087dd0a041a43e00fa28b13b3e2a20d145553158656a07a5a3168488f471fb16fb124fe6554fdec4d26efb57f6e8961130e8f3a4e66c383b97fcad3f71f4f5c5e28aea2da35ce7ae3d344f54176305f63dce85f9c843e13022072e77183dbe442b4328977b1c095aa4020a61d7e8b11cf8e6e580c724605fc882e57e1a6bfa707c55e15e2b80ccf63d97cc0c40e0d84c3ff5e65ea68e5a797443b82b41fa667dc4e5097dbacde936f390d0a156e98d3492e9dad0a1b74ba2cad3d5be221c241f433b719b35adba4dddf1f95445fbe99b9ae38542bbf443d983774bbf73bd57710a8e9ae404eea31bea48f94af1179798b6e5ed312de39f0c5c6afdf60c0391c0deb5a91a8859edf55728909902e4075c0fdb0b0a35cb47ccd5aa9346c18eec4fe3ffad03ce6f200211fde982352197a05639faba056992349e645564bdea9590e986c192fbb081da38858b1b118ddd30e8ed77ae754e25fcf38db476aa673d660d9202d97d263c1616336c76c6676e2ff3df2a6ce44c00a9affbdf17721f12e9a8d4598fec9759123ac919eae7481d49dfecee66dfbcd60eeaac1b31bdade23235dc68f64259616b8bebb4a5b3233cfc86063ac7c86c867921fbaad9146912e1d748c0839a39458979da2916cd7112ec097dea6d85c0718fd9239334a4b35458d097c4473bb04fd12e1946659b0def1f5bf663c8ce9574c5e594429444f991c583306789f0f5186e4506c46329454d8baa0fca21dbfaeff1ca7eefb0ef1c6fecece0970a6550f4fbba0eebd49307ead90d5b703c7b3e86b778b4e2b88fd5b8bf5b449eea95c30dd2dd931aafa611dcc197ff10e7f485ca7f6c2508deb3694de5aeb99dc952b34f1025b4c8e290db4882bb3efa684374dbdf2c9acc60f8c17e593233c57fbcc300e3189b53c5f0082053d2ac893ffc24c2f11ee7f89befed1e0fc4ca0a81c3b76b134329f03294c3941000bbc6314a23999362aa62dcd37167584faeada5e3d1b73a7b2c6d82b1c5760bc8bcd997a80a990e1c6f584382b7f19f31eacc15ee52c6bf27953fe4258d0f845eb6e66ad59639c414d634985ff18bb3f465742e96b7dc6866b645a97dc22e24bf5e1109313c97d3321ab4e68f4d5480c72b9b0fdf9648bde3b3d335acd8a7fac07233530ea92a787305be5f91ea78e567983f852b2e5a6100720fd3d0176e6f954885bcde24cf6a4ddb9916b337d2bb8731199941d28b11a80cbe1bb2cac55db0b9c3d3949a7014cab8fb8a618d1b2c726832b8c77376fdcd162cf1928061c4833cfddae94ef79f476df001a0959919daa43f84f07e0efb86a9f30a19bd1df6ed4c788fcfe9b46e90f7a09a99d22991b2039533677639afc6df21293441a16b376a1b91e1e47b57364a43df91d4bf1ee0124cb62f012cd3c7264a3f9ba001d17c20519bd2c451a15b32d6ed8217cf4550c7ad38c436f1b5bfd97bf7cb8cfe01ba3f2d3c8b1d20fe54018f5a0280a3f57d7fe1ab3276b611bd5b31825792396dfea18920c0412621e186f877f8f121888284c97f034e8a5891b96b495d8109d4ebcb610e2a9fe43005430644cd61ecf1a00cc276b1f6831461024eb25bf0c37cbb4162f58421c4458087cd9d2822a7b23e47b4293499863a23a69d8e824c662877f2a4bde75e2affa2bfdebcd74b3fcd092227839de721d532621da6237d573108eb9c240abafd6b208f78b6735792ccb08b05cb331f09da1359ea4165d254e4d0ac6bd8b83345664a833029eaa29ad3aefce9c854f2c793e28a0033d7c22881cb694238eae2023bbbcfb22a1ca9afc6ab86a215533dd7a4cb4b657bb12627cff11708f75c5dda646012a65f6922e53db067d5010e4257ac2ab184312f789c6cb2471789b5db84c271059eb43a49317b58cac7677386f05dc7116b1e050885803f78ff9f053d129f2ed651bb4ad9350e3a5ff9f7c5f6f85ae64afc8416fb969c4fb10603a349c9c52f25e8ce0fb0818aa85641328bdcefb80953cd6a65d02d783471aab2d26f12093fe2063f790b21cdc0b787cfdc31bf2b71b283aed445aad5158eef05a86d516fa0db78d0ee0628de622274de0685cc9577deab3b7148a55376745eaa55a333d4931ed44bce810ed74d1365334c3f21128c6784c2aa5c772e109cc7c3075c821ef1e29bb0c970dbf335faee42b6e9ed98e5bec9cbe73a909d031406720f079c68ac7be60f4ddab7e9c3965a606d95fd9143914bdaa10a9e1ca7dbf9b6f589998de66e912615de977c8eff0d369ad2af5bf8cb453a544c2aad9bba569a2bd5385b909e0eed25c44dd657eca1c3d606f2d278aace1d4838eaef3d679c8514e6f55c6c75a4ff14baf1041c316c487a595b771060a84060392e803c21771183b1fec13ef1dbc66b9758affcfde0ae015cb7a3b29b2b63b072d01d8931c5a25fc071b47e88075110b1375ae1e7f590fc3b71b271ff8dd4c1a182e42fc518090fcadb5d2d357bd35e190ae39b3aad8333ebdd578b309d669824b976c9e1d14c81773ed3c25b245c1dea298040381065ba3921b4711f88bf3e20a1e4eec22ef8fda4450e185e654d2379f7411818df499108e1afc286bd5be1a2bf98963f6f12a3a30c481473bb368d3bee3d1981944ea9cd1d8c07f6a278e83e6052e5d137e828ad1e5b1baaf561d40402c6344dcfa9c7f38a03a70619b0035d943efd50d40e11a06b52e51f0a37402d66ab4702689ac76c93101de0b6c477b127a35b23cb12140f2bdc8cbf14e29991a4874af388faa8840fb5e29a1fe0cef1279828fc8cf5eb23fbe67a0456764ce5811a6d83398b99581b680f6b1c1e4ca74d870be7eb98eab5f0a0e86abd8d95532c2b3a710793e5ff82d4a0faafd1a37b813f5545ed7fe245e51d3981601671c9e27a3e41b1bd8e4092a0965609f8a1c8cf3f0f2f4dc8d30ba8d28ff9e066b5670f14076390358eca49ccecc389d695d8cd6dc576b334ecc4ed84bea6c28bece07a0cabfb62bb41d4c588bfa9465582f46a0ec9e144ab9b3bdc1f7e93b76bf9c431a65dd413eec20635f409e576dcac649115da4abfceb1546c267f8d05579acb4757d557c141941f31aee430f9ab31de4a1e7740c95e2460ea898eaf16cca30f2da6a2585a55e4b35b1497d1e9792eb44f4031a18db4dfd0df9053f18745a50cc77f84dab052fcddf6648138219eaf37c4be71fa084e728eb477dda46a20d93dbb69b8683065f2463d110180ab1dc6c3e3684ca1928b55d4b0b1c68cb11b790c2b8e2d45f3fedc99f9a7a864e5108941d77bac03e4117df00511289da71ab9e913a11704c03a0454ce1ac21ddea218384b3ee91f7caff05a1777025896e7ff90bc68a872f9e720ca1c68b55c0d6aa0966743fe7d47f42270a887e3d3f5644fac74aa46da46fed4ccf04d2ef752e59c9ba920688cdd118317145e527f22aa56a3b5b93eb98450d792f42ead2ce8f6fa4a53dd97446a64e4a05756229f6786e7200b63901b8f732b41fcf28021280f0b13621387da4082f3031e66cf8d43bd8d217a838df15b45a859e476966db19a93394bc4c068d8d2035830eb739b6f61cc15e31bc0da94dfbb05aec2688478d1d1f0e1168d838a44651e12b9d0266344bf7b4b2e5bc5ac4b0f559aa35bd66d800c90a4448aba3bdf12c87063bc0edb32061a5c450ed58f8d699958047c34bbe3b207701f8902adaafff4f5a6758fab7405445375afe0b3529f832ec861a22a3a6380c011be85f2ec3d15d755ea25627f249310a585a02ac634c5114eededdca72d0eeb83d984a32a0a7daf80470f6e084c9bafb08408b26bdbdcd3f111ec45c87324018b2fe1fe7115c517b2c57fb8c5e774570fd8f9ffac39aa2916ff78f4fa7b412ed544e4b72abef7516b96379d11c34cb9cff79bb902993907284c3669e0221e4754ce4dc00caa04805403abb54c65da91111c91aa7cf13507151c7d46a13016245a5c8a38b940958f2d718f512be10fa7837ee7d97f07b022aa8bb99f81f8febb7cdfd97a8c2beee5fea4d31c128cd410292f4b0d38bd093d01abddad8a69dac8de3f0723f21c1e0125b8e66585217d612887c9689fe12d16072720ad7237e8ac9027426c09375034f54522bda3468f0efd67a284cf7626cd8fbadf45fbc0fc1ecca979c1a8c649e649ec8508868030a00298a9cea77ec89871ae15b1764097ca88c000a8b2b5e343d649a8c445593f9ca9fe29d91f4b322ddd0ed2da596c4eb8457d10fe221ce2321ceaf4dd44a6fffb65bf9bd39bf7af448062e91d29bd7c6d224cc4ad4c29ad8759977ee0b083e7d7760e529ea79fae232d80ec92bf96c9b8385576f69f1d589b39b483f42dd14b79c475ec0d53fb3d9"}, 0x102f) lremovexattr(0x0, 0x0) [ 621.239320] debugfs: '0' already exists in 'hci2' [ 621.239999] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 621.240716] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.240732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.240741] Workqueue: hci2 hci_rx_work [ 621.240766] Call Trace: [ 621.240771] [ 621.240776] dump_stack_lvl+0xfa/0x120 [ 621.240792] sysfs_warn_dup+0x80/0xa0 [ 621.240806] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.240818] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.240830] ? find_held_lock+0x2b/0x80 [ 621.240849] ? lock_release+0xc8/0x270 [ 621.240866] ? do_raw_spin_unlock+0x53/0x220 [ 621.240885] kobject_add_internal+0x24c/0x9a0 [ 621.240904] kobject_add+0x157/0x240 [ 621.240920] ? __pfx_kobject_add+0x10/0x10 [ 621.240934] ? lock_release+0xc8/0x270 [ 621.240950] ? do_raw_spin_unlock+0x53/0x220 [ 621.240968] ? kobject_put+0xaa/0x260 [ 621.240989] device_add+0x32d/0x1830 [ 621.241011] ? __pfx_device_add+0x10/0x10 [ 621.241030] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.241044] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.241063] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.241080] hci_conn_add_sysfs+0x117/0x1c0 [ 621.241094] le_conn_complete_evt+0x1246/0x1e40 [ 621.241117] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.241141] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.241160] ? __asan_memcpy+0x3d/0x60 [ 621.241179] hci_le_meta_evt+0x34b/0x530 [ 621.241196] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.241217] hci_event_packet+0x66c/0x10e0 [ 621.241235] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.241253] ? __pfx_hci_event_packet+0x10/0x10 [ 621.241271] ? mark_held_locks+0x49/0x80 [ 621.241287] ? kcov_remote_start+0x2ce/0x5a0 [ 621.241311] hci_rx_work+0x65b/0x8b0 [ 621.241331] process_one_work+0x8e1/0x1960 [ 621.241356] ? __pfx_process_one_work+0x10/0x10 [ 621.241372] ? move_linked_works+0x172/0x270 [ 621.241396] ? assign_work+0x196/0x240 [ 621.241413] worker_thread+0x67e/0xe90 [ 621.241429] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.241452] ? __pfx_worker_thread+0x10/0x10 [ 621.241469] kthread+0x3c8/0x740 [ 621.241485] ? __pfx_kthread+0x10/0x10 [ 621.241498] ? ret_from_fork+0x79/0x7a0 [ 621.241511] ? lock_release+0xc8/0x270 [ 621.241527] ? __pfx_kthread+0x10/0x10 [ 621.241542] ret_from_fork+0x67a/0x7a0 [ 621.241554] ? __pfx_ret_from_fork+0x10/0x10 [ 621.241568] ? __switch_to+0x759/0x1030 [ 621.241586] ? __pfx_kthread+0x10/0x10 [ 621.241601] ret_from_fork_asm+0x1a/0x30 [ 621.241630] [ 621.260709] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.261749] Bluetooth: hci2: failed to register connection device [ 621.266061] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 621.276144] debugfs: '0' already exists in 'hci2' [ 621.277423] debugfs: '0' already exists in 'hci3' [ 621.280709] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 621.281553] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.281569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.281577] Workqueue: hci2 hci_rx_work [ 621.281599] Call Trace: [ 621.281604] [ 621.281609] dump_stack_lvl+0xfa/0x120 [ 621.281625] sysfs_warn_dup+0x80/0xa0 [ 621.281639] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.281651] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.281662] ? find_held_lock+0x2b/0x80 [ 621.281677] ? lock_release+0xc8/0x270 [ 621.281694] ? do_raw_spin_unlock+0x53/0x220 [ 621.281713] kobject_add_internal+0x24c/0x9a0 [ 621.281732] kobject_add+0x157/0x240 [ 621.281747] ? __pfx_kobject_add+0x10/0x10 [ 621.281761] ? lock_release+0xc8/0x270 [ 621.281777] ? do_raw_spin_unlock+0x53/0x220 [ 621.281795] ? kobject_put+0xaa/0x260 [ 621.281815] device_add+0x32d/0x1830 [ 621.281837] ? __pfx_device_add+0x10/0x10 [ 621.281856] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.281870] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.281888] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.281905] hci_conn_add_sysfs+0x117/0x1c0 [ 621.281920] le_conn_complete_evt+0x1246/0x1e40 [ 621.281947] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.281970] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.281989] ? __asan_memcpy+0x3d/0x60 [ 621.282012] hci_le_meta_evt+0x34b/0x530 [ 621.282029] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.282050] hci_event_packet+0x66c/0x10e0 [ 621.282068] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.282085] ? __pfx_hci_event_packet+0x10/0x10 [ 621.282103] ? mark_held_locks+0x49/0x80 [ 621.282120] ? kcov_remote_start+0x2ce/0x5a0 [ 621.282145] hci_rx_work+0x65b/0x8b0 [ 621.282165] process_one_work+0x8e1/0x1960 [ 621.282190] ? __pfx_process_one_work+0x10/0x10 [ 621.282206] ? move_linked_works+0x172/0x270 [ 621.282229] ? assign_work+0x196/0x240 [ 621.282246] worker_thread+0x67e/0xe90 [ 621.282263] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.282285] ? __pfx_worker_thread+0x10/0x10 [ 621.282302] kthread+0x3c8/0x740 [ 621.282318] ? __pfx_kthread+0x10/0x10 [ 621.282331] ? ret_from_fork+0x79/0x7a0 [ 621.282344] ? lock_release+0xc8/0x270 [ 621.282360] ? __pfx_kthread+0x10/0x10 [ 621.282375] ret_from_fork+0x67a/0x7a0 [ 621.282388] ? __pfx_ret_from_fork+0x10/0x10 [ 621.282402] ? __switch_to+0x759/0x1030 [ 621.282419] ? __pfx_kthread+0x10/0x10 [ 621.282435] ret_from_fork_asm+0x1a/0x30 [ 621.282460] [ 621.288144] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 621.288470] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.289131] CPU: 0 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.289163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.289179] Workqueue: hci3 hci_rx_work [ 621.289213] Call Trace: [ 621.289221] [ 621.289231] dump_stack_lvl+0xfa/0x120 [ 621.289257] sysfs_warn_dup+0x80/0xa0 [ 621.289280] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.289304] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.289327] ? find_held_lock+0x2b/0x80 [ 621.289353] ? lock_release+0xc8/0x270 [ 621.289384] ? do_raw_spin_unlock+0x53/0x220 [ 621.289422] kobject_add_internal+0x24c/0x9a0 [ 621.289459] kobject_add+0x157/0x240 [ 621.289489] ? __pfx_kobject_add+0x10/0x10 [ 621.289517] ? lock_release+0xc8/0x270 [ 621.289549] ? do_raw_spin_unlock+0x53/0x220 [ 621.289585] ? kobject_put+0xaa/0x260 [ 621.289625] device_add+0x32d/0x1830 [ 621.289665] ? __pfx_device_add+0x10/0x10 [ 621.289703] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.289727] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.289762] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.289796] hci_conn_add_sysfs+0x117/0x1c0 [ 621.289823] le_conn_complete_evt+0x1246/0x1e40 [ 621.289867] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.289913] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.289959] ? __asan_memcpy+0x3d/0x60 [ 621.289992] hci_le_meta_evt+0x34b/0x530 [ 621.290024] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.290065] hci_event_packet+0x66c/0x10e0 [ 621.290102] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.290137] ? __pfx_hci_event_packet+0x10/0x10 [ 621.290173] ? mark_held_locks+0x49/0x80 [ 621.290205] ? kcov_remote_start+0x2ce/0x5a0 [ 621.290250] hci_rx_work+0x65b/0x8b0 [ 621.290291] process_one_work+0x8e1/0x1960 [ 621.290337] ? __pfx_process_one_work+0x10/0x10 [ 621.290369] ? move_linked_works+0x172/0x270 [ 621.290414] ? assign_work+0x196/0x240 [ 621.290448] worker_thread+0x67e/0xe90 [ 621.290481] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.290524] ? __pfx_worker_thread+0x10/0x10 [ 621.290558] kthread+0x3c8/0x740 [ 621.290587] ? __pfx_kthread+0x10/0x10 [ 621.290614] ? ret_from_fork+0x79/0x7a0 [ 621.290636] ? lock_release+0xc8/0x270 [ 621.290668] ? __pfx_kthread+0x10/0x10 [ 621.290698] ret_from_fork+0x67a/0x7a0 [ 621.290723] ? __pfx_ret_from_fork+0x10/0x10 [ 621.290751] ? __switch_to+0x759/0x1030 [ 621.290795] ? __pfx_kthread+0x10/0x10 [ 621.290826] ret_from_fork_asm+0x1a/0x30 [ 621.290875] [ 621.290960] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.291160] Bluetooth: hci2: failed to register connection device [ 621.291910] Bluetooth: hci3: failed to register connection device [ 621.292478] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 621.294498] debugfs: '0' already exists in 'hci6' [ 621.327226] debugfs: '0' already exists in 'hci3' [ 621.327623] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 621.328209] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 621.328593] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.328624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.328639] Workqueue: hci6 hci_rx_work [ 621.328675] Call Trace: [ 621.328683] [ 621.328693] dump_stack_lvl+0xfa/0x120 [ 621.328719] sysfs_warn_dup+0x80/0xa0 [ 621.328744] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.328768] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.328790] ? find_held_lock+0x2b/0x80 [ 621.328817] ? lock_release+0xc8/0x270 [ 621.328848] ? do_raw_spin_unlock+0x53/0x220 [ 621.328886] kobject_add_internal+0x24c/0x9a0 [ 621.328923] kobject_add+0x157/0x240 [ 621.328960] ? __pfx_kobject_add+0x10/0x10 [ 621.328988] ? lock_release+0xc8/0x270 [ 621.329020] ? do_raw_spin_unlock+0x53/0x220 [ 621.329056] ? kobject_put+0xaa/0x260 [ 621.329096] device_add+0x32d/0x1830 [ 621.329136] ? __pfx_device_add+0x10/0x10 [ 621.329174] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.329199] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.329233] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.329267] hci_conn_add_sysfs+0x117/0x1c0 [ 621.329295] le_conn_complete_evt+0x1246/0x1e40 [ 621.329339] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.329384] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.329423] ? __asan_memcpy+0x3d/0x60 [ 621.329457] hci_le_meta_evt+0x34b/0x530 [ 621.329489] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.329530] hci_event_packet+0x66c/0x10e0 [ 621.329568] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.329602] ? __pfx_hci_event_packet+0x10/0x10 [ 621.329638] ? mark_held_locks+0x49/0x80 [ 621.329670] ? kcov_remote_start+0x2ce/0x5a0 [ 621.329717] hci_rx_work+0x65b/0x8b0 [ 621.329757] process_one_work+0x8e1/0x1960 [ 621.329804] ? __pfx_process_one_work+0x10/0x10 [ 621.329836] ? move_linked_works+0x172/0x270 [ 621.329882] ? assign_work+0x196/0x240 [ 621.329916] worker_thread+0x67e/0xe90 [ 621.329949] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.329991] ? __pfx_worker_thread+0x10/0x10 [ 621.330025] kthread+0x3c8/0x740 [ 621.330054] ? __pfx_kthread+0x10/0x10 [ 621.330081] ? ret_from_fork+0x79/0x7a0 [ 621.330104] ? lock_release+0xc8/0x270 [ 621.330136] ? __pfx_kthread+0x10/0x10 [ 621.330167] ret_from_fork+0x67a/0x7a0 [ 621.330191] ? __pfx_ret_from_fork+0x10/0x10 [ 621.330220] ? __switch_to+0x759/0x1030 [ 621.330251] ? __pfx_kthread+0x10/0x10 [ 621.330282] ret_from_fork_asm+0x1a/0x30 [ 621.330332] [ 621.330401] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.330639] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.330655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.330663] Workqueue: hci3 hci_rx_work [ 621.330680] Call Trace: [ 621.330684] [ 621.330689] dump_stack_lvl+0xfa/0x120 [ 621.330701] sysfs_warn_dup+0x80/0xa0 [ 621.330713] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.330726] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.330739] ? find_held_lock+0x2b/0x80 [ 621.330755] ? lock_release+0xc8/0x270 [ 621.330780] ? do_raw_spin_unlock+0x53/0x220 [ 621.330799] kobject_add_internal+0x24c/0x9a0 [ 621.330817] kobject_add+0x157/0x240 [ 621.330832] ? __pfx_kobject_add+0x10/0x10 [ 621.330846] ? lock_release+0xc8/0x270 [ 621.330862] ? do_raw_spin_unlock+0x53/0x220 [ 621.330880] ? kobject_put+0xaa/0x260 [ 621.330900] device_add+0x32d/0x1830 [ 621.330920] ? __pfx_device_add+0x10/0x10 [ 621.330942] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.330955] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.330972] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.330989] hci_conn_add_sysfs+0x117/0x1c0 [ 621.331003] le_conn_complete_evt+0x1246/0x1e40 [ 621.331025] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.331048] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.331067] ? __asan_memcpy+0x3d/0x60 [ 621.331084] hci_le_meta_evt+0x34b/0x530 [ 621.331100] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.331120] hci_event_packet+0x66c/0x10e0 [ 621.331139] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.331156] ? __pfx_hci_event_packet+0x10/0x10 [ 621.331174] ? mark_held_locks+0x49/0x80 [ 621.331190] ? kcov_remote_start+0x2ce/0x5a0 [ 621.331213] hci_rx_work+0x65b/0x8b0 [ 621.331233] process_one_work+0x8e1/0x1960 [ 621.331256] ? __pfx_process_one_work+0x10/0x10 [ 621.331272] ? move_linked_works+0x172/0x270 [ 621.331295] ? assign_work+0x196/0x240 [ 621.331312] worker_thread+0x67e/0xe90 [ 621.331329] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.331350] ? __pfx_worker_thread+0x10/0x10 [ 621.331367] kthread+0x3c8/0x740 [ 621.331382] ? __pfx_kthread+0x10/0x10 [ 621.331395] ? ret_from_fork+0x79/0x7a0 [ 621.331407] ? lock_release+0xc8/0x270 [ 621.331423] ? __pfx_kthread+0x10/0x10 [ 621.331438] ret_from_fork+0x67a/0x7a0 [ 621.331450] ? __pfx_ret_from_fork+0x10/0x10 [ 621.331464] ? __switch_to+0x759/0x1030 [ 621.331480] ? __pfx_kthread+0x10/0x10 [ 621.331496] ret_from_fork_asm+0x1a/0x30 [ 621.331520] [ 621.331665] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.332085] Bluetooth: hci6: failed to register connection device [ 621.396079] Bluetooth: hci3: failed to register connection device 06:40:32 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043b1f0a000000fb3faaaaaaaaaa00fffffffffff7ffffffffffff00000000000000592d5b8143720c7a5ec23e51a9dd3890203879af615de091ada1da9b825241a44c4a169a81cadcd46f8f6ecdb5a06c62ab20d4f233c5fcc67d2519c800000000000000000033334da070a61532190685d27a51547bc33a4867868f7538dc09674df5159e7e8c0b17c353e9e205525b0edd50b7134af1"], 0x22) syz_emit_vhci(0x0, 0x0) 06:40:32 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, 0x0, 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x6, 0x3f, 0x8, 0x3f, 0x0, 0x7fff, 0x84, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x663, 0x5}, 0x10, 0x1, 0x2, 0x5, 0xc83, 0xa1a, 0x55, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r0, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0), 0x26000, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="c80000002000000825bd7000fbdbdf2523000000b300218065ef656d3e603a603d4d288270fc22408bc1a2afcc8ea986d29bab3561922c03cd3ad4040b7fd950b3f50045831764a6c72b8ffa76241916c66a2cbf65039210888a7a122ac76bd13b697f6ba266b6ab5c830d30002051e316e193824b7109f5c3762a1ddc51c7f4dd465e66f187ac9722d89ff882b47405a8fcb726f33e423349ec53b7433b8ad9529c1f4b8a8404ffe5a867368b8a8fb74d476169082376281c2d2d2fff460fa1010d10bbd87b5700", @ANYRES64, @ANYRES32=r2], 0xc8}, 0x1, 0x0, 0x0, 0x240440c4}, 0x4845) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x9b3}) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 06:40:32 executing program 4: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x6ee0, 0x3, 0x3, 0x3c}, 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) 06:40:32 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:40:32 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ea31e0cafc00f299742d7e2aaaaaaaa00"/37], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x200, 0x3}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x33}, "4bb4f01982aa86f98f71b39c983e7ec020937479b89a5e6c24bca58b245618550084d5fa4b4e3206dcd69abd881febbc72ed26"}, 0x37) 06:40:32 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ea31e0cafc00f299742d7e2aaaaaaaa00"/37], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x200, 0x3}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x33}, "4bb4f01982aa86f98f71b39c983e7ec020937479b89a5e6c24bca58b245618550084d5fa4b4e3206dcd69abd881febbc72ed26"}, 0x37) 06:40:32 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x22) 06:40:32 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ea31e0cafc00f299742d7e2aaaaaaaa00"/37], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x7f, 0x4}, {0x200, 0x3}}}}, 0x11) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x33}, "4bb4f01982aa86f98f71b39c983e7ec020937479b89a5e6c24bca58b245618550084d5fa4b4e3206dcd69abd881febbc72ed26"}, 0x37) [ 621.557318] Bluetooth: hci3: unexpected event 0x3b length: 31 > 10 [ 621.557650] Bluetooth: hci3: unexpected event 0x3b length: 31 > 10 [ 621.612922] debugfs: '0' already exists in 'hci6' [ 621.614294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 621.615116] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.615133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.615141] Workqueue: hci6 hci_rx_work [ 621.615166] Call Trace: [ 621.615170] [ 621.615176] dump_stack_lvl+0xfa/0x120 [ 621.615192] sysfs_warn_dup+0x80/0xa0 [ 621.615206] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.615218] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.615230] ? find_held_lock+0x2b/0x80 [ 621.615245] ? lock_release+0xc8/0x270 [ 621.615262] ? do_raw_spin_unlock+0x53/0x220 [ 621.615281] kobject_add_internal+0x24c/0x9a0 [ 621.615301] kobject_add+0x157/0x240 [ 621.615316] ? __pfx_kobject_add+0x10/0x10 [ 621.615331] ? lock_release+0xc8/0x270 [ 621.615346] ? do_raw_spin_unlock+0x53/0x220 [ 621.615365] ? kobject_put+0xaa/0x260 [ 621.615385] device_add+0x32d/0x1830 [ 621.615407] ? __pfx_device_add+0x10/0x10 [ 621.615427] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.615441] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.615459] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.615476] hci_conn_add_sysfs+0x117/0x1c0 [ 621.615491] le_conn_complete_evt+0x1246/0x1e40 [ 621.615515] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.615538] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.615557] ? __asan_memcpy+0x3d/0x60 [ 621.615576] hci_le_meta_evt+0x34b/0x530 [ 621.615593] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.615614] hci_event_packet+0x66c/0x10e0 [ 621.615633] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.615650] ? __pfx_hci_event_packet+0x10/0x10 [ 621.615668] ? mark_held_locks+0x49/0x80 [ 621.615684] ? kcov_remote_start+0x2ce/0x5a0 [ 621.615709] hci_rx_work+0x65b/0x8b0 [ 621.615729] process_one_work+0x8e1/0x1960 [ 621.615754] ? __pfx_process_one_work+0x10/0x10 [ 621.615770] ? move_linked_works+0x172/0x270 [ 621.615794] ? assign_work+0x196/0x240 [ 621.615811] worker_thread+0x67e/0xe90 [ 621.615828] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.615851] ? __pfx_worker_thread+0x10/0x10 [ 621.615868] kthread+0x3c8/0x740 [ 621.615884] ? __pfx_kthread+0x10/0x10 [ 621.615898] ? ret_from_fork+0x79/0x7a0 [ 621.615911] ? lock_release+0xc8/0x270 [ 621.615927] ? __pfx_kthread+0x10/0x10 [ 621.615947] ret_from_fork+0x67a/0x7a0 [ 621.615959] ? __pfx_ret_from_fork+0x10/0x10 [ 621.615974] ? __switch_to+0x759/0x1030 [ 621.615994] ? __pfx_kthread+0x10/0x10 [ 621.616010] ret_from_fork_asm+0x1a/0x30 [ 621.616036] [ 621.634089] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.636176] Bluetooth: hci6: failed to register connection device [ 621.637715] debugfs: '0' already exists in 'hci6' [ 621.638279] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 621.639000] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.639015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.639022] Workqueue: hci6 hci_rx_work [ 621.639039] Call Trace: [ 621.639044] [ 621.639048] dump_stack_lvl+0xfa/0x120 [ 621.639061] sysfs_warn_dup+0x80/0xa0 [ 621.639073] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.639085] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.639096] ? find_held_lock+0x2b/0x80 [ 621.639108] ? lock_release+0xc8/0x270 [ 621.639124] ? do_raw_spin_unlock+0x53/0x220 [ 621.639143] kobject_add_internal+0x24c/0x9a0 [ 621.639161] kobject_add+0x157/0x240 [ 621.639176] ? __pfx_kobject_add+0x10/0x10 [ 621.639190] ? lock_release+0xc8/0x270 [ 621.639206] ? do_raw_spin_unlock+0x53/0x220 [ 621.639224] ? kobject_put+0xaa/0x260 [ 621.639244] device_add+0x32d/0x1830 [ 621.639264] ? __pfx_device_add+0x10/0x10 [ 621.639283] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.639295] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.639313] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.639330] hci_conn_add_sysfs+0x117/0x1c0 [ 621.639343] le_conn_complete_evt+0x1246/0x1e40 [ 621.639366] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.639389] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.639408] ? __asan_memcpy+0x3d/0x60 [ 621.639425] hci_le_meta_evt+0x34b/0x530 [ 621.639441] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.639462] hci_event_packet+0x66c/0x10e0 [ 621.639480] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.639497] ? __pfx_hci_event_packet+0x10/0x10 [ 621.639516] ? mark_held_locks+0x49/0x80 [ 621.639532] ? kcov_remote_start+0x2ce/0x5a0 [ 621.639555] hci_rx_work+0x65b/0x8b0 [ 621.639575] process_one_work+0x8e1/0x1960 [ 621.639598] ? __pfx_process_one_work+0x10/0x10 [ 621.639614] ? move_linked_works+0x172/0x270 [ 621.639636] ? assign_work+0x196/0x240 [ 621.639653] worker_thread+0x67e/0xe90 [ 621.639670] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.639691] ? __pfx_worker_thread+0x10/0x10 [ 621.639708] kthread+0x3c8/0x740 [ 621.639723] ? __pfx_kthread+0x10/0x10 [ 621.639736] ? ret_from_fork+0x79/0x7a0 [ 621.639748] ? lock_release+0xc8/0x270 [ 621.639763] ? __pfx_kthread+0x10/0x10 [ 621.639779] ret_from_fork+0x67a/0x7a0 [ 621.639791] ? __pfx_ret_from_fork+0x10/0x10 [ 621.639806] ? __switch_to+0x759/0x1030 [ 621.639821] ? __pfx_kthread+0x10/0x10 [ 621.639837] ret_from_fork_asm+0x1a/0x30 [ 621.639862] [ 621.639881] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.651630] debugfs: '0' already exists in 'hci5' [ 621.651926] Bluetooth: hci6: failed to register connection device [ 621.656848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 621.667025] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.667057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.667073] Workqueue: hci5 hci_rx_work [ 621.667107] Call Trace: [ 621.667115] [ 621.667125] dump_stack_lvl+0xfa/0x120 [ 621.667151] sysfs_warn_dup+0x80/0xa0 [ 621.667175] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.667199] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.667221] ? find_held_lock+0x2b/0x80 [ 621.667247] ? lock_release+0xc8/0x270 [ 621.667278] ? do_raw_spin_unlock+0x53/0x220 [ 621.667316] kobject_add_internal+0x24c/0x9a0 [ 621.667357] kobject_add+0x157/0x240 [ 621.667387] ? __pfx_kobject_add+0x10/0x10 [ 621.667416] ? lock_release+0xc8/0x270 [ 621.667447] ? do_raw_spin_unlock+0x53/0x220 [ 621.667483] ? kobject_put+0xaa/0x260 [ 621.667523] device_add+0x32d/0x1830 [ 621.667563] ? __pfx_device_add+0x10/0x10 [ 621.667601] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.667625] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.667660] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.667694] hci_conn_add_sysfs+0x117/0x1c0 [ 621.667721] le_conn_complete_evt+0x1246/0x1e40 [ 621.667765] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.667811] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.667849] ? __asan_memcpy+0x3d/0x60 [ 621.667883] hci_le_meta_evt+0x34b/0x530 [ 621.667915] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.667962] hci_event_packet+0x66c/0x10e0 [ 621.667999] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.668033] ? __pfx_hci_event_packet+0x10/0x10 [ 621.668070] ? mark_held_locks+0x49/0x80 [ 621.668102] ? kcov_remote_start+0x2ce/0x5a0 [ 621.668148] hci_rx_work+0x65b/0x8b0 [ 621.668188] process_one_work+0x8e1/0x1960 [ 621.668234] ? __pfx_process_one_work+0x10/0x10 [ 621.668266] ? move_linked_works+0x172/0x270 [ 621.668311] ? assign_work+0x196/0x240 [ 621.668345] worker_thread+0x67e/0xe90 [ 621.668380] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.668424] ? __pfx_worker_thread+0x10/0x10 [ 621.668458] kthread+0x3c8/0x740 [ 621.668487] ? __pfx_kthread+0x10/0x10 [ 621.668514] ? ret_from_fork+0x79/0x7a0 [ 621.668537] ? lock_release+0xc8/0x270 [ 621.668568] ? __pfx_kthread+0x10/0x10 [ 621.668599] ret_from_fork+0x67a/0x7a0 [ 621.668624] ? __pfx_ret_from_fork+0x10/0x10 [ 621.668652] ? __switch_to+0x759/0x1030 [ 621.668684] ? __pfx_kthread+0x10/0x10 [ 621.668714] ret_from_fork_asm+0x1a/0x30 [ 621.668764] [ 621.705033] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.707093] Bluetooth: hci5: failed to register connection device [ 621.725633] Bluetooth: hci2: command 0x0406 tx timeout [ 621.728553] debugfs: '0' already exists in 'hci2' [ 621.729846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 621.731409] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.731440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.731456] Workqueue: hci2 hci_rx_work [ 621.731496] Call Trace: [ 621.731505] [ 621.731515] dump_stack_lvl+0xfa/0x120 [ 621.731541] sysfs_warn_dup+0x80/0xa0 [ 621.731567] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.731591] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.731613] ? find_held_lock+0x2b/0x80 [ 621.731640] ? lock_release+0xc8/0x270 [ 621.731672] ? do_raw_spin_unlock+0x53/0x220 [ 621.731710] kobject_add_internal+0x24c/0x9a0 [ 621.731747] kobject_add+0x157/0x240 [ 621.731777] ? __pfx_kobject_add+0x10/0x10 [ 621.731805] ? lock_release+0xc8/0x270 [ 621.731837] ? do_raw_spin_unlock+0x53/0x220 [ 621.731873] ? kobject_put+0xaa/0x260 [ 621.731914] device_add+0x32d/0x1830 [ 621.731962] ? __pfx_device_add+0x10/0x10 [ 621.732000] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.732026] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.732060] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.732094] hci_conn_add_sysfs+0x117/0x1c0 [ 621.732122] le_conn_complete_evt+0x1246/0x1e40 [ 621.732167] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.732213] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.732252] ? __asan_memcpy+0x3d/0x60 [ 621.732286] hci_le_meta_evt+0x34b/0x530 [ 621.732318] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.732359] hci_event_packet+0x66c/0x10e0 [ 621.732396] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.732430] ? __pfx_hci_event_packet+0x10/0x10 [ 621.732466] ? mark_held_locks+0x49/0x80 [ 621.732498] ? kcov_remote_start+0x2ce/0x5a0 [ 621.732544] hci_rx_work+0x65b/0x8b0 [ 621.732584] process_one_work+0x8e1/0x1960 [ 621.732631] ? __pfx_process_one_work+0x10/0x10 [ 621.732663] ? move_linked_works+0x172/0x270 [ 621.732708] ? assign_work+0x196/0x240 [ 621.732742] worker_thread+0x67e/0xe90 [ 621.732775] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.732819] ? __pfx_worker_thread+0x10/0x10 [ 621.732853] kthread+0x3c8/0x740 [ 621.732882] ? __pfx_kthread+0x10/0x10 [ 621.732909] ? ret_from_fork+0x79/0x7a0 [ 621.732933] ? lock_release+0xc8/0x270 [ 621.732964] ? __pfx_kthread+0x10/0x10 [ 621.732995] ret_from_fork+0x67a/0x7a0 [ 621.733019] ? __pfx_ret_from_fork+0x10/0x10 [ 621.733048] ? __switch_to+0x759/0x1030 [ 621.733079] ? __pfx_kthread+0x10/0x10 [ 621.733110] ret_from_fork_asm+0x1a/0x30 [ 621.733160] [ 621.770155] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.772637] Bluetooth: hci2: failed to register connection device [ 621.774316] debugfs: '0' already exists in 'hci2' [ 621.775381] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 621.776724] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 621.776754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.776769] Workqueue: hci2 hci_rx_work [ 621.776802] Call Trace: [ 621.776811] [ 621.776820] dump_stack_lvl+0xfa/0x120 [ 621.776845] sysfs_warn_dup+0x80/0xa0 [ 621.776869] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.776893] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.776916] ? find_held_lock+0x2b/0x80 [ 621.776948] ? lock_release+0xc8/0x270 [ 621.776979] ? do_raw_spin_unlock+0x53/0x220 [ 621.777018] kobject_add_internal+0x24c/0x9a0 [ 621.777054] kobject_add+0x157/0x240 [ 621.777084] ? __pfx_kobject_add+0x10/0x10 [ 621.777112] ? lock_release+0xc8/0x270 [ 621.777144] ? do_raw_spin_unlock+0x53/0x220 [ 621.777180] ? kobject_put+0xaa/0x260 [ 621.777220] device_add+0x32d/0x1830 [ 621.777260] ? __pfx_device_add+0x10/0x10 [ 621.777298] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.777322] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.777357] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.777391] hci_conn_add_sysfs+0x117/0x1c0 [ 621.777418] le_conn_complete_evt+0x1246/0x1e40 [ 621.777463] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.777509] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.777548] ? __asan_memcpy+0x3d/0x60 [ 621.777581] hci_le_meta_evt+0x34b/0x530 [ 621.777613] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.777654] hci_event_packet+0x66c/0x10e0 [ 621.777690] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.777724] ? __pfx_hci_event_packet+0x10/0x10 [ 621.777760] ? mark_held_locks+0x49/0x80 [ 621.777792] ? kcov_remote_start+0x2ce/0x5a0 [ 621.777838] hci_rx_work+0x65b/0x8b0 [ 621.777878] process_one_work+0x8e1/0x1960 [ 621.777924] ? __pfx_process_one_work+0x10/0x10 [ 621.777956] ? move_linked_works+0x172/0x270 [ 621.778000] ? assign_work+0x196/0x240 [ 621.778035] worker_thread+0x67e/0xe90 [ 621.778068] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.778111] ? __pfx_worker_thread+0x10/0x10 [ 621.778145] kthread+0x3c8/0x740 [ 621.778174] ? __pfx_kthread+0x10/0x10 [ 621.778201] ? ret_from_fork+0x79/0x7a0 [ 621.778224] ? lock_release+0xc8/0x270 [ 621.778255] ? __pfx_kthread+0x10/0x10 [ 621.778286] ret_from_fork+0x67a/0x7a0 [ 621.778310] ? __pfx_ret_from_fork+0x10/0x10 [ 621.778339] ? __switch_to+0x759/0x1030 [ 621.778370] ? __pfx_kthread+0x10/0x10 [ 621.778401] ret_from_fork_asm+0x1a/0x30 [ 621.778450] [ 621.816165] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.818252] Bluetooth: hci2: failed to register connection device [ 622.489032] Bluetooth: hci3: command 0x0406 tx timeout [ 622.553045] Bluetooth: hci6: command 0x2016 tx timeout [ 622.937040] Bluetooth: hci5: command 0x0406 tx timeout [ 623.833037] Bluetooth: hci2: command 0x0406 tx timeout [ 624.537080] Bluetooth: hci3: command 0x0406 tx timeout [ 624.602000] Bluetooth: hci6: command 0x2016 tx timeout [ 624.985006] Bluetooth: hci5: command 0x0406 tx timeout [ 625.881205] Bluetooth: hci2: command 0x0406 tx timeout [ 626.585088] Bluetooth: hci3: command 0x0406 tx timeout [ 626.649087] Bluetooth: hci6: command 0x2016 tx timeout [ 627.033044] Bluetooth: hci5: command 0x0406 tx timeout [ 627.929061] Bluetooth: hci2: command 0x0406 tx timeout [ 628.633024] Bluetooth: hci3: command 0x0406 tx timeout [ 628.707464] Bluetooth: hci6: command 0x2016 tx timeout [ 629.081045] Bluetooth: hci5: command 0x0406 tx timeout [ 629.977089] Bluetooth: hci2: command 0x0406 tx timeout 06:40:41 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x2, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, @any, 0xfd}}}}, 0xf) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x1f, 0xc9}}}, 0x5) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1f, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xb}, "e64efc903402b993367936"}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x97}, "d81881875f3fc7935ab6bc81afc2e38e5adc0e35fee582817e663f0fe79eb38f560b7c05cd18ffbc9eec21d425a044291ae4f5a99f5936a7f1df53d1df8021e2062a8a59149932bbd6b5c2b6e79ee77851b1d827b4822f9205b80a55a6e6832533b099e6b6cae2951aece20dc2bbcc9e3728713c210743cc165b06fdf5e4cd92625d9bed2765435cd595a521f4b2b0774f707d9ac33813"}, 0x9b) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x100, 0x4, 0x1f, 0x4000}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x2, 0x2, 0xffff, 0x6}}]}}, 0x21) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xba}, "f53773da8ea117e69088764544fc39803f61bdec42346ff8b5ecf4a620c51f12b51ea57440c22cc31af43eac21506376a14be52547f5365756190d870239a384535accd9ebd9208460076ce84c4fa6298378b0fe5ed9064b1e94ebd8c4777fffa7ec1af1d31b309af4cc6cc625df3a86856bbbe523ee70bd64a3fa7924af1e4cfe537f9f184a6138ae43bee8ed7306001bd19c5404904c3201a946d7404dd2a812096dcd3813bf6fdf3cd69693be890ed65dafb1a169b7158af0"}, 0xbe) 06:40:41 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x7, 0xc8, "d9ca34", "339b2a", "24046d", "f39300", 0x4, 0x9, 0x1, 0x5, 0x1f, 0xb, 0x81, 0x860, 0x4c, 0xfc00}}}}, 0x20) 06:40:41 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100004018001b00", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @any, 0x1000, 0x1}, 0xe) 06:40:41 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, 0x0, 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:40:41 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:40:41 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x45, 0x83, 0x77d, 0x8d, 0xffffffffffffffc1, 0x10000, 0x2, 0xfffffee8, 0x6, 0x7, 0x7fffffff, 0x0, 0x0, 0x200}, 0x10, [0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) 06:40:41 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sync_file_range(r0, 0x5, 0x3f, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440300, 0x100) lremovexattr(0x0, 0x0) 06:40:41 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}]}}]}}, 0x2e) [ 630.470091] debugfs: '0' already exists in 'hci2' [ 630.471405] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 630.473130] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 630.473168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 630.473188] Workqueue: hci2 hci_rx_work [ 630.473236] Call Trace: [ 630.473246] [ 630.473258] dump_stack_lvl+0xfa/0x120 [ 630.473291] sysfs_warn_dup+0x80/0xa0 [ 630.473322] sysfs_create_dir_ns+0x23b/0x2a0 [ 630.473351] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 630.473379] ? find_held_lock+0x2b/0x80 [ 630.473412] ? lock_release+0xc8/0x270 [ 630.473450] ? do_raw_spin_unlock+0x53/0x220 [ 630.473496] kobject_add_internal+0x24c/0x9a0 [ 630.473541] kobject_add+0x157/0x240 [ 630.473578] ? __pfx_kobject_add+0x10/0x10 [ 630.473612] ? lock_release+0xc8/0x270 [ 630.473651] ? do_raw_spin_unlock+0x53/0x220 [ 630.473695] ? kobject_put+0xaa/0x260 [ 630.473744] device_add+0x32d/0x1830 [ 630.473795] ? __pfx_device_add+0x10/0x10 [ 630.473840] ? hci_debugfs_create_conn+0x10f/0x240 [ 630.473872] ? mgmt_send_event_skb+0x2f3/0x460 [ 630.473914] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 630.473966] hci_conn_add_sysfs+0x117/0x1c0 [ 630.474000] le_conn_complete_evt+0x1246/0x1e40 [ 630.474055] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 630.474110] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 630.474157] ? __asan_memcpy+0x3d/0x60 [ 630.474200] hci_le_meta_evt+0x34b/0x530 [ 630.474239] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 630.474289] hci_event_packet+0x66c/0x10e0 [ 630.474334] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 630.474376] ? __pfx_hci_event_packet+0x10/0x10 [ 630.474419] ? mark_held_locks+0x49/0x80 [ 630.474459] ? kcov_remote_start+0x2ce/0x5a0 [ 630.474516] hci_rx_work+0x65b/0x8b0 [ 630.474565] process_one_work+0x8e1/0x1960 [ 630.474623] ? __pfx_process_one_work+0x10/0x10 [ 630.474662] ? move_linked_works+0x172/0x270 [ 630.474717] ? assign_work+0x196/0x240 [ 630.474759] worker_thread+0x67e/0xe90 [ 630.474799] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 630.474852] ? __pfx_worker_thread+0x10/0x10 [ 630.474893] kthread+0x3c8/0x740 [ 630.474944] ? __pfx_kthread+0x10/0x10 [ 630.474977] ? ret_from_fork+0x79/0x7a0 [ 630.475006] ? lock_release+0xc8/0x270 [ 630.475044] ? __pfx_kthread+0x10/0x10 [ 630.475082] ret_from_fork+0x67a/0x7a0 [ 630.475111] ? __pfx_ret_from_fork+0x10/0x10 [ 630.475146] ? __switch_to+0x759/0x1030 [ 630.475184] ? __pfx_kthread+0x10/0x10 [ 630.475222] ret_from_fork_asm+0x1a/0x30 [ 630.475283] [ 630.516619] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 630.518538] Bluetooth: hci2: failed to register connection device 06:40:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fgetxattr(r0, &(0x7f0000000000)=@random={'osx.', '!{\x87.+\\\x00'}, &(0x7f00000000c0)=""/197, 0xc5) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x22) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x90) 06:40:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 06:40:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) r2 = fork() ptrace(0x10, r2) ptrace(0x10, r2) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4292, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x3, 0x1000, 0x3, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x101}, r2, 0x1, r1, 0x8) r4 = fork() ptrace(0x10, r4) ptrace(0x10, r4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0x7, 0x2, 0xf8, 0x0, 0x9, 0x3010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x2}, 0x41000, 0xd714, 0xfff, 0x4, 0x7, 0x2, 0xfffc, 0x0, 0x5, 0x0, 0x40}, r4, 0xc, r1, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x4000010, r3, 0xc0d37000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) [ 630.562115] Bluetooth: hci3: Malformed LE Event: 0x0b [ 630.563424] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 630.563493] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 630.564590] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 630.566853] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 630.567007] Bluetooth: hci3: Malformed LE Event: 0x0b [ 630.567394] Bluetooth: hci6: Unable to find connection with handle 0x00c8 [ 630.571192] Bluetooth: hci6: Unable to find connection with handle 0x00c8 [ 630.575561] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 630.575851] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 630.577296] Bluetooth: hci3: ACL packet for unknown connection handle 200 06:40:41 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:40:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) [ 630.578720] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 630.681187] Bluetooth: hci3: command 0x0406 tx timeout [ 630.701820] debugfs: '0' already exists in 'hci5' [ 630.703885] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 630.705116] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 630.705146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 630.705161] Workqueue: hci5 hci_rx_work [ 630.705198] Call Trace: [ 630.705206] [ 630.705216] dump_stack_lvl+0xfa/0x120 [ 630.705243] sysfs_warn_dup+0x80/0xa0 [ 630.705268] sysfs_create_dir_ns+0x23b/0x2a0 [ 630.705292] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 630.705314] ? find_held_lock+0x2b/0x80 [ 630.705340] ? lock_release+0xc8/0x270 [ 630.705370] ? do_raw_spin_unlock+0x53/0x220 [ 630.705407] kobject_add_internal+0x24c/0x9a0 [ 630.705443] kobject_add+0x157/0x240 [ 630.705471] ? __pfx_kobject_add+0x10/0x10 [ 630.705497] ? lock_release+0xc8/0x270 [ 630.705527] ? do_raw_spin_unlock+0x53/0x220 [ 630.705561] ? kobject_put+0xaa/0x260 [ 630.705598] device_add+0x32d/0x1830 [ 630.705637] ? __pfx_device_add+0x10/0x10 [ 630.705673] ? hci_debugfs_create_conn+0x10f/0x240 [ 630.705697] ? mgmt_send_event_skb+0x2f3/0x460 [ 630.705731] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 630.705762] hci_conn_add_sysfs+0x117/0x1c0 [ 630.705789] le_conn_complete_evt+0x1246/0x1e40 [ 630.705831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 630.705873] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 630.705909] ? __asan_memcpy+0x3d/0x60 [ 630.705949] hci_le_meta_evt+0x34b/0x530 [ 630.705980] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 630.706018] hci_event_packet+0x66c/0x10e0 [ 630.706053] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 630.706085] ? __pfx_hci_event_packet+0x10/0x10 [ 630.706118] ? mark_held_locks+0x49/0x80 [ 630.706148] ? kcov_remote_start+0x2ce/0x5a0 [ 630.706192] hci_rx_work+0x65b/0x8b0 [ 630.706230] process_one_work+0x8e1/0x1960 [ 630.706274] ? __pfx_process_one_work+0x10/0x10 [ 630.706304] ? move_linked_works+0x172/0x270 [ 630.706346] ? assign_work+0x196/0x240 [ 630.706378] worker_thread+0x67e/0xe90 [ 630.706409] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 630.706450] ? __pfx_worker_thread+0x10/0x10 [ 630.706482] kthread+0x3c8/0x740 [ 630.706509] ? __pfx_kthread+0x10/0x10 [ 630.706535] ? ret_from_fork+0x79/0x7a0 [ 630.706559] ? lock_release+0xc8/0x270 [ 630.706589] ? __pfx_kthread+0x10/0x10 [ 630.706618] ret_from_fork+0x67a/0x7a0 [ 630.706642] ? __pfx_ret_from_fork+0x10/0x10 [ 630.706669] ? __switch_to+0x759/0x1030 [ 630.706701] ? __pfx_kthread+0x10/0x10 [ 630.706730] ret_from_fork_asm+0x1a/0x30 [ 630.706777] [ 630.742436] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 630.746439] Bluetooth: hci5: failed to register connection device [ 630.747452] Bluetooth: hci6: command 0x2016 tx timeout [ 631.129027] Bluetooth: hci5: command 0x0406 tx timeout [ 632.025204] Bluetooth: hci2: command 0x0406 tx timeout [ 632.729086] Bluetooth: hci3: command 0x0406 tx timeout [ 632.794073] Bluetooth: hci6: command 0x2016 tx timeout [ 633.177121] Bluetooth: hci5: command 0x0406 tx timeout [ 633.382744] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 633.387634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 633.389654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 633.400357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 633.404554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 634.074778] Bluetooth: hci2: command 0x0406 tx timeout [ 634.778131] Bluetooth: hci3: command 0x0406 tx timeout [ 634.840995] Bluetooth: hci6: command 0x2016 tx timeout [ 635.225047] Bluetooth: hci5: command 0x0406 tx timeout [ 635.482036] Bluetooth: hci7: command tx timeout [ 636.121046] Bluetooth: hci2: command 0x0406 tx timeout [ 636.825129] Bluetooth: hci3: command 0x0406 tx timeout [ 636.889053] Bluetooth: hci6: command 0x2016 tx timeout [ 637.273040] Bluetooth: hci5: command 0x0406 tx timeout [ 637.529046] Bluetooth: hci7: command tx timeout [ 638.169214] Bluetooth: hci2: command 0x0406 tx timeout [ 638.873034] Bluetooth: hci3: command 0x0406 tx timeout [ 638.937010] Bluetooth: hci6: command 0x2016 tx timeout [ 639.321035] Bluetooth: hci5: command 0x0406 tx timeout [ 639.577016] Bluetooth: hci7: command tx timeout [ 640.218469] Bluetooth: hci2: command 0x0406 tx timeout [ 640.921071] Bluetooth: hci3: command 0x0406 tx timeout [ 641.370047] Bluetooth: hci5: command 0x0406 tx timeout [ 641.626051] Bluetooth: hci7: command tx timeout [ 642.267034] Bluetooth: hci2: command 0x0406 tx timeout [ 644.313056] Bluetooth: hci2: command 0x0406 tx timeout [ 646.361078] Bluetooth: hci2: command 0x0406 tx timeout [ 648.409050] Bluetooth: hci2: command 0x0406 tx timeout [ 650.457073] Bluetooth: hci2: command 0x0406 tx timeout [ 651.200255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.201608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.283690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.284800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.505042] Bluetooth: hci2: command 0x0406 tx timeout [ 654.553237] Bluetooth: hci2: command 0x0406 tx timeout [ 654.556892] Bluetooth: hci2: hardware error 0x00 [ 656.665069] Bluetooth: hci2: Opcode 0x0c03 failed: -110 06:41:13 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x22) 06:41:13 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}]}}]}}, 0x2e) 06:41:13 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendfile(r2, r0, &(0x7f0000000000)=0x4578, 0x5152) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) close_range(r1, r4, 0x0) 06:41:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:41:13 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:41:13 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xe}, {0xf91c, 0x0, 0x54, 0x7d, [0x0, 0x7ff, 0x0]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "ca323daa8be41862b1cce64089ac1cdaee280912e6e2611498284c7195851eebc9587e20d03b434f30c7172c16f236c6628e0c238fea30c41bd3418cfa028568c7318f1f0231ca078ee4c705de65d60e88bda157779e8cabb3c264b1"}, 0x60) 06:41:13 executing program 7: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7f}, "11b2ab0a209ea859c69f0de651140b74090cf222fabb6e70430894942757923d30f2a901845c0944726a3bfb30aa3333afd21cd145e2e4273e3d46c16597fb9691302fb7cfebedb3374c8213973c95f55f6e5a92d0abc49c07fb2ce0f835f69dddbcfbfe673ee801b3e363e198ea4dac8248c624b56a6e66c577581f5fbe99"}, 0x83) syz_emit_vhci(0x0, 0x0) 06:41:13 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:41:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:41:13 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) [ 662.112706] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 662.125963] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 662.126265] debugfs: '0' already exists in 'hci6' [ 662.128528] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 662.130129] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 662.130160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.130176] Workqueue: hci6 hci_rx_work [ 662.130216] Call Trace: [ 662.130224] [ 662.130234] dump_stack_lvl+0xfa/0x120 [ 662.130262] sysfs_warn_dup+0x80/0xa0 [ 662.130288] sysfs_create_dir_ns+0x23b/0x2a0 [ 662.130312] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 662.130334] ? find_held_lock+0x2b/0x80 [ 662.130393] ? lock_release+0xc8/0x270 [ 662.130425] ? do_raw_spin_unlock+0x53/0x220 [ 662.130462] kobject_add_internal+0x24c/0x9a0 [ 662.130500] kobject_add+0x157/0x240 [ 662.130530] ? __pfx_kobject_add+0x10/0x10 [ 662.130558] ? lock_release+0xc8/0x270 [ 662.130589] ? do_raw_spin_unlock+0x53/0x220 [ 662.130625] ? kobject_put+0xaa/0x260 [ 662.130666] device_add+0x32d/0x1830 [ 662.130708] ? __pfx_device_add+0x10/0x10 [ 662.130745] ? hci_debugfs_create_conn+0x10f/0x240 [ 662.130771] ? mgmt_send_event_skb+0x2f3/0x460 [ 662.130806] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 662.130840] hci_conn_add_sysfs+0x117/0x1c0 [ 662.130868] le_conn_complete_evt+0x1246/0x1e40 [ 662.130913] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 662.130965] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 662.131004] ? __asan_memcpy+0x3d/0x60 [ 662.131039] hci_le_meta_evt+0x34b/0x530 [ 662.131071] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 662.131112] hci_event_packet+0x66c/0x10e0 [ 662.131149] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 662.131183] ? __pfx_hci_event_packet+0x10/0x10 [ 662.131219] ? mark_held_locks+0x49/0x80 [ 662.131250] ? kcov_remote_start+0x2ce/0x5a0 [ 662.131298] hci_rx_work+0x65b/0x8b0 [ 662.131338] process_one_work+0x8e1/0x1960 [ 662.131397] ? __pfx_process_one_work+0x10/0x10 [ 662.131428] ? move_linked_works+0x172/0x270 [ 662.131474] ? assign_work+0x196/0x240 [ 662.131508] worker_thread+0x67e/0xe90 [ 662.131541] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 662.131584] ? __pfx_worker_thread+0x10/0x10 [ 662.131618] kthread+0x3c8/0x740 [ 662.131647] ? __pfx_kthread+0x10/0x10 [ 662.131674] ? ret_from_fork+0x79/0x7a0 [ 662.131699] ? lock_release+0xc8/0x270 [ 662.131730] ? __pfx_kthread+0x10/0x10 [ 662.131761] ret_from_fork+0x67a/0x7a0 [ 662.131785] ? __pfx_ret_from_fork+0x10/0x10 [ 662.131813] ? __switch_to+0x759/0x1030 [ 662.131845] ? __pfx_kthread+0x10/0x10 [ 662.131876] ret_from_fork_asm+0x1a/0x30 [ 662.131926] [ 662.167450] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 662.172141] Bluetooth: hci6: failed to register connection device [ 662.176782] Bluetooth: hci6: ACL packet for unknown connection handle 200 06:41:13 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:41:13 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_disconn_req={{0x6, 0x1f, 0x4}, {0xf001, 0x1ff}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x6, 0x6, 0x7}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x0, 0x2, 0x9, 0x100}}]}}, 0x26) [ 662.178165] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 662.212850] debugfs: '0' already exists in 'hci5' [ 662.215291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 662.216656] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 662.216686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.216703] Workqueue: hci5 hci_rx_work [ 662.216742] Call Trace: [ 662.216751] [ 662.216761] dump_stack_lvl+0xfa/0x120 [ 662.216790] sysfs_warn_dup+0x80/0xa0 [ 662.216816] sysfs_create_dir_ns+0x23b/0x2a0 [ 662.216841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 662.216863] ? find_held_lock+0x2b/0x80 [ 662.216891] ? lock_release+0xc8/0x270 [ 662.216924] ? do_raw_spin_unlock+0x53/0x220 [ 662.216970] kobject_add_internal+0x24c/0x9a0 [ 662.217009] kobject_add+0x157/0x240 [ 662.217039] ? __pfx_kobject_add+0x10/0x10 [ 662.217067] ? lock_release+0xc8/0x270 [ 662.217100] ? do_raw_spin_unlock+0x53/0x220 [ 662.217136] ? kobject_put+0xaa/0x260 [ 662.217179] device_add+0x32d/0x1830 [ 662.217222] ? __pfx_device_add+0x10/0x10 [ 662.217260] ? hci_debugfs_create_conn+0x10f/0x240 [ 662.217286] ? mgmt_send_event_skb+0x2f3/0x460 [ 662.217322] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 662.217357] hci_conn_add_sysfs+0x117/0x1c0 [ 662.217386] le_conn_complete_evt+0x1246/0x1e40 [ 662.217433] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 662.217482] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 662.217521] ? __asan_memcpy+0x3d/0x60 [ 662.217557] hci_le_meta_evt+0x34b/0x530 [ 662.217589] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 662.217632] hci_event_packet+0x66c/0x10e0 [ 662.217670] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 662.217704] ? __pfx_hci_event_packet+0x10/0x10 [ 662.217741] ? mark_held_locks+0x49/0x80 [ 662.217774] ? kcov_remote_start+0x2ce/0x5a0 [ 662.217822] hci_rx_work+0x65b/0x8b0 [ 662.217864] process_one_work+0x8e1/0x1960 [ 662.217915] ? __pfx_process_one_work+0x10/0x10 [ 662.217947] ? move_linked_works+0x172/0x270 [ 662.217994] ? assign_work+0x196/0x240 [ 662.218030] worker_thread+0x67e/0xe90 [ 662.218064] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 662.218109] ? __pfx_worker_thread+0x10/0x10 [ 662.218144] kthread+0x3c8/0x740 [ 662.218174] ? __pfx_kthread+0x10/0x10 [ 662.218202] ? ret_from_fork+0x79/0x7a0 [ 662.218226] ? lock_release+0xc8/0x270 [ 662.218258] ? __pfx_kthread+0x10/0x10 [ 662.218290] ret_from_fork+0x67a/0x7a0 [ 662.218315] ? __pfx_ret_from_fork+0x10/0x10 [ 662.218345] ? __switch_to+0x759/0x1030 [ 662.218377] ? __pfx_kthread+0x10/0x10 [ 662.218408] ret_from_fork_asm+0x1a/0x30 [ 662.218461] [ 662.253709] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 662.255885] Bluetooth: hci5: failed to register connection device 06:41:13 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}]}}]}}, 0x2e) 06:41:13 executing program 7: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x3f9}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x81, "61ea08", 0x0, 0x5, "57bf5f84531d2a0c7591da5f7cc58eeaa108c89500f8586b2012acc0a91f18a18845901969bf643b6879530c5a0717f92fc3e4d5d5647c5c1b16c60608ec3ec22a1c699f347972e8ab2b03b2b311498bd5494940a4c41fe68a6486c77c7640821cb57ce3bc1a834b0ee0d97f68f2d6e76f51031d2b6f196f97e2c0811b26c439432f1838f0e6e03de404af173f32fa81b8ec4fe61c90ef96d35120d9d97939f672fd586a03076c4cb39c6f4d2ad7fddd83f24c3b933a67c870a0d668bd51e4b2da194e7401b174bdb1d436c46cd82a9d4e1477e1681eaacaa4ed3a9ad64ffeed560f8c4c322529e6a7d2f4cd3f33591b"}, {@none, 0x0, 0x21, '\"u7', 0x6d65, 0x6, "8f03627835019242868d0b0c79f1607dc5a10304785474075b0858127be76c9e2ff76ab3d757b3fa690a633bc8e5e613cc6a89681e675882975487d56bbdd4dcc774c0d222cbaf4b38e903c71dbe95e23b6c3a6033902a93f81aefd4097eb20e5e7d681823c8be791bd5b012260a96426dd4620e5441add42881e7b2215bcb735fcf07dcd494753086c3af7cc7efe02647e2b7c7558c9ece7d01d10f70d7d42ef956d142ef6dff970050e51524aa60cbb871f0fea9cd8ee7f9f5c87bea098a4f52df56f27b8263d6c936e3e7d3ce13045faa1ce3147e0bccfd8eafa54f0283ff0807e39aec1a3b857520f8406e7bfe22"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x4, "26d741", 0x8a, 0x9, "2db740ac333f15348409f279b69209ffdbc4de746c5f61c7937551dbe6d4655b0f7d8f6377ed9271fedb72a048fdd50b0f962d56e5354be4b2e9c37d33611b92eade985c89abb4af92b1bfc65e773b6493cb53a2d653a139077591c44328c73dcc538c41118576dcc70b55cd7b174339df6a6f5774da316d25744c773413934979c47fbf78e339d5f9089d392a67eca7d6aedff02596fa7712918c8c5011b570558dfe4ed9166843bcfc94fb63e8e4e00a6e41af4e69141b8cb52e39a38743c537305f8613ee0868dd698bbb63eb7b3b0c7ae7cf2ba6d708e89bc1ffdb6a0b0f4fe7a0b7abd3a0f7f61ef16e4b5d8829"}, {@any, 0x20, 0x67, "16bcd1", 0x1, 0x80, "2de7ce1665337160020502c52e28c26bb0683a9f9521ae1be589e94068466607ad1adff8af078bfde7d877caedfd654714cb7f9a71866fe1a60c36c493c8ec71dae317b6c02883123c8cff7a40dde7405bfddeabb4b5efe130f33a927b14230787aa1ce8b1a4acf26999e6a1ab5746c3f2eec96207d9e349283fa9d3666b4473cbf862e601f2b89d7f7496a24dda66d872e93f86ce8090449beace7acd941d4b776aaec77b69c693d769384bf2344b1c16d8d050c73de780a298738f1f99cba5900dd69e8430cd4ab20346a243909818b64d2c77e678bf70f0f8313b4effbde737b7fcb9b51ca07ebd26bd4e87d21355"}]}}}, 0x3fc) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xe2e4, 0x5}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:41:13 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', r4, 0x4, 0x7f, 0x0, 0x400, 0x40, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7800, 0x7, 0x8000}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x22) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@private, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x7, 0x1, 0x7ff, 0xffff, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x66, 0x0, 0x93, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x1, [{@rand_addr=0x64010100}, {@multicast1, 0x7}]}, @timestamp={0x44, 0xc, 0xa6, 0x0, 0x2, [0x7, 0xaf0]}, @ssrr={0x89, 0x7, 0xfd, [@loopback]}, @timestamp_addr={0x44, 0x54, 0x4b, 0x1, 0x6, [{@multicast1, 0x1b8}, {@loopback, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@loopback, 0x5}, {@empty, 0x7fffffff}, {@multicast2}, {@local, 0x82e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2}, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "02998e29a0ea195778653283ea4cc0e986fce930a02e780126786653bbd0ddc9f0a88ccf5c5436cea9156b1ec09b24e959845d6b082fcd37cb657e006e285f14b9328db75b566bfc0f38b776e2248aefd8474b589a74875003abd353a3954d167f7ea336d5c05e2365fd53e8cd4cac997c813a69b893679d4c433b021e2b79bb33bfb9c6212ca02c8ec366d204e6f40d0d1f316f5e5fb2e9f8cd3e59f22adc19e54e30"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+(\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{]-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x4000008) 06:41:13 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:41:13 executing program 3: r0 = creat(0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) [ 662.347324] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 662.350594] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 662.360288] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 662.360657] Bluetooth: hci3: ACL packet for unknown connection handle 200 06:41:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14202, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000200)='N', 0x1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="643fd1c1c08446e9b25d7b566bf843d7a08b232a6cc14d14dec50251e221bd04fcdd7437c5c5d01a0bdff542e1ea8a79f54a62b2e3d057f196f64c8c8e33", 0x3e}, {&(0x7f0000000040)="7da3c8504ef89cd2c1861f93470805f7df00d062f425b809f26640e23c6428099d94a03bcb9efd2d199d575b6a18b8adff0ea6353c31708efb681c7844a1", 0x3e}, {&(0x7f0000000080)="0fe8732e7fd83340bfd9cb91fb672516e47dd2", 0x13}, {&(0x7f00000000c0)="775f39b78c199dd8cc61ed210ca2b5488e6d3f75d36887f6e2374c84790a361c44134558a02a90988ee7130d9e7a054c7fe101be8015db75da078a92fd25ae65f98e06de", 0x44}], 0x4, 0xb, 0x1, {0x2}}, 0xfffffff7) 06:41:13 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xe}, {0xf91c, 0x0, 0x54, 0x7d, [0x0, 0x7ff, 0x0]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "ca323daa8be41862b1cce64089ac1cdaee280912e6e2611498284c7195851eebc9587e20d03b434f30c7172c16f236c6628e0c238fea30c41bd3418cfa028568c7318f1f0231ca078ee4c705de65d60e88bda157779e8cabb3c264b1"}, 0x60) 06:41:13 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00908d34b5aaaaaaaaaa00ffffffff05000000ffffffff00000000000000"], 0x22) [ 662.431685] debugfs: '0' already exists in 'hci5' [ 662.435638] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 662.437008] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 662.437039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.437055] Workqueue: hci5 hci_rx_work [ 662.437095] Call Trace: [ 662.437104] [ 662.437113] dump_stack_lvl+0xfa/0x120 [ 662.437142] sysfs_warn_dup+0x80/0xa0 [ 662.437167] sysfs_create_dir_ns+0x23b/0x2a0 [ 662.437191] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 662.437214] ? find_held_lock+0x2b/0x80 [ 662.437241] ? lock_release+0xc8/0x270 [ 662.437274] ? do_raw_spin_unlock+0x53/0x220 [ 662.437312] kobject_add_internal+0x24c/0x9a0 [ 662.437348] kobject_add+0x157/0x240 [ 662.437379] ? __pfx_kobject_add+0x10/0x10 [ 662.437407] ? lock_release+0xc8/0x270 [ 662.437439] ? do_raw_spin_unlock+0x53/0x220 [ 662.437475] ? kobject_put+0xaa/0x260 [ 662.437515] device_add+0x32d/0x1830 [ 662.437557] ? __pfx_device_add+0x10/0x10 [ 662.437594] ? hci_debugfs_create_conn+0x10f/0x240 [ 662.437620] ? mgmt_send_event_skb+0x2f3/0x460 [ 662.437655] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 662.437689] hci_conn_add_sysfs+0x117/0x1c0 [ 662.437716] le_conn_complete_evt+0x1246/0x1e40 [ 662.437761] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 662.437806] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 662.437845] ? __asan_memcpy+0x3d/0x60 [ 662.437880] hci_le_meta_evt+0x34b/0x530 [ 662.437912] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 662.437960] hci_event_packet+0x66c/0x10e0 [ 662.437997] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 662.438031] ? __pfx_hci_event_packet+0x10/0x10 [ 662.438067] ? mark_held_locks+0x49/0x80 [ 662.438099] ? kcov_remote_start+0x2ce/0x5a0 [ 662.438146] hci_rx_work+0x65b/0x8b0 [ 662.438186] process_one_work+0x8e1/0x1960 [ 662.438233] ? __pfx_process_one_work+0x10/0x10 [ 662.438265] ? move_linked_works+0x172/0x270 [ 662.438310] ? assign_work+0x196/0x240 [ 662.438345] worker_thread+0x67e/0xe90 [ 662.438377] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 662.438421] ? __pfx_worker_thread+0x10/0x10 [ 662.438455] kthread+0x3c8/0x740 [ 662.438484] ? __pfx_kthread+0x10/0x10 [ 662.438511] ? ret_from_fork+0x79/0x7a0 [ 662.438536] ? lock_release+0xc8/0x270 [ 662.438567] ? __pfx_kthread+0x10/0x10 [ 662.438597] ret_from_fork+0x67a/0x7a0 [ 662.438622] ? __pfx_ret_from_fork+0x10/0x10 [ 662.438650] ? __switch_to+0x759/0x1030 [ 662.438681] ? __pfx_kthread+0x10/0x10 [ 662.438712] ret_from_fork_asm+0x1a/0x30 [ 662.438761] [ 662.473859] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 662.475877] Bluetooth: hci5: failed to register connection device [ 664.089119] Bluetooth: hci5: command 0x0406 tx timeout [ 664.153313] Bluetooth: hci6: command 0x2016 tx timeout [ 666.137156] Bluetooth: hci5: command 0x0406 tx timeout [ 666.201093] Bluetooth: hci6: command 0x2016 tx timeout [ 668.185119] Bluetooth: hci5: command 0x0406 tx timeout [ 668.249060] Bluetooth: hci6: command 0x2016 tx timeout [ 670.233032] Bluetooth: hci5: command 0x0406 tx timeout [ 670.297787] Bluetooth: hci6: command 0x2016 tx timeout 06:41:23 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="003e1fc00800000000aaaaaa99aa00ffffffffe9000000ffffffff00000000000000"], 0x22) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_rsp={{0xf, 0xf7, 0x4}, {0x3, 0x2}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x6f}, @l2cap_cid_signaling={{0x6b}, [@l2cap_create_chan_rsp={{0xd, 0xc7, 0x8}, {0x1000, 0x81, 0x9, 0x5}}, @l2cap_conf_req={{0x4, 0x0, 0x5b}, {0x81, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x3, 0x80, 0x6, 0x17ac}}, @l2cap_conf_flushto={0x2, 0x2, 0xfe00}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0xba, 0xffff, 0x6, 0x8dc40}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x0, 0x81, 0x3ff, 0x2, 0x3ff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8000}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x40, 0xff, 0x5, 0x3, 0x4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x74) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00090345c800"], 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 06:41:23 executing program 5: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x1180a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100, 0x40800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x81, 0x7f, 0x0, 0xe796, 0x20000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x8180, 0x400, 0x20, 0x4, 0x7a8, 0x7acc, 0x6, 0x0, 0x1, 0x0, 0x63}, r5, 0x6, r7, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) io_submit(0x0, 0x6, &(0x7f0000001840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xffc0, 0xffffffffffffffff, &(0x7f0000000580)="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", 0x1000, 0x2, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000000240)="26f9924e7a6e930c8117b029151d2cffa0a0d19b7817a1f6cf930972f8e2efd2d817de1e234ec5d4f4c3821cd656dbd17ec1edc45c6536ac4ab2dc5087bce812d5cfe8ffefa5a9b81301a9213528d038ca4703b40f661fec9907d34fb16d5de8537a880ca626e7f939515b52478aaf989216489809ab63862d51c76fd1ea21ac8bc8f5c0cce2df96b4ba566ad17a8af26202ddb711b959e57dc83afb6f2a429c08fbd4c10f4f827fb08353034c5ee12f926c8b92814458984d1f6826e247e9df59055e42f4d1d4d084d5a25b73b01a218ebc", 0xd2, 0x81, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000400)="0d10df1a812f09458ffbc6a4c7e04058acf86e88c82a08f5ef78f6fa8a74c8e4689df9668cbc5c1b15dbe4a4f018f26618c72c9e07eb7d23de74d2ff15f79de2acb5454d9b0ceb25f3f9442c7dc18dfb272b0cda3e76374d655e04466295b3609af774ef2e87e26be081ad1768d0ccd1f4fdae", 0x73, 0x4, 0x0, 0x1, r7}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x48, r9, &(0x7f00000015c0)="cb4c7ab9f1a67c0445c29868fd83e3d2f774907826bd7d1ff7a5d16d448c91da2b2496310757a798152ad298a98f4ddafd36357b77d7734e28a388c17fadca28bbd2f5fd4647a75371694cf678d33b4e31ea4e9104238b48eb05c3484a0dbd", 0x5f, 0x579b, 0x0, 0x1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0xe6d, r2, &(0x7f0000001680)="7650c3c2f602daef921dbc48543e5d88c4c470d86c3016a4d9eb35d8797027b7a703f002278c87173a5c0247295e5e97ac4826345c3f925078ec81ad9aa2487d5fe5b99c07a98768ed0f2bb42cba933fe8ad2dfb732c2eebc283f3470f0379c837ccb69cd0b0f79ab75d4324", 0x6c, 0x5, 0x0, 0x3, r0}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x503, r0, &(0x7f0000001740)="b3e2fc1fbadbf8d71f7a33d44d3428cc9a95f9fae770dad1409731bbed5949bed1d7fdaf3ef08c8bc05c061a26f15a23c72be72867a0286ac2b3f988edc8c22b1a7424b0dd1df7d43a8c34c2db543fda9d38286ea634b9f231f1439f6d2324ce903ed11e6990bca1c767aa58ec3df52e3c24a51ee4ff7665b49e09ec9e1cccaca6b521", 0x83, 0x4, 0x0, 0x1, r4}]) 06:41:23 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:41:23 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb5}, "18f2c05dd7ff335239927703292b757dbbb435f4600b0de6601a43fdf1258832df049cad3dda78c83e07915a2a53004c222db657f0ceb5f9f1c53eea54d8124647f4118136936b85f14b0898a41af84c3bca1bfcc9cf95fe5604bb5bacbb5fa63e2906cac8045896a2f8a3877e743c8de68c174d3a676ef1b042859ca82839ae15f09d607c8a5a3bbd4504a1fd76ac1179b2b17ffcf6b0fb35182e09afc68b798d44125488c3b20b4621215e5cfde08a8e86bf940e"}, 0xb9) 06:41:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3, 0x2, 0x100000001}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:41:23 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:41:23 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc8, 0xa4e3, 0x1, 0x35e4, 0x8}}}}, 0xe) 06:41:23 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xe}, {0xf91c, 0x0, 0x54, 0x7d, [0x0, 0x7ff, 0x0]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "ca323daa8be41862b1cce64089ac1cdaee280912e6e2611498284c7195851eebc9587e20d03b434f30c7172c16f236c6628e0c238fea30c41bd3418cfa028568c7318f1f0231ca078ee4c705de65d60e88bda157779e8cabb3c264b1"}, 0x60) [ 671.977231] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 671.981403] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 671.984231] debugfs: '0' already exists in 'hci3' [ 671.985353] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 671.986760] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 671.986790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.986806] Workqueue: hci3 hci_rx_work [ 671.986843] Call Trace: [ 671.986851] [ 671.986860] dump_stack_lvl+0xfa/0x120 [ 671.986886] sysfs_warn_dup+0x80/0xa0 [ 671.986910] sysfs_create_dir_ns+0x23b/0x2a0 [ 671.986940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 671.986965] ? find_held_lock+0x2b/0x80 [ 671.986992] ? lock_release+0xc8/0x270 [ 671.987022] ? do_raw_spin_unlock+0x53/0x220 [ 671.987057] kobject_add_internal+0x24c/0x9a0 [ 671.987091] kobject_add+0x157/0x240 [ 671.987119] ? __pfx_kobject_add+0x10/0x10 [ 671.987146] ? lock_release+0xc8/0x270 [ 671.987175] ? do_raw_spin_unlock+0x53/0x220 [ 671.987208] ? kobject_put+0xaa/0x260 [ 671.987246] device_add+0x32d/0x1830 [ 671.987284] ? __pfx_device_add+0x10/0x10 [ 671.987319] ? hci_debugfs_create_conn+0x10f/0x240 [ 671.987343] ? mgmt_send_event_skb+0x2f3/0x460 [ 671.987377] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 671.987408] hci_conn_add_sysfs+0x117/0x1c0 [ 671.987434] le_conn_complete_evt+0x1246/0x1e40 [ 671.987476] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 671.987531] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 671.987566] ? __asan_memcpy+0x3d/0x60 [ 671.987599] hci_le_meta_evt+0x34b/0x530 [ 671.987629] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 671.987667] hci_event_packet+0x66c/0x10e0 [ 671.987701] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 671.987733] ? __pfx_hci_event_packet+0x10/0x10 [ 671.987766] ? mark_held_locks+0x49/0x80 [ 671.987796] ? kcov_remote_start+0x2ce/0x5a0 [ 671.987840] hci_rx_work+0x65b/0x8b0 [ 671.987877] process_one_work+0x8e1/0x1960 [ 671.987922] ? __pfx_process_one_work+0x10/0x10 [ 671.987952] ? move_linked_works+0x172/0x270 [ 671.987994] ? assign_work+0x196/0x240 [ 671.988025] worker_thread+0x67e/0xe90 [ 671.988055] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 671.988096] ? __pfx_worker_thread+0x10/0x10 [ 671.988127] kthread+0x3c8/0x740 [ 671.988154] ? __pfx_kthread+0x10/0x10 [ 671.988180] ? ret_from_fork+0x79/0x7a0 [ 671.988202] ? lock_release+0xc8/0x270 [ 671.988231] ? __pfx_kthread+0x10/0x10 [ 671.988260] ret_from_fork+0x67a/0x7a0 [ 671.988282] ? __pfx_ret_from_fork+0x10/0x10 [ 671.988308] ? __switch_to+0x759/0x1030 [ 671.988338] ? __pfx_kthread+0x10/0x10 [ 671.988366] ret_from_fork_asm+0x1a/0x30 [ 671.988413] [ 672.021566] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 672.025838] Bluetooth: hci3: failed to register connection device [ 672.035235] debugfs: '0' already exists in 'hci3' [ 672.036355] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 672.037612] CPU: 1 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 672.037642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.037657] Workqueue: hci3 hci_rx_work [ 672.037692] Call Trace: [ 672.037701] [ 672.037710] dump_stack_lvl+0xfa/0x120 [ 672.037736] sysfs_warn_dup+0x80/0xa0 [ 672.037760] sysfs_create_dir_ns+0x23b/0x2a0 [ 672.037782] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 672.037803] ? find_held_lock+0x2b/0x80 [ 672.037829] ? lock_release+0xc8/0x270 [ 672.037860] ? do_raw_spin_unlock+0x53/0x220 [ 672.037896] kobject_add_internal+0x24c/0x9a0 [ 672.037939] kobject_add+0x157/0x240 [ 672.037967] ? __pfx_kobject_add+0x10/0x10 [ 672.037994] ? lock_release+0xc8/0x270 [ 672.038023] ? do_raw_spin_unlock+0x53/0x220 [ 672.038057] ? kobject_put+0xaa/0x260 [ 672.038094] device_add+0x32d/0x1830 [ 672.038133] ? __pfx_device_add+0x10/0x10 [ 672.038187] ? hci_debugfs_create_conn+0x10f/0x240 [ 672.038219] ? mgmt_send_event_skb+0x2f3/0x460 [ 672.038252] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 672.038283] hci_conn_add_sysfs+0x117/0x1c0 [ 672.038310] le_conn_complete_evt+0x1246/0x1e40 [ 672.038351] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 672.038393] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 672.038429] ? __asan_memcpy+0x3d/0x60 [ 672.038461] hci_le_meta_evt+0x34b/0x530 [ 672.038491] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 672.038529] hci_event_packet+0x66c/0x10e0 [ 672.038565] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 672.038596] ? __pfx_hci_event_packet+0x10/0x10 [ 672.038629] ? mark_held_locks+0x49/0x80 [ 672.038659] ? kcov_remote_start+0x2ce/0x5a0 [ 672.038703] hci_rx_work+0x65b/0x8b0 [ 672.038740] process_one_work+0x8e1/0x1960 [ 672.038785] ? __pfx_process_one_work+0x10/0x10 [ 672.038814] ? move_linked_works+0x172/0x270 [ 672.038856] ? assign_work+0x196/0x240 [ 672.038887] worker_thread+0x67e/0xe90 [ 672.038917] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 672.038957] ? __pfx_worker_thread+0x10/0x10 [ 672.038988] kthread+0x3c8/0x740 [ 672.039015] ? __pfx_kthread+0x10/0x10 [ 672.039040] ? ret_from_fork+0x79/0x7a0 [ 672.039063] ? lock_release+0xc8/0x270 [ 672.039092] ? __pfx_kthread+0x10/0x10 [ 672.039120] ret_from_fork+0x67a/0x7a0 [ 672.039147] ? __pfx_ret_from_fork+0x10/0x10 [ 672.039187] ? __switch_to+0x759/0x1030 [ 672.039232] ? __pfx_kthread+0x10/0x10 [ 672.039263] ret_from_fork_asm+0x1a/0x30 [ 672.039310] [ 672.043590] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 672.043742] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 672.074524] Bluetooth: hci3: failed to register connection device [ 672.078694] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 672.281025] Bluetooth: hci5: command 0x0406 tx timeout [ 674.137025] Bluetooth: hci3: command 0x0406 tx timeout [ 674.329006] Bluetooth: hci5: command 0x0406 tx timeout [ 676.185273] Bluetooth: hci3: command 0x0406 tx timeout [ 676.377159] Bluetooth: hci5: command 0x0406 tx timeout [ 678.234026] Bluetooth: hci3: command 0x0406 tx timeout [ 678.425064] Bluetooth: hci5: command 0x0406 tx timeout [ 680.281036] Bluetooth: hci3: command 0x0406 tx timeout 06:41:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:41:33 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xe}, {0xf91c, 0x0, 0x54, 0x7d, [0x0, 0x7ff, 0x0]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5c}, "ca323daa8be41862b1cce64089ac1cdaee280912e6e2611498284c7195851eebc9587e20d03b434f30c7172c16f236c6628e0c238fea30c41bd3418cfa028568c7318f1f0231ca078ee4c705de65d60e88bda157779e8cabb3c264b1"}, 0x60) 06:41:33 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:41:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 06:41:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x62, 0x81, 0x3, 0x47, 0x0, 0xfffffffffffffffe, 0x1, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x2070, 0x8, 0x6, 0x5, 0x6, 0x5, 0x6, 0x0, 0x1000, 0x0, 0xbc}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_setup(0x20df, &(0x7f00000000c0)={0x0, 0x6935, 0x20, 0x0, 0x116, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_io_uring_submit(r4, r5, &(0x7f0000002580)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4000, @fd=r6, 0x14, &(0x7f0000000300)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x4, 0x3, 0x1}, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 06:41:33 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x6, 0x4}, {0x81}}}}, 0x11) 06:41:33 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) 06:41:33 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) 06:41:33 executing program 1: syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0xd1, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xfd, 0x9, 0x0, 0xff}, 0xf8, &(0x7f0000000140)={0x5, 0xf, 0xf8, 0x5, [@generic={0xc6, 0x10, 0x4, "98efe2a70de3d57a3d385bef31412362168ff3ad494c747271e4661bd4907ad46fcd684be554891208fa04e1b0b19d9fc3469ae8492e06d4bec8d07bae7471f0358328ba5199be0d8dd916f541094fe0b73ef2d59469779d086d0d31cea42b9a11a8b9a0d6d7f8cadc48a6c0533358e7f86f983663b4dda7a06868642e25cf03772e43128f0db124c1f3d52ebe2ed60d8ab7267fd1c9b00fa96bb130c298083148ff7e1fd754a6c76e2638a2546d640a957fae3ec4504d905ecbfd366439ec4b760a92"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x100, 0xf0f, 0xffe0, [0xffc000, 0x30, 0xff0000, 0xff0030, 0xff000f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0xb, 0x7fff}]}, 0x7, [{0xf1, &(0x7f0000000240)=@string={0xf1, 0x3, "8dad953796869f7caae57b8e6fe9e2e4d937a5d4fbdd7dbfc6f5cf573be808a19faafec951fe7c063400ab4d10a67e554a87984e9c4f94218a6a872eb592e7023f4a95b28b9f3ce152a553ea440075d8b610df48820b54c3de96f8b4debba70d6ad7233de53036907dc8be52d92927cd48eb379dc65f7933dc9a9f5b87819e18f7ab4510c719fbc5b2a238d7857f74dc1ff489eea8a62923340269d675b25bac46bfe1f7a75fa59bd900a5c87afccf18a661cef602650a40462b2b425604bbab4b0cb824eb576e9eb3601f820ce854e1f01f172c43c7b9a9c0ee04080af4ba14bba76805147a3ea336d5bd77b61b24"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44f}}, {0xa1, &(0x7f0000000380)=@string={0xa1, 0x3, "323d2e888a7ab6773b622d5efabca52ffc88c2b4d505583bf6e2ab08f883e2c5ba0b084458af4d251dfa5e0de677c3a7a680f4dbac4f3c87f32cd026bd45d7b0ae20bf00db017e05d9320ca9dc6d377fab907d954926f514defe2a28a7aaee8374f715df121e9157e7b7414de89d6a9eea2b0dc5b417a5a13bd81a8dd09ef8e2f6e322dca056105a7b454fea216c090b58cd32950b553f777c0fc0d6c26777"}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "c7745b3fccdd946f15505cd756d73a7f47da5a8584324538be71990f65deb5c573daab042d7ff9a83095f4fe416e99769bd8f946a74b5fa8b810e8728b449139a42a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0xf2, &(0x7f0000000540)=@string={0xf2, 0x3, "ae12bf36d8fcfbcde7811f1c35f6fc8cf4248692d4066784bdda31cafd9670f1fa522813f8465fb24ce4de935da83feeaa6044489357d62df0d2bff8df5ba94729ad6392136b64d6d652a7f24930d388b569b0ef2c6153feca0ad6124ad3ab2ffd5dbdef91f31c387f1efd50f3fad7d38a4b7485c9a552906911e3e1f8c3eb56372be295be0cae9339f62614166753c1a36b8dd69793059fa42f068aa031ebdea8a91794e30babd790390d601a974a9fd42a07affdb8140ccbcda9d1558e7e843a884fe9e933f3e6548c3492e28db2b27ec269627bc83b3957623e08dd92bcc5e3a1f3de72dc0d2f945ac9ef378e9383"}}]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_usb_connect(0x4, 0x674, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0xa2, 0x0, 0x40, 0xca33, 0x7ab3, 0x6c4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x662, 0x3, 0x6, 0xae, 0xc0, 0x80, [{{0x9, 0x4, 0x8c, 0xc0, 0x10, 0x8, 0x2, 0x0, 0xed, [], [{{0x9, 0x5, 0x8, 0x2, 0x10, 0x20, 0x6, 0xff, [@generic={0x97, 0x8, "8b3235af8db3c5653107395e9cc489236a5f8a1ce94e984b3508e1b126f85313ca6cf77d7e4d88184a75192739a81110733189f07b36d0563abaeb01c165a4dab5cf3bb393dd6ab54ec4ef0666a1aff1b7dbb6c07150432b8221b7a3a9408d5f7ed3553057a7a69881c2e388e37320d56bf1c99cd2879d92d18099fa47fa3254ee56ddf6331ac11d2f3b841ba833a2164028f0deff"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xa441}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x17, 0xf0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x4, 0x55}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x7, 0x40, 0x7}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x20, 0x3, 0x3f, [@generic={0x2d, 0x9, "c49d5be00ca6a8e2ad353294ee594465be6815e7db34bf24d639d912d0ad4e75cb47b48d89c24a8071ab9e"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x197, 0xff, 0x80}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x20, 0x1, 0x2, [@generic={0xc5, 0x21, "5609ffab8b3a56505d18726ec25ddb5591ae2df818c6b467bb18876448a05943544c8bdd437fb957ab2b619ea69d0dd03564e0e17f935ad955a445a1b65dd9673f3031d4502e7d23fa95a5b6b159e7dd6f0da5506c1d8e420db0c9f739b7d0568c56719cd51efe611f0287e782709957ded68960a3b313f41a5d09d3b31fdc827ef2c4ecd4171ab8c8ed19ad70c7bd21ed9933a06a7fb49554fd1aa0f5b0a5c4e92768798b79144b1bda4d0d3cf88373fd63353b0cd991b4964dd9beca2b3197a4f294"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x80, 0x58, 0x4, [@generic={0xc4, 0x11, "c6fd84c92776182f242cd639980a386be783a5a9768a3855bca5d44f73ff4ba6f277de6b9c54d728d7fbab43ee5c58224fc4021b4ff6bde7827c36b79fccbb0277f763cc05345eb8379244e90033fc095c036fe13097da829a3af35e93df2565e2b0331d41b759a2ae13cccffe245ee258e96202a2570f6c901a962b489f78611c86f8fd77baed1b93294e5b051b176ab481ffae5621994c869ac955ea13494895c370375abd54508b0d67eee1ae16faee1e5f960fd0188f62d886d6545fee5fd82a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x5, 0x3f, 0x3}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x81, 0x1, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x20, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0xfb, [@generic={0x75, 0x5, "818f2dd979f09186e27bc856bfcb85187fdecca2e3ccada8633c7d30129946f4c8f5f913eb4ccf95627e41b0faeef0cc3b7fb2c37a8878c698c166d7e04ee630c31848c88b8607936fcbb39e13263f2cd0c08d25b67bb54ac6e67d89b1a2ccc73adffe09650d4f0a148a5ee1737651076ae528"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xdf, 0x6b, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x7f, 0x8, [@generic={0x41, 0x0, "b94ceba15ac882da1ff20da7156cc0763b4242f65ff654f95969f9259bf9814864a933da23bf327c3fbec73dbe3c0d440cc02992b8061b536a9a3df22d743a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x80, 0x4, 0x1f}}]}}, {{0x9, 0x4, 0x8b, 0x9, 0x4, 0x81, 0x9d, 0x7a, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x40, 0x3f, 0x4b, [@generic={0x2f, 0xf, "c30ba441d65719600686d301ae473da16ba444cb1b2240fa15741a8f4eb86aacf82df9111b5d54f871f77eabee"}, @generic={0xba, 0x23, "3476f4894404c9098b24d3355745541ed2c075203cdcbd64b3093bb6b6efd37c82ac73d529f528601fa03608c5a5ec4c9e3f1fb6779ee6b98ac8592053d4fd426c022f0052b7d48ff10da6909407661a0280a3545fc5281eeb53a3220ce6ec65ba710d363fd14fb0ee925d590ab0db635be2aa588d1cbd1144cfecd930825d34126e77ea04710cc22b081cf0af6bd3849b9ff4f93eb8d44e563aaedcce5d7e2a40be859c903be307349a2c79234d3834225b8b03e86bd0f5"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x1, 0xc9, [@generic={0x5f, 0x11, "6144aff1cdfa1ba6e71ec54c9b0f1873fa704544b060aa63c23faec7b27c3e80104c9838d53fc3e75b977224df60e62b9bf226844b3093ec5883b70e5c80b6d9e378ff3ceb7e82a97f17ac5631c7ef089ff6605e7eaad04b16851a9289"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xd9a}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x77, 0xaf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @generic={0xbd, 0x11, "1c9501418ba9ed1be945d3cf1dfeeb518e1402ec9a0a6ac23601e8175596573671cfd71fa7988761d4c312bac55e5f03111481452b7386b97503b7210d47e48d8e7f6b3361289c15552db2987f4bcf0e8456e5a524d64c8de060ab609e9645f1cd5ba157fe2f76165d3912702eb1822685e3164e3c1103f01bfae741d1331c291e281f24f224f1ae89ef23e96580b72e4af803ce8b9d6dc93d40666cfe9ca06ec2ec9b3830249eda4e56962bf372c7b8a79776b0a3903209ab2a38"}]}}]}}, {{0x9, 0x4, 0x72, 0xff, 0x1, 0x37, 0x63, 0x98, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0637"}, {0x5, 0x24, 0x0, 0xf49a}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x7f, 0x0, 0x1f}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7f}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "aed79f5603"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0xe65, 0x81}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x93, 0xd0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x32}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x1, 0x3, 0xff, 0x0, 0x8}, 0x3d, &(0x7f0000000d80)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xa7, 0x3, 0x7103, 0xf0f, 0x400, [0x0, 0xff0030, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x37, 0x5, 0x8, 0xf0f, 0x28, [0xf0, 0x0, 0xffff30, 0xff0000, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x423}}, {0xdf, &(0x7f0000000e00)=@string={0xdf, 0x3, "3482e3aded27f5e584da3baeb03b8655c7e2e12ec6aee12bd3d70716ca198a13cacef4751ba1dab091dd4e0a5d17eed85a38b5592026a597ecfbc38c51967d871944ef3ca5283b4b1fcebe6d64378d337d52d3f3b80f4a631a7c5c2c98385c84a302593a02b77b088dd27fc7f49bfaf262c683bd9d5707d1c40cbdf6b85e618dbe2505f6df56f37256ff68aad63e82995a22cfe66bcfe7d5889ed09a7f16e808126ba9f2c9e979c9117a6ed159f9c801056f6673f4adbedafe57045a246ac1ee3064f99510f8d3799fd83b320bc26a9de5cf8b2c1aec4d987d615318d4"}}, {0xf6, &(0x7f0000000f00)=@string={0xf6, 0x3, "8c8b30b69c5af5ebb571609ccde45eca4921a5278ff1599e86d5d286e6f6b52f760509148107171d920c2255997692b928f9799e6ccadbc751e40d867bbda03fb5fb93894b86537c7178fb5255e959b368039f7b2b31e0fac92db935b745db7f573f1034e9ca2c34ed877ced2217b9ae890d134a5a725af2552e92987bc55b65f61a3981de7345eaff580fddb778237a85caded5b568ba555b26601c88e8adf6e18dcd330177ec63416a2e6da8877f0f79a01c2889272659a1693622a37fd6f6a46d61f7c9bd992dd53332f1ff2503ee6b505950311fd452b695c8953a813dde802efb5a3e686f58fa0e8e009067a95736cb329d"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x444}}]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "3a81d2", 0x2}}}, 0xd) [ 682.451381] debugfs: '0' already exists in 'hci3' [ 682.453231] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 682.453908] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 682.453927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.453943] Workqueue: hci3 hci_rx_work [ 682.453972] Call Trace: [ 682.453977] [ 682.453982] dump_stack_lvl+0xfa/0x120 [ 682.453999] sysfs_warn_dup+0x80/0xa0 [ 682.454016] sysfs_create_dir_ns+0x23b/0x2a0 [ 682.454029] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 682.454042] ? find_held_lock+0x2b/0x80 [ 682.454058] ? lock_release+0xc8/0x270 [ 682.454076] ? do_raw_spin_unlock+0x53/0x220 [ 682.454097] kobject_add_internal+0x24c/0x9a0 [ 682.454118] kobject_add+0x157/0x240 [ 682.454135] ? __pfx_kobject_add+0x10/0x10 [ 682.454150] ? lock_release+0xc8/0x270 [ 682.454168] ? do_raw_spin_unlock+0x53/0x220 [ 682.454187] ? kobject_put+0xaa/0x260 [ 682.454209] device_add+0x32d/0x1830 [ 682.454232] ? __pfx_device_add+0x10/0x10 [ 682.454253] ? hci_debugfs_create_conn+0x10f/0x240 [ 682.454268] ? mgmt_send_event_skb+0x2f3/0x460 [ 682.454289] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 682.454307] hci_conn_add_sysfs+0x117/0x1c0 [ 682.454324] le_conn_complete_evt+0x1246/0x1e40 [ 682.454349] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 682.454373] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 682.454394] ? __asan_memcpy+0x3d/0x60 [ 682.454414] hci_le_meta_evt+0x34b/0x530 [ 682.454433] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 682.454456] hci_event_packet+0x66c/0x10e0 [ 682.454476] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 682.454495] ? __pfx_hci_event_packet+0x10/0x10 [ 682.454514] ? mark_held_locks+0x49/0x80 [ 682.454531] ? kcov_remote_start+0x2ce/0x5a0 [ 682.454557] hci_rx_work+0x65b/0x8b0 [ 682.454579] process_one_work+0x8e1/0x1960 [ 682.454606] ? __pfx_process_one_work+0x10/0x10 [ 682.454623] ? move_linked_works+0x172/0x270 [ 682.454647] ? assign_work+0x196/0x240 [ 682.454666] worker_thread+0x67e/0xe90 [ 682.454683] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 682.454707] ? __pfx_worker_thread+0x10/0x10 [ 682.454726] kthread+0x3c8/0x740 [ 682.454743] ? __pfx_kthread+0x10/0x10 [ 682.454757] ? ret_from_fork+0x79/0x7a0 [ 682.454771] ? lock_release+0xc8/0x270 [ 682.454788] ? __pfx_kthread+0x10/0x10 [ 682.454805] ret_from_fork+0x67a/0x7a0 [ 682.454819] ? __pfx_ret_from_fork+0x10/0x10 [ 682.454834] ? __switch_to+0x759/0x1030 [ 682.454853] ? __pfx_kthread+0x10/0x10 [ 682.454870] ret_from_fork_asm+0x1a/0x30 [ 682.454898] [ 682.474286] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 682.475493] Bluetooth: hci3: failed to register connection device [ 682.476821] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 682.477824] debugfs: '0' already exists in 'hci3' [ 682.478398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 682.479138] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 682.479154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.479162] Workqueue: hci3 hci_rx_work [ 682.479180] Call Trace: [ 682.479185] [ 682.479190] dump_stack_lvl+0xfa/0x120 [ 682.479203] sysfs_warn_dup+0x80/0xa0 [ 682.479216] sysfs_create_dir_ns+0x23b/0x2a0 [ 682.479228] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 682.479240] ? find_held_lock+0x2b/0x80 [ 682.479254] ? lock_release+0xc8/0x270 [ 682.479271] ? do_raw_spin_unlock+0x53/0x220 [ 682.479291] kobject_add_internal+0x24c/0x9a0 [ 682.479310] kobject_add+0x157/0x240 [ 682.479326] ? __pfx_kobject_add+0x10/0x10 [ 682.479342] ? lock_release+0xc8/0x270 [ 682.479358] ? do_raw_spin_unlock+0x53/0x220 [ 682.479377] ? kobject_put+0xaa/0x260 [ 682.479399] device_add+0x32d/0x1830 [ 682.479419] ? __pfx_device_add+0x10/0x10 [ 682.479439] ? hci_debugfs_create_conn+0x10f/0x240 [ 682.479452] ? mgmt_send_event_skb+0x2f3/0x460 [ 682.479470] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 682.479488] hci_conn_add_sysfs+0x117/0x1c0 [ 682.479503] le_conn_complete_evt+0x1246/0x1e40 [ 682.479526] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 682.479550] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 682.479570] ? __asan_memcpy+0x3d/0x60 [ 682.479588] hci_le_meta_evt+0x34b/0x530 [ 682.479605] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 682.479626] hci_event_packet+0x66c/0x10e0 [ 682.479645] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 682.479671] ? __pfx_hci_event_packet+0x10/0x10 [ 682.479690] ? mark_held_locks+0x49/0x80 [ 682.479707] ? kcov_remote_start+0x2ce/0x5a0 [ 682.479731] hci_rx_work+0x65b/0x8b0 [ 682.479752] process_one_work+0x8e1/0x1960 [ 682.479777] ? __pfx_process_one_work+0x10/0x10 [ 682.479793] ? move_linked_works+0x172/0x270 [ 682.479817] ? assign_work+0x196/0x240 [ 682.479835] worker_thread+0x67e/0xe90 [ 682.479852] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 682.479874] ? __pfx_worker_thread+0x10/0x10 [ 682.479892] kthread+0x3c8/0x740 [ 682.479907] ? __pfx_kthread+0x10/0x10 [ 682.479922] ? ret_from_fork+0x79/0x7a0 [ 682.479938] ? lock_release+0xc8/0x270 [ 682.479954] ? __pfx_kthread+0x10/0x10 [ 682.479971] ret_from_fork+0x67a/0x7a0 [ 682.479984] ? __pfx_ret_from_fork+0x10/0x10 [ 682.479999] ? __switch_to+0x759/0x1030 [ 682.480015] ? __pfx_kthread+0x10/0x10 [ 682.480031] ret_from_fork_asm+0x1a/0x30 [ 682.480057] [ 682.499237] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 682.500340] Bluetooth: hci3: failed to register connection device [ 682.501115] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 682.503075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.504253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:41:33 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none, 0x0, 0x0, 0x0, 0xff}}}}, 0x22) 06:41:33 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x25}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x32) [ 682.543168] debugfs: '0' already exists in 'hci5' [ 682.543799] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 682.544596] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 682.544613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.544622] Workqueue: hci5 hci_rx_work [ 682.544646] Call Trace: [ 682.544651] [ 682.544656] dump_stack_lvl+0xfa/0x120 [ 682.544672] sysfs_warn_dup+0x80/0xa0 [ 682.544688] sysfs_create_dir_ns+0x23b/0x2a0 [ 682.544700] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 682.544711] ? find_held_lock+0x2b/0x80 [ 682.544728] ? lock_release+0xc8/0x270 [ 682.544745] ? do_raw_spin_unlock+0x53/0x220 [ 682.544765] kobject_add_internal+0x24c/0x9a0 [ 682.544785] kobject_add+0x157/0x240 [ 682.544801] ? __pfx_kobject_add+0x10/0x10 [ 682.544815] ? lock_release+0xc8/0x270 [ 682.544831] ? do_raw_spin_unlock+0x53/0x220 [ 682.544850] ? kobject_put+0xaa/0x260 [ 682.544871] device_add+0x32d/0x1830 [ 682.544894] ? __pfx_device_add+0x10/0x10 [ 682.544913] ? hci_debugfs_create_conn+0x10f/0x240 [ 682.544932] ? mgmt_send_event_skb+0x2f3/0x460 [ 682.544951] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 682.544969] hci_conn_add_sysfs+0x117/0x1c0 [ 682.544984] le_conn_complete_evt+0x1246/0x1e40 [ 682.545009] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 682.545033] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 682.545053] ? __asan_memcpy+0x3d/0x60 [ 682.545072] hci_le_meta_evt+0x34b/0x530 [ 682.545089] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 682.545113] hci_event_packet+0x66c/0x10e0 [ 682.545135] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 682.545153] ? __pfx_hci_event_packet+0x10/0x10 [ 682.545171] ? mark_held_locks+0x49/0x80 [ 682.545187] ? kcov_remote_start+0x2ce/0x5a0 [ 682.545213] hci_rx_work+0x65b/0x8b0 [ 682.545234] process_one_work+0x8e1/0x1960 [ 682.545261] ? __pfx_process_one_work+0x10/0x10 [ 682.545277] ? move_linked_works+0x172/0x270 [ 682.545301] ? assign_work+0x196/0x240 [ 682.545319] worker_thread+0x67e/0xe90 [ 682.545336] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 682.545360] ? __pfx_worker_thread+0x10/0x10 [ 682.545377] kthread+0x3c8/0x740 [ 682.545393] ? __pfx_kthread+0x10/0x10 [ 682.545406] ? ret_from_fork+0x79/0x7a0 [ 682.545420] ? lock_release+0xc8/0x270 [ 682.545436] ? __pfx_kthread+0x10/0x10 [ 682.545452] ret_from_fork+0x67a/0x7a0 [ 682.545465] ? __pfx_ret_from_fork+0x10/0x10 [ 682.545479] ? __switch_to+0x759/0x1030 [ 682.545498] ? __pfx_kthread+0x10/0x10 [ 682.545514] ret_from_fork_asm+0x1a/0x30 [ 682.545542] [ 682.565394] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 682.567347] Bluetooth: hci5: failed to register connection device 06:41:33 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffff0e000000ffffff00000000000202"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x2}}}, 0xa) 06:41:34 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:41:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'L-', 0x1cc}, 0x16, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x9, 0x3, 0x19, 0x7f, 0x0, 0x100000000, 0xc440, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x2}, 0xa50, 0xfffffffffffffff7, 0x8, 0x1, 0x100000000, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, r1, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) 06:41:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 682.781215] debugfs: '0' already exists in 'hci3' [ 682.781886] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 682.782855] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 682.782872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.782882] Workqueue: hci3 hci_rx_work [ 682.782906] Call Trace: [ 682.782911] [ 682.782917] dump_stack_lvl+0xfa/0x120 [ 682.782937] sysfs_warn_dup+0x80/0xa0 [ 682.782952] sysfs_create_dir_ns+0x23b/0x2a0 [ 682.782965] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 682.782976] ? find_held_lock+0x2b/0x80 [ 682.782992] ? lock_release+0xc8/0x270 [ 682.783010] ? do_raw_spin_unlock+0x53/0x220 [ 682.783029] kobject_add_internal+0x24c/0x9a0 [ 682.783049] kobject_add+0x157/0x240 [ 682.783065] ? __pfx_kobject_add+0x10/0x10 [ 682.783079] ? lock_release+0xc8/0x270 [ 682.783095] ? do_raw_spin_unlock+0x53/0x220 [ 682.783114] ? kobject_put+0xaa/0x260 [ 682.783134] device_add+0x32d/0x1830 [ 682.783157] ? __pfx_device_add+0x10/0x10 [ 682.783176] ? hci_debugfs_create_conn+0x10f/0x240 [ 682.783190] ? mgmt_send_event_skb+0x2f3/0x460 [ 682.783209] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 682.783227] hci_conn_add_sysfs+0x117/0x1c0 [ 682.783242] le_conn_complete_evt+0x1246/0x1e40 [ 682.783266] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 682.783289] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 682.783308] ? __asan_memcpy+0x3d/0x60 [ 682.783327] hci_le_meta_evt+0x34b/0x530 [ 682.783344] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 682.783365] hci_event_packet+0x66c/0x10e0 [ 682.783384] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 682.783402] ? __pfx_hci_event_packet+0x10/0x10 [ 682.783420] ? mark_held_locks+0x49/0x80 [ 682.783436] ? kcov_remote_start+0x2ce/0x5a0 [ 682.783461] hci_rx_work+0x65b/0x8b0 [ 682.783481] process_one_work+0x8e1/0x1960 [ 682.783506] ? __pfx_process_one_work+0x10/0x10 [ 682.783522] ? move_linked_works+0x172/0x270 [ 682.783547] ? assign_work+0x196/0x240 [ 682.783567] worker_thread+0x67e/0xe90 [ 682.783585] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 682.783608] ? __pfx_worker_thread+0x10/0x10 [ 682.783625] kthread+0x3c8/0x740 [ 682.783641] ? __pfx_kthread+0x10/0x10 [ 682.783655] ? ret_from_fork+0x79/0x7a0 [ 682.783680] ? lock_release+0xc8/0x270 [ 682.783697] ? __pfx_kthread+0x10/0x10 [ 682.783712] ret_from_fork+0x67a/0x7a0 [ 682.783724] ? __pfx_ret_from_fork+0x10/0x10 [ 682.783739] ? __switch_to+0x759/0x1030 [ 682.783757] ? __pfx_kthread+0x10/0x10 [ 682.783773] ret_from_fork_asm+0x1a/0x30 [ 682.783799] [ 682.802440] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 682.803650] Bluetooth: hci3: failed to register connection device [ 682.806367] debugfs: '0' already exists in 'hci3' [ 682.806899] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 682.807615] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 682.807633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.807641] Workqueue: hci3 hci_rx_work [ 682.807658] Call Trace: [ 682.807670] [ 682.807675] dump_stack_lvl+0xfa/0x120 [ 682.807688] sysfs_warn_dup+0x80/0xa0 [ 682.807700] sysfs_create_dir_ns+0x23b/0x2a0 [ 682.807712] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 682.807724] ? find_held_lock+0x2b/0x80 [ 682.807737] ? lock_release+0xc8/0x270 [ 682.807753] ? do_raw_spin_unlock+0x53/0x220 [ 682.807773] kobject_add_internal+0x24c/0x9a0 [ 682.807791] kobject_add+0x157/0x240 [ 682.807807] ? __pfx_kobject_add+0x10/0x10 [ 682.807821] ? lock_release+0xc8/0x270 [ 682.807837] ? do_raw_spin_unlock+0x53/0x220 [ 682.807855] ? kobject_put+0xaa/0x260 [ 682.807876] device_add+0x32d/0x1830 [ 682.807896] ? __pfx_device_add+0x10/0x10 [ 682.807915] ? hci_debugfs_create_conn+0x10f/0x240 [ 682.807932] ? mgmt_send_event_skb+0x2f3/0x460 [ 682.807949] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 682.807967] hci_conn_add_sysfs+0x117/0x1c0 [ 682.807981] le_conn_complete_evt+0x1246/0x1e40 [ 682.808003] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 682.808026] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 682.808045] ? __asan_memcpy+0x3d/0x60 [ 682.808062] hci_le_meta_evt+0x34b/0x530 [ 682.808078] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 682.808099] hci_event_packet+0x66c/0x10e0 [ 682.808117] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 682.808135] ? __pfx_hci_event_packet+0x10/0x10 [ 682.808153] ? mark_held_locks+0x49/0x80 [ 682.808169] ? kcov_remote_start+0x2ce/0x5a0 [ 682.808193] hci_rx_work+0x65b/0x8b0 [ 682.808214] process_one_work+0x8e1/0x1960 [ 682.808238] ? __pfx_process_one_work+0x10/0x10 [ 682.808256] ? move_linked_works+0x172/0x270 [ 682.808278] ? assign_work+0x196/0x240 [ 682.808296] worker_thread+0x67e/0xe90 [ 682.808314] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 682.808336] ? __pfx_worker_thread+0x10/0x10 [ 682.808354] kthread+0x3c8/0x740 [ 682.808370] ? __pfx_kthread+0x10/0x10 [ 682.808384] ? ret_from_fork+0x79/0x7a0 [ 682.808397] ? lock_release+0xc8/0x270 [ 682.808414] ? __pfx_kthread+0x10/0x10 [ 682.808430] ret_from_fork+0x67a/0x7a0 [ 682.808444] ? __pfx_ret_from_fork+0x10/0x10 [ 682.808459] ? __switch_to+0x759/0x1030 [ 682.808476] ? __pfx_kthread+0x10/0x10 [ 682.808493] ret_from_fork_asm+0x1a/0x30 [ 682.808520] [ 682.827130] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 682.828207] Bluetooth: hci3: failed to register connection device 06:41:34 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(0x0) read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:41:34 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:41:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$TCXONC(r1, 0x541b, 0xf0ff1f00000000) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xeb) 06:41:34 executing program 7: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x66}, @l2cap_cid_signaling={{0x62}, [@l2cap_create_chan_rsp={{0xd, 0x3f, 0x8}, {0x3fe0, 0x3ff, 0x5f0d, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x4c00, 0x1000, 0x9, 0x401}}, @l2cap_conf_rsp={{0x5, 0x8d, 0x46}, {0x0, 0x8, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x4, 0x15, 0x9, 0x6c, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0x20, 0x3, 0x9, 0x80}}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x0, 0x40, 0x9231, 0x5, 0x5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x80, 0x3f, 0xfff, 0x400, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x6b) syz_emit_vhci(0x0, 0x0) [ 682.992439] debugfs: '0' already exists in 'hci5' [ 682.993271] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 682.993982] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 682.993999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 682.994009] Workqueue: hci5 hci_rx_work [ 682.994033] Call Trace: [ 682.994037] [ 682.994043] dump_stack_lvl+0xfa/0x120 [ 682.994059] sysfs_warn_dup+0x80/0xa0 [ 682.994074] sysfs_create_dir_ns+0x23b/0x2a0 [ 682.994086] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 682.994097] ? find_held_lock+0x2b/0x80 [ 682.994112] ? lock_release+0xc8/0x270 [ 682.994129] ? do_raw_spin_unlock+0x53/0x220 [ 682.994149] kobject_add_internal+0x24c/0x9a0 [ 682.994168] kobject_add+0x157/0x240 [ 682.994184] ? __pfx_kobject_add+0x10/0x10 [ 682.994199] ? lock_release+0xc8/0x270 [ 682.994215] ? do_raw_spin_unlock+0x53/0x220 [ 682.994233] ? kobject_put+0xaa/0x260 [ 682.994253] device_add+0x32d/0x1830 [ 682.994276] ? __pfx_device_add+0x10/0x10 [ 682.994296] ? hci_debugfs_create_conn+0x10f/0x240 [ 682.994310] ? mgmt_send_event_skb+0x2f3/0x460 [ 682.994329] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 682.994346] hci_conn_add_sysfs+0x117/0x1c0 [ 682.994361] le_conn_complete_evt+0x1246/0x1e40 [ 682.994384] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 682.994407] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 682.994427] ? __asan_memcpy+0x3d/0x60 [ 682.994446] hci_le_meta_evt+0x34b/0x530 [ 682.994463] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 682.994484] hci_event_packet+0x66c/0x10e0 [ 682.994503] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 682.994520] ? __pfx_hci_event_packet+0x10/0x10 [ 682.994538] ? mark_held_locks+0x49/0x80 [ 682.994555] ? kcov_remote_start+0x2ce/0x5a0 [ 682.994579] hci_rx_work+0x65b/0x8b0 [ 682.994600] process_one_work+0x8e1/0x1960 [ 682.994625] ? __pfx_process_one_work+0x10/0x10 [ 682.994641] ? move_linked_works+0x172/0x270 [ 682.994665] ? assign_work+0x196/0x240 [ 682.994682] worker_thread+0x67e/0xe90 [ 682.994699] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 682.994722] ? __pfx_worker_thread+0x10/0x10 [ 682.994739] kthread+0x3c8/0x740 [ 682.994755] ? __pfx_kthread+0x10/0x10 [ 682.994769] ? ret_from_fork+0x79/0x7a0 [ 682.994782] ? lock_release+0xc8/0x270 [ 682.994798] ? __pfx_kthread+0x10/0x10 [ 682.994813] ret_from_fork+0x67a/0x7a0 [ 682.994826] ? __pfx_ret_from_fork+0x10/0x10 [ 682.994840] ? __switch_to+0x759/0x1030 [ 682.994858] ? __pfx_kthread+0x10/0x10 [ 682.994874] ret_from_fork_asm+0x1a/0x30 [ 682.994900] [ 682.994921] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 683.014534] Bluetooth: hci5: failed to register connection device 06:41:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3d08, &(0x7f00000001c0)={0x0, 0x1ead, 0x4, 0x2, 0x28d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r4, 0x0, &(0x7f00000002c0)="1b", 0x1, 0x44, 0x9e6f561b4e04e967}, 0x1ff) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000003c0), &(0x7f0000000400)=0x30) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x200, 0x1000, 0x5]}, &(0x7f0000000180)=0x44) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="07000000010000042e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xe6}}, './file1\x00'}) write$cgroup_pid(r8, &(0x7f0000000380)=0xffffffffffffffff, 0x12) openat$cgroup_devices(r7, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:41:34 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:41:34 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:41:34 executing program 1: syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0xd1, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xfd, 0x9, 0x0, 0xff}, 0xf8, &(0x7f0000000140)={0x5, 0xf, 0xf8, 0x5, [@generic={0xc6, 0x10, 0x4, "98efe2a70de3d57a3d385bef31412362168ff3ad494c747271e4661bd4907ad46fcd684be554891208fa04e1b0b19d9fc3469ae8492e06d4bec8d07bae7471f0358328ba5199be0d8dd916f541094fe0b73ef2d59469779d086d0d31cea42b9a11a8b9a0d6d7f8cadc48a6c0533358e7f86f983663b4dda7a06868642e25cf03772e43128f0db124c1f3d52ebe2ed60d8ab7267fd1c9b00fa96bb130c298083148ff7e1fd754a6c76e2638a2546d640a957fae3ec4504d905ecbfd366439ec4b760a92"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x100, 0xf0f, 0xffe0, [0xffc000, 0x30, 0xff0000, 0xff0030, 0xff000f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0xb, 0x7fff}]}, 0x7, [{0xf1, &(0x7f0000000240)=@string={0xf1, 0x3, "8dad953796869f7caae57b8e6fe9e2e4d937a5d4fbdd7dbfc6f5cf573be808a19faafec951fe7c063400ab4d10a67e554a87984e9c4f94218a6a872eb592e7023f4a95b28b9f3ce152a553ea440075d8b610df48820b54c3de96f8b4debba70d6ad7233de53036907dc8be52d92927cd48eb379dc65f7933dc9a9f5b87819e18f7ab4510c719fbc5b2a238d7857f74dc1ff489eea8a62923340269d675b25bac46bfe1f7a75fa59bd900a5c87afccf18a661cef602650a40462b2b425604bbab4b0cb824eb576e9eb3601f820ce854e1f01f172c43c7b9a9c0ee04080af4ba14bba76805147a3ea336d5bd77b61b24"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44f}}, {0xa1, &(0x7f0000000380)=@string={0xa1, 0x3, "323d2e888a7ab6773b622d5efabca52ffc88c2b4d505583bf6e2ab08f883e2c5ba0b084458af4d251dfa5e0de677c3a7a680f4dbac4f3c87f32cd026bd45d7b0ae20bf00db017e05d9320ca9dc6d377fab907d954926f514defe2a28a7aaee8374f715df121e9157e7b7414de89d6a9eea2b0dc5b417a5a13bd81a8dd09ef8e2f6e322dca056105a7b454fea216c090b58cd32950b553f777c0fc0d6c26777"}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "c7745b3fccdd946f15505cd756d73a7f47da5a8584324538be71990f65deb5c573daab042d7ff9a83095f4fe416e99769bd8f946a74b5fa8b810e8728b449139a42a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0xf2, &(0x7f0000000540)=@string={0xf2, 0x3, "ae12bf36d8fcfbcde7811f1c35f6fc8cf4248692d4066784bdda31cafd9670f1fa522813f8465fb24ce4de935da83feeaa6044489357d62df0d2bff8df5ba94729ad6392136b64d6d652a7f24930d388b569b0ef2c6153feca0ad6124ad3ab2ffd5dbdef91f31c387f1efd50f3fad7d38a4b7485c9a552906911e3e1f8c3eb56372be295be0cae9339f62614166753c1a36b8dd69793059fa42f068aa031ebdea8a91794e30babd790390d601a974a9fd42a07affdb8140ccbcda9d1558e7e843a884fe9e933f3e6548c3492e28db2b27ec269627bc83b3957623e08dd92bcc5e3a1f3de72dc0d2f945ac9ef378e9383"}}]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_usb_connect(0x4, 0x674, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0xa2, 0x0, 0x40, 0xca33, 0x7ab3, 0x6c4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x662, 0x3, 0x6, 0xae, 0xc0, 0x80, [{{0x9, 0x4, 0x8c, 0xc0, 0x10, 0x8, 0x2, 0x0, 0xed, [], [{{0x9, 0x5, 0x8, 0x2, 0x10, 0x20, 0x6, 0xff, [@generic={0x97, 0x8, "8b3235af8db3c5653107395e9cc489236a5f8a1ce94e984b3508e1b126f85313ca6cf77d7e4d88184a75192739a81110733189f07b36d0563abaeb01c165a4dab5cf3bb393dd6ab54ec4ef0666a1aff1b7dbb6c07150432b8221b7a3a9408d5f7ed3553057a7a69881c2e388e37320d56bf1c99cd2879d92d18099fa47fa3254ee56ddf6331ac11d2f3b841ba833a2164028f0deff"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xa441}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x17, 0xf0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x4, 0x55}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x7, 0x40, 0x7}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x20, 0x3, 0x3f, [@generic={0x2d, 0x9, "c49d5be00ca6a8e2ad353294ee594465be6815e7db34bf24d639d912d0ad4e75cb47b48d89c24a8071ab9e"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x197, 0xff, 0x80}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x20, 0x1, 0x2, [@generic={0xc5, 0x21, "5609ffab8b3a56505d18726ec25ddb5591ae2df818c6b467bb18876448a05943544c8bdd437fb957ab2b619ea69d0dd03564e0e17f935ad955a445a1b65dd9673f3031d4502e7d23fa95a5b6b159e7dd6f0da5506c1d8e420db0c9f739b7d0568c56719cd51efe611f0287e782709957ded68960a3b313f41a5d09d3b31fdc827ef2c4ecd4171ab8c8ed19ad70c7bd21ed9933a06a7fb49554fd1aa0f5b0a5c4e92768798b79144b1bda4d0d3cf88373fd63353b0cd991b4964dd9beca2b3197a4f294"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x80, 0x58, 0x4, [@generic={0xc4, 0x11, "c6fd84c92776182f242cd639980a386be783a5a9768a3855bca5d44f73ff4ba6f277de6b9c54d728d7fbab43ee5c58224fc4021b4ff6bde7827c36b79fccbb0277f763cc05345eb8379244e90033fc095c036fe13097da829a3af35e93df2565e2b0331d41b759a2ae13cccffe245ee258e96202a2570f6c901a962b489f78611c86f8fd77baed1b93294e5b051b176ab481ffae5621994c869ac955ea13494895c370375abd54508b0d67eee1ae16faee1e5f960fd0188f62d886d6545fee5fd82a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x5, 0x3f, 0x3}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x81, 0x1, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x20, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0xfb, [@generic={0x75, 0x5, "818f2dd979f09186e27bc856bfcb85187fdecca2e3ccada8633c7d30129946f4c8f5f913eb4ccf95627e41b0faeef0cc3b7fb2c37a8878c698c166d7e04ee630c31848c88b8607936fcbb39e13263f2cd0c08d25b67bb54ac6e67d89b1a2ccc73adffe09650d4f0a148a5ee1737651076ae528"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xdf, 0x6b, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x7f, 0x8, [@generic={0x41, 0x0, "b94ceba15ac882da1ff20da7156cc0763b4242f65ff654f95969f9259bf9814864a933da23bf327c3fbec73dbe3c0d440cc02992b8061b536a9a3df22d743a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x80, 0x4, 0x1f}}]}}, {{0x9, 0x4, 0x8b, 0x9, 0x4, 0x81, 0x9d, 0x7a, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x40, 0x3f, 0x4b, [@generic={0x2f, 0xf, "c30ba441d65719600686d301ae473da16ba444cb1b2240fa15741a8f4eb86aacf82df9111b5d54f871f77eabee"}, @generic={0xba, 0x23, "3476f4894404c9098b24d3355745541ed2c075203cdcbd64b3093bb6b6efd37c82ac73d529f528601fa03608c5a5ec4c9e3f1fb6779ee6b98ac8592053d4fd426c022f0052b7d48ff10da6909407661a0280a3545fc5281eeb53a3220ce6ec65ba710d363fd14fb0ee925d590ab0db635be2aa588d1cbd1144cfecd930825d34126e77ea04710cc22b081cf0af6bd3849b9ff4f93eb8d44e563aaedcce5d7e2a40be859c903be307349a2c79234d3834225b8b03e86bd0f5"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x1, 0xc9, [@generic={0x5f, 0x11, "6144aff1cdfa1ba6e71ec54c9b0f1873fa704544b060aa63c23faec7b27c3e80104c9838d53fc3e75b977224df60e62b9bf226844b3093ec5883b70e5c80b6d9e378ff3ceb7e82a97f17ac5631c7ef089ff6605e7eaad04b16851a9289"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xd9a}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x77, 0xaf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @generic={0xbd, 0x11, "1c9501418ba9ed1be945d3cf1dfeeb518e1402ec9a0a6ac23601e8175596573671cfd71fa7988761d4c312bac55e5f03111481452b7386b97503b7210d47e48d8e7f6b3361289c15552db2987f4bcf0e8456e5a524d64c8de060ab609e9645f1cd5ba157fe2f76165d3912702eb1822685e3164e3c1103f01bfae741d1331c291e281f24f224f1ae89ef23e96580b72e4af803ce8b9d6dc93d40666cfe9ca06ec2ec9b3830249eda4e56962bf372c7b8a79776b0a3903209ab2a38"}]}}]}}, {{0x9, 0x4, 0x72, 0xff, 0x1, 0x37, 0x63, 0x98, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0637"}, {0x5, 0x24, 0x0, 0xf49a}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x7f, 0x0, 0x1f}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7f}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "aed79f5603"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0xe65, 0x81}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x93, 0xd0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x32}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x1, 0x3, 0xff, 0x0, 0x8}, 0x3d, &(0x7f0000000d80)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xa7, 0x3, 0x7103, 0xf0f, 0x400, [0x0, 0xff0030, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x37, 0x5, 0x8, 0xf0f, 0x28, [0xf0, 0x0, 0xffff30, 0xff0000, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x423}}, {0xdf, &(0x7f0000000e00)=@string={0xdf, 0x3, "3482e3aded27f5e584da3baeb03b8655c7e2e12ec6aee12bd3d70716ca198a13cacef4751ba1dab091dd4e0a5d17eed85a38b5592026a597ecfbc38c51967d871944ef3ca5283b4b1fcebe6d64378d337d52d3f3b80f4a631a7c5c2c98385c84a302593a02b77b088dd27fc7f49bfaf262c683bd9d5707d1c40cbdf6b85e618dbe2505f6df56f37256ff68aad63e82995a22cfe66bcfe7d5889ed09a7f16e808126ba9f2c9e979c9117a6ed159f9c801056f6673f4adbedafe57045a246ac1ee3064f99510f8d3799fd83b320bc26a9de5cf8b2c1aec4d987d615318d4"}}, {0xf6, &(0x7f0000000f00)=@string={0xf6, 0x3, "8c8b30b69c5af5ebb571609ccde45eca4921a5278ff1599e86d5d286e6f6b52f760509148107171d920c2255997692b928f9799e6ccadbc751e40d867bbda03fb5fb93894b86537c7178fb5255e959b368039f7b2b31e0fac92db935b745db7f573f1034e9ca2c34ed877ced2217b9ae890d134a5a725af2552e92987bc55b65f61a3981de7345eaff580fddb778237a85caded5b568ba555b26601c88e8adf6e18dcd330177ec63416a2e6da8877f0f79a01c2889272659a1693622a37fd6f6a46d61f7c9bd992dd53332f1ff2503ee6b505950311fd452b695c8953a813dde802efb5a3e686f58fa0e8e009067a95736cb329d"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x444}}]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "3a81d2", 0x2}}}, 0xd) 06:41:34 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9506a00660001000b18a0ba496aa6a0df3bdbff911801340001f8040050b35b4e62aa513bd1156ccf2be1f5d75c5fb6127f447893b6db1e885e5b043e82f84bc578965b930f525f314c73a5d40f090400030020000a08020001000d010800d5ff0000ad2eff010f010400070000"], 0x6f) [ 683.179507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.181399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.230700] debugfs: '0' already exists in 'hci5' [ 683.231391] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 683.232205] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 683.232221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.232230] Workqueue: hci5 hci_rx_work [ 683.232255] Call Trace: [ 683.232260] [ 683.232266] dump_stack_lvl+0xfa/0x120 [ 683.232282] sysfs_warn_dup+0x80/0xa0 [ 683.232297] sysfs_create_dir_ns+0x23b/0x2a0 [ 683.232310] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 683.232324] ? find_held_lock+0x2b/0x80 [ 683.232340] ? lock_release+0xc8/0x270 [ 683.232359] ? do_raw_spin_unlock+0x53/0x220 [ 683.232381] kobject_add_internal+0x24c/0x9a0 [ 683.232402] kobject_add+0x157/0x240 [ 683.232419] ? __pfx_kobject_add+0x10/0x10 [ 683.232435] ? lock_release+0xc8/0x270 [ 683.232451] ? do_raw_spin_unlock+0x53/0x220 [ 683.232469] ? kobject_put+0xaa/0x260 [ 683.232491] device_add+0x32d/0x1830 [ 683.232515] ? __pfx_device_add+0x10/0x10 [ 683.232537] ? hci_debugfs_create_conn+0x10f/0x240 [ 683.232552] ? mgmt_send_event_skb+0x2f3/0x460 [ 683.232571] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 683.232589] hci_conn_add_sysfs+0x117/0x1c0 [ 683.232607] le_conn_complete_evt+0x1246/0x1e40 [ 683.232632] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 683.232656] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 683.232676] ? __asan_memcpy+0x3d/0x60 [ 683.232696] hci_le_meta_evt+0x34b/0x530 [ 683.232716] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 683.232738] hci_event_packet+0x66c/0x10e0 [ 683.232758] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 683.232776] ? __pfx_hci_event_packet+0x10/0x10 [ 683.232794] ? mark_held_locks+0x49/0x80 [ 683.232811] ? kcov_remote_start+0x2ce/0x5a0 [ 683.232836] hci_rx_work+0x65b/0x8b0 [ 683.232857] process_one_work+0x8e1/0x1960 [ 683.232882] ? __pfx_process_one_work+0x10/0x10 [ 683.232899] ? move_linked_works+0x172/0x270 [ 683.232922] ? assign_work+0x196/0x240 [ 683.232945] worker_thread+0x67e/0xe90 [ 683.232961] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 683.232988] ? __pfx_worker_thread+0x10/0x10 [ 683.233005] kthread+0x3c8/0x740 [ 683.233021] ? __pfx_kthread+0x10/0x10 [ 683.233035] ? ret_from_fork+0x79/0x7a0 [ 683.233048] ? lock_release+0xc8/0x270 [ 683.233064] ? __pfx_kthread+0x10/0x10 [ 683.233079] ret_from_fork+0x67a/0x7a0 [ 683.233092] ? __pfx_ret_from_fork+0x10/0x10 [ 683.233106] ? __switch_to+0x759/0x1030 [ 683.233125] ? __pfx_kthread+0x10/0x10 [ 683.233140] ret_from_fork_asm+0x1a/0x30 [ 683.233167] [ 683.251381] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 683.252595] Bluetooth: hci5: failed to register connection device [ 684.441011] Bluetooth: hci5: command 0x0406 tx timeout [ 684.506589] Bluetooth: hci3: command 0x0406 tx timeout [ 686.489076] Bluetooth: hci5: command 0x0406 tx timeout [ 686.553049] Bluetooth: hci3: command 0x0406 tx timeout [ 688.537254] Bluetooth: hci5: command 0x0406 tx timeout [ 688.601042] Bluetooth: hci3: command 0x0406 tx timeout [ 690.585088] Bluetooth: hci5: command 0x0406 tx timeout [ 690.649042] Bluetooth: hci3: command 0x0406 tx timeout [ 692.633044] Bluetooth: hci5: command 0x0406 tx timeout [ 692.697104] Bluetooth: hci3: command 0x0406 tx timeout 06:41:45 executing program 1: syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0xd1, 0x8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xfd, 0x9, 0x0, 0xff}, 0xf8, &(0x7f0000000140)={0x5, 0xf, 0xf8, 0x5, [@generic={0xc6, 0x10, 0x4, "98efe2a70de3d57a3d385bef31412362168ff3ad494c747271e4661bd4907ad46fcd684be554891208fa04e1b0b19d9fc3469ae8492e06d4bec8d07bae7471f0358328ba5199be0d8dd916f541094fe0b73ef2d59469779d086d0d31cea42b9a11a8b9a0d6d7f8cadc48a6c0533358e7f86f983663b4dda7a06868642e25cf03772e43128f0db124c1f3d52ebe2ed60d8ab7267fd1c9b00fa96bb130c298083148ff7e1fd754a6c76e2638a2546d640a957fae3ec4504d905ecbfd366439ec4b760a92"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x100, 0xf0f, 0xffe0, [0xffc000, 0x30, 0xff0000, 0xff0030, 0xff000f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0xb, 0x7fff}]}, 0x7, [{0xf1, &(0x7f0000000240)=@string={0xf1, 0x3, "8dad953796869f7caae57b8e6fe9e2e4d937a5d4fbdd7dbfc6f5cf573be808a19faafec951fe7c063400ab4d10a67e554a87984e9c4f94218a6a872eb592e7023f4a95b28b9f3ce152a553ea440075d8b610df48820b54c3de96f8b4debba70d6ad7233de53036907dc8be52d92927cd48eb379dc65f7933dc9a9f5b87819e18f7ab4510c719fbc5b2a238d7857f74dc1ff489eea8a62923340269d675b25bac46bfe1f7a75fa59bd900a5c87afccf18a661cef602650a40462b2b425604bbab4b0cb824eb576e9eb3601f820ce854e1f01f172c43c7b9a9c0ee04080af4ba14bba76805147a3ea336d5bd77b61b24"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44f}}, {0xa1, &(0x7f0000000380)=@string={0xa1, 0x3, "323d2e888a7ab6773b622d5efabca52ffc88c2b4d505583bf6e2ab08f883e2c5ba0b084458af4d251dfa5e0de677c3a7a680f4dbac4f3c87f32cd026bd45d7b0ae20bf00db017e05d9320ca9dc6d377fab907d954926f514defe2a28a7aaee8374f715df121e9157e7b7414de89d6a9eea2b0dc5b417a5a13bd81a8dd09ef8e2f6e322dca056105a7b454fea216c090b58cd32950b553f777c0fc0d6c26777"}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "c7745b3fccdd946f15505cd756d73a7f47da5a8584324538be71990f65deb5c573daab042d7ff9a83095f4fe416e99769bd8f946a74b5fa8b810e8728b449139a42a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43e}}, {0xf2, &(0x7f0000000540)=@string={0xf2, 0x3, "ae12bf36d8fcfbcde7811f1c35f6fc8cf4248692d4066784bdda31cafd9670f1fa522813f8465fb24ce4de935da83feeaa6044489357d62df0d2bff8df5ba94729ad6392136b64d6d652a7f24930d388b569b0ef2c6153feca0ad6124ad3ab2ffd5dbdef91f31c387f1efd50f3fad7d38a4b7485c9a552906911e3e1f8c3eb56372be295be0cae9339f62614166753c1a36b8dd69793059fa42f068aa031ebdea8a91794e30babd790390d601a974a9fd42a07affdb8140ccbcda9d1558e7e843a884fe9e933f3e6548c3492e28db2b27ec269627bc83b3957623e08dd92bcc5e3a1f3de72dc0d2f945ac9ef378e9383"}}]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_usb_connect(0x4, 0x674, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0xa2, 0x0, 0x40, 0xca33, 0x7ab3, 0x6c4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x662, 0x3, 0x6, 0xae, 0xc0, 0x80, [{{0x9, 0x4, 0x8c, 0xc0, 0x10, 0x8, 0x2, 0x0, 0xed, [], [{{0x9, 0x5, 0x8, 0x2, 0x10, 0x20, 0x6, 0xff, [@generic={0x97, 0x8, "8b3235af8db3c5653107395e9cc489236a5f8a1ce94e984b3508e1b126f85313ca6cf77d7e4d88184a75192739a81110733189f07b36d0563abaeb01c165a4dab5cf3bb393dd6ab54ec4ef0666a1aff1b7dbb6c07150432b8221b7a3a9408d5f7ed3553057a7a69881c2e388e37320d56bf1c99cd2879d92d18099fa47fa3254ee56ddf6331ac11d2f3b841ba833a2164028f0deff"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xa441}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x17, 0xf0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x4, 0x55}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x7, 0x40, 0x7}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x20, 0x3, 0x3f, [@generic={0x2d, 0x9, "c49d5be00ca6a8e2ad353294ee594465be6815e7db34bf24d639d912d0ad4e75cb47b48d89c24a8071ab9e"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x197, 0xff, 0x80}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x20, 0x1, 0x2, [@generic={0xc5, 0x21, "5609ffab8b3a56505d18726ec25ddb5591ae2df818c6b467bb18876448a05943544c8bdd437fb957ab2b619ea69d0dd03564e0e17f935ad955a445a1b65dd9673f3031d4502e7d23fa95a5b6b159e7dd6f0da5506c1d8e420db0c9f739b7d0568c56719cd51efe611f0287e782709957ded68960a3b313f41a5d09d3b31fdc827ef2c4ecd4171ab8c8ed19ad70c7bd21ed9933a06a7fb49554fd1aa0f5b0a5c4e92768798b79144b1bda4d0d3cf88373fd63353b0cd991b4964dd9beca2b3197a4f294"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x80, 0x58, 0x4, [@generic={0xc4, 0x11, "c6fd84c92776182f242cd639980a386be783a5a9768a3855bca5d44f73ff4ba6f277de6b9c54d728d7fbab43ee5c58224fc4021b4ff6bde7827c36b79fccbb0277f763cc05345eb8379244e90033fc095c036fe13097da829a3af35e93df2565e2b0331d41b759a2ae13cccffe245ee258e96202a2570f6c901a962b489f78611c86f8fd77baed1b93294e5b051b176ab481ffae5621994c869ac955ea13494895c370375abd54508b0d67eee1ae16faee1e5f960fd0188f62d886d6545fee5fd82a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x5, 0x3f, 0x3}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x81, 0x1, 0x8}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x20, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x3, 0xfb, [@generic={0x75, 0x5, "818f2dd979f09186e27bc856bfcb85187fdecca2e3ccada8633c7d30129946f4c8f5f913eb4ccf95627e41b0faeef0cc3b7fb2c37a8878c698c166d7e04ee630c31848c88b8607936fcbb39e13263f2cd0c08d25b67bb54ac6e67d89b1a2ccc73adffe09650d4f0a148a5ee1737651076ae528"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xdf, 0x6b, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x7f, 0x8, [@generic={0x41, 0x0, "b94ceba15ac882da1ff20da7156cc0763b4242f65ff654f95969f9259bf9814864a933da23bf327c3fbec73dbe3c0d440cc02992b8061b536a9a3df22d743a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x80, 0x4, 0x1f}}]}}, {{0x9, 0x4, 0x8b, 0x9, 0x4, 0x81, 0x9d, 0x7a, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x40, 0x3f, 0x4b, [@generic={0x2f, 0xf, "c30ba441d65719600686d301ae473da16ba444cb1b2240fa15741a8f4eb86aacf82df9111b5d54f871f77eabee"}, @generic={0xba, 0x23, "3476f4894404c9098b24d3355745541ed2c075203cdcbd64b3093bb6b6efd37c82ac73d529f528601fa03608c5a5ec4c9e3f1fb6779ee6b98ac8592053d4fd426c022f0052b7d48ff10da6909407661a0280a3545fc5281eeb53a3220ce6ec65ba710d363fd14fb0ee925d590ab0db635be2aa588d1cbd1144cfecd930825d34126e77ea04710cc22b081cf0af6bd3849b9ff4f93eb8d44e563aaedcce5d7e2a40be859c903be307349a2c79234d3834225b8b03e86bd0f5"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x1, 0xc9, [@generic={0x5f, 0x11, "6144aff1cdfa1ba6e71ec54c9b0f1873fa704544b060aa63c23faec7b27c3e80104c9838d53fc3e75b977224df60e62b9bf226844b3093ec5883b70e5c80b6d9e378ff3ceb7e82a97f17ac5631c7ef089ff6605e7eaad04b16851a9289"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xd9a}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x77, 0xaf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @generic={0xbd, 0x11, "1c9501418ba9ed1be945d3cf1dfeeb518e1402ec9a0a6ac23601e8175596573671cfd71fa7988761d4c312bac55e5f03111481452b7386b97503b7210d47e48d8e7f6b3361289c15552db2987f4bcf0e8456e5a524d64c8de060ab609e9645f1cd5ba157fe2f76165d3912702eb1822685e3164e3c1103f01bfae741d1331c291e281f24f224f1ae89ef23e96580b72e4af803ce8b9d6dc93d40666cfe9ca06ec2ec9b3830249eda4e56962bf372c7b8a79776b0a3903209ab2a38"}]}}]}}, {{0x9, 0x4, 0x72, 0xff, 0x1, 0x37, 0x63, 0x98, 0x9, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0637"}, {0x5, 0x24, 0x0, 0xf49a}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x7f, 0x0, 0x1f}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7f}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "aed79f5603"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0xe65, 0x81}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x93, 0xd0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x32}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x1, 0x3, 0xff, 0x0, 0x8}, 0x3d, &(0x7f0000000d80)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xa7, 0x3, 0x7103, 0xf0f, 0x400, [0x0, 0xff0030, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x37, 0x5, 0x8, 0xf0f, 0x28, [0xf0, 0x0, 0xffff30, 0xff0000, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x423}}, {0xdf, &(0x7f0000000e00)=@string={0xdf, 0x3, "3482e3aded27f5e584da3baeb03b8655c7e2e12ec6aee12bd3d70716ca198a13cacef4751ba1dab091dd4e0a5d17eed85a38b5592026a597ecfbc38c51967d871944ef3ca5283b4b1fcebe6d64378d337d52d3f3b80f4a631a7c5c2c98385c84a302593a02b77b088dd27fc7f49bfaf262c683bd9d5707d1c40cbdf6b85e618dbe2505f6df56f37256ff68aad63e82995a22cfe66bcfe7d5889ed09a7f16e808126ba9f2c9e979c9117a6ed159f9c801056f6673f4adbedafe57045a246ac1ee3064f99510f8d3799fd83b320bc26a9de5cf8b2c1aec4d987d615318d4"}}, {0xf6, &(0x7f0000000f00)=@string={0xf6, 0x3, "8c8b30b69c5af5ebb571609ccde45eca4921a5278ff1599e86d5d286e6f6b52f760509148107171d920c2255997692b928f9799e6ccadbc751e40d867bbda03fb5fb93894b86537c7178fb5255e959b368039f7b2b31e0fac92db935b745db7f573f1034e9ca2c34ed877ced2217b9ae890d134a5a725af2552e92987bc55b65f61a3981de7345eaff580fddb778237a85caded5b568ba555b26601c88e8adf6e18dcd330177ec63416a2e6da8877f0f79a01c2889272659a1693622a37fd6f6a46d61f7c9bd992dd53332f1ff2503ee6b505950311fd452b695c8953a813dde802efb5a3e686f58fa0e8e009067a95736cb329d"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x444}}]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "3a81d2", 0x2}}}, 0xd) 06:41:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:41:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0044c0d371bf5be706653000"]) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000bd05c5439555a5", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="1400038008000200000000000400040004000100"], 0x34}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0xc8dd3c675a94524a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) mknodat$loop(r6, &(0x7f0000000200)='./file0\x00', 0x10, 0x0) 06:41:45 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:41:45 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) 06:41:45 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x29}, @l2cap_cid_signaling={{0x25}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x21}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x0, 0x50, 0x8, 0x8, 0xd922}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x2e) 06:41:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fcntl$setsig(r0, 0xa, 0x4) lremovexattr(0x0, 0x0) 06:41:45 executing program 0: mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2f647f6c6c677f17c64d3f91a2704b53e167cc8be4a63000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x80, &(0x7f0000000100)='*]\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000080, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@msize={'msize', 0x3d, 0x2}}, {@loose}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '}/~'}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\\@'}}, {@euid_gt={'euid>', r0}}, {@subj_user={'subj_user', 0x3d, '*]\x00'}}, {@euid_gt={'euid>', r2}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@hash}]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a000000a3ef00957d3dfcbf21e0c60b000000ff010422000000009e098667643e857325fca2eb86"], 0x22) [ 693.797616] debugfs: '0' already exists in 'hci3' [ 693.800293] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 693.801991] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 693.802027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.802046] Workqueue: hci3 hci_rx_work [ 693.802090] Call Trace: [ 693.802099] [ 693.802110] dump_stack_lvl+0xfa/0x120 [ 693.802141] sysfs_warn_dup+0x80/0xa0 [ 693.802170] sysfs_create_dir_ns+0x23b/0x2a0 [ 693.802198] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 693.802223] ? find_held_lock+0x2b/0x80 [ 693.802254] ? lock_release+0xc8/0x270 [ 693.802291] ? do_raw_spin_unlock+0x53/0x220 [ 693.802335] kobject_add_internal+0x24c/0x9a0 [ 693.802378] kobject_add+0x157/0x240 [ 693.802412] ? __pfx_kobject_add+0x10/0x10 [ 693.802444] ? lock_release+0xc8/0x270 [ 693.802479] ? do_raw_spin_unlock+0x53/0x220 [ 693.802520] ? kobject_put+0xaa/0x260 [ 693.802565] device_add+0x32d/0x1830 [ 693.802612] ? __pfx_device_add+0x10/0x10 [ 693.802654] ? hci_debugfs_create_conn+0x10f/0x240 [ 693.802683] ? mgmt_send_event_skb+0x2f3/0x460 [ 693.802723] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 693.802761] hci_conn_add_sysfs+0x117/0x1c0 [ 693.802793] le_conn_complete_evt+0x1246/0x1e40 [ 693.802843] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 693.802895] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 693.802946] ? __asan_memcpy+0x3d/0x60 [ 693.802985] hci_le_meta_evt+0x34b/0x530 [ 693.803022] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 693.803068] hci_event_packet+0x66c/0x10e0 [ 693.803109] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 693.803148] ? __pfx_hci_event_packet+0x10/0x10 [ 693.803199] ? mark_held_locks+0x49/0x80 [ 693.803254] ? kcov_remote_start+0x2ce/0x5a0 [ 693.803317] hci_rx_work+0x65b/0x8b0 [ 693.803363] process_one_work+0x8e1/0x1960 [ 693.803416] ? __pfx_process_one_work+0x10/0x10 [ 693.803452] ? move_linked_works+0x172/0x270 [ 693.803503] ? assign_work+0x196/0x240 [ 693.803542] worker_thread+0x67e/0xe90 [ 693.803579] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 693.803628] ? __pfx_worker_thread+0x10/0x10 [ 693.803666] kthread+0x3c8/0x740 [ 693.803699] ? __pfx_kthread+0x10/0x10 [ 693.803729] ? ret_from_fork+0x79/0x7a0 [ 693.803756] ? lock_release+0xc8/0x270 [ 693.803791] ? __pfx_kthread+0x10/0x10 [ 693.803839] ret_from_fork+0x67a/0x7a0 [ 693.803867] ? __pfx_ret_from_fork+0x10/0x10 [ 693.803899] ? __switch_to+0x759/0x1030 [ 693.803934] ? __pfx_kthread+0x10/0x10 [ 693.803969] ret_from_fork_asm+0x1a/0x30 [ 693.804025] [ 693.847448] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 693.850972] Bluetooth: hci3: failed to register connection device [ 693.855438] debugfs: '0' already exists in 'hci3' [ 693.856339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.856652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.860251] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 693.861604] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 693.861635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.861651] Workqueue: hci3 hci_rx_work [ 693.861686] Call Trace: [ 693.861694] [ 693.861704] dump_stack_lvl+0xfa/0x120 [ 693.861730] sysfs_warn_dup+0x80/0xa0 [ 693.861756] sysfs_create_dir_ns+0x23b/0x2a0 [ 693.861780] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 693.861802] ? find_held_lock+0x2b/0x80 [ 693.861829] ? lock_release+0xc8/0x270 [ 693.861861] ? do_raw_spin_unlock+0x53/0x220 [ 693.861899] kobject_add_internal+0x24c/0x9a0 [ 693.861944] kobject_add+0x157/0x240 [ 693.861974] ? __pfx_kobject_add+0x10/0x10 [ 693.862002] ? lock_release+0xc8/0x270 [ 693.862034] ? do_raw_spin_unlock+0x53/0x220 [ 693.862070] ? kobject_put+0xaa/0x260 [ 693.862111] device_add+0x32d/0x1830 [ 693.862151] ? __pfx_device_add+0x10/0x10 [ 693.862189] ? hci_debugfs_create_conn+0x10f/0x240 [ 693.862216] ? mgmt_send_event_skb+0x2f3/0x460 [ 693.862251] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 693.862285] hci_conn_add_sysfs+0x117/0x1c0 [ 693.862313] le_conn_complete_evt+0x1246/0x1e40 [ 693.862358] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 693.862404] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 693.862443] ? __asan_memcpy+0x3d/0x60 [ 693.862477] hci_le_meta_evt+0x34b/0x530 [ 693.862509] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 693.862551] hci_event_packet+0x66c/0x10e0 [ 693.862588] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 693.862622] ? __pfx_hci_event_packet+0x10/0x10 [ 693.862658] ? mark_held_locks+0x49/0x80 [ 693.862691] ? kcov_remote_start+0x2ce/0x5a0 [ 693.862737] hci_rx_work+0x65b/0x8b0 [ 693.862778] process_one_work+0x8e1/0x1960 [ 693.862825] ? __pfx_process_one_work+0x10/0x10 [ 693.862857] ? move_linked_works+0x172/0x270 [ 693.862902] ? assign_work+0x196/0x240 [ 693.862936] worker_thread+0x67e/0xe90 [ 693.862969] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 693.863012] ? __pfx_worker_thread+0x10/0x10 [ 693.863046] kthread+0x3c8/0x740 [ 693.863075] ? __pfx_kthread+0x10/0x10 [ 693.863102] ? ret_from_fork+0x79/0x7a0 [ 693.863126] ? lock_release+0xc8/0x270 [ 693.863158] ? __pfx_kthread+0x10/0x10 [ 693.863188] ret_from_fork+0x67a/0x7a0 [ 693.863212] ? __pfx_ret_from_fork+0x10/0x10 [ 693.863241] ? __switch_to+0x759/0x1030 [ 693.863273] ? __pfx_kthread+0x10/0x10 [ 693.863304] ret_from_fork_asm+0x1a/0x30 [ 693.863354] [ 693.898711] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 693.900762] Bluetooth: hci3: failed to register connection device [ 693.936082] debugfs: '0' already exists in 'hci6' [ 693.936863] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 693.937714] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 693.937730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.937739] Workqueue: hci6 hci_rx_work [ 693.937769] Call Trace: [ 693.937775] [ 693.937781] dump_stack_lvl+0xfa/0x120 [ 693.937798] sysfs_warn_dup+0x80/0xa0 [ 693.937814] sysfs_create_dir_ns+0x23b/0x2a0 [ 693.937828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 693.937841] ? find_held_lock+0x2b/0x80 [ 693.937861] ? lock_release+0xc8/0x270 [ 693.937884] ? do_raw_spin_unlock+0x53/0x220 [ 693.937912] kobject_add_internal+0x24c/0x9a0 [ 693.937937] kobject_add+0x157/0x240 [ 693.937958] ? __pfx_kobject_add+0x10/0x10 [ 693.937983] ? lock_release+0xc8/0x270 [ 693.938008] ? do_raw_spin_unlock+0x53/0x220 [ 693.938038] ? kobject_put+0xaa/0x260 [ 693.938077] device_add+0x32d/0x1830 [ 693.938115] ? __pfx_device_add+0x10/0x10 [ 693.938147] ? hci_debugfs_create_conn+0x10f/0x240 [ 693.938170] ? mgmt_send_event_skb+0x2f3/0x460 [ 693.938205] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 693.938227] hci_conn_add_sysfs+0x117/0x1c0 [ 693.938244] le_conn_complete_evt+0x1246/0x1e40 [ 693.938272] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 693.938299] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 693.938320] ? __asan_memcpy+0x3d/0x60 [ 693.938343] hci_le_meta_evt+0x34b/0x530 [ 693.938365] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 693.938387] hci_event_packet+0x66c/0x10e0 [ 693.938407] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 693.938427] ? __pfx_hci_event_packet+0x10/0x10 [ 693.938454] ? mark_held_locks+0x49/0x80 [ 693.938476] ? kcov_remote_start+0x2ce/0x5a0 [ 693.938506] hci_rx_work+0x65b/0x8b0 [ 693.938539] process_one_work+0x8e1/0x1960 [ 693.938580] ? __pfx_process_one_work+0x10/0x10 [ 693.938606] ? move_linked_works+0x172/0x270 [ 693.938636] ? assign_work+0x196/0x240 [ 693.938661] worker_thread+0x67e/0xe90 [ 693.938686] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 693.938721] ? __pfx_worker_thread+0x10/0x10 [ 693.938742] kthread+0x3c8/0x740 [ 693.938760] ? __pfx_kthread+0x10/0x10 [ 693.938780] ? ret_from_fork+0x79/0x7a0 [ 693.938794] ? lock_release+0xc8/0x270 [ 693.938813] ? __pfx_kthread+0x10/0x10 [ 693.938833] ret_from_fork+0x67a/0x7a0 [ 693.938850] ? __pfx_ret_from_fork+0x10/0x10 [ 693.938866] ? __switch_to+0x759/0x1030 [ 693.938886] ? __pfx_kthread+0x10/0x10 [ 693.938904] ret_from_fork_asm+0x1a/0x30 [ 693.938934] [ 693.957363] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 693.958572] Bluetooth: hci6: failed to register connection device 06:41:45 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "2e0105651cf32ef2"}}}, 0x11) 06:41:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) fdatasync(r1) r2 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="80aa29bd7000fedbdf25020000000c00030002000000000000000800080002000000080008000000000008000500000000003872222f8c7bbec43b38210d6fadfcf1672470ea527bfcad3be3f390b83317605610a5f54a66bea4c128ecc18197d15ca2e48894275c23401e0eddaca0aa1d55e9f488bdfdd5bcff16384883cfbd72a906bf1c874998f1313578ee69dc198343e11261eb1a1512a8b059c1e380243b819466e61db3e168e16afc6e9510cc0aee3168c750f31b269d20809c75f57192f6bdce069bca6526d327c4a48c149833325195f0dbe7539cb4156bb0b818b7832c20053029d7d416952e1a176c2ec4"], 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x2400c044) 06:41:45 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x90}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) 06:41:45 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0) 06:41:45 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xa8}, @l2cap_cid_signaling={{0xa4}, [@l2cap_conf_req={{0x4, 0x4, 0x3b}, {0x200, 0x401, [@l2cap_conf_efs={0x6, 0x10, {0xff, 0x1, 0x7, 0x2, 0x1f, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x8, 0x81, 0x0, 0x1f, 0x43e}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x46, 0x40, 0x3000, 0x74, 0xede}}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_ews={0x7, 0x2, 0xadf}, @l2cap_conf_flushto={0x2, 0x2, 0x8000}]}}, @l2cap_conf_rsp={{0x5, 0x9, 0x31}, {0x6, 0xfea0, 0x7fff, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x4, 0x10001, 0x800, 0x31fc}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xfb, 0x1, 0x0, 0xfffe, 0x5}}]}}, @l2cap_move_chan_cfm={{0x10, 0xd1, 0x4}, {0xb6, 0x4}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x2}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0xfffe}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x6, 0x7fff}}, @l2cap_conn_req={{0x2, 0xcc, 0x4}, {0x6, 0x800}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0x6, 0x3ff, 0xffff, 0x1}}]}}, 0xad) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc8}, "8239aae272618788b814c512f11b0b188c8cb28d5576a7e3ba51ce0b259af811d51768ae51529e88bdac61fb7dbdc4a01a1a9e5a0edc8c01d4518b2f9bf921e92be0b4c3c3e74a787efeb581b77826fc2214bd94b8905ab889b5ea83e0378db3d870657797e0febfb54b5f374bc114ef9fd74c0895762023e33633768694a06c75fe8be8f55464ad8535ee80d3795dc268804e8de3269ac6feaa6579f8d2e21cc746c24003063909c298a4a641c4d31e5ea65257b4903b0bc7b6c9bcea0a71834f930b12639d89ec"}, 0xcc) 06:41:45 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, 0x0, 0x0) [ 694.143103] debugfs: '0' already exists in 'hci3' [ 694.143857] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 694.144597] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 694.144614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 694.144622] Workqueue: hci3 hci_rx_work [ 694.144646] Call Trace: [ 694.144651] [ 694.144657] dump_stack_lvl+0xfa/0x120 [ 694.144672] sysfs_warn_dup+0x80/0xa0 [ 694.144687] sysfs_create_dir_ns+0x23b/0x2a0 [ 694.144699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.144710] ? find_held_lock+0x2b/0x80 [ 694.144726] ? lock_release+0xc8/0x270 [ 694.144743] ? do_raw_spin_unlock+0x53/0x220 [ 694.144763] kobject_add_internal+0x24c/0x9a0 [ 694.144782] kobject_add+0x157/0x240 [ 694.144797] ? __pfx_kobject_add+0x10/0x10 [ 694.144812] ? lock_release+0xc8/0x270 [ 694.144828] ? do_raw_spin_unlock+0x53/0x220 [ 694.144846] ? kobject_put+0xaa/0x260 [ 694.144867] device_add+0x32d/0x1830 [ 694.144889] ? __pfx_device_add+0x10/0x10 [ 694.144908] ? hci_debugfs_create_conn+0x10f/0x240 [ 694.144922] ? mgmt_send_event_skb+0x2f3/0x460 [ 694.144946] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 694.144963] hci_conn_add_sysfs+0x117/0x1c0 [ 694.144982] le_conn_complete_evt+0x1246/0x1e40 [ 694.145005] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.145028] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 694.145048] ? __asan_memcpy+0x3d/0x60 [ 694.145067] hci_le_meta_evt+0x34b/0x530 [ 694.145084] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 694.145105] hci_event_packet+0x66c/0x10e0 [ 694.145123] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.145141] ? __pfx_hci_event_packet+0x10/0x10 [ 694.145159] ? mark_held_locks+0x49/0x80 [ 694.145176] ? kcov_remote_start+0x2ce/0x5a0 [ 694.145200] hci_rx_work+0x65b/0x8b0 [ 694.145221] process_one_work+0x8e1/0x1960 [ 694.145246] ? __pfx_process_one_work+0x10/0x10 [ 694.145262] ? move_linked_works+0x172/0x270 [ 694.145286] ? assign_work+0x196/0x240 [ 694.145303] worker_thread+0x67e/0xe90 [ 694.145320] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 694.145342] ? __pfx_worker_thread+0x10/0x10 [ 694.145360] kthread+0x3c8/0x740 [ 694.145375] ? __pfx_kthread+0x10/0x10 [ 694.145389] ? ret_from_fork+0x79/0x7a0 [ 694.145403] ? lock_release+0xc8/0x270 [ 694.145419] ? __pfx_kthread+0x10/0x10 [ 694.145434] ret_from_fork+0x67a/0x7a0 [ 694.145447] ? __pfx_ret_from_fork+0x10/0x10 [ 694.145461] ? __switch_to+0x759/0x1030 [ 694.145480] ? __pfx_kthread+0x10/0x10 [ 694.145495] ret_from_fork_asm+0x1a/0x30 [ 694.145521] [ 694.163635] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.164672] Bluetooth: hci3: failed to register connection device [ 694.167531] debugfs: '0' already exists in 'hci3' [ 694.168089] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 694.168756] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 694.168771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 694.168779] Workqueue: hci3 hci_rx_work [ 694.168796] Call Trace: [ 694.168800] [ 694.168805] dump_stack_lvl+0xfa/0x120 [ 694.168817] sysfs_warn_dup+0x80/0xa0 [ 694.168829] sysfs_create_dir_ns+0x23b/0x2a0 [ 694.168841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.168853] ? find_held_lock+0x2b/0x80 [ 694.168866] ? lock_release+0xc8/0x270 [ 694.168882] ? do_raw_spin_unlock+0x53/0x220 [ 694.168901] kobject_add_internal+0x24c/0x9a0 [ 694.168919] kobject_add+0x157/0x240 [ 694.168939] ? __pfx_kobject_add+0x10/0x10 [ 694.168953] ? lock_release+0xc8/0x270 [ 694.168969] ? do_raw_spin_unlock+0x53/0x220 [ 694.168987] ? kobject_put+0xaa/0x260 [ 694.169007] device_add+0x32d/0x1830 [ 694.169027] ? __pfx_device_add+0x10/0x10 [ 694.169046] ? hci_debugfs_create_conn+0x10f/0x240 [ 694.169060] ? mgmt_send_event_skb+0x2f3/0x460 [ 694.169077] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 694.169094] hci_conn_add_sysfs+0x117/0x1c0 [ 694.169108] le_conn_complete_evt+0x1246/0x1e40 [ 694.169130] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.169153] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 694.169173] ? __asan_memcpy+0x3d/0x60 [ 694.169190] hci_le_meta_evt+0x34b/0x530 [ 694.169206] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 694.169226] hci_event_packet+0x66c/0x10e0 [ 694.169245] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.169262] ? __pfx_hci_event_packet+0x10/0x10 [ 694.169280] ? mark_held_locks+0x49/0x80 [ 694.169296] ? kcov_remote_start+0x2ce/0x5a0 [ 694.169319] hci_rx_work+0x65b/0x8b0 [ 694.169340] process_one_work+0x8e1/0x1960 [ 694.169363] ? __pfx_process_one_work+0x10/0x10 [ 694.169379] ? move_linked_works+0x172/0x270 [ 694.169402] ? assign_work+0x196/0x240 [ 694.169419] worker_thread+0x67e/0xe90 [ 694.169436] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 694.169457] ? __pfx_worker_thread+0x10/0x10 [ 694.169474] kthread+0x3c8/0x740 [ 694.169489] ? __pfx_kthread+0x10/0x10 [ 694.169502] ? ret_from_fork+0x79/0x7a0 [ 694.169514] ? lock_release+0xc8/0x270 [ 694.169530] ? __pfx_kthread+0x10/0x10 [ 694.169545] ret_from_fork+0x67a/0x7a0 [ 694.169558] ? __pfx_ret_from_fork+0x10/0x10 [ 694.169573] ? __switch_to+0x759/0x1030 [ 694.169588] ? __pfx_kthread+0x10/0x10 [ 694.169604] ret_from_fork_asm+0x1a/0x30 [ 694.169629] [ 694.187724] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.188866] Bluetooth: hci3: failed to register connection device [ 694.216302] debugfs: '0' already exists in 'hci6' [ 694.216893] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 694.217603] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 694.217619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 694.217628] Workqueue: hci6 hci_rx_work [ 694.217649] Call Trace: [ 694.217653] [ 694.217658] dump_stack_lvl+0xfa/0x120 [ 694.217674] sysfs_warn_dup+0x80/0xa0 [ 694.217687] sysfs_create_dir_ns+0x23b/0x2a0 [ 694.217699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.217711] ? find_held_lock+0x2b/0x80 [ 694.217726] ? lock_release+0xc8/0x270 [ 694.217743] ? do_raw_spin_unlock+0x53/0x220 [ 694.217763] kobject_add_internal+0x24c/0x9a0 [ 694.217783] kobject_add+0x157/0x240 [ 694.217798] ? __pfx_kobject_add+0x10/0x10 [ 694.217812] ? lock_release+0xc8/0x270 [ 694.217828] ? do_raw_spin_unlock+0x53/0x220 [ 694.217847] ? kobject_put+0xaa/0x260 [ 694.217868] device_add+0x32d/0x1830 [ 694.217890] ? __pfx_device_add+0x10/0x10 [ 694.217909] ? hci_debugfs_create_conn+0x10f/0x240 [ 694.217923] ? mgmt_send_event_skb+0x2f3/0x460 [ 694.217946] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 694.217963] hci_conn_add_sysfs+0x117/0x1c0 [ 694.217978] le_conn_complete_evt+0x1246/0x1e40 [ 694.218002] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.218026] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 694.218047] ? __asan_memcpy+0x3d/0x60 [ 694.218065] hci_le_meta_evt+0x34b/0x530 [ 694.218081] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 694.218103] hci_event_packet+0x66c/0x10e0 [ 694.218122] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.218139] ? __pfx_hci_event_packet+0x10/0x10 [ 694.218158] ? mark_held_locks+0x49/0x80 [ 694.218174] ? kcov_remote_start+0x2ce/0x5a0 [ 694.218199] hci_rx_work+0x65b/0x8b0 [ 694.218220] process_one_work+0x8e1/0x1960 [ 694.218247] ? __pfx_process_one_work+0x10/0x10 [ 694.218263] ? move_linked_works+0x172/0x270 [ 694.218287] ? assign_work+0x196/0x240 [ 694.218305] worker_thread+0x67e/0xe90 [ 694.218322] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 694.218344] ? __pfx_worker_thread+0x10/0x10 [ 694.218362] kthread+0x3c8/0x740 [ 694.218377] ? __pfx_kthread+0x10/0x10 [ 694.218391] ? ret_from_fork+0x79/0x7a0 [ 694.218403] ? lock_release+0xc8/0x270 [ 694.218420] ? __pfx_kthread+0x10/0x10 [ 694.218436] ret_from_fork+0x67a/0x7a0 [ 694.218452] ? __pfx_ret_from_fork+0x10/0x10 [ 694.218467] ? __switch_to+0x759/0x1030 [ 694.218484] ? __pfx_kthread+0x10/0x10 [ 694.218500] ret_from_fork_asm+0x1a/0x30 [ 694.218527] [ 694.238049] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.239925] Bluetooth: hci6: failed to register connection device [ 694.246032] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 694.254310] debugfs: '0' already exists in 'hci5' [ 694.254854] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 694.255556] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 694.255572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 694.255581] Workqueue: hci5 hci_rx_work [ 694.255598] Call Trace: [ 694.255602] [ 694.255607] dump_stack_lvl+0xfa/0x120 [ 694.255620] sysfs_warn_dup+0x80/0xa0 [ 694.255632] sysfs_create_dir_ns+0x23b/0x2a0 [ 694.255644] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.255656] ? find_held_lock+0x2b/0x80 [ 694.255669] ? lock_release+0xc8/0x270 [ 694.255685] ? do_raw_spin_unlock+0x53/0x220 [ 694.255705] kobject_add_internal+0x24c/0x9a0 [ 694.255724] kobject_add+0x157/0x240 [ 694.255739] ? __pfx_kobject_add+0x10/0x10 [ 694.255753] ? lock_release+0xc8/0x270 [ 694.255770] ? do_raw_spin_unlock+0x53/0x220 [ 694.255788] ? kobject_put+0xaa/0x260 [ 694.255810] device_add+0x32d/0x1830 [ 694.255837] ? __pfx_device_add+0x10/0x10 [ 694.255857] ? hci_debugfs_create_conn+0x10f/0x240 [ 694.255869] ? mgmt_send_event_skb+0x2f3/0x460 [ 694.255887] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 694.255905] hci_conn_add_sysfs+0x117/0x1c0 [ 694.255919] le_conn_complete_evt+0x1246/0x1e40 [ 694.255946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.255970] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 694.255991] ? __asan_memcpy+0x3d/0x60 [ 694.256008] hci_le_meta_evt+0x34b/0x530 [ 694.256024] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 694.256045] hci_event_packet+0x66c/0x10e0 [ 694.256064] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.256082] ? __pfx_hci_event_packet+0x10/0x10 [ 694.256100] ? mark_held_locks+0x49/0x80 [ 694.256117] ? kcov_remote_start+0x2ce/0x5a0 [ 694.256141] hci_rx_work+0x65b/0x8b0 [ 694.256162] process_one_work+0x8e1/0x1960 [ 694.256186] ? __pfx_process_one_work+0x10/0x10 [ 694.256203] ? move_linked_works+0x172/0x270 [ 694.256226] ? assign_work+0x196/0x240 [ 694.256244] worker_thread+0x67e/0xe90 [ 694.256261] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 694.256283] ? __pfx_worker_thread+0x10/0x10 [ 694.256301] kthread+0x3c8/0x740 [ 694.256316] ? __pfx_kthread+0x10/0x10 [ 694.256329] ? ret_from_fork+0x79/0x7a0 [ 694.256341] ? lock_release+0xc8/0x270 [ 694.256357] ? __pfx_kthread+0x10/0x10 [ 694.256373] ret_from_fork+0x67a/0x7a0 [ 694.256386] ? __pfx_ret_from_fork+0x10/0x10 [ 694.256401] ? __switch_to+0x759/0x1030 [ 694.256416] ? __pfx_kthread+0x10/0x10 [ 694.256432] ret_from_fork_asm+0x1a/0x30 [ 694.256459] [ 694.274586] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.275627] Bluetooth: hci5: failed to register connection device [ 694.278770] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 694.295653] debugfs: '0' already exists in 'hci6' [ 694.296779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 694.297493] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 694.297508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 694.297516] Workqueue: hci6 hci_rx_work [ 694.297533] Call Trace: [ 694.297537] [ 694.297542] dump_stack_lvl+0xfa/0x120 [ 694.297555] sysfs_warn_dup+0x80/0xa0 [ 694.297567] sysfs_create_dir_ns+0x23b/0x2a0 [ 694.297579] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.297590] ? find_held_lock+0x2b/0x80 [ 694.297603] ? lock_release+0xc8/0x270 [ 694.297619] ? do_raw_spin_unlock+0x53/0x220 [ 694.297638] kobject_add_internal+0x24c/0x9a0 [ 694.297657] kobject_add+0x157/0x240 [ 694.297672] ? __pfx_kobject_add+0x10/0x10 [ 694.297686] ? lock_release+0xc8/0x270 [ 694.297702] ? do_raw_spin_unlock+0x53/0x220 [ 694.297720] ? kobject_put+0xaa/0x260 [ 694.297741] device_add+0x32d/0x1830 [ 694.297761] ? __pfx_device_add+0x10/0x10 [ 694.297780] ? hci_debugfs_create_conn+0x10f/0x240 [ 694.297793] ? mgmt_send_event_skb+0x2f3/0x460 [ 694.297810] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 694.297827] hci_conn_add_sysfs+0x117/0x1c0 [ 694.297841] le_conn_complete_evt+0x1246/0x1e40 [ 694.297863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.297886] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 694.297905] ? __asan_memcpy+0x3d/0x60 [ 694.297922] hci_le_meta_evt+0x34b/0x530 [ 694.297942] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 694.297962] hci_event_packet+0x66c/0x10e0 [ 694.297981] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.297998] ? __pfx_hci_event_packet+0x10/0x10 [ 694.298016] ? mark_held_locks+0x49/0x80 [ 694.298032] ? kcov_remote_start+0x2ce/0x5a0 [ 694.298055] hci_rx_work+0x65b/0x8b0 [ 694.298075] process_one_work+0x8e1/0x1960 [ 694.298098] ? __pfx_process_one_work+0x10/0x10 [ 694.298114] ? move_linked_works+0x172/0x270 [ 694.298136] ? assign_work+0x196/0x240 [ 694.298154] worker_thread+0x67e/0xe90 [ 694.298170] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 694.298191] ? __pfx_worker_thread+0x10/0x10 [ 694.298209] kthread+0x3c8/0x740 [ 694.298223] ? __pfx_kthread+0x10/0x10 [ 694.298237] ? ret_from_fork+0x79/0x7a0 [ 694.298248] ? lock_release+0xc8/0x270 [ 694.298264] ? __pfx_kthread+0x10/0x10 [ 694.298280] ret_from_fork+0x67a/0x7a0 [ 694.298292] ? __pfx_ret_from_fork+0x10/0x10 [ 694.298307] ? __switch_to+0x759/0x1030 [ 694.298322] ? __pfx_kthread+0x10/0x10 [ 694.298337] ret_from_fork_asm+0x1a/0x30 [ 694.298362] [ 694.316493] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.317525] Bluetooth: hci6: failed to register connection device [ 694.318231] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 694.318260] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 694.683976] Bluetooth: hci5: command 0x0406 tx timeout [ 694.746606] Bluetooth: hci3: command 0x0406 tx timeout [ 696.024990] Bluetooth: hci6: command 0x2016 tx timeout [ 696.729017] Bluetooth: hci5: command 0x0406 tx timeout [ 696.792982] Bluetooth: hci3: command 0x0406 tx timeout [ 698.073008] Bluetooth: hci6: command 0x2016 tx timeout [ 698.777050] Bluetooth: hci5: command 0x0406 tx timeout [ 698.841217] Bluetooth: hci3: command 0x0406 tx timeout [ 700.121067] Bluetooth: hci6: command 0x2016 tx timeout [ 700.825010] Bluetooth: hci5: command 0x0406 tx timeout [ 700.889037] Bluetooth: hci3: command 0x0406 tx timeout [ 702.169062] Bluetooth: hci6: command 0x2016 tx timeout [ 702.873078] Bluetooth: hci5: command 0x0406 tx timeout [ 702.937299] Bluetooth: hci3: command 0x0406 tx timeout [ 704.217142] Bluetooth: hci6: command 0x2016 tx timeout [ 704.921074] Bluetooth: hci5: command 0x0406 tx timeout [ 704.985458] Bluetooth: hci3: command 0x0406 tx timeout [ 706.265114] Bluetooth: hci6: command 0x2016 tx timeout [ 706.969243] Bluetooth: hci5: command 0x0406 tx timeout [ 707.033049] Bluetooth: hci3: command 0x0406 tx timeout [ 708.313056] Bluetooth: hci6: command 0x2016 tx timeout [ 709.081038] Bluetooth: hci3: command 0x0406 tx timeout [ 710.360989] Bluetooth: hci6: command 0x2016 tx timeout [ 711.128985] Bluetooth: hci3: command 0x0406 tx timeout 06:42:02 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, 0x0, 0x0) 06:42:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:02 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, 0x0, 0x0) 06:42:02 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x0, 0xc8, 0x6}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x40}}}}, 0xf) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2a}, "e99abb7fdfb4eef14dd625c0ec42eb8fb9e2c84158003ecf4a7156ae60bdc4a532fb7f2fa028a727df04"}, 0x2e) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "6811892366a96f8ec5d54a3564149dd56ddc801dab0740d07bcb0eb54d7c2249508d16c5c5f2e891672bd98d8306e9c02b35ca432657041bae01af38d23b3d5e3f173b5e1a175658b34dcfc73dc1617dfc79"}, 0x56) 06:42:02 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x3ff}}}}, 0xf) 06:42:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7f, 0x80, 0x20, 0x1, 0x0, 0xffffffffffffff01, 0x400, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x44401, 0x3ff, 0xff, 0x1, 0x101, 0x0, 0x1, 0x0, 0x3ff, 0x0, 0xb0}, r1, 0x2, r0, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0x400000000, r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 06:42:02 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x12}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x1f) 06:42:02 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9a, 0x0, "bc7be5", 0x200, 0x2}, {@any, 0x2, 0x3f, "41ffba", 0x80, 0x1}, {@none, 0xfe, 0x34, "83c508", 0x3, 0x1f}]}}}, 0x2e) [ 711.640335] debugfs: '0' already exists in 'hci6' [ 711.640967] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 711.641657] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 711.641674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.641683] Workqueue: hci6 hci_rx_work [ 711.641707] Call Trace: [ 711.641713] [ 711.641718] dump_stack_lvl+0xfa/0x120 [ 711.641735] sysfs_warn_dup+0x80/0xa0 [ 711.641750] sysfs_create_dir_ns+0x23b/0x2a0 [ 711.641762] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.641774] ? find_held_lock+0x2b/0x80 [ 711.641789] ? lock_release+0xc8/0x270 [ 711.641807] ? do_raw_spin_unlock+0x53/0x220 [ 711.641827] kobject_add_internal+0x24c/0x9a0 [ 711.641848] kobject_add+0x157/0x240 [ 711.641864] ? __pfx_kobject_add+0x10/0x10 [ 711.641879] ? lock_release+0xc8/0x270 [ 711.641895] ? do_raw_spin_unlock+0x53/0x220 [ 711.641913] ? kobject_put+0xaa/0x260 [ 711.641939] device_add+0x32d/0x1830 [ 711.641962] ? __pfx_device_add+0x10/0x10 [ 711.641982] ? hci_debugfs_create_conn+0x10f/0x240 [ 711.641996] ? mgmt_send_event_skb+0x2f3/0x460 [ 711.642015] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 711.642032] hci_conn_add_sysfs+0x117/0x1c0 [ 711.642048] le_conn_complete_evt+0x1246/0x1e40 [ 711.642072] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.642097] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 711.642117] ? __asan_memcpy+0x3d/0x60 [ 711.642136] hci_le_meta_evt+0x34b/0x530 [ 711.642153] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 711.642175] hci_event_packet+0x66c/0x10e0 [ 711.642194] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.642211] ? __pfx_hci_event_packet+0x10/0x10 [ 711.642230] ? mark_held_locks+0x49/0x80 [ 711.642247] ? kcov_remote_start+0x2ce/0x5a0 [ 711.642273] hci_rx_work+0x65b/0x8b0 [ 711.642294] process_one_work+0x8e1/0x1960 [ 711.642320] ? __pfx_process_one_work+0x10/0x10 [ 711.642337] ? move_linked_works+0x172/0x270 [ 711.642361] ? assign_work+0x196/0x240 [ 711.642379] worker_thread+0x67e/0xe90 [ 711.642396] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 711.642420] ? __pfx_worker_thread+0x10/0x10 [ 711.642438] kthread+0x3c8/0x740 [ 711.642453] ? __pfx_kthread+0x10/0x10 [ 711.642467] ? ret_from_fork+0x79/0x7a0 [ 711.642484] ? __pfx_kthread+0x10/0x10 [ 711.642499] ret_from_fork+0x67a/0x7a0 [ 711.642512] ? __pfx_ret_from_fork+0x10/0x10 [ 711.642523] ? save_fpregs_to_fpstate+0x145/0x270 [ 711.642541] ? __switch_to+0x759/0x1030 [ 711.642559] ? __pfx_kthread+0x10/0x10 [ 711.642575] ret_from_fork_asm+0x1a/0x30 [ 711.642603] [ 711.660519] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.661572] Bluetooth: hci6: failed to register connection device 06:42:03 executing program 4: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa40ffffffffffffffffffffffff00000000000000835ad0dd591376405ffa3cd96bf34a039e79363375bc05a4b6c800271011bfc3af4ab32d1fc8f6e0f2c641"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9b00c000800ffff0000000000000500"], 0x11) 06:42:03 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "2e0105651cf32ef2"}}}, 0x11) 06:42:03 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "2e0105651cf32ef2"}}}, 0x11) [ 711.733719] debugfs: '0' already exists in 'hci3' [ 711.734328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 711.735172] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 711.735188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.735197] Workqueue: hci3 hci_rx_work [ 711.735218] Call Trace: [ 711.735222] [ 711.735227] dump_stack_lvl+0xfa/0x120 [ 711.735243] sysfs_warn_dup+0x80/0xa0 [ 711.735257] sysfs_create_dir_ns+0x23b/0x2a0 [ 711.735270] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.735281] ? find_held_lock+0x2b/0x80 [ 711.735295] ? lock_release+0xc8/0x270 [ 711.735312] ? do_raw_spin_unlock+0x53/0x220 [ 711.735332] kobject_add_internal+0x24c/0x9a0 [ 711.735351] kobject_add+0x157/0x240 [ 711.735367] ? __pfx_kobject_add+0x10/0x10 [ 711.735381] ? lock_release+0xc8/0x270 [ 711.735397] ? do_raw_spin_unlock+0x53/0x220 [ 711.735415] ? kobject_put+0xaa/0x260 [ 711.735436] device_add+0x32d/0x1830 [ 711.735458] ? __pfx_device_add+0x10/0x10 [ 711.735477] ? hci_debugfs_create_conn+0x10f/0x240 [ 711.735492] ? mgmt_send_event_skb+0x2f3/0x460 [ 711.735510] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 711.735527] hci_conn_add_sysfs+0x117/0x1c0 [ 711.735542] le_conn_complete_evt+0x1246/0x1e40 [ 711.735566] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.735589] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 711.735608] ? __asan_memcpy+0x3d/0x60 [ 711.735627] hci_le_meta_evt+0x34b/0x530 [ 711.735644] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 711.735665] hci_event_packet+0x66c/0x10e0 [ 711.735683] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.735700] ? __pfx_hci_event_packet+0x10/0x10 [ 711.735718] ? mark_held_locks+0x49/0x80 [ 711.735735] ? kcov_remote_start+0x2ce/0x5a0 [ 711.735759] hci_rx_work+0x65b/0x8b0 [ 711.735779] process_one_work+0x8e1/0x1960 [ 711.735804] ? __pfx_process_one_work+0x10/0x10 [ 711.735820] ? move_linked_works+0x172/0x270 [ 711.735843] ? assign_work+0x196/0x240 [ 711.735861] worker_thread+0x67e/0xe90 [ 711.735877] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 711.735899] ? __pfx_worker_thread+0x10/0x10 [ 711.735916] kthread+0x3c8/0x740 [ 711.735935] ? __pfx_kthread+0x10/0x10 [ 711.735949] ? ret_from_fork+0x79/0x7a0 [ 711.735964] ? __pfx_kthread+0x10/0x10 [ 711.735979] ret_from_fork+0x67a/0x7a0 [ 711.735992] ? __pfx_ret_from_fork+0x10/0x10 [ 711.736003] ? save_fpregs_to_fpstate+0x145/0x270 [ 711.736020] ? __switch_to+0x759/0x1030 [ 711.736038] ? __pfx_kthread+0x10/0x10 [ 711.736053] ret_from_fork_asm+0x1a/0x30 [ 711.736092] [ 711.754151] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.755311] Bluetooth: hci3: failed to register connection device 06:42:03 executing program 1: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "2e0105651cf32ef2"}}}, 0x11) [ 711.785119] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 711.788271] debugfs: '0' already exists in 'hci3' [ 711.788805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 711.789507] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 711.789522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.789530] Workqueue: hci3 hci_rx_work [ 711.789548] Call Trace: [ 711.789552] [ 711.789557] dump_stack_lvl+0xfa/0x120 [ 711.789571] sysfs_warn_dup+0x80/0xa0 [ 711.789584] sysfs_create_dir_ns+0x23b/0x2a0 [ 711.789596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.789608] ? find_held_lock+0x2b/0x80 [ 711.789622] ? lock_release+0xc8/0x270 [ 711.789638] ? do_raw_spin_unlock+0x53/0x220 [ 711.789658] kobject_add_internal+0x24c/0x9a0 [ 711.789677] kobject_add+0x157/0x240 [ 711.789692] ? __pfx_kobject_add+0x10/0x10 [ 711.789707] ? lock_release+0xc8/0x270 [ 711.789723] ? do_raw_spin_unlock+0x53/0x220 [ 711.789742] ? kobject_put+0xaa/0x260 [ 711.789763] device_add+0x32d/0x1830 [ 711.789784] ? __pfx_device_add+0x10/0x10 [ 711.789804] ? hci_debugfs_create_conn+0x10f/0x240 [ 711.789816] ? mgmt_send_event_skb+0x2f3/0x460 [ 711.789834] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 711.789852] hci_conn_add_sysfs+0x117/0x1c0 [ 711.789867] le_conn_complete_evt+0x1246/0x1e40 [ 711.789890] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.789914] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 711.789938] ? __asan_memcpy+0x3d/0x60 [ 711.789956] hci_le_meta_evt+0x34b/0x530 [ 711.789972] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 711.789993] hci_event_packet+0x66c/0x10e0 [ 711.790012] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.790030] ? __pfx_hci_event_packet+0x10/0x10 [ 711.790048] ? mark_held_locks+0x49/0x80 [ 711.790064] ? kcov_remote_start+0x2ce/0x5a0 [ 711.790088] hci_rx_work+0x65b/0x8b0 [ 711.790109] process_one_work+0x8e1/0x1960 [ 711.790134] ? __pfx_process_one_work+0x10/0x10 [ 711.790151] ? move_linked_works+0x172/0x270 [ 711.790175] ? assign_work+0x196/0x240 [ 711.790193] worker_thread+0x67e/0xe90 [ 711.790210] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 711.790232] ? __pfx_worker_thread+0x10/0x10 [ 711.790250] kthread+0x3c8/0x740 [ 711.790264] ? __pfx_kthread+0x10/0x10 [ 711.790278] ? ret_from_fork+0x79/0x7a0 [ 711.790294] ? __pfx_kthread+0x10/0x10 [ 711.790310] ret_from_fork+0x67a/0x7a0 [ 711.790322] ? __pfx_ret_from_fork+0x10/0x10 [ 711.790333] ? save_fpregs_to_fpstate+0x145/0x270 [ 711.790351] ? __switch_to+0x759/0x1030 [ 711.790367] ? __pfx_kthread+0x10/0x10 [ 711.790383] ret_from_fork_asm+0x1a/0x30 [ 711.790410] [ 711.808361] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.809386] Bluetooth: hci3: failed to register connection device 06:42:03 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x12}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x1f) [ 711.822999] debugfs: '0' already exists in 'hci6' [ 711.823534] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 711.824235] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 711.824251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.824259] Workqueue: hci6 hci_rx_work [ 711.824276] Call Trace: [ 711.824281] [ 711.824286] dump_stack_lvl+0xfa/0x120 [ 711.824299] sysfs_warn_dup+0x80/0xa0 [ 711.824316] sysfs_create_dir_ns+0x23b/0x2a0 [ 711.824328] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.824340] ? find_held_lock+0x2b/0x80 [ 711.824353] ? lock_release+0xc8/0x270 [ 711.824369] ? do_raw_spin_unlock+0x53/0x220 [ 711.824388] kobject_add_internal+0x24c/0x9a0 [ 711.824407] kobject_add+0x157/0x240 [ 711.824422] ? __pfx_kobject_add+0x10/0x10 [ 711.824437] ? lock_release+0xc8/0x270 [ 711.824453] ? do_raw_spin_unlock+0x53/0x220 [ 711.824472] ? kobject_put+0xaa/0x260 [ 711.824492] device_add+0x32d/0x1830 [ 711.824512] ? __pfx_device_add+0x10/0x10 [ 711.824532] ? hci_debugfs_create_conn+0x10f/0x240 [ 711.824544] ? mgmt_send_event_skb+0x2f3/0x460 [ 711.824562] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 711.824579] hci_conn_add_sysfs+0x117/0x1c0 [ 711.824593] le_conn_complete_evt+0x1246/0x1e40 [ 711.824615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.824639] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 711.824658] ? __asan_memcpy+0x3d/0x60 [ 711.824675] hci_le_meta_evt+0x34b/0x530 [ 711.824691] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 711.824712] hci_event_packet+0x66c/0x10e0 [ 711.824731] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.824748] ? __pfx_hci_event_packet+0x10/0x10 [ 711.824766] ? mark_held_locks+0x49/0x80 [ 711.824783] ? kcov_remote_start+0x2ce/0x5a0 [ 711.824806] hci_rx_work+0x65b/0x8b0 [ 711.824826] process_one_work+0x8e1/0x1960 [ 711.824849] ? __pfx_process_one_work+0x10/0x10 [ 711.824865] ? move_linked_works+0x172/0x270 [ 711.824888] ? assign_work+0x196/0x240 [ 711.824905] worker_thread+0x67e/0xe90 [ 711.824922] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 711.824947] ? __pfx_worker_thread+0x10/0x10 [ 711.824965] kthread+0x3c8/0x740 [ 711.824979] ? __pfx_kthread+0x10/0x10 [ 711.824993] ? ret_from_fork+0x79/0x7a0 [ 711.825007] ? __pfx_kthread+0x10/0x10 [ 711.825022] ret_from_fork+0x67a/0x7a0 [ 711.825035] ? __pfx_ret_from_fork+0x10/0x10 [ 711.825046] ? save_fpregs_to_fpstate+0x145/0x270 [ 711.825063] ? __switch_to+0x759/0x1030 [ 711.825079] ? __pfx_kthread+0x10/0x10 [ 711.825094] ret_from_fork_asm+0x1a/0x30 [ 711.825119] [ 711.844292] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.846087] Bluetooth: hci6: failed to register connection device [ 711.846622] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 711.848166] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 711.848852] debugfs: '0' already exists in 'hci6' [ 711.849501] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 711.850199] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 711.850215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.850223] Workqueue: hci6 hci_rx_work [ 711.850239] Call Trace: [ 711.850244] [ 711.850249] dump_stack_lvl+0xfa/0x120 [ 711.850261] sysfs_warn_dup+0x80/0xa0 [ 711.850273] sysfs_create_dir_ns+0x23b/0x2a0 [ 711.850285] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.850297] ? find_held_lock+0x2b/0x80 [ 711.850309] ? lock_release+0xc8/0x270 [ 711.850325] ? do_raw_spin_unlock+0x53/0x220 [ 711.850345] kobject_add_internal+0x24c/0x9a0 [ 711.850363] kobject_add+0x157/0x240 [ 711.850378] ? __pfx_kobject_add+0x10/0x10 [ 711.850392] ? lock_release+0xc8/0x270 [ 711.850408] ? do_raw_spin_unlock+0x53/0x220 [ 711.850426] ? kobject_put+0xaa/0x260 [ 711.850446] device_add+0x32d/0x1830 [ 711.850466] ? __pfx_device_add+0x10/0x10 [ 711.850485] ? hci_debugfs_create_conn+0x10f/0x240 [ 711.850497] ? mgmt_send_event_skb+0x2f3/0x460 [ 711.850514] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 711.850532] hci_conn_add_sysfs+0x117/0x1c0 [ 711.850545] le_conn_complete_evt+0x1246/0x1e40 [ 711.850567] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.850590] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 711.850609] ? __asan_memcpy+0x3d/0x60 [ 711.850626] hci_le_meta_evt+0x34b/0x530 [ 711.850642] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 711.850662] hci_event_packet+0x66c/0x10e0 [ 711.850680] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.850697] ? __pfx_hci_event_packet+0x10/0x10 [ 711.850715] ? mark_held_locks+0x49/0x80 [ 711.850731] ? kcov_remote_start+0x2ce/0x5a0 [ 711.850754] hci_rx_work+0x65b/0x8b0 [ 711.850774] process_one_work+0x8e1/0x1960 [ 711.850798] ? __pfx_process_one_work+0x10/0x10 [ 711.850813] ? move_linked_works+0x172/0x270 [ 711.850836] ? assign_work+0x196/0x240 [ 711.850853] worker_thread+0x67e/0xe90 [ 711.850869] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 711.850890] ? __pfx_worker_thread+0x10/0x10 [ 711.850907] kthread+0x3c8/0x740 [ 711.850922] ? __pfx_kthread+0x10/0x10 [ 711.850940] ? ret_from_fork+0x79/0x7a0 [ 711.850953] ? __pfx_kthread+0x10/0x10 [ 711.850969] ret_from_fork+0x67a/0x7a0 [ 711.850981] ? __pfx_ret_from_fork+0x10/0x10 [ 711.850992] ? save_fpregs_to_fpstate+0x145/0x270 [ 711.851008] ? __switch_to+0x759/0x1030 [ 711.851024] ? __pfx_kthread+0x10/0x10 [ 711.851039] ret_from_fork_asm+0x1a/0x30 [ 711.851064] [ 711.869024] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.870041] Bluetooth: hci6: failed to register connection device 06:42:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup3(r0, r0, 0x80000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)={@empty, @remote, 0x0, 0x6, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x28) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in=@dev, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x80}, {}, 0x80, 0x0, 0x2}, {{@in=@local, 0x0, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r3, 0x402, 0x10) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x3479, 0x10000]) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, 0xc) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200080, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000180)="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") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 06:42:03 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1f0a6a16629100aaaaaaaaaa00fffffffffffbff01000000ff00000000000000000000000083c86e632aa5a2ab8f194aca7acddbab22212e00dd72796e0a9f470508d7d8383f390c425bf97d60693855f98ebda0f9c7f5947805466634b1683547ed46a059f826c4f1a71d4606cd1e4789b3909de6409a4e0dcabfca096801b4ba013cf89a46d82cef545b3092d3fa4fcf26432b06f055f6e979aafef7615b366e4564e89bc29d580e847355"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:03 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x1, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1, 0xa}, {0x2, 0x723, 0x100, 0x5, 0x6}}}}, 0x17) [ 712.009570] debugfs: '0' already exists in 'hci5' [ 712.010374] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 712.011189] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 712.011205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 712.011214] Workqueue: hci5 hci_rx_work [ 712.011237] Call Trace: [ 712.011242] [ 712.011248] dump_stack_lvl+0xfa/0x120 [ 712.011262] sysfs_warn_dup+0x80/0xa0 [ 712.011282] sysfs_create_dir_ns+0x23b/0x2a0 [ 712.011294] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 712.011306] ? find_held_lock+0x2b/0x80 [ 712.011321] ? lock_release+0xc8/0x270 [ 712.011338] ? do_raw_spin_unlock+0x53/0x220 [ 712.011357] kobject_add_internal+0x24c/0x9a0 [ 712.011376] kobject_add+0x157/0x240 [ 712.011391] ? __pfx_kobject_add+0x10/0x10 [ 712.011406] ? lock_release+0xc8/0x270 [ 712.011422] ? do_raw_spin_unlock+0x53/0x220 [ 712.011440] ? kobject_put+0xaa/0x260 [ 712.011460] device_add+0x32d/0x1830 [ 712.011482] ? __pfx_device_add+0x10/0x10 [ 712.011501] ? hci_debugfs_create_conn+0x10f/0x240 [ 712.011515] ? mgmt_send_event_skb+0x2f3/0x460 [ 712.011533] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 712.011550] hci_conn_add_sysfs+0x117/0x1c0 [ 712.011565] le_conn_complete_evt+0x1246/0x1e40 [ 712.011588] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 712.011611] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 712.011631] ? __asan_memcpy+0x3d/0x60 [ 712.011650] hci_le_meta_evt+0x34b/0x530 [ 712.011667] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 712.011687] hci_event_packet+0x66c/0x10e0 [ 712.011706] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 712.011723] ? __pfx_hci_event_packet+0x10/0x10 [ 712.011741] ? mark_held_locks+0x49/0x80 [ 712.011757] ? kcov_remote_start+0x2ce/0x5a0 [ 712.011781] hci_rx_work+0x65b/0x8b0 [ 712.011801] process_one_work+0x8e1/0x1960 [ 712.011826] ? __pfx_process_one_work+0x10/0x10 [ 712.011842] ? move_linked_works+0x172/0x270 [ 712.011865] ? assign_work+0x196/0x240 [ 712.011882] worker_thread+0x67e/0xe90 [ 712.011899] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 712.011921] ? __pfx_worker_thread+0x10/0x10 [ 712.011938] kthread+0x3c8/0x740 [ 712.011954] ? __pfx_kthread+0x10/0x10 [ 712.011967] ? ret_from_fork+0x79/0x7a0 [ 712.011983] ? __pfx_kthread+0x10/0x10 [ 712.011998] ret_from_fork+0x67a/0x7a0 [ 712.012010] ? __pfx_ret_from_fork+0x10/0x10 [ 712.012021] ? save_fpregs_to_fpstate+0x145/0x270 [ 712.012039] ? __switch_to+0x759/0x1030 [ 712.012057] ? __pfx_kthread+0x10/0x10 [ 712.012072] ret_from_fork_asm+0x1a/0x30 [ 712.012110] [ 712.030204] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 712.031395] Bluetooth: hci5: failed to register connection device [ 713.177084] Bluetooth: hci3: command 0x0406 tx timeout [ 713.688988] Bluetooth: hci6: command 0x2016 tx timeout [ 713.753402] Bluetooth: hci5: command 0x0406 tx timeout [ 715.225125] Bluetooth: hci3: command 0x0406 tx timeout [ 715.737042] Bluetooth: hci6: command 0x2016 tx timeout [ 715.801137] Bluetooth: hci5: command 0x0406 tx timeout [ 717.273081] Bluetooth: hci3: command 0x0406 tx timeout [ 717.785040] Bluetooth: hci6: command 0x2016 tx timeout [ 717.849066] Bluetooth: hci5: command 0x0406 tx timeout [ 719.321045] Bluetooth: hci3: command 0x0406 tx timeout [ 719.833068] Bluetooth: hci6: command 0x2016 tx timeout [ 719.897033] Bluetooth: hci5: command 0x0406 tx timeout 06:42:11 executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffff1631ffffffffffde553a5271ce01cd3f880700000000000000066b7757afb4b122d3b4fbe6a51fe9e525257fc5a6982ad29595b88f6187112e2cc0aec90577fb7fbfc67ba380f0869a02b82ae2ef47e5a1eb7f9368b248a4d9eb8e0de0b43de89a9244ca263c52f95f0eab8fa240c20a400571bdb0f5abb5fd71a287d4dd4c69d42ef9def36bb899efa7dc4eb1"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "75a1f6047d4328811fe2300b152a9dd5"}, 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9d000000000010004050000ff03ffff0500000a8f5cc7e1b8d6d57f000002000d00000000000008090009000a0400000400"], 0x23) 06:42:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) close_range(r0, 0xffffffffffffffff, 0x0) 06:42:11 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1a}, @l2cap_cid_signaling={{0x16}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x12}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x1f) 06:42:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe919c06aa7a3f76}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x10001, 0x0, 0x2, 0x0, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x1, 0x0, 0x2}}, 0xe8) fsync(r1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000000000f2aaaaaab45070c1eaa4165d33efb2c9648834aa00ffffffffffffffffffffffff00000000000000"], 0x22) 06:42:11 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, 0x0, 0x0) 06:42:11 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xffffffffffffffff}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) sendfile(r4, r5, &(0x7f0000000040)=0x800, 0x5) lremovexattr(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40000) 06:42:11 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a000007ed4f426e3b0a1fd4bc00e900aaaaaaaaaa00ffffffffffffffffff"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:11 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) [ 720.604472] debugfs: '0' already exists in 'hci3' [ 720.605793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 720.607357] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 720.607392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.607409] Workqueue: hci3 hci_rx_work [ 720.607453] Call Trace: [ 720.607463] 06:42:11 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a000007ed4f426e3b0a1fd4bc00e900aaaaaaaaaa00ffffffffffffffffff"], 0x22) syz_emit_vhci(0x0, 0x0) [ 720.607474] dump_stack_lvl+0xfa/0x120 [ 720.607505] sysfs_warn_dup+0x80/0xa0 [ 720.607534] sysfs_create_dir_ns+0x23b/0x2a0 06:42:11 executing program 7: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6c}, @hci_ev_le_advertising_info={{}, {0x5, [{0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, "f0", 0x9}, {0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x12, "ff49080a558d7d0fd8fe6fb5c97f8253c529", 0x2}, {0x3, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x13, "8851f325ea1f9da618e658da466890745d566e", 0x4}, {0x0, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xa, "b572aaea8882cd6fd1f2"}, {0x2, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, "137101151db741de", 0x53}]}}}}, 0x6f) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x73}, "4cce6e52dd85f95a6640496ef4deb070800a7ddc01d062fc708969dca397401affee40d3e4f42e4e665e593d5343df88e4ff6a5bc1e829ad906f5cf62d0b9aba6678fd1bf66da3a174b0602cae1dd6f43d1d9f6473564489e971553f2de83c9965c02758ce4238ee6f921e286d8889ddec89df"}, 0x77) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x800, 0xf5, 0x5, 0xca, 0x8}}}}, 0x17) [ 720.607561] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 720.607586] ? find_held_lock+0x2b/0x80 [ 720.607617] ? lock_release+0xc8/0x270 [ 720.607652] ? do_raw_spin_unlock+0x53/0x220 [ 720.607695] kobject_add_internal+0x24c/0x9a0 [ 720.607736] kobject_add+0x157/0x240 [ 720.607769] ? __pfx_kobject_add+0x10/0x10 [ 720.607800] ? lock_release+0xc8/0x270 [ 720.607835] ? do_raw_spin_unlock+0x53/0x220 [ 720.607875] ? kobject_put+0xaa/0x260 [ 720.607920] device_add+0x32d/0x1830 [ 720.607975] ? __pfx_device_add+0x10/0x10 [ 720.608017] ? hci_debugfs_create_conn+0x10f/0x240 [ 720.608046] ? mgmt_send_event_skb+0x2f3/0x460 [ 720.608085] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 720.608122] hci_conn_add_sysfs+0x117/0x1c0 [ 720.608154] le_conn_complete_evt+0x1246/0x1e40 [ 720.608203] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 720.608268] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 720.608311] ? __asan_memcpy+0x3d/0x60 [ 720.608350] hci_le_meta_evt+0x34b/0x530 [ 720.608386] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 720.608432] hci_event_packet+0x66c/0x10e0 [ 720.608472] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 720.608511] ? __pfx_hci_event_packet+0x10/0x10 [ 720.608550] ? mark_held_locks+0x49/0x80 [ 720.608586] ? kcov_remote_start+0x2ce/0x5a0 [ 720.608638] hci_rx_work+0x65b/0x8b0 [ 720.608683] process_one_work+0x8e1/0x1960 [ 720.608736] ? __pfx_process_one_work+0x10/0x10 [ 720.608772] ? move_linked_works+0x172/0x270 [ 720.608822] ? assign_work+0x196/0x240 [ 720.608860] worker_thread+0x67e/0xe90 [ 720.608897] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 720.608945] ? __pfx_worker_thread+0x10/0x10 [ 720.608984] kthread+0x3c8/0x740 [ 720.609016] ? __pfx_kthread+0x10/0x10 [ 720.609046] ? ret_from_fork+0x79/0x7a0 [ 720.609073] ? lock_release+0xc8/0x270 [ 720.609108] ? __pfx_kthread+0x10/0x10 [ 720.609143] ret_from_fork+0x67a/0x7a0 [ 720.609170] ? __pfx_ret_from_fork+0x10/0x10 [ 720.609201] ? __switch_to+0x759/0x1030 [ 720.609236] ? __pfx_kthread+0x10/0x10 [ 720.609271] ret_from_fork_asm+0x1a/0x30 [ 720.609326] [ 720.647560] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 720.651509] Bluetooth: hci3: failed to register connection device [ 720.653250] debugfs: '0' already exists in 'hci3' [ 720.654671] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 720.656572] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 720.656616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.656638] Workqueue: hci3 hci_rx_work [ 720.656690] Call Trace: [ 720.656700] [ 720.656713] dump_stack_lvl+0xfa/0x120 [ 720.656748] sysfs_warn_dup+0x80/0xa0 [ 720.656782] sysfs_create_dir_ns+0x23b/0x2a0 [ 720.656816] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 720.656847] ? find_held_lock+0x2b/0x80 [ 720.656883] ? lock_release+0xc8/0x270 [ 720.656941] ? do_raw_spin_unlock+0x53/0x220 [ 720.656996] kobject_add_internal+0x24c/0x9a0 [ 720.657051] kobject_add+0x157/0x240 [ 720.657093] ? __pfx_kobject_add+0x10/0x10 [ 720.657133] ? lock_release+0xc8/0x270 [ 720.657179] ? do_raw_spin_unlock+0x53/0x220 [ 720.657231] ? kobject_put+0xaa/0x260 [ 720.657288] device_add+0x32d/0x1830 [ 720.657348] ? __pfx_device_add+0x10/0x10 [ 720.657403] ? hci_debugfs_create_conn+0x10f/0x240 [ 720.657442] ? mgmt_send_event_skb+0x2f3/0x460 [ 720.657491] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 720.657541] hci_conn_add_sysfs+0x117/0x1c0 [ 720.657581] le_conn_complete_evt+0x1246/0x1e40 [ 720.657647] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 720.657714] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 720.657772] ? __asan_memcpy+0x3d/0x60 [ 720.657821] hci_le_meta_evt+0x34b/0x530 [ 720.657868] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 720.657927] hci_event_packet+0x66c/0x10e0 [ 720.657976] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 720.658024] ? __pfx_hci_event_packet+0x10/0x10 [ 720.658077] ? mark_held_locks+0x49/0x80 [ 720.658126] ? kcov_remote_start+0x2ce/0x5a0 [ 720.658194] hci_rx_work+0x65b/0x8b0 [ 720.658253] process_one_work+0x8e1/0x1960 [ 720.658322] ? __pfx_process_one_work+0x10/0x10 [ 720.658369] ? move_linked_works+0x172/0x270 [ 720.658438] ? assign_work+0x196/0x240 [ 720.658488] worker_thread+0x67e/0xe90 [ 720.658538] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 720.658601] ? __pfx_worker_thread+0x10/0x10 [ 720.658654] kthread+0x3c8/0x740 [ 720.658693] ? __pfx_kthread+0x10/0x10 [ 720.658734] ? ret_from_fork+0x79/0x7a0 [ 720.658769] ? lock_release+0xc8/0x270 [ 720.658815] ? __pfx_kthread+0x10/0x10 [ 720.658862] ret_from_fork+0x67a/0x7a0 [ 720.658896] ? __pfx_ret_from_fork+0x10/0x10 [ 720.658938] ? __switch_to+0x759/0x1030 [ 720.658985] ? __pfx_kthread+0x10/0x10 [ 720.659028] ret_from_fork_asm+0x1a/0x30 [ 720.659102] [ 720.694306] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 720.696307] Bluetooth: hci3: failed to register connection device [ 720.719621] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 720.720894] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 720.723355] debugfs: '0' already exists in 'hci6' [ 720.724457] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 720.725734] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 720.725763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.725777] Workqueue: hci6 hci_rx_work [ 720.725814] Call Trace: [ 720.725822] [ 720.725832] dump_stack_lvl+0xfa/0x120 [ 720.725858] sysfs_warn_dup+0x80/0xa0 [ 720.725882] sysfs_create_dir_ns+0x23b/0x2a0 [ 720.725905] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 720.725926] ? find_held_lock+0x2b/0x80 [ 720.725959] ? lock_release+0xc8/0x270 [ 720.725990] ? do_raw_spin_unlock+0x53/0x220 [ 720.726026] kobject_add_internal+0x24c/0x9a0 [ 720.726062] kobject_add+0x157/0x240 [ 720.726092] ? __pfx_kobject_add+0x10/0x10 [ 720.726120] ? lock_release+0xc8/0x270 [ 720.726150] ? do_raw_spin_unlock+0x53/0x220 [ 720.726184] ? kobject_put+0xaa/0x260 [ 720.726224] device_add+0x32d/0x1830 [ 720.726263] ? __pfx_device_add+0x10/0x10 [ 720.726299] ? hci_debugfs_create_conn+0x10f/0x240 [ 720.726323] ? mgmt_send_event_skb+0x2f3/0x460 [ 720.726356] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 720.726389] hci_conn_add_sysfs+0x117/0x1c0 [ 720.726416] le_conn_complete_evt+0x1246/0x1e40 [ 720.726459] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 720.726503] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 720.726540] ? __asan_memcpy+0x3d/0x60 [ 720.726574] hci_le_meta_evt+0x34b/0x530 [ 720.726604] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 720.726643] hci_event_packet+0x66c/0x10e0 [ 720.726678] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 720.726710] ? __pfx_hci_event_packet+0x10/0x10 [ 720.726745] ? mark_held_locks+0x49/0x80 [ 720.726775] ? kcov_remote_start+0x2ce/0x5a0 [ 720.726821] hci_rx_work+0x65b/0x8b0 [ 720.726860] process_one_work+0x8e1/0x1960 [ 720.726907] ? __pfx_process_one_work+0x10/0x10 [ 720.726937] ? move_linked_works+0x172/0x270 [ 720.726981] ? assign_work+0x196/0x240 [ 720.727014] worker_thread+0x67e/0xe90 [ 720.727045] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 720.727088] ? __pfx_worker_thread+0x10/0x10 [ 720.727120] kthread+0x3c8/0x740 [ 720.727148] ? __pfx_kthread+0x10/0x10 [ 720.727173] ? ret_from_fork+0x79/0x7a0 [ 720.727196] ? lock_release+0xc8/0x270 [ 720.727226] ? __pfx_kthread+0x10/0x10 [ 720.727256] ret_from_fork+0x67a/0x7a0 [ 720.727279] ? __pfx_ret_from_fork+0x10/0x10 [ 720.727307] ? __switch_to+0x759/0x1030 [ 720.727337] ? __pfx_kthread+0x10/0x10 [ 720.727367] ret_from_fork_asm+0x1a/0x30 [ 720.727417] [ 720.762793] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 720.766256] Bluetooth: hci6: failed to register connection device [ 720.769567] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 720.770523] Bluetooth: hci6: ACL packet for unknown connection handle 201 06:42:12 executing program 3: r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)) lremovexattr(0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 06:42:12 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x2, 0x19}, @l2cap_cid_signaling={{0x15}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x4, 0xff, 0x0, 0x7}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0x1, 0x80}}]}}, 0x1e) [ 721.369010] Bluetooth: hci3: command 0x0406 tx timeout [ 721.881068] Bluetooth: hci6: command 0x2016 tx timeout [ 722.841099] Bluetooth: hci5: command 0x0406 tx timeout [ 723.417063] Bluetooth: hci3: command 0x0406 tx timeout [ 723.929089] Bluetooth: hci6: command 0x2016 tx timeout [ 724.889204] Bluetooth: hci5: command 0x0406 tx timeout [ 725.465222] Bluetooth: hci3: command 0x0406 tx timeout [ 725.977008] Bluetooth: hci6: command 0x2016 tx timeout [ 727.512979] Bluetooth: hci3: command 0x0406 tx timeout [ 728.025000] Bluetooth: hci6: command 0x2016 tx timeout 06:42:20 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a000007ed4f426e3b0a1fd4bc00e900aaaaaaaaaa00ffffffffffffffffff"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) dup(r2) 06:42:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) write(r1, &(0x7f0000000140), 0x0) fcntl$dupfd(r0, 0x0, r0) getsockname(r0, &(0x7f0000000000)=@ethernet={0x0, @multicast}, &(0x7f0000000100)=0x80) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:20 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) 06:42:20 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:42:20 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xffffff45}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) 06:42:20 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffdef75ed5ffffffff00000000000000f7c8918a05db52613930e8661a0e29a56450bb35b01a4be50922138b11e41a0357025bed618c1486f2dccf01edca1faa33ea04f2c9f2d521ca4efa7b1b7c117385b3c7563dcea65c256ebf5662b23c811d6d1e5e03260570694e229d2f49a5a49a48cea2"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) 06:42:20 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffff1631ffffffffffde553a5271ce01cd3f880700000000000000066b7757afb4b122d3b4fbe6a51fe9e525257fc5a6982ad29595b88f6187112e2cc0aec90577fb7fbfc67ba380f0869a02b82ae2ef47e5a1eb7f9368b248a4d9eb8e0de0b43de89a9244ca263c52f95f0eab8fa240c20a400571bdb0f5abb5fd71a287d4dd4c69d42ef9def36bb899efa7dc4eb1"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "75a1f6047d4328811fe2300b152a9dd5"}, 0x14) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9d000000000010004050000ff03ffff0500000a8f5cc7e1b8d6d57f000002000d00000000000008090009000a0400000400"], 0x23) [ 728.933660] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 728.962387] debugfs: '0' already exists in 'hci3' [ 728.964697] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 728.966105] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 728.966137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 728.966153] Workqueue: hci3 hci_rx_work [ 728.966193] Call Trace: [ 728.966202] [ 728.966212] dump_stack_lvl+0xfa/0x120 [ 728.966241] sysfs_warn_dup+0x80/0xa0 [ 728.966267] sysfs_create_dir_ns+0x23b/0x2a0 [ 728.966292] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 728.966314] ? find_held_lock+0x2b/0x80 [ 728.966343] ? lock_release+0xc8/0x270 [ 728.966376] ? do_raw_spin_unlock+0x53/0x220 [ 728.966416] kobject_add_internal+0x24c/0x9a0 [ 728.966454] kobject_add+0x157/0x240 [ 728.966485] ? __pfx_kobject_add+0x10/0x10 [ 728.966513] ? lock_release+0xc8/0x270 [ 728.966546] ? do_raw_spin_unlock+0x53/0x220 [ 728.966582] ? kobject_put+0xaa/0x260 [ 728.966625] device_add+0x32d/0x1830 [ 728.966669] ? __pfx_device_add+0x10/0x10 [ 728.966708] ? hci_debugfs_create_conn+0x10f/0x240 [ 728.966733] ? mgmt_send_event_skb+0x2f3/0x460 [ 728.966769] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 728.966805] hci_conn_add_sysfs+0x117/0x1c0 [ 728.966834] le_conn_complete_evt+0x1246/0x1e40 [ 728.966882] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 728.966937] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 728.966977] ? __asan_memcpy+0x3d/0x60 [ 728.967014] hci_le_meta_evt+0x34b/0x530 [ 728.967047] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 728.967093] hci_event_packet+0x66c/0x10e0 [ 728.967132] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 728.967167] ? __pfx_hci_event_packet+0x10/0x10 [ 728.967203] ? mark_held_locks+0x49/0x80 [ 728.967236] ? kcov_remote_start+0x2ce/0x5a0 [ 728.967285] hci_rx_work+0x65b/0x8b0 [ 728.967327] process_one_work+0x8e1/0x1960 [ 728.967378] ? __pfx_process_one_work+0x10/0x10 [ 728.967410] ? move_linked_works+0x172/0x270 [ 728.967458] ? assign_work+0x196/0x240 [ 728.967493] worker_thread+0x67e/0xe90 [ 728.967527] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 728.967572] ? __pfx_worker_thread+0x10/0x10 [ 728.967607] kthread+0x3c8/0x740 [ 728.967638] ? __pfx_kthread+0x10/0x10 [ 728.967668] ? ret_from_fork+0x79/0x7a0 06:42:20 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) 06:42:20 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffa5eeeb09125653b4301600183cc0ab5ede024ac8870e5a11a3ff6beff2887ba930fbef46349daed27a59f9abc6723f81d6eeeb9f6f54c0dcbab982c3c6b9221d61d5dc6f594e4409a3"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x94}, "88d058508d4cb774ddf8b98e33e913c8c2e17f6c58a6bd5e80a16eb44b9adc0d21994e594f228b34c2ee778e1a5d9ae6946f70be1f4df9826a99a1b4dbf920ebc55c65f9dff3a06a081ec1f8259241ddbdb7a0956f5d2b9076e5f8b013fe3e52d0540c160ff31090b7c658c9bbecde0af63762dc1f9d951fee347e8a058f3f6fa87770d0cfce2c7a595bf175b7b8cbe91ec55602"}, 0x98) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x1, 0xe}, {0x40, 0x4, 0x3ff, 0x4, [0x7b5, 0xbb6, 0x8001]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x5}, {0x6, 0xc9, 0x22}}}}, 0xa) 06:42:20 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1e, 0xc8, 0x9}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0xff, 0xc9, 0x1}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04140658c80000ff017f5cad4d7883483f45e33e45a88141336b7100d7fdce1424f0c3811bfb82fe2e8827100af46ce01b43e7761cec16e31fcbc2da645de6362cbf148c52073ab3cee43b2d15"], 0x9) [ 728.967692] ? lock_release+0xc8/0x270 [ 728.967725] ? __pfx_kthread+0x10/0x10 [ 728.967756] ret_from_fork+0x67a/0x7a0 [ 728.967781] ? __pfx_ret_from_fork+0x10/0x10 [ 728.967811] ? __switch_to+0x759/0x1030 [ 728.967844] ? __pfx_kthread+0x10/0x10 [ 728.967876] ret_from_fork_asm+0x1a/0x30 [ 728.967930] [ 729.005203] debugfs: '0' already exists in 'hci6' [ 729.005371] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.005751] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 729.008290] CPU: 1 UID: 0 PID: 308 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.008306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.008314] Workqueue: hci6 hci_rx_work [ 729.008350] Call Trace: [ 729.008349] Bluetooth: hci3: failed to register connection device [ 729.008355] [ 729.008360] dump_stack_lvl+0xfa/0x120 [ 729.008375] sysfs_warn_dup+0x80/0xa0 [ 729.008389] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.008402] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.008413] ? find_held_lock+0x2b/0x80 [ 729.008428] ? lock_release+0xc8/0x270 [ 729.008444] ? do_raw_spin_unlock+0x53/0x220 [ 729.008464] kobject_add_internal+0x24c/0x9a0 [ 729.008484] kobject_add+0x157/0x240 [ 729.008499] ? __pfx_kobject_add+0x10/0x10 [ 729.008514] ? lock_release+0xc8/0x270 [ 729.008530] ? do_raw_spin_unlock+0x53/0x220 [ 729.008548] ? kobject_put+0xaa/0x260 [ 729.008570] device_add+0x32d/0x1830 [ 729.008592] ? __pfx_device_add+0x10/0x10 [ 729.008612] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.008625] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.008643] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.008661] hci_conn_add_sysfs+0x117/0x1c0 [ 729.008677] le_conn_complete_evt+0x1246/0x1e40 [ 729.008702] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.008727] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.008747] ? __asan_memcpy+0x3d/0x60 [ 729.008766] hci_le_meta_evt+0x34b/0x530 [ 729.008784] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.008805] hci_event_packet+0x66c/0x10e0 [ 729.008824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.008842] ? __pfx_hci_event_packet+0x10/0x10 [ 729.008860] ? mark_held_locks+0x49/0x80 [ 729.008877] ? kcov_remote_start+0x2ce/0x5a0 [ 729.008903] hci_rx_work+0x65b/0x8b0 [ 729.008924] process_one_work+0x8e1/0x1960 [ 729.008956] ? __pfx_process_one_work+0x10/0x10 [ 729.008972] ? move_linked_works+0x172/0x270 [ 729.008996] ? assign_work+0x196/0x240 [ 729.009014] worker_thread+0x67e/0xe90 [ 729.009031] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.009054] ? __pfx_worker_thread+0x10/0x10 [ 729.009072] kthread+0x3c8/0x740 [ 729.009087] ? __pfx_kthread+0x10/0x10 [ 729.009101] ? ret_from_fork+0x79/0x7a0 [ 729.009113] ? lock_release+0xc8/0x270 [ 729.009130] ? __pfx_kthread+0x10/0x10 [ 729.009146] ret_from_fork+0x67a/0x7a0 [ 729.009159] ? __pfx_ret_from_fork+0x10/0x10 [ 729.009174] ? __switch_to+0x759/0x1030 [ 729.009191] ? __pfx_kthread+0x10/0x10 [ 729.009207] ret_from_fork_asm+0x1a/0x30 [ 729.009235] [ 729.009273] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.010853] debugfs: '0' already exists in 'hci3' [ 729.011064] Bluetooth: hci6: failed to register connection device [ 729.012306] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 729.053094] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.053127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.053144] Workqueue: hci3 hci_rx_work [ 729.053182] Call Trace: [ 729.053191] [ 729.053201] dump_stack_lvl+0xfa/0x120 [ 729.053227] sysfs_warn_dup+0x80/0xa0 [ 729.053254] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.053278] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.053300] ? find_held_lock+0x2b/0x80 [ 729.053328] ? lock_release+0xc8/0x270 [ 729.053360] ? do_raw_spin_unlock+0x53/0x220 [ 729.053398] kobject_add_internal+0x24c/0x9a0 [ 729.053435] kobject_add+0x157/0x240 [ 729.053465] ? __pfx_kobject_add+0x10/0x10 [ 729.053493] ? lock_release+0xc8/0x270 [ 729.053525] ? do_raw_spin_unlock+0x53/0x220 [ 729.053561] ? kobject_put+0xaa/0x260 [ 729.053601] device_add+0x32d/0x1830 [ 729.053643] ? __pfx_device_add+0x10/0x10 [ 729.053681] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.053707] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.053742] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.053776] hci_conn_add_sysfs+0x117/0x1c0 [ 729.053804] le_conn_complete_evt+0x1246/0x1e40 [ 729.053849] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.053895] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.053941] ? __asan_memcpy+0x3d/0x60 [ 729.053976] hci_le_meta_evt+0x34b/0x530 [ 729.054009] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.054049] hci_event_packet+0x66c/0x10e0 [ 729.054086] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.054120] ? __pfx_hci_event_packet+0x10/0x10 [ 729.054156] ? mark_held_locks+0x49/0x80 [ 729.054188] ? kcov_remote_start+0x2ce/0x5a0 [ 729.054235] hci_rx_work+0x65b/0x8b0 [ 729.054275] process_one_work+0x8e1/0x1960 [ 729.054322] ? __pfx_process_one_work+0x10/0x10 [ 729.054354] ? move_linked_works+0x172/0x270 [ 729.054399] ? assign_work+0x196/0x240 [ 729.054433] worker_thread+0x67e/0xe90 [ 729.054466] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.054509] ? __pfx_worker_thread+0x10/0x10 [ 729.054543] kthread+0x3c8/0x740 [ 729.054573] ? __pfx_kthread+0x10/0x10 [ 729.054600] ? ret_from_fork+0x79/0x7a0 [ 729.054624] ? lock_release+0xc8/0x270 [ 729.054656] ? __pfx_kthread+0x10/0x10 [ 729.054687] ret_from_fork+0x67a/0x7a0 [ 729.054711] ? __pfx_ret_from_fork+0x10/0x10 [ 729.054740] ? __switch_to+0x759/0x1030 [ 729.054773] ? __pfx_kthread+0x10/0x10 [ 729.054803] ret_from_fork_asm+0x1a/0x30 [ 729.054853] [ 729.089995] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.092203] Bluetooth: hci3: failed to register connection device [ 729.094539] debugfs: '0' already exists in 'hci5' [ 729.096193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 729.097558] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.097588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.097603] Workqueue: hci5 hci_rx_work [ 729.097636] Call Trace: [ 729.097645] [ 729.097654] dump_stack_lvl+0xfa/0x120 [ 729.097679] sysfs_warn_dup+0x80/0xa0 [ 729.097702] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.097727] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.097749] ? find_held_lock+0x2b/0x80 [ 729.097775] ? lock_release+0xc8/0x270 [ 729.097806] ? do_raw_spin_unlock+0x53/0x220 [ 729.097845] kobject_add_internal+0x24c/0x9a0 [ 729.097882] kobject_add+0x157/0x240 [ 729.097912] ? __pfx_kobject_add+0x10/0x10 [ 729.097947] ? lock_release+0xc8/0x270 [ 729.097979] ? do_raw_spin_unlock+0x53/0x220 [ 729.098015] ? kobject_put+0xaa/0x260 [ 729.098055] device_add+0x32d/0x1830 [ 729.098095] ? __pfx_device_add+0x10/0x10 [ 729.098133] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.098157] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.098192] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.098226] hci_conn_add_sysfs+0x117/0x1c0 [ 729.098254] le_conn_complete_evt+0x1246/0x1e40 [ 729.098298] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.098344] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.098383] ? __asan_memcpy+0x3d/0x60 [ 729.098416] hci_le_meta_evt+0x34b/0x530 [ 729.098448] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.098489] hci_event_packet+0x66c/0x10e0 [ 729.098526] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.098559] ? __pfx_hci_event_packet+0x10/0x10 [ 729.098595] ? mark_held_locks+0x49/0x80 [ 729.098627] ? kcov_remote_start+0x2ce/0x5a0 [ 729.098673] hci_rx_work+0x65b/0x8b0 [ 729.098714] process_one_work+0x8e1/0x1960 [ 729.098760] ? __pfx_process_one_work+0x10/0x10 [ 729.098791] ? move_linked_works+0x172/0x270 [ 729.098836] ? assign_work+0x196/0x240 [ 729.098870] worker_thread+0x67e/0xe90 [ 729.098903] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.098945] ? __pfx_worker_thread+0x10/0x10 [ 729.098979] kthread+0x3c8/0x740 [ 729.099008] ? __pfx_kthread+0x10/0x10 [ 729.099035] ? ret_from_fork+0x79/0x7a0 [ 729.099058] ? lock_release+0xc8/0x270 [ 729.099089] ? __pfx_kthread+0x10/0x10 [ 729.099125] ret_from_fork+0x67a/0x7a0 [ 729.099149] ? __pfx_ret_from_fork+0x10/0x10 [ 729.099178] ? __switch_to+0x759/0x1030 [ 729.099210] ? __pfx_kthread+0x10/0x10 [ 729.099241] ret_from_fork_asm+0x1a/0x30 [ 729.099291] [ 729.109187] debugfs: '0' already exists in 'hci4' [ 729.109708] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.111120] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 729.111302] Bluetooth: hci5: failed to register connection device [ 729.111546] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.111561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.111568] Workqueue: hci4 hci_rx_work [ 729.111586] Call Trace: [ 729.111590] [ 729.111595] dump_stack_lvl+0xfa/0x120 [ 729.111608] sysfs_warn_dup+0x80/0xa0 [ 729.111620] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.111632] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.111643] ? find_held_lock+0x2b/0x80 [ 729.111656] ? lock_release+0xc8/0x270 [ 729.111672] ? do_raw_spin_unlock+0x53/0x220 [ 729.111691] kobject_add_internal+0x24c/0x9a0 [ 729.111709] kobject_add+0x157/0x240 [ 729.111725] ? __pfx_kobject_add+0x10/0x10 06:42:20 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none, 0x0, 0x0, 0xffff}}}}, 0x22) syz_emit_vhci(0x0, 0x0) 06:42:20 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e8d0a0000000000aaaaaaffffffffffffffffffffff00000000000000"], 0x22) [ 729.111739] ? lock_release+0xc8/0x270 [ 729.111755] ? do_raw_spin_unlock+0x53/0x220 [ 729.111773] ? kobject_put+0xaa/0x260 [ 729.111793] device_add+0x32d/0x1830 [ 729.111814] ? __pfx_device_add+0x10/0x10 [ 729.111833] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.111845] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.111863] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.111880] hci_conn_add_sysfs+0x117/0x1c0 [ 729.111894] le_conn_complete_evt+0x1246/0x1e40 [ 729.111916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.111943] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.111963] ? __asan_memcpy+0x3d/0x60 [ 729.111980] hci_le_meta_evt+0x34b/0x530 [ 729.111996] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.112017] hci_event_packet+0x66c/0x10e0 [ 729.112035] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.112053] ? __pfx_hci_event_packet+0x10/0x10 [ 729.112071] ? mark_held_locks+0x49/0x80 [ 729.112088] ? kcov_remote_start+0x2ce/0x5a0 [ 729.112111] hci_rx_work+0x65b/0x8b0 [ 729.112131] process_one_work+0x8e1/0x1960 [ 729.112154] ? __pfx_process_one_work+0x10/0x10 [ 729.112170] ? move_linked_works+0x172/0x270 [ 729.112192] ? assign_work+0x196/0x240 [ 729.112210] worker_thread+0x67e/0xe90 [ 729.112226] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.112248] ? __pfx_worker_thread+0x10/0x10 [ 729.112265] kthread+0x3c8/0x740 [ 729.112279] ? __pfx_kthread+0x10/0x10 [ 729.112292] ? ret_from_fork+0x79/0x7a0 [ 729.112304] ? lock_release+0xc8/0x270 [ 729.112320] ? __pfx_kthread+0x10/0x10 [ 729.112343] ret_from_fork+0x67a/0x7a0 [ 729.112355] ? __pfx_ret_from_fork+0x10/0x10 [ 729.112370] ? __switch_to+0x759/0x1030 [ 729.112386] ? __pfx_kthread+0x10/0x10 [ 729.112401] ret_from_fork_asm+0x1a/0x30 [ 729.112426] 06:42:20 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xb3, 0x2}, {0xea}}}}, 0xf) [ 729.112467] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.151186] Bluetooth: hci4: failed to register connection device 06:42:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x24100, 0x20) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1f}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 06:42:20 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00ffffffffa868ffffff00"/34], 0x22) 06:42:20 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) [ 729.285349] debugfs: '0' already exists in 'hci5' [ 729.286092] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 729.286754] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.286769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.286778] Workqueue: hci5 hci_rx_work [ 729.286803] Call Trace: [ 729.286807] [ 729.286812] dump_stack_lvl+0xfa/0x120 [ 729.286828] sysfs_warn_dup+0x80/0xa0 [ 729.286842] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.286854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.286869] ? find_held_lock+0x2b/0x80 [ 729.286884] ? lock_release+0xc8/0x270 [ 729.286900] ? do_raw_spin_unlock+0x53/0x220 [ 729.286920] kobject_add_internal+0x24c/0x9a0 [ 729.286939] kobject_add+0x157/0x240 [ 729.286955] ? __pfx_kobject_add+0x10/0x10 [ 729.286969] ? lock_release+0xc8/0x270 [ 729.286985] ? do_raw_spin_unlock+0x53/0x220 [ 729.287004] ? kobject_put+0xaa/0x260 [ 729.287024] device_add+0x32d/0x1830 [ 729.287046] ? __pfx_device_add+0x10/0x10 [ 729.287065] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.287079] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.287098] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.287115] hci_conn_add_sysfs+0x117/0x1c0 [ 729.287130] le_conn_complete_evt+0x1246/0x1e40 [ 729.287157] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.287180] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.287199] ? __asan_memcpy+0x3d/0x60 [ 729.287218] hci_le_meta_evt+0x34b/0x530 [ 729.287235] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.287256] hci_event_packet+0x66c/0x10e0 [ 729.287274] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.287291] ? __pfx_hci_event_packet+0x10/0x10 [ 729.287309] ? mark_held_locks+0x49/0x80 [ 729.287325] ? kcov_remote_start+0x2ce/0x5a0 [ 729.287350] hci_rx_work+0x65b/0x8b0 [ 729.287370] process_one_work+0x8e1/0x1960 [ 729.287396] ? __pfx_process_one_work+0x10/0x10 [ 729.287412] ? move_linked_works+0x172/0x270 [ 729.287436] ? assign_work+0x196/0x240 [ 729.287453] worker_thread+0x67e/0xe90 [ 729.287469] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.287492] ? __pfx_worker_thread+0x10/0x10 [ 729.287509] kthread+0x3c8/0x740 [ 729.287525] ? __pfx_kthread+0x10/0x10 [ 729.287538] ? ret_from_fork+0x79/0x7a0 [ 729.287552] ? lock_release+0xc8/0x270 [ 729.287568] ? __pfx_kthread+0x10/0x10 [ 729.287583] ret_from_fork+0x67a/0x7a0 [ 729.287595] ? __pfx_ret_from_fork+0x10/0x10 [ 729.287609] ? __switch_to+0x759/0x1030 [ 729.287627] ? __pfx_kthread+0x10/0x10 [ 729.287642] ret_from_fork_asm+0x1a/0x30 [ 729.287667] [ 729.288735] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 729.289190] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.293852] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 729.294239] Bluetooth: hci5: failed to register connection device [ 729.339531] debugfs: '0' already exists in 'hci3' [ 729.342288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 729.345501] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.345534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.345550] Workqueue: hci3 hci_rx_work [ 729.345590] Call Trace: [ 729.345598] [ 729.345609] dump_stack_lvl+0xfa/0x120 [ 729.345636] sysfs_warn_dup+0x80/0xa0 [ 729.345663] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.345687] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.345710] ? find_held_lock+0x2b/0x80 [ 729.345738] ? lock_release+0xc8/0x270 [ 729.345770] ? do_raw_spin_unlock+0x53/0x220 [ 729.345808] kobject_add_internal+0x24c/0x9a0 [ 729.345846] kobject_add+0x157/0x240 [ 729.345876] ? __pfx_kobject_add+0x10/0x10 [ 729.345904] ? lock_release+0xc8/0x270 [ 729.345943] ? do_raw_spin_unlock+0x53/0x220 [ 729.345980] ? kobject_put+0xaa/0x260 [ 729.346020] device_add+0x32d/0x1830 [ 729.346062] ? __pfx_device_add+0x10/0x10 [ 729.346099] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.346125] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.346161] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.346195] hci_conn_add_sysfs+0x117/0x1c0 [ 729.346223] le_conn_complete_evt+0x1246/0x1e40 [ 729.346268] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.346314] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.346352] ? __asan_memcpy+0x3d/0x60 [ 729.346388] hci_le_meta_evt+0x34b/0x530 [ 729.346421] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.346462] hci_event_packet+0x66c/0x10e0 [ 729.346499] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.346533] ? __pfx_hci_event_packet+0x10/0x10 [ 729.346569] ? mark_held_locks+0x49/0x80 [ 729.346601] ? kcov_remote_start+0x2ce/0x5a0 [ 729.346648] hci_rx_work+0x65b/0x8b0 [ 729.346689] process_one_work+0x8e1/0x1960 [ 729.346736] ? __pfx_process_one_work+0x10/0x10 [ 729.346768] ? move_linked_works+0x172/0x270 [ 729.346814] ? assign_work+0x196/0x240 [ 729.346848] worker_thread+0x67e/0xe90 [ 729.346881] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.346924] ? __pfx_worker_thread+0x10/0x10 [ 729.346958] kthread+0x3c8/0x740 [ 729.346987] ? __pfx_kthread+0x10/0x10 [ 729.347015] ? ret_from_fork+0x79/0x7a0 [ 729.347039] ? lock_release+0xc8/0x270 [ 729.347070] ? __pfx_kthread+0x10/0x10 [ 729.347100] ret_from_fork+0x67a/0x7a0 [ 729.347125] ? __pfx_ret_from_fork+0x10/0x10 [ 729.347153] ? __switch_to+0x759/0x1030 [ 729.347187] ? __pfx_kthread+0x10/0x10 [ 729.347218] ret_from_fork_asm+0x1a/0x30 [ 729.347268] [ 729.384297] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.386354] Bluetooth: hci3: failed to register connection device [ 729.389606] debugfs: '0' already exists in 'hci3' [ 729.390708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 729.392089] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 729.392120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.392135] Workqueue: hci3 hci_rx_work [ 729.392169] Call Trace: [ 729.392177] [ 729.392186] dump_stack_lvl+0xfa/0x120 [ 729.392211] sysfs_warn_dup+0x80/0xa0 [ 729.392235] sysfs_create_dir_ns+0x23b/0x2a0 [ 729.392261] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 729.392284] ? find_held_lock+0x2b/0x80 [ 729.392310] ? lock_release+0xc8/0x270 [ 729.392357] ? do_raw_spin_unlock+0x53/0x220 [ 729.392395] kobject_add_internal+0x24c/0x9a0 [ 729.392432] kobject_add+0x157/0x240 [ 729.392462] ? __pfx_kobject_add+0x10/0x10 [ 729.392490] ? lock_release+0xc8/0x270 [ 729.392521] ? do_raw_spin_unlock+0x53/0x220 [ 729.392557] ? kobject_put+0xaa/0x260 [ 729.392598] device_add+0x32d/0x1830 [ 729.392638] ? __pfx_device_add+0x10/0x10 [ 729.392675] ? hci_debugfs_create_conn+0x10f/0x240 [ 729.392700] ? mgmt_send_event_skb+0x2f3/0x460 [ 729.392735] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 729.392768] hci_conn_add_sysfs+0x117/0x1c0 [ 729.392796] le_conn_complete_evt+0x1246/0x1e40 [ 729.392840] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 729.392886] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 729.392924] ? __asan_memcpy+0x3d/0x60 [ 729.392964] hci_le_meta_evt+0x34b/0x530 [ 729.392997] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 729.393038] hci_event_packet+0x66c/0x10e0 [ 729.393074] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 729.393109] ? __pfx_hci_event_packet+0x10/0x10 [ 729.393144] ? mark_held_locks+0x49/0x80 [ 729.393176] ? kcov_remote_start+0x2ce/0x5a0 [ 729.393222] hci_rx_work+0x65b/0x8b0 [ 729.393263] process_one_work+0x8e1/0x1960 [ 729.393309] ? __pfx_process_one_work+0x10/0x10 [ 729.393341] ? move_linked_works+0x172/0x270 [ 729.393385] ? assign_work+0x196/0x240 [ 729.393420] worker_thread+0x67e/0xe90 [ 729.393452] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 729.393495] ? __pfx_worker_thread+0x10/0x10 [ 729.393529] kthread+0x3c8/0x740 [ 729.393557] ? __pfx_kthread+0x10/0x10 [ 729.393584] ? ret_from_fork+0x79/0x7a0 [ 729.393607] ? lock_release+0xc8/0x270 [ 729.393638] ? __pfx_kthread+0x10/0x10 [ 729.393669] ret_from_fork+0x67a/0x7a0 [ 729.393693] ? __pfx_ret_from_fork+0x10/0x10 [ 729.393721] ? __switch_to+0x759/0x1030 [ 729.393752] ? __pfx_kthread+0x10/0x10 [ 729.393783] ret_from_fork_asm+0x1a/0x30 [ 729.393832] [ 729.429310] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 729.431342] Bluetooth: hci3: failed to register connection device [ 729.435448] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 729.561975] Bluetooth: hci3: command 0x0406 tx timeout [ 730.073154] Bluetooth: hci6: command 0x2016 tx timeout [ 730.969084] Bluetooth: hci5: command 0x0406 tx timeout [ 730.969155] Bluetooth: hci4: command 0x0406 tx timeout [ 731.610090] Bluetooth: hci3: command 0x0406 tx timeout [ 732.121238] Bluetooth: hci6: command 0x2016 tx timeout [ 733.017061] Bluetooth: hci5: command 0x0406 tx timeout [ 733.017732] Bluetooth: hci4: command 0x0406 tx timeout [ 733.657032] Bluetooth: hci3: command 0x0406 tx timeout [ 734.169115] Bluetooth: hci6: command 0x2016 tx timeout [ 735.065429] Bluetooth: hci4: command 0x0406 tx timeout [ 735.065460] Bluetooth: hci5: command 0x0406 tx timeout [ 735.705109] Bluetooth: hci3: command 0x0406 tx timeout [ 736.217034] Bluetooth: hci6: command 0x2016 tx timeout [ 737.113018] Bluetooth: hci5: command 0x0406 tx timeout [ 737.113097] Bluetooth: hci4: command 0x0406 tx timeout [ 737.753035] Bluetooth: hci3: command 0x0406 tx timeout [ 738.265019] Bluetooth: hci6: command 0x2016 tx timeout 06:42:29 executing program 0: syz_open_pts(0xffffffffffffffff, 0x18c00) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x40, 0xc8, 0xc9, 0x80}}}, 0x8) 06:42:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 06:42:29 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffff02020000ffffffff00000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:29 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00ffffffffa868ffffff00"/34], 0x22) 06:42:29 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffa5eeeb09125653b4301600183cc0ab5ede024ac8870e5a11a3ff6beff2887ba930fbef46349daed27a59f9abc6723f81d6eeeb9f6f54c0dcbab982c3c6b9221d61d5dc6f594e4409a3"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x94}, "88d058508d4cb774ddf8b98e33e913c8c2e17f6c58a6bd5e80a16eb44b9adc0d21994e594f228b34c2ee778e1a5d9ae6946f70be1f4df9826a99a1b4dbf920ebc55c65f9dff3a06a081ec1f8259241ddbdb7a0956f5d2b9076e5f8b013fe3e52d0540c160ff31090b7c658c9bbecde0af63762dc1f9d951fee347e8a058f3f6fa87770d0cfce2c7a595bf175b7b8cbe91ec55602"}, 0x98) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x1, 0xe}, {0x40, 0x4, 0x3ff, 0x4, [0x7b5, 0xbb6, 0x8001]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x5}, {0x6, 0xc9, 0x22}}}}, 0xa) 06:42:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) lremovexattr(0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="434c1c767d00"], &(0x7f0000000100)='\x00', 0x1, 0x0) 06:42:29 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x402}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_info_req={{0xa, 0x9, 0x2}, {0x3}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x6, 0xcf6, 0x5b02, 0x401}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x800, 0x9}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x2, 0x2}}]}}, 0x2b) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "66c25f6d8f9ed50e989b0e57004aca4d", 0xfd}}}, 0x1a) 06:42:29 executing program 6: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x28c000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffffffff07000000000000006b6b91194b04f709d0d8872c410323a5e542867c22a12eb18a4da0372a56286723688e700500a59cdb0fa7d6c4dc3fb55747aa671a8c6e495517a55fe5aea14d96122e6d966a7306772bab3c0c77c90f8441077b97dbf23ba3cff9449420e426d065f1eb7af47f5faf48a83eb21c4f827275dfc0122d9a7fd155b5cc3ec9396f8bdc2fde714b650700d93ce8d20af5f2fd57d377f5d863f2ada426"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x79}, "e435a10ce6055cb7ab56b51c3775ca9c99b4e2e7e41e0931843c366216c09a8db6733a9cb67af9f68caf446c4ce8a63a7435ee00cb50a7ab50290cbb1813b3f013c6dde2312062ed4c000f84e0b37321ad2d6e4bf5b4b7aa1629e3daf460c8827ab84abd1ff891d102baf30a7e1d2cd633d6c6f75fc687e6fe"}, 0x7d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x3f, 0x2, [{0xc9, 0x2}, {0x0, 0x8001, 0x3}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x1, 0xc9, 0x81, 0x3, 0x1, 0x4}}}, 0xc) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x81, 0x3}, {0x8, 0x4}}, @l2cap_conf_rsp={{0x5, 0x52}, {0x67, 0x4, 0x7, [@l2cap_conf_efs={0x6, 0x0, {0xba, 0x2, 0x1, 0x1, 0x5, 0xffff}}, @l2cap_conf_mtu={0x1, 0x0, 0x1}, @l2cap_conf_fcs, @l2cap_conf_flushto={0x2, 0x0, 0x6}, @l2cap_conf_fcs, @l2cap_conf_efs={0x6, 0x0, {0xa1, 0x2, 0x81, 0x84, 0x7fff, 0x80000001}}, @l2cap_conf_flushto={0x2, 0x0, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffc, 0x9}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x18}, {0x6ab7, 0xfff, 0x6, 0x1, [0xbc, 0x101, 0x8, 0xfffc, 0x3ff, 0x3f, 0x7, 0x0]}}}}, 0x25) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 738.381335] debugfs: '0' already exists in 'hci3' [ 738.383350] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' 06:42:29 executing program 7: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffffffffff000000000000002e95ce23253f187cd6084a1726e3d5fa191824c5877082dc33b01b61ada49b1e94ada2ae7bb6b066ec9559f416f2e564db59cceb499a02ba7213fcde9b4cf2"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 738.384890] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.384921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.384944] Workqueue: hci3 hci_rx_work [ 738.384985] Call Trace: [ 738.384994] [ 738.385004] dump_stack_lvl+0xfa/0x120 [ 738.385032] sysfs_warn_dup+0x80/0xa0 [ 738.385059] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.385083] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.385105] ? find_held_lock+0x2b/0x80 [ 738.385133] ? lock_release+0xc8/0x270 [ 738.385166] ? do_raw_spin_unlock+0x53/0x220 [ 738.385204] kobject_add_internal+0x24c/0x9a0 [ 738.385241] kobject_add+0x157/0x240 [ 738.385272] ? __pfx_kobject_add+0x10/0x10 [ 738.385300] ? lock_release+0xc8/0x270 [ 738.385332] ? do_raw_spin_unlock+0x53/0x220 [ 738.385368] ? kobject_put+0xaa/0x260 [ 738.385408] device_add+0x32d/0x1830 [ 738.385449] ? __pfx_device_add+0x10/0x10 [ 738.385487] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.385513] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.385548] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.385582] hci_conn_add_sysfs+0x117/0x1c0 [ 738.385610] le_conn_complete_evt+0x1246/0x1e40 [ 738.385655] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.385701] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.385739] ? __asan_memcpy+0x3d/0x60 [ 738.385774] hci_le_meta_evt+0x34b/0x530 [ 738.385807] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.385848] hci_event_packet+0x66c/0x10e0 [ 738.385885] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.385919] ? __pfx_hci_event_packet+0x10/0x10 [ 738.385955] ? mark_held_locks+0x49/0x80 [ 738.385988] ? kcov_remote_start+0x2ce/0x5a0 [ 738.386035] hci_rx_work+0x65b/0x8b0 [ 738.386075] process_one_work+0x8e1/0x1960 [ 738.386123] ? __pfx_process_one_work+0x10/0x10 [ 738.386154] ? move_linked_works+0x172/0x270 [ 738.386200] ? assign_work+0x196/0x240 [ 738.386234] worker_thread+0x67e/0xe90 [ 738.386267] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.386310] ? __pfx_worker_thread+0x10/0x10 [ 738.386345] kthread+0x3c8/0x740 [ 738.386374] ? __pfx_kthread+0x10/0x10 [ 738.386401] ? ret_from_fork+0x79/0x7a0 [ 738.386430] ? __pfx_kthread+0x10/0x10 [ 738.386461] ret_from_fork+0x67a/0x7a0 [ 738.386485] ? __pfx_ret_from_fork+0x10/0x10 [ 738.386506] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.386540] ? __switch_to+0x759/0x1030 [ 738.386573] ? __pfx_kthread+0x10/0x10 [ 738.386604] ret_from_fork_asm+0x1a/0x30 [ 738.386654] [ 738.422176] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.424345] Bluetooth: hci3: failed to register connection device [ 738.429287] debugfs: '0' already exists in 'hci3' [ 738.430654] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 738.432331] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.432362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.432378] Workqueue: hci3 hci_rx_work [ 738.432415] Call Trace: [ 738.432423] [ 738.432432] dump_stack_lvl+0xfa/0x120 [ 738.432472] sysfs_warn_dup+0x80/0xa0 [ 738.432498] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.432522] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.432544] ? find_held_lock+0x2b/0x80 [ 738.432571] ? lock_release+0xc8/0x270 [ 738.432603] ? do_raw_spin_unlock+0x53/0x220 [ 738.432641] kobject_add_internal+0x24c/0x9a0 [ 738.432678] kobject_add+0x157/0x240 [ 738.432708] ? __pfx_kobject_add+0x10/0x10 [ 738.432736] ? lock_release+0xc8/0x270 [ 738.432768] ? do_raw_spin_unlock+0x53/0x220 [ 738.432804] ? kobject_put+0xaa/0x260 [ 738.432844] device_add+0x32d/0x1830 [ 738.432886] ? __pfx_device_add+0x10/0x10 [ 738.432923] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.432956] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.432991] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.433025] hci_conn_add_sysfs+0x117/0x1c0 [ 738.433053] le_conn_complete_evt+0x1246/0x1e40 [ 738.433098] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.433144] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.433182] ? __asan_memcpy+0x3d/0x60 [ 738.433217] hci_le_meta_evt+0x34b/0x530 [ 738.433250] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.433291] hci_event_packet+0x66c/0x10e0 [ 738.433328] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.433362] ? __pfx_hci_event_packet+0x10/0x10 [ 738.433398] ? mark_held_locks+0x49/0x80 [ 738.433430] ? kcov_remote_start+0x2ce/0x5a0 [ 738.433477] hci_rx_work+0x65b/0x8b0 [ 738.433517] process_one_work+0x8e1/0x1960 [ 738.433565] ? __pfx_process_one_work+0x10/0x10 [ 738.433597] ? move_linked_works+0x172/0x270 [ 738.433642] ? assign_work+0x196/0x240 [ 738.433676] worker_thread+0x67e/0xe90 [ 738.433709] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.433752] ? __pfx_worker_thread+0x10/0x10 [ 738.433786] kthread+0x3c8/0x740 [ 738.433815] ? __pfx_kthread+0x10/0x10 [ 738.433842] ? ret_from_fork+0x79/0x7a0 [ 738.433870] ? __pfx_kthread+0x10/0x10 [ 738.433901] ret_from_fork+0x67a/0x7a0 [ 738.433925] ? __pfx_ret_from_fork+0x10/0x10 [ 738.433946] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.433980] ? __switch_to+0x759/0x1030 [ 738.434011] ? __pfx_kthread+0x10/0x10 [ 738.434042] ret_from_fork_asm+0x1a/0x30 [ 738.434092] [ 738.471885] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.475632] Bluetooth: hci3: failed to register connection device [ 738.481269] debugfs: '0' already exists in 'hci3' [ 738.482652] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 738.484369] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.484400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.484416] Workqueue: hci3 hci_rx_work [ 738.484450] Call Trace: [ 738.484458] [ 738.484478] dump_stack_lvl+0xfa/0x120 [ 738.484503] sysfs_warn_dup+0x80/0xa0 [ 738.484528] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.484552] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.484574] ? find_held_lock+0x2b/0x80 [ 738.484600] ? lock_release+0xc8/0x270 [ 738.484632] ? do_raw_spin_unlock+0x53/0x220 [ 738.484670] kobject_add_internal+0x24c/0x9a0 [ 738.484706] kobject_add+0x157/0x240 [ 738.484736] ? __pfx_kobject_add+0x10/0x10 [ 738.484764] ? lock_release+0xc8/0x270 [ 738.484796] ? do_raw_spin_unlock+0x53/0x220 [ 738.484832] ? kobject_put+0xaa/0x260 [ 738.484872] device_add+0x32d/0x1830 [ 738.484913] ? __pfx_device_add+0x10/0x10 [ 738.484957] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.484982] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.485016] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.485051] hci_conn_add_sysfs+0x117/0x1c0 [ 738.485078] le_conn_complete_evt+0x1246/0x1e40 [ 738.485122] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.485168] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.485207] ? __asan_memcpy+0x3d/0x60 [ 738.485240] hci_le_meta_evt+0x34b/0x530 [ 738.485273] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.485314] hci_event_packet+0x66c/0x10e0 [ 738.485351] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.485385] ? __pfx_hci_event_packet+0x10/0x10 [ 738.485421] ? mark_held_locks+0x49/0x80 [ 738.485453] ? kcov_remote_start+0x2ce/0x5a0 [ 738.485499] hci_rx_work+0x65b/0x8b0 [ 738.485539] process_one_work+0x8e1/0x1960 [ 738.485586] ? __pfx_process_one_work+0x10/0x10 [ 738.485617] ? move_linked_works+0x172/0x270 [ 738.485663] ? assign_work+0x196/0x240 [ 738.485697] worker_thread+0x67e/0xe90 [ 738.485729] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.485772] ? __pfx_worker_thread+0x10/0x10 [ 738.485806] kthread+0x3c8/0x740 [ 738.485834] ? __pfx_kthread+0x10/0x10 [ 738.485861] ? ret_from_fork+0x79/0x7a0 [ 738.485889] ? __pfx_kthread+0x10/0x10 [ 738.485919] ret_from_fork+0x67a/0x7a0 [ 738.485944] ? __pfx_ret_from_fork+0x10/0x10 [ 738.485965] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.485999] ? __switch_to+0x759/0x1030 [ 738.486030] ? __pfx_kthread+0x10/0x10 06:42:29 executing program 7: syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xffffffffffffff3e) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xdc}, "90a130bce869090cab14fdb80d2eeea5ee58446b72d477fccbf2e9d006e469f61e6cc731b6c6605072a73b8ff6d2be95a505a84dbab8d627cbd8c4f992f9cd39e936ab63fe4d4ddcc57ab0184c0164a074552982774de01f69224589a29afb5b8be865a75d2f91364542968ba099cbc2e3da1ae35d5779fd585f1fb07a114288f6fa4ad46d5f0d48801bbd52a5078ba85d38c1d30aa5c0c8d3bdfc59fb2355cd8ff91658d24e3a23eca7c70b690d2a096c6c7856f1954daffd2130adc37af4fec2bb831a605d7e760a33743d8242eb0ecb8fd70211aa00d7a2c9b1dd"}, 0xe0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 738.486060] ret_from_fork_asm+0x1a/0x30 [ 738.486110] [ 738.487972] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 738.489338] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.489704] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 738.489886] Bluetooth: hci3: failed to register connection device [ 738.501951] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 738.506218] debugfs: '0' already exists in 'hci3' [ 738.537338] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 738.537521] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 738.539571] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.539602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.539618] Workqueue: hci3 hci_rx_work [ 738.539655] Call Trace: [ 738.539663] [ 738.539673] dump_stack_lvl+0xfa/0x120 [ 738.539700] sysfs_warn_dup+0x80/0xa0 [ 738.539725] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.539750] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.539772] ? find_held_lock+0x2b/0x80 [ 738.539799] ? lock_release+0xc8/0x270 [ 738.539831] ? do_raw_spin_unlock+0x53/0x220 [ 738.539869] kobject_add_internal+0x24c/0x9a0 [ 738.539907] kobject_add+0x157/0x240 [ 738.539945] ? __pfx_kobject_add+0x10/0x10 [ 738.539973] ? lock_release+0xc8/0x270 [ 738.540005] ? do_raw_spin_unlock+0x53/0x220 [ 738.540041] ? kobject_put+0xaa/0x260 [ 738.540081] device_add+0x32d/0x1830 [ 738.540122] ? __pfx_device_add+0x10/0x10 [ 738.540160] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.540186] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.540221] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.540255] hci_conn_add_sysfs+0x117/0x1c0 [ 738.540283] le_conn_complete_evt+0x1246/0x1e40 [ 738.540328] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.540374] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.540413] ? __asan_memcpy+0x3d/0x60 [ 738.540447] hci_le_meta_evt+0x34b/0x530 [ 738.540494] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.540535] hci_event_packet+0x66c/0x10e0 [ 738.540572] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.540607] ? __pfx_hci_event_packet+0x10/0x10 [ 738.540642] ? mark_held_locks+0x49/0x80 [ 738.540674] ? kcov_remote_start+0x2ce/0x5a0 [ 738.540721] hci_rx_work+0x65b/0x8b0 [ 738.540761] process_one_work+0x8e1/0x1960 [ 738.540808] ? __pfx_process_one_work+0x10/0x10 [ 738.540840] ? move_linked_works+0x172/0x270 [ 738.540886] ? assign_work+0x196/0x240 [ 738.540920] worker_thread+0x67e/0xe90 [ 738.540952] ? _raw_spin_unlock_irqrestore+0x2c/0x50 06:42:29 executing program 6: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x28c000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffffffff07000000000000006b6b91194b04f709d0d8872c410323a5e542867c22a12eb18a4da0372a56286723688e700500a59cdb0fa7d6c4dc3fb55747aa671a8c6e495517a55fe5aea14d96122e6d966a7306772bab3c0c77c90f8441077b97dbf23ba3cff9449420e426d065f1eb7af47f5faf48a83eb21c4f827275dfc0122d9a7fd155b5cc3ec9396f8bdc2fde714b650700d93ce8d20af5f2fd57d377f5d863f2ada426"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x79}, "e435a10ce6055cb7ab56b51c3775ca9c99b4e2e7e41e0931843c366216c09a8db6733a9cb67af9f68caf446c4ce8a63a7435ee00cb50a7ab50290cbb1813b3f013c6dde2312062ed4c000f84e0b37321ad2d6e4bf5b4b7aa1629e3daf460c8827ab84abd1ff891d102baf30a7e1d2cd633d6c6f75fc687e6fe"}, 0x7d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x3f, 0x2, [{0xc9, 0x2}, {0x0, 0x8001, 0x3}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x1, 0xc9, 0x81, 0x3, 0x1, 0x4}}}, 0xc) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x81, 0x3}, {0x8, 0x4}}, @l2cap_conf_rsp={{0x5, 0x52}, {0x67, 0x4, 0x7, [@l2cap_conf_efs={0x6, 0x0, {0xba, 0x2, 0x1, 0x1, 0x5, 0xffff}}, @l2cap_conf_mtu={0x1, 0x0, 0x1}, @l2cap_conf_fcs, @l2cap_conf_flushto={0x2, 0x0, 0x6}, @l2cap_conf_fcs, @l2cap_conf_efs={0x6, 0x0, {0xa1, 0x2, 0x81, 0x84, 0x7fff, 0x80000001}}, @l2cap_conf_flushto={0x2, 0x0, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffc, 0x9}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x18}, {0x6ab7, 0xfff, 0x6, 0x1, [0xbc, 0x101, 0x8, 0xfffc, 0x3ff, 0x3f, 0x7, 0x0]}}}}, 0x25) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(0x0, 0x0) [ 738.540996] ? __pfx_worker_thread+0x10/0x10 [ 738.541030] kthread+0x3c8/0x740 [ 738.541059] ? __pfx_kthread+0x10/0x10 [ 738.541086] ? ret_from_fork+0x79/0x7a0 [ 738.541115] ? __pfx_kthread+0x10/0x10 [ 738.541145] ret_from_fork+0x67a/0x7a0 [ 738.541170] ? __pfx_ret_from_fork+0x10/0x10 [ 738.541191] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.541226] ? __switch_to+0x759/0x1030 [ 738.541258] ? __pfx_kthread+0x10/0x10 [ 738.541289] ret_from_fork_asm+0x1a/0x30 [ 738.541340] [ 738.579407] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.583191] Bluetooth: hci3: failed to register connection device 06:42:29 executing program 1: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffa5eeeb09125653b4301600183cc0ab5ede024ac8870e5a11a3ff6beff2887ba930fbef46349daed27a59f9abc6723f81d6eeeb9f6f54c0dcbab982c3c6b9221d61d5dc6f594e4409a3"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x94}, "88d058508d4cb774ddf8b98e33e913c8c2e17f6c58a6bd5e80a16eb44b9adc0d21994e594f228b34c2ee778e1a5d9ae6946f70be1f4df9826a99a1b4dbf920ebc55c65f9dff3a06a081ec1f8259241ddbdb7a0956f5d2b9076e5f8b013fe3e52d0540c160ff31090b7c658c9bbecde0af63762dc1f9d951fee347e8a058f3f6fa87770d0cfce2c7a595bf175b7b8cbe91ec55602"}, 0x98) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x1, 0xe}, {0x40, 0x4, 0x3ff, 0x4, [0x7b5, 0xbb6, 0x8001]}}}}, 0x1b) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x5}, {0x6, 0xc9, 0x22}}}}, 0xa) 06:42:29 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x5, 0xa}, {0x1, 0x5800, 0xfff, 0x4, 0x1}}}}, 0x17) [ 738.636805] Bluetooth: hci3: SCO packet for unknown connection handle 200 06:42:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000890}, 0x40d0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @none, @none, 0x1}}}}, 0x22) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfe) 06:42:29 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x8000000, 0x0, 0xff7fffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x22081, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/8) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff}}) semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f0000000100)=""/66) semget(0x2, 0x1, 0x80) r3 = semget(0x1, 0x4, 0x210) semtimedop(r3, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="011e2500"/16]) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x8}, {r0, 0x8400}, {r4, 0xc2}], 0x5, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x2]}, 0x8) r5 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) sendfile(r1, r5, &(0x7f0000000100)=0xfffffffffffffffd, 0x1f) lremovexattr(0x0, 0x0) [ 738.637002] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 738.654451] debugfs: '0' already exists in 'hci5' [ 738.656676] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 738.658123] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.658155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.658171] Workqueue: hci5 hci_rx_work [ 738.658212] Call Trace: [ 738.658220] [ 738.658230] dump_stack_lvl+0xfa/0x120 [ 738.658258] sysfs_warn_dup+0x80/0xa0 [ 738.658286] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.658310] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.658333] ? find_held_lock+0x2b/0x80 [ 738.658362] ? lock_release+0xc8/0x270 [ 738.658396] ? do_raw_spin_unlock+0x53/0x220 [ 738.658435] kobject_add_internal+0x24c/0x9a0 [ 738.658474] kobject_add+0x157/0x240 [ 738.658504] ? __pfx_kobject_add+0x10/0x10 [ 738.658533] ? lock_release+0xc8/0x270 [ 738.658565] ? do_raw_spin_unlock+0x53/0x220 [ 738.658602] ? kobject_put+0xaa/0x260 [ 738.658645] device_add+0x32d/0x1830 [ 738.658688] ? __pfx_device_add+0x10/0x10 [ 738.658727] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.658754] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.658790] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.658826] hci_conn_add_sysfs+0x117/0x1c0 [ 738.658855] le_conn_complete_evt+0x1246/0x1e40 [ 738.658903] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.658959] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.658999] ? __asan_memcpy+0x3d/0x60 [ 738.659035] hci_le_meta_evt+0x34b/0x530 [ 738.659068] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.659111] hci_event_packet+0x66c/0x10e0 [ 738.659149] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.659184] ? __pfx_hci_event_packet+0x10/0x10 [ 738.659220] ? mark_held_locks+0x49/0x80 [ 738.659253] ? kcov_remote_start+0x2ce/0x5a0 [ 738.659303] hci_rx_work+0x65b/0x8b0 [ 738.659344] process_one_work+0x8e1/0x1960 [ 738.659396] ? __pfx_process_one_work+0x10/0x10 [ 738.659428] ? move_linked_works+0x172/0x270 [ 738.659475] ? assign_work+0x196/0x240 [ 738.659511] worker_thread+0x67e/0xe90 [ 738.659544] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.659590] ? __pfx_worker_thread+0x10/0x10 [ 738.659629] kthread+0x3c8/0x740 [ 738.659660] ? __pfx_kthread+0x10/0x10 [ 738.659687] ? ret_from_fork+0x79/0x7a0 [ 738.659717] ? __pfx_kthread+0x10/0x10 [ 738.659750] ret_from_fork+0x67a/0x7a0 [ 738.659775] ? __pfx_ret_from_fork+0x10/0x10 [ 738.659796] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.659832] ? __switch_to+0x759/0x1030 [ 738.659866] ? __pfx_kthread+0x10/0x10 [ 738.659897] ret_from_fork_asm+0x1a/0x30 [ 738.659951] [ 738.698582] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.702483] Bluetooth: hci5: failed to register connection device [ 738.704287] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 738.704665] Bluetooth: hci5: ACL packet for unknown connection handle 200 06:42:30 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xaa, 0x4}, {0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 738.722695] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 738.751209] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 738.772098] debugfs: '0' already exists in 'hci6' [ 738.773962] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 738.775483] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.775514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.775531] Workqueue: hci6 hci_rx_work [ 738.775571] Call Trace: [ 738.775579] [ 738.775589] dump_stack_lvl+0xfa/0x120 [ 738.775617] sysfs_warn_dup+0x80/0xa0 [ 738.775644] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.775668] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.775690] ? find_held_lock+0x2b/0x80 [ 738.775718] ? lock_release+0xc8/0x270 [ 738.775751] ? do_raw_spin_unlock+0x53/0x220 [ 738.775789] kobject_add_internal+0x24c/0x9a0 [ 738.775827] kobject_add+0x157/0x240 [ 738.775857] ? __pfx_kobject_add+0x10/0x10 [ 738.775886] ? lock_release+0xc8/0x270 [ 738.775917] ? do_raw_spin_unlock+0x53/0x220 [ 738.775961] ? kobject_put+0xaa/0x260 [ 738.776001] device_add+0x32d/0x1830 [ 738.776043] ? __pfx_device_add+0x10/0x10 [ 738.776081] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.776107] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.776143] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.776177] hci_conn_add_sysfs+0x117/0x1c0 [ 738.776206] le_conn_complete_evt+0x1246/0x1e40 [ 738.776251] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.776297] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.776335] ? __asan_memcpy+0x3d/0x60 [ 738.776370] hci_le_meta_evt+0x34b/0x530 [ 738.776403] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.776444] hci_event_packet+0x66c/0x10e0 [ 738.776496] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.776530] ? __pfx_hci_event_packet+0x10/0x10 [ 738.776566] ? mark_held_locks+0x49/0x80 [ 738.776598] ? kcov_remote_start+0x2ce/0x5a0 [ 738.776645] hci_rx_work+0x65b/0x8b0 [ 738.776685] process_one_work+0x8e1/0x1960 [ 738.776733] ? __pfx_process_one_work+0x10/0x10 [ 738.776765] ? move_linked_works+0x172/0x270 [ 738.776811] ? assign_work+0x196/0x240 [ 738.776845] worker_thread+0x67e/0xe90 [ 738.776878] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.776922] ? __pfx_worker_thread+0x10/0x10 [ 738.776956] kthread+0x3c8/0x740 [ 738.776985] ? __pfx_kthread+0x10/0x10 [ 738.777012] ? ret_from_fork+0x79/0x7a0 [ 738.777042] ? __pfx_kthread+0x10/0x10 [ 738.777072] ret_from_fork+0x67a/0x7a0 [ 738.777097] ? __pfx_ret_from_fork+0x10/0x10 [ 738.777119] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.777153] ? __switch_to+0x759/0x1030 [ 738.777186] ? __pfx_kthread+0x10/0x10 [ 738.777217] ret_from_fork_asm+0x1a/0x30 [ 738.777267] [ 738.813179] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.815370] Bluetooth: hci6: failed to register connection device [ 738.817840] debugfs: '0' already exists in 'hci3' [ 738.818912] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 738.820406] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.820437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.820452] Workqueue: hci3 hci_rx_work [ 738.820499] Call Trace: [ 738.820507] [ 738.820516] dump_stack_lvl+0xfa/0x120 [ 738.820544] sysfs_warn_dup+0x80/0xa0 [ 738.820569] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.820593] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.820615] ? find_held_lock+0x2b/0x80 [ 738.820642] ? lock_release+0xc8/0x270 [ 738.820674] ? do_raw_spin_unlock+0x53/0x220 [ 738.820712] kobject_add_internal+0x24c/0x9a0 [ 738.820750] kobject_add+0x157/0x240 [ 738.820780] ? __pfx_kobject_add+0x10/0x10 [ 738.820808] ? lock_release+0xc8/0x270 [ 738.820840] ? do_raw_spin_unlock+0x53/0x220 [ 738.820876] ? kobject_put+0xaa/0x260 [ 738.820916] device_add+0x32d/0x1830 [ 738.820964] ? __pfx_device_add+0x10/0x10 [ 738.821002] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.821028] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.821063] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.821097] hci_conn_add_sysfs+0x117/0x1c0 [ 738.821125] le_conn_complete_evt+0x1246/0x1e40 [ 738.821170] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.821215] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.821253] ? __asan_memcpy+0x3d/0x60 [ 738.821288] hci_le_meta_evt+0x34b/0x530 [ 738.821320] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.821361] hci_event_packet+0x66c/0x10e0 [ 738.821398] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.821432] ? __pfx_hci_event_packet+0x10/0x10 [ 738.821467] ? mark_held_locks+0x49/0x80 [ 738.821499] ? kcov_remote_start+0x2ce/0x5a0 [ 738.821546] hci_rx_work+0x65b/0x8b0 [ 738.821586] process_one_work+0x8e1/0x1960 [ 738.821633] ? __pfx_process_one_work+0x10/0x10 [ 738.821665] ? move_linked_works+0x172/0x270 [ 738.821710] ? assign_work+0x196/0x240 [ 738.821744] worker_thread+0x67e/0xe90 [ 738.821777] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.821820] ? __pfx_worker_thread+0x10/0x10 [ 738.821854] kthread+0x3c8/0x740 [ 738.821883] ? __pfx_kthread+0x10/0x10 [ 738.821910] ? ret_from_fork+0x79/0x7a0 [ 738.821939] ? __pfx_kthread+0x10/0x10 [ 738.821969] ret_from_fork+0x67a/0x7a0 [ 738.821994] ? __pfx_ret_from_fork+0x10/0x10 [ 738.822016] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.822050] ? __switch_to+0x759/0x1030 [ 738.822082] ? __pfx_kthread+0x10/0x10 [ 738.822113] ret_from_fork_asm+0x1a/0x30 [ 738.822163] [ 738.858018] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.860308] Bluetooth: hci3: failed to register connection device [ 738.861976] debugfs: '0' already exists in 'hci3' [ 738.863040] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 738.864400] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 738.864430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.864445] Workqueue: hci3 hci_rx_work [ 738.864489] Call Trace: [ 738.864498] [ 738.864507] dump_stack_lvl+0xfa/0x120 [ 738.864532] sysfs_warn_dup+0x80/0xa0 [ 738.864557] sysfs_create_dir_ns+0x23b/0x2a0 [ 738.864581] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 738.864604] ? find_held_lock+0x2b/0x80 [ 738.864630] ? lock_release+0xc8/0x270 [ 738.864662] ? do_raw_spin_unlock+0x53/0x220 [ 738.864700] kobject_add_internal+0x24c/0x9a0 [ 738.864737] kobject_add+0x157/0x240 [ 738.864767] ? __pfx_kobject_add+0x10/0x10 [ 738.864795] ? lock_release+0xc8/0x270 [ 738.864826] ? do_raw_spin_unlock+0x53/0x220 [ 738.864862] ? kobject_put+0xaa/0x260 [ 738.864902] device_add+0x32d/0x1830 [ 738.864950] ? __pfx_device_add+0x10/0x10 [ 738.864988] ? hci_debugfs_create_conn+0x10f/0x240 [ 738.865012] ? mgmt_send_event_skb+0x2f3/0x460 [ 738.865047] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 738.865081] hci_conn_add_sysfs+0x117/0x1c0 [ 738.865109] le_conn_complete_evt+0x1246/0x1e40 [ 738.865153] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 738.865199] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 738.865237] ? __asan_memcpy+0x3d/0x60 [ 738.865271] hci_le_meta_evt+0x34b/0x530 [ 738.865303] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 738.865344] hci_event_packet+0x66c/0x10e0 [ 738.865380] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 738.865415] ? __pfx_hci_event_packet+0x10/0x10 [ 738.865450] ? mark_held_locks+0x49/0x80 [ 738.865482] ? kcov_remote_start+0x2ce/0x5a0 [ 738.865528] hci_rx_work+0x65b/0x8b0 [ 738.865568] process_one_work+0x8e1/0x1960 [ 738.865615] ? __pfx_process_one_work+0x10/0x10 [ 738.865647] ? move_linked_works+0x172/0x270 [ 738.865691] ? assign_work+0x196/0x240 [ 738.865725] worker_thread+0x67e/0xe90 [ 738.865758] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 738.865801] ? __pfx_worker_thread+0x10/0x10 [ 738.865836] kthread+0x3c8/0x740 [ 738.865865] ? __pfx_kthread+0x10/0x10 [ 738.865892] ? ret_from_fork+0x79/0x7a0 [ 738.865920] ? __pfx_kthread+0x10/0x10 [ 738.865950] ret_from_fork+0x67a/0x7a0 [ 738.865974] ? __pfx_ret_from_fork+0x10/0x10 [ 738.865996] ? save_fpregs_to_fpstate+0x145/0x270 [ 738.866030] ? __switch_to+0x759/0x1030 [ 738.866061] ? __pfx_kthread+0x10/0x10 [ 738.866092] ret_from_fork_asm+0x1a/0x30 [ 738.866142] [ 738.904024] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 738.907573] Bluetooth: hci3: failed to register connection device [ 739.161616] Bluetooth: hci5: command 0x0406 tx timeout [ 739.801007] Bluetooth: hci3: command 0x0406 tx timeout [ 740.313029] Bluetooth: hci6: command 0x2016 tx timeout [ 741.209068] Bluetooth: hci5: command 0x0406 tx timeout [ 741.849036] Bluetooth: hci3: command 0x0406 tx timeout [ 742.361045] Bluetooth: hci6: command 0x2016 tx timeout [ 743.257078] Bluetooth: hci5: command 0x0406 tx timeout [ 743.897229] Bluetooth: hci3: command 0x0406 tx timeout [ 744.409084] Bluetooth: hci6: command 0x2016 tx timeout [ 745.305063] Bluetooth: hci5: command 0x0406 tx timeout [ 745.945133] Bluetooth: hci3: command 0x0406 tx timeout [ 746.457021] Bluetooth: hci6: command 0x2016 tx timeout [ 747.353124] Bluetooth: hci5: command 0x0406 tx timeout [ 747.993103] Bluetooth: hci3: command 0x0406 tx timeout [ 748.505009] Bluetooth: hci6: command 0x2016 tx timeout 06:42:40 executing program 6: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x28c000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffffffff07000000000000006b6b91194b04f709d0d8872c410323a5e542867c22a12eb18a4da0372a56286723688e700500a59cdb0fa7d6c4dc3fb55747aa671a8c6e495517a55fe5aea14d96122e6d966a7306772bab3c0c77c90f8441077b97dbf23ba3cff9449420e426d065f1eb7af47f5faf48a83eb21c4f827275dfc0122d9a7fd155b5cc3ec9396f8bdc2fde714b650700d93ce8d20af5f2fd57d377f5d863f2ada426"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x79}, "e435a10ce6055cb7ab56b51c3775ca9c99b4e2e7e41e0931843c366216c09a8db6733a9cb67af9f68caf446c4ce8a63a7435ee00cb50a7ab50290cbb1813b3f013c6dde2312062ed4c000f84e0b37321ad2d6e4bf5b4b7aa1629e3daf460c8827ab84abd1ff891d102baf30a7e1d2cd633d6c6f75fc687e6fe"}, 0x7d) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0xf}, {0x3f, 0x2, [{0xc9, 0x2}, {0x0, 0x8001, 0x3}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x1, 0xc9, 0x81, 0x3, 0x1, 0x4}}}, 0xc) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x81, 0x3}, {0x8, 0x4}}, @l2cap_conf_rsp={{0x5, 0x52}, {0x67, 0x4, 0x7, [@l2cap_conf_efs={0x6, 0x0, {0xba, 0x2, 0x1, 0x1, 0x5, 0xffff}}, @l2cap_conf_mtu={0x1, 0x0, 0x1}, @l2cap_conf_fcs, @l2cap_conf_flushto={0x2, 0x0, 0x6}, @l2cap_conf_fcs, @l2cap_conf_efs={0x6, 0x0, {0xa1, 0x2, 0x81, 0x84, 0x7fff, 0x80000001}}, @l2cap_conf_flushto={0x2, 0x0, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0xfffc, 0x9}}]}}, 0x20) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x18}, {0x6ab7, 0xfff, 0x6, 0x1, [0xbc, 0x101, 0x8, 0xfffc, 0x3ff, 0x3f, 0x7, 0x0]}}}}, 0x25) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) syz_emit_vhci(0x0, 0x0) 06:42:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x55, 0x5, 0xa0, 0x4, 0x0, 0x101, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffff73c}, 0x1408, 0x0, 0x3f, 0x2, 0xfff, 0x6, 0xd5e, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0x9, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:40 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) dup(r3) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000cc0)=0x40) close_range(r0, r1, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000d40)=""/201, 0xc2}, {&(0x7f00000003c0)=""/64, 0x13}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/127, 0x7f}, {&(0x7f00000005c0)=""/65, 0x50}], 0x6, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x20}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24}}], 0xa8}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000800)=""/185, 0xb9}], 0x1}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000240)=""/121, 0x77}, {&(0x7f00000009c0)=""/83, 0x4a}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18}}, @cred={{0x1c}}], 0x110}}], 0x3, 0x10043, &(0x7f0000000c80)={r5, r6+10000000}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0xa1, 0x8, 0x4, 0x0, 0x200, 0x80948, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x1}, 0x40800, 0x5, 0x3, 0x2, 0xa762, 0x9, 0x7f, 0x0, 0x1000, 0x0, 0x8}, r7, 0xa, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x85, 0x0, 0x67, 0x8, 0x0, 0x401, 0x2190, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x1000, 0x1, 0x6, 0x7, 0xffffffff, 0x80000001, 0x8, 0x0, 0xffffffff, 0x0, 0x100000000}, 0xffffffffffffffff, 0x1, r1, 0x1) signalfd4(r2, &(0x7f0000000d00)={[0x5]}, 0x8, 0x0) 06:42:40 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000002000aaaab0aaaa00ffffffffffffffffffffbfff00000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:40 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00ffffffffffffffffffffffff00000000000000"], 0x22) 06:42:40 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaa713f5e07aa00ffff771c7554ffffffffff0f000000000000"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0xfffffffffffffe0d) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) 06:42:40 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3b90}, 0x1, 0x0, 0x0, 0xc180}, 0x10) r0 = perf_event_open(&(0x7f0000003e80)={0x4, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x20, 0x9, 0x0, 0xff, 0x0, 0x4, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp, 0x2a0, 0xe8, 0x0, 0x3, 0x100000001, 0x10000, 0x40, 0x0, 0x4, 0x0, 0x6}, 0x0, 0x3, r0, 0x2) creat(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) perf_event_open(&(0x7f0000003e00)={0x0, 0x80, 0x3, 0x3f, 0x4, 0xb1, 0x0, 0x1, 0x1000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0xe0, 0x5}, 0x802, 0x6, 0x100, 0x5, 0x7, 0x1ff, 0x6, 0x0, 0x9, 0x0, 0xcf49}, 0x0, 0x4, r2, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000003d40)='./file0\x00', 0x440000, 0x8) fchdir(r2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:40 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a00ffffffffa868ffffff00"/34], 0x22) [ 748.929341] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 748.929724] Bluetooth: hci5: ACL packet for unknown connection handle 200 06:42:40 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x8000000, 0x0, 0xff7fffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x22081, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/8) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff}}) semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f0000000100)=""/66) semget(0x2, 0x1, 0x80) r3 = semget(0x1, 0x4, 0x210) semtimedop(r3, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="011e2500"/16]) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x8}, {r0, 0x8400}, {r4, 0xc2}], 0x5, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x2]}, 0x8) r5 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) sendfile(r1, r5, &(0x7f0000000100)=0xfffffffffffffffd, 0x1f) lremovexattr(0x0, 0x0) [ 748.980143] debugfs: '0' already exists in 'hci3' [ 748.981255] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 748.982604] CPU: 0 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 748.982639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 748.982654] Workqueue: hci3 hci_rx_work [ 748.982692] Call Trace: [ 748.982701] [ 748.982711] dump_stack_lvl+0xfa/0x120 [ 748.982737] sysfs_warn_dup+0x80/0xa0 [ 748.982763] sysfs_create_dir_ns+0x23b/0x2a0 [ 748.982786] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 748.982808] ? find_held_lock+0x2b/0x80 [ 748.982835] ? lock_release+0xc8/0x270 [ 748.982867] ? do_raw_spin_unlock+0x53/0x220 [ 748.982905] kobject_add_internal+0x24c/0x9a0 [ 748.982948] kobject_add+0x157/0x240 [ 748.982978] ? __pfx_kobject_add+0x10/0x10 [ 748.983006] ? lock_release+0xc8/0x270 [ 748.983037] ? do_raw_spin_unlock+0x53/0x220 [ 748.983073] ? kobject_put+0xaa/0x260 [ 748.983113] device_add+0x32d/0x1830 [ 748.983155] ? __pfx_device_add+0x10/0x10 [ 748.983192] ? hci_debugfs_create_conn+0x10f/0x240 [ 748.983218] ? mgmt_send_event_skb+0x2f3/0x460 [ 748.983253] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 748.983287] hci_conn_add_sysfs+0x117/0x1c0 [ 748.983315] le_conn_complete_evt+0x1246/0x1e40 [ 748.983359] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 748.983405] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 748.983444] ? __asan_memcpy+0x3d/0x60 [ 748.983478] hci_le_meta_evt+0x34b/0x530 [ 748.983510] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 748.983551] hci_event_packet+0x66c/0x10e0 [ 748.983588] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 748.983622] ? __pfx_hci_event_packet+0x10/0x10 [ 748.983657] ? mark_held_locks+0x49/0x80 [ 748.983690] ? kcov_remote_start+0x2ce/0x5a0 [ 748.983737] hci_rx_work+0x65b/0x8b0 [ 748.983777] process_one_work+0x8e1/0x1960 [ 748.983824] ? __pfx_process_one_work+0x10/0x10 [ 748.983856] ? move_linked_works+0x172/0x270 [ 748.983901] ? assign_work+0x196/0x240 [ 748.983935] worker_thread+0x67e/0xe90 [ 748.983968] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 748.984011] ? __pfx_worker_thread+0x10/0x10 [ 748.984045] kthread+0x3c8/0x740 [ 748.984075] ? __pfx_kthread+0x10/0x10 [ 748.984102] ? ret_from_fork+0x79/0x7a0 [ 748.984126] ? lock_release+0xc8/0x270 [ 748.984157] ? __pfx_kthread+0x10/0x10 [ 748.984188] ret_from_fork+0x67a/0x7a0 [ 748.984212] ? __pfx_ret_from_fork+0x10/0x10 [ 748.984241] ? __switch_to+0x759/0x1030 [ 748.984273] ? __pfx_kthread+0x10/0x10 [ 748.984304] ret_from_fork_asm+0x1a/0x30 [ 748.984354] [ 749.044472] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 749.046510] Bluetooth: hci3: failed to register connection device [ 749.050031] debugfs: '0' already exists in 'hci6' [ 749.051119] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 749.052483] CPU: 0 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 749.052514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.052529] Workqueue: hci6 hci_rx_work [ 749.052564] Call Trace: [ 749.052573] [ 749.052583] dump_stack_lvl+0xfa/0x120 [ 749.052621] sysfs_warn_dup+0x80/0xa0 [ 749.052646] sysfs_create_dir_ns+0x23b/0x2a0 [ 749.052670] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 749.052692] ? find_held_lock+0x2b/0x80 [ 749.052719] ? lock_release+0xc8/0x270 [ 749.052752] ? do_raw_spin_unlock+0x53/0x220 [ 749.052790] kobject_add_internal+0x24c/0x9a0 [ 749.052828] kobject_add+0x157/0x240 [ 749.052859] ? __pfx_kobject_add+0x10/0x10 [ 749.052887] ? lock_release+0xc8/0x270 [ 749.052919] ? do_raw_spin_unlock+0x53/0x220 [ 749.052961] ? kobject_put+0xaa/0x260 [ 749.053004] device_add+0x32d/0x1830 [ 749.053045] ? __pfx_device_add+0x10/0x10 [ 749.053084] ? hci_debugfs_create_conn+0x10f/0x240 [ 749.053109] ? mgmt_send_event_skb+0x2f3/0x460 [ 749.053144] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 749.053179] hci_conn_add_sysfs+0x117/0x1c0 [ 749.053208] le_conn_complete_evt+0x1246/0x1e40 [ 749.053254] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 749.053302] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 749.053341] ? __asan_memcpy+0x3d/0x60 [ 749.053376] hci_le_meta_evt+0x34b/0x530 [ 749.053408] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 749.053451] hci_event_packet+0x66c/0x10e0 [ 749.053489] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 749.053523] ? __pfx_hci_event_packet+0x10/0x10 [ 749.053560] ? mark_held_locks+0x49/0x80 [ 749.053593] ? kcov_remote_start+0x2ce/0x5a0 [ 749.053641] hci_rx_work+0x65b/0x8b0 [ 749.053683] process_one_work+0x8e1/0x1960 [ 749.053733] ? __pfx_process_one_work+0x10/0x10 [ 749.053764] ? move_linked_works+0x172/0x270 [ 749.053811] ? assign_work+0x196/0x240 [ 749.053847] worker_thread+0x67e/0xe90 [ 749.053880] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 749.053925] ? __pfx_worker_thread+0x10/0x10 [ 749.053959] kthread+0x3c8/0x740 [ 749.053989] ? __pfx_kthread+0x10/0x10 [ 749.054016] ? ret_from_fork+0x79/0x7a0 [ 749.054040] ? lock_release+0xc8/0x270 [ 749.054072] ? __pfx_kthread+0x10/0x10 [ 749.054104] ret_from_fork+0x67a/0x7a0 [ 749.054128] ? __pfx_ret_from_fork+0x10/0x10 [ 749.054158] ? __switch_to+0x759/0x1030 [ 749.054190] ? __pfx_kthread+0x10/0x10 [ 749.054221] ret_from_fork_asm+0x1a/0x30 [ 749.054274] [ 749.090114] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 749.092172] Bluetooth: hci6: failed to register connection device [ 749.106390] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 749.110277] debugfs: '0' already exists in 'hci3' [ 749.111363] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 749.112698] CPU: 0 UID: 0 PID: 292 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 749.112728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 749.112744] Workqueue: hci3 hci_rx_work [ 749.112781] Call Trace: [ 749.112790] [ 749.112800] dump_stack_lvl+0xfa/0x120 [ 749.112827] sysfs_warn_dup+0x80/0xa0 [ 749.112852] sysfs_create_dir_ns+0x23b/0x2a0 [ 749.112876] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 749.112899] ? find_held_lock+0x2b/0x80 [ 749.112926] ? lock_release+0xc8/0x270 [ 749.112964] ? do_raw_spin_unlock+0x53/0x220 [ 749.113003] kobject_add_internal+0x24c/0x9a0 [ 749.113040] kobject_add+0x157/0x240 [ 749.113070] ? __pfx_kobject_add+0x10/0x10 06:42:40 executing program 4: prctl$PR_PAC_RESET_KEYS(0x36, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x2f}, @l2cap_cid_signaling={{0x2b}, [@l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0xff, 0x3}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x1, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x97, 0x4}, {0x4, 0x6}}, @l2cap_create_chan_req={{0xc, 0x85, 0x5}, {0x7b47, 0x7, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0x793e, 0x0, 0x1, 0xa6}}]}}, 0x34) [ 749.113098] ? lock_release+0xc8/0x270 [ 749.113130] ? do_raw_spin_unlock+0x53/0x220 [ 749.113166] ? kobject_put+0xaa/0x260 [ 749.113206] device_add+0x32d/0x1830 [ 749.113247] ? __pfx_device_add+0x10/0x10 [ 749.113285] ? hci_debugfs_create_conn+0x10f/0x240 [ 749.113310] ? mgmt_send_event_skb+0x2f3/0x460 [ 749.113345] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 749.113379] hci_conn_add_sysfs+0x117/0x1c0 [ 749.113407] le_conn_complete_evt+0x1246/0x1e40 [ 749.113451] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 749.113497] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 749.113536] ? __asan_memcpy+0x3d/0x60 [ 749.113570] hci_le_meta_evt+0x34b/0x530 [ 749.113602] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 749.113643] hci_event_packet+0x66c/0x10e0 [ 749.113679] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 749.113714] ? __pfx_hci_event_packet+0x10/0x10 [ 749.113750] ? mark_held_locks+0x49/0x80 [ 749.113782] ? kcov_remote_start+0x2ce/0x5a0 [ 749.113829] hci_rx_work+0x65b/0x8b0 [ 749.113869] process_one_work+0x8e1/0x1960 [ 749.113916] ? __pfx_process_one_work+0x10/0x10 [ 749.113948] ? move_linked_works+0x172/0x270 [ 749.113992] ? assign_work+0x196/0x240 [ 749.114026] worker_thread+0x67e/0xe90 [ 749.114059] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 749.114102] ? __pfx_worker_thread+0x10/0x10 [ 749.114136] kthread+0x3c8/0x740 [ 749.114165] ? __pfx_kthread+0x10/0x10 [ 749.114192] ? ret_from_fork+0x79/0x7a0 [ 749.114215] ? lock_release+0xc8/0x270 [ 749.114247] ? __pfx_kthread+0x10/0x10 [ 749.114277] ret_from_fork+0x67a/0x7a0 [ 749.114302] ? __pfx_ret_from_fork+0x10/0x10 [ 749.114330] ? __switch_to+0x759/0x1030 [ 749.114362] ? __pfx_kthread+0x10/0x10 [ 749.114393] ret_from_fork_asm+0x1a/0x30 [ 749.114443] [ 749.150915] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 749.154822] Bluetooth: hci3: failed to register connection device 06:42:40 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000002000aaaab0aaaa00ffffffffffffffffffffbfff00000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:40 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000890}, 0x40d0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @none, @none, 0x1}}}}, 0x22) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfe) [ 749.219887] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 749.221399] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 749.234671] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 749.401123] Bluetooth: hci5: command 0x0406 tx timeout [ 750.041038] Bluetooth: hci3: command 0x0406 tx timeout [ 750.553075] Bluetooth: hci6: command 0x2016 tx timeout [ 751.258404] Bluetooth: hci4: command 0x0406 tx timeout [ 751.449020] Bluetooth: hci5: command 0x0406 tx timeout [ 752.089031] Bluetooth: hci3: command 0x0406 tx timeout [ 752.601178] Bluetooth: hci6: command 0x2016 tx timeout [ 753.308418] Bluetooth: hci4: command 0x0406 tx timeout [ 753.497084] Bluetooth: hci5: command 0x0406 tx timeout [ 754.138074] Bluetooth: hci3: command 0x0406 tx timeout [ 754.649070] Bluetooth: hci6: command 0x2016 tx timeout [ 756.185298] Bluetooth: hci3: command 0x0406 tx timeout [ 756.697046] Bluetooth: hci6: command 0x2016 tx timeout [ 757.209072] Bluetooth: hci7: command 0x0406 tx timeout 06:42:49 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000002000aaaab0aaaa00ffffffffffffffffffffbfff00000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x55, 0x5, 0xa0, 0x4, 0x0, 0x101, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffff73c}, 0x1408, 0x0, 0x3f, 0x2, 0xfff, 0x6, 0xd5e, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0x9, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x7a, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xf7fb, 0x3, 0x1, 0x0, 0x3, 0x3}, 0xc) 06:42:49 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1fe819c6580a00ffffffffffff00"/38], 0x22) syz_emit_vhci(0x0, 0x0) 06:42:49 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x8f, 0xc9, 0x1, 0x1}}}, 0x9) 06:42:49 executing program 2: prctl$PR_PAC_RESET_KEYS(0x36, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x14}, "eeb76f7c4dc8c6eaf7c18b7dffcf8cc56983ab28"}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900be5386dbf056775bee7c1a95839c73b9d7f3f894933defe4a747b582e601f983fd9d59c77f9287a1e35042a1e8913cca1738d017ae1bd0abdd1f53265ccf34a627fd2a1fe07588506674dbcabe3e5da5538c47b6373509ec9b36c71ba5db01df61f7613f3cd6f69a0dfc05cc5aa91d640f954f125f6d83c6669956fa665fe670502501f6073b8dfb98c1dc22e259197c6f59102e0549e17a5045e23f69022a5f9d06bd5f7453b28e966587085261303c949ebbcceb329310de434cdfad67a2"], 0xc2) 06:42:49 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:42:49 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = creat(0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x250, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb13}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x644ed77a}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x912}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b34}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4000000, @private0, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff7, @remote, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x75}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}]}]}, 0x250}}, 0x20000000) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x72) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="00000000000080002e2f66696c6530005f05995ff7e0672f7c8ee31c08c0070fd482ca435c482f1718bd0da46e485891fe446259c41835f0f5fb4ff42a639a6399833c38034dc39163efc11897f69b8fdd4f8de9df705d14fd157e2a60cf8b2ef18b9e4a1be96f1c30f0f7b72247a61af76a3f5f7129a6092fe428415b4906fc79e5cdecbf6c3e25a92b19717da6621f27a5794c23c05ef10af21543c1d6e507f629c4e83b972f3aaf2cd6e3827160b28193043cf7e70365994c5d991d1447aa32c264e05c356587cf37d17a22ff20e008dd604fcdeb370e1ad54b8439015af54c3ff7e0208db3749b892452654a626e88b28a69747d3c"]) 06:42:49 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64], 0x79) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_conf_req={{0x4, 0x8, 0x10}, {0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x3000}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xfff8}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 06:42:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@rand_addr=0x4, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) 06:42:49 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64], 0x79) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_conf_req={{0x4, 0x8, 0x10}, {0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x3000}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xfff8}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 757.860230] Bluetooth: hci4: ACL packet for unknown connection handle 200 06:42:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "68e3d46203bfb741", "81c8a113b41f7e09b60fb90ca4b25540", "183fc056", "e4359b7c4b2dfc75"}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) write(r2, &(0x7f0000000240)="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", 0x1000) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0xf9b, 0x6}}}, 0x7) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x102) 06:42:49 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:42:49 executing program 7: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00fff9ffffffffffffffffffff00000000000000aee8e6d20ba4087a5e167b535e2378201e04b424e4de3b9bddaef4fc45de1f0c3e9500e87b6f82619b412deb7840de447fdc2bfe400efcd151680223dd30353232dbae98fd4c39ffe84936865d8e591b213ba7a72a313c2446aea4323df121b136b6caa7e4674d4a90df51f04e52c0a7219cc0eb299bc096a9d41f8876d8bf52d58c1ab4bcc3ef3048e3a299c49cddf536ba7a3e6415d496"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x23}, @l2cap_cid_signaling={{0x1f}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x3}}, @l2cap_move_chan_rsp={{0xf, 0x7f, 0x4}, {0x6, 0x3}}, @l2cap_create_chan_req={{0xc, 0x30, 0x5}, {0x9, 0x4, 0x1f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x8}}]}}, 0x28) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x7, 0x5}}}}, 0x11) 06:42:49 executing program 2: prctl$PR_PAC_RESET_KEYS(0x36, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x14}, "eeb76f7c4dc8c6eaf7c18b7dffcf8cc56983ab28"}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900be5386dbf056775bee7c1a95839c73b9d7f3f894933defe4a747b582e601f983fd9d59c77f9287a1e35042a1e8913cca1738d017ae1bd0abdd1f53265ccf34a627fd2a1fe07588506674dbcabe3e5da5538c47b6373509ec9b36c71ba5db01df61f7613f3cd6f69a0dfc05cc5aa91d640f954f125f6d83c6669956fa665fe670502501f6073b8dfb98c1dc22e259197c6f59102e0549e17a5045e23f69022a5f9d06bd5f7453b28e966587085261303c949ebbcceb329310de434cdfad67a2"], 0xc2) 06:42:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="aebd06620712398e2c79341f9d4dc9e9dd6da1bd3715b3bbfbda66860c0ab02c366e45270a2f043918395a48ea0edf5cb4bdfc2dc81734085e040a0c06bd39a9812efb14c18068d0a0774208d40b3780cb6179ab09bb1d893a54a468861a73747518bdf656b06dad69ac88226fb434ed95a6492d31bff6d72cd2046b7f644220d6b773c794daea92ddf215388db94600351c7785e649a0fa5f36abaf0a3a90c40d8a6e140df89ab0369a839845da6b110e17ac9208d7cdf032d28258d9a83ee824", 0xc1}], 0x1, 0x1f, 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) [ 757.994238] debugfs: '0' already exists in 'hci3' [ 757.996509] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 757.998079] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 757.998111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 757.998127] Workqueue: hci3 hci_rx_work [ 757.998168] Call Trace: [ 757.998176] [ 757.998186] dump_stack_lvl+0xfa/0x120 [ 757.998215] sysfs_warn_dup+0x80/0xa0 [ 757.998241] sysfs_create_dir_ns+0x23b/0x2a0 [ 757.998265] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 757.998288] ? find_held_lock+0x2b/0x80 [ 757.998315] ? lock_release+0xc8/0x270 [ 757.998349] ? do_raw_spin_unlock+0x53/0x220 [ 757.998389] kobject_add_internal+0x24c/0x9a0 [ 757.998427] kobject_add+0x157/0x240 [ 757.998457] ? __pfx_kobject_add+0x10/0x10 [ 757.998485] ? lock_release+0xc8/0x270 [ 757.998516] ? do_raw_spin_unlock+0x53/0x220 [ 757.998552] ? kobject_put+0xaa/0x260 [ 757.998592] device_add+0x32d/0x1830 [ 757.998634] ? __pfx_device_add+0x10/0x10 [ 757.998672] ? hci_debugfs_create_conn+0x10f/0x240 [ 757.998698] ? mgmt_send_event_skb+0x2f3/0x460 [ 757.998733] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 757.998767] hci_conn_add_sysfs+0x117/0x1c0 [ 757.998795] le_conn_complete_evt+0x1246/0x1e40 [ 757.998840] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 757.998886] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 757.998924] ? __asan_memcpy+0x3d/0x60 [ 757.998967] hci_le_meta_evt+0x34b/0x530 [ 757.999000] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 757.999041] hci_event_packet+0x66c/0x10e0 [ 757.999078] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 757.999112] ? __pfx_hci_event_packet+0x10/0x10 [ 757.999147] ? mark_held_locks+0x49/0x80 [ 757.999180] ? kcov_remote_start+0x2ce/0x5a0 [ 757.999227] hci_rx_work+0x65b/0x8b0 [ 757.999267] process_one_work+0x8e1/0x1960 [ 757.999315] ? __pfx_process_one_work+0x10/0x10 [ 757.999346] ? move_linked_works+0x172/0x270 [ 757.999392] ? assign_work+0x196/0x240 [ 757.999426] worker_thread+0x67e/0xe90 [ 757.999459] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 757.999508] ? __pfx_worker_thread+0x10/0x10 [ 757.999542] kthread+0x3c8/0x740 [ 757.999571] ? __pfx_kthread+0x10/0x10 [ 757.999598] ? ret_from_fork+0x79/0x7a0 [ 757.999622] ? lock_release+0xc8/0x270 [ 757.999653] ? __pfx_kthread+0x10/0x10 [ 757.999684] ret_from_fork+0x67a/0x7a0 [ 757.999708] ? __pfx_ret_from_fork+0x10/0x10 [ 757.999736] ? __switch_to+0x759/0x1030 [ 757.999770] ? __pfx_kthread+0x10/0x10 [ 757.999801] ret_from_fork_asm+0x1a/0x30 [ 757.999851] [ 758.038793] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.042412] Bluetooth: hci3: failed to register connection device [ 758.044178] debugfs: '0' already exists in 'hci5' [ 758.045607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 758.046999] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 758.047030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.047046] Workqueue: hci5 hci_rx_work [ 758.047084] Call Trace: [ 758.047093] [ 758.047103] dump_stack_lvl+0xfa/0x120 [ 758.047130] sysfs_warn_dup+0x80/0xa0 [ 758.047155] sysfs_create_dir_ns+0x23b/0x2a0 [ 758.047179] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 758.047202] ? find_held_lock+0x2b/0x80 [ 758.047228] ? lock_release+0xc8/0x270 [ 758.047261] ? do_raw_spin_unlock+0x53/0x220 [ 758.047299] kobject_add_internal+0x24c/0x9a0 [ 758.047336] kobject_add+0x157/0x240 [ 758.047366] ? __pfx_kobject_add+0x10/0x10 [ 758.047395] ? lock_release+0xc8/0x270 [ 758.047426] ? do_raw_spin_unlock+0x53/0x220 [ 758.047462] ? kobject_put+0xaa/0x260 [ 758.047502] device_add+0x32d/0x1830 [ 758.047544] ? __pfx_device_add+0x10/0x10 [ 758.047582] ? hci_debugfs_create_conn+0x10f/0x240 [ 758.047607] ? mgmt_send_event_skb+0x2f3/0x460 [ 758.047643] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 758.047676] hci_conn_add_sysfs+0x117/0x1c0 [ 758.047704] le_conn_complete_evt+0x1246/0x1e40 [ 758.047749] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 758.047795] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 758.047833] ? __asan_memcpy+0x3d/0x60 [ 758.047868] hci_le_meta_evt+0x34b/0x530 [ 758.047901] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 758.047949] hci_event_packet+0x66c/0x10e0 [ 758.047987] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 758.048021] ? __pfx_hci_event_packet+0x10/0x10 [ 758.048057] ? mark_held_locks+0x49/0x80 [ 758.048089] ? kcov_remote_start+0x2ce/0x5a0 [ 758.048135] hci_rx_work+0x65b/0x8b0 [ 758.048176] process_one_work+0x8e1/0x1960 [ 758.048223] ? __pfx_process_one_work+0x10/0x10 [ 758.048255] ? move_linked_works+0x172/0x270 [ 758.048300] ? assign_work+0x196/0x240 [ 758.048334] worker_thread+0x67e/0xe90 [ 758.048367] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 758.048411] ? __pfx_worker_thread+0x10/0x10 [ 758.048447] kthread+0x3c8/0x740 06:42:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x55, 0x5, 0xa0, 0x4, 0x0, 0x101, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffff73c}, 0x1408, 0x0, 0x3f, 0x2, 0xfff, 0x6, 0xd5e, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0x9, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:49 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64], 0x79) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_conf_req={{0x4, 0x8, 0x10}, {0x1ff, 0x9, [@l2cap_conf_mtu={0x1, 0x2, 0x3000}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xfff8}}]}}, 0x29) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) [ 758.048477] ? __pfx_kthread+0x10/0x10 [ 758.048504] ? ret_from_fork+0x79/0x7a0 [ 758.048533] ? __pfx_kthread+0x10/0x10 [ 758.048564] ret_from_fork+0x67a/0x7a0 [ 758.048588] ? __pfx_ret_from_fork+0x10/0x10 [ 758.048609] ? save_fpregs_to_fpstate+0x145/0x270 [ 758.048643] ? __switch_to+0x759/0x1030 [ 758.048675] ? __pfx_kthread+0x10/0x10 [ 758.048706] ret_from_fork_asm+0x1a/0x30 [ 758.048769] [ 758.085465] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.087630] Bluetooth: hci5: failed to register connection device [ 758.089394] debugfs: '0' already exists in 'hci3' [ 758.090137] debugfs: '0' already exists in 'hci4' [ 758.090313] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 758.090326] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 758.090341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.090349] Workqueue: hci4 hci_rx_work [ 758.090370] Call Trace: [ 758.090374] [ 758.090379] dump_stack_lvl+0xfa/0x120 [ 758.090394] sysfs_warn_dup+0x80/0xa0 [ 758.090407] sysfs_create_dir_ns+0x23b/0x2a0 [ 758.090420] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 758.090431] ? find_held_lock+0x2b/0x80 [ 758.090445] ? lock_release+0xc8/0x270 [ 758.090462] ? do_raw_spin_unlock+0x53/0x220 [ 758.090481] kobject_add_internal+0x24c/0x9a0 [ 758.090500] kobject_add+0x157/0x240 [ 758.090515] ? __pfx_kobject_add+0x10/0x10 [ 758.090529] ? lock_release+0xc8/0x270 [ 758.090545] ? do_raw_spin_unlock+0x53/0x220 [ 758.090563] ? kobject_put+0xaa/0x260 [ 758.090583] device_add+0x32d/0x1830 [ 758.090605] ? __pfx_device_add+0x10/0x10 [ 758.090624] ? hci_debugfs_create_conn+0x10f/0x240 [ 758.090638] ? mgmt_send_event_skb+0x2f3/0x460 [ 758.090656] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 758.090673] hci_conn_add_sysfs+0x117/0x1c0 [ 758.090687] le_conn_complete_evt+0x1246/0x1e40 [ 758.090710] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 758.090733] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 758.090753] ? __asan_memcpy+0x3d/0x60 [ 758.090771] hci_le_meta_evt+0x34b/0x530 [ 758.090787] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 758.090808] hci_event_packet+0x66c/0x10e0 [ 758.090827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 758.090844] ? __pfx_hci_event_packet+0x10/0x10 [ 758.090862] ? mark_held_locks+0x49/0x80 [ 758.090879] ? kcov_remote_start+0x2ce/0x5a0 [ 758.090903] hci_rx_work+0x65b/0x8b0 [ 758.090923] process_one_work+0x8e1/0x1960 [ 758.090951] ? __pfx_process_one_work+0x10/0x10 [ 758.090967] ? move_linked_works+0x172/0x270 [ 758.090990] ? assign_work+0x196/0x240 [ 758.091007] worker_thread+0x67e/0xe90 [ 758.091024] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 758.091047] ? __pfx_worker_thread+0x10/0x10 [ 758.091064] kthread+0x3c8/0x740 [ 758.091079] ? __pfx_kthread+0x10/0x10 [ 758.091093] ? ret_from_fork+0x79/0x7a0 [ 758.091105] ? lock_release+0xc8/0x270 [ 758.091121] ? __pfx_kthread+0x10/0x10 [ 758.091137] ret_from_fork+0x67a/0x7a0 [ 758.091150] ? __pfx_ret_from_fork+0x10/0x10 [ 758.091164] ? __switch_to+0x759/0x1030 [ 758.091181] ? __pfx_kthread+0x10/0x10 [ 758.091196] ret_from_fork_asm+0x1a/0x30 [ 758.091222] [ 758.091407] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.092665] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 758.093547] Bluetooth: hci4: failed to register connection device [ 758.094685] CPU: 1 UID: 0 PID: 304 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 758.094715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.094731] Workqueue: hci3 hci_rx_work [ 758.094764] Call Trace: [ 758.094772] [ 758.094782] dump_stack_lvl+0xfa/0x120 [ 758.094807] sysfs_warn_dup+0x80/0xa0 [ 758.094830] sysfs_create_dir_ns+0x23b/0x2a0 [ 758.094854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 758.094877] ? find_held_lock+0x2b/0x80 [ 758.094903] ? lock_release+0xc8/0x270 [ 758.094941] ? do_raw_spin_unlock+0x53/0x220 [ 758.094979] kobject_add_internal+0x24c/0x9a0 [ 758.095016] kobject_add+0x157/0x240 [ 758.095046] ? __pfx_kobject_add+0x10/0x10 [ 758.095075] ? lock_release+0xc8/0x270 [ 758.095106] ? do_raw_spin_unlock+0x53/0x220 [ 758.095142] ? kobject_put+0xaa/0x260 [ 758.095183] device_add+0x32d/0x1830 [ 758.095222] ? __pfx_device_add+0x10/0x10 [ 758.095260] ? hci_debugfs_create_conn+0x10f/0x240 [ 758.095284] ? mgmt_send_event_skb+0x2f3/0x460 [ 758.095319] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 758.095353] hci_conn_add_sysfs+0x117/0x1c0 [ 758.095381] le_conn_complete_evt+0x1246/0x1e40 [ 758.095424] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 758.095470] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 758.095509] ? __asan_memcpy+0x3d/0x60 [ 758.095542] hci_le_meta_evt+0x34b/0x530 [ 758.095574] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 758.095615] hci_event_packet+0x66c/0x10e0 [ 758.095652] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 758.095686] ? __pfx_hci_event_packet+0x10/0x10 [ 758.095722] ? mark_held_locks+0x49/0x80 [ 758.095755] ? kcov_remote_start+0x2ce/0x5a0 [ 758.095800] hci_rx_work+0x65b/0x8b0 [ 758.095841] process_one_work+0x8e1/0x1960 [ 758.095888] ? __pfx_process_one_work+0x10/0x10 [ 758.095919] ? move_linked_works+0x172/0x270 [ 758.095964] ? assign_work+0x196/0x240 [ 758.095999] worker_thread+0x67e/0xe90 [ 758.096032] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 758.096074] ? __pfx_worker_thread+0x10/0x10 [ 758.096108] kthread+0x3c8/0x740 [ 758.096137] ? __pfx_kthread+0x10/0x10 [ 758.096165] ? ret_from_fork+0x79/0x7a0 [ 758.096188] ? lock_release+0xc8/0x270 [ 758.096220] ? __pfx_kthread+0x10/0x10 [ 758.096250] ret_from_fork+0x67a/0x7a0 [ 758.096275] ? __pfx_ret_from_fork+0x10/0x10 [ 758.096303] ? __switch_to+0x759/0x1030 [ 758.096334] ? __pfx_kthread+0x10/0x10 [ 758.096365] ret_from_fork_asm+0x1a/0x30 [ 758.096414] [ 758.096476] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.097636] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 758.098180] Bluetooth: hci3: failed to register connection device 06:42:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) getsockopt$inet6_buf(r2, 0x29, 0xc9, &(0x7f00000000c0)=""/163, &(0x7f0000000180)=0xa3) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x0, @broadcast}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 06:42:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:42:49 executing program 7: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa'], &(0x7f00000001c0)=[&(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000180)='.\x00'], 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) 06:42:49 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 758.233028] Bluetooth: hci3: command 0x0406 tx timeout [ 758.250555] debugfs: '0' already exists in 'hci5' [ 758.251451] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 758.252319] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 758.252336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.252344] Workqueue: hci5 hci_rx_work [ 758.252368] Call Trace: [ 758.252373] [ 758.252378] dump_stack_lvl+0xfa/0x120 [ 758.252394] sysfs_warn_dup+0x80/0xa0 [ 758.252413] sysfs_create_dir_ns+0x23b/0x2a0 [ 758.252425] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 758.252437] ? find_held_lock+0x2b/0x80 [ 758.252452] ? lock_release+0xc8/0x270 [ 758.252469] ? do_raw_spin_unlock+0x53/0x220 [ 758.252488] kobject_add_internal+0x24c/0x9a0 [ 758.252508] kobject_add+0x157/0x240 [ 758.252523] ? __pfx_kobject_add+0x10/0x10 [ 758.252538] ? lock_release+0xc8/0x270 [ 758.252554] ? do_raw_spin_unlock+0x53/0x220 [ 758.252572] ? kobject_put+0xaa/0x260 [ 758.252592] device_add+0x32d/0x1830 [ 758.252614] ? __pfx_device_add+0x10/0x10 [ 758.252633] ? hci_debugfs_create_conn+0x10f/0x240 [ 758.252647] ? mgmt_send_event_skb+0x2f3/0x460 [ 758.252666] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 758.252683] hci_conn_add_sysfs+0x117/0x1c0 [ 758.252698] le_conn_complete_evt+0x1246/0x1e40 [ 758.252722] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 758.252755] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 758.252774] ? __asan_memcpy+0x3d/0x60 [ 758.252793] hci_le_meta_evt+0x34b/0x530 [ 758.252810] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 758.252831] hci_event_packet+0x66c/0x10e0 [ 758.252850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 758.252868] ? __pfx_hci_event_packet+0x10/0x10 [ 758.252886] ? mark_held_locks+0x49/0x80 [ 758.252902] ? kcov_remote_start+0x2ce/0x5a0 [ 758.252927] hci_rx_work+0x65b/0x8b0 [ 758.252948] process_one_work+0x8e1/0x1960 [ 758.252973] ? __pfx_process_one_work+0x10/0x10 [ 758.252989] ? move_linked_works+0x172/0x270 [ 758.253013] ? assign_work+0x196/0x240 [ 758.253031] worker_thread+0x67e/0xe90 [ 758.253047] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 758.253070] ? __pfx_worker_thread+0x10/0x10 [ 758.253087] kthread+0x3c8/0x740 [ 758.253103] ? __pfx_kthread+0x10/0x10 [ 758.253116] ? ret_from_fork+0x79/0x7a0 [ 758.253129] ? lock_release+0xc8/0x270 [ 758.253145] ? __pfx_kthread+0x10/0x10 [ 758.253163] ret_from_fork+0x67a/0x7a0 [ 758.253175] ? __pfx_ret_from_fork+0x10/0x10 [ 758.253190] ? __switch_to+0x759/0x1030 [ 758.253207] ? __pfx_kthread+0x10/0x10 [ 758.253223] ret_from_fork_asm+0x1a/0x30 [ 758.253249] [ 758.271807] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.272897] Bluetooth: hci5: failed to register connection device [ 758.408589] debugfs: '0' already exists in 'hci3' [ 758.410347] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 758.411876] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 758.411907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.411923] Workqueue: hci3 hci_rx_work [ 758.411968] Call Trace: [ 758.411976] [ 758.411986] dump_stack_lvl+0xfa/0x120 [ 758.412013] sysfs_warn_dup+0x80/0xa0 [ 758.412038] sysfs_create_dir_ns+0x23b/0x2a0 [ 758.412060] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 758.412081] ? find_held_lock+0x2b/0x80 [ 758.412107] ? lock_release+0xc8/0x270 [ 758.412138] ? do_raw_spin_unlock+0x53/0x220 [ 758.412174] kobject_add_internal+0x24c/0x9a0 [ 758.412210] kobject_add+0x157/0x240 [ 758.412239] ? __pfx_kobject_add+0x10/0x10 [ 758.412266] ? lock_release+0xc8/0x270 [ 758.412295] ? do_raw_spin_unlock+0x53/0x220 [ 758.412329] ? kobject_put+0xaa/0x260 [ 758.412368] device_add+0x32d/0x1830 [ 758.412408] ? __pfx_device_add+0x10/0x10 [ 758.412445] ? hci_debugfs_create_conn+0x10f/0x240 [ 758.412469] ? mgmt_send_event_skb+0x2f3/0x460 [ 758.412503] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 758.412535] hci_conn_add_sysfs+0x117/0x1c0 [ 758.412561] le_conn_complete_evt+0x1246/0x1e40 [ 758.412603] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 758.412646] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 758.412684] ? __asan_memcpy+0x3d/0x60 [ 758.412717] hci_le_meta_evt+0x34b/0x530 [ 758.412763] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 758.412802] hci_event_packet+0x66c/0x10e0 [ 758.412836] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 758.412868] ? __pfx_hci_event_packet+0x10/0x10 [ 758.412901] ? mark_held_locks+0x49/0x80 [ 758.412931] ? kcov_remote_start+0x2ce/0x5a0 [ 758.412975] hci_rx_work+0x65b/0x8b0 [ 758.413014] process_one_work+0x8e1/0x1960 [ 758.413060] ? __pfx_process_one_work+0x10/0x10 [ 758.413089] ? move_linked_works+0x172/0x270 [ 758.413131] ? assign_work+0x196/0x240 [ 758.413163] worker_thread+0x67e/0xe90 [ 758.413196] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 758.413240] ? __pfx_worker_thread+0x10/0x10 [ 758.413272] kthread+0x3c8/0x740 [ 758.413300] ? __pfx_kthread+0x10/0x10 [ 758.413325] ? ret_from_fork+0x79/0x7a0 [ 758.413348] ? lock_release+0xc8/0x270 [ 758.413377] ? __pfx_kthread+0x10/0x10 [ 758.413406] ret_from_fork+0x67a/0x7a0 [ 758.413429] ? __pfx_ret_from_fork+0x10/0x10 [ 758.413455] ? __switch_to+0x759/0x1030 [ 758.413486] ? __pfx_kthread+0x10/0x10 [ 758.413515] ret_from_fork_asm+0x1a/0x30 [ 758.413563] [ 758.449923] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.453398] Bluetooth: hci3: failed to register connection device [ 758.484895] debugfs: '0' already exists in 'hci3' [ 758.485920] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 758.487255] CPU: 0 UID: 0 PID: 4797 Comm: kworker/u11:9 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 758.487284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.487299] Workqueue: hci3 hci_rx_work [ 758.487332] Call Trace: [ 758.487341] [ 758.487351] dump_stack_lvl+0xfa/0x120 [ 758.487375] sysfs_warn_dup+0x80/0xa0 [ 758.487398] sysfs_create_dir_ns+0x23b/0x2a0 [ 758.487420] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 758.487442] ? find_held_lock+0x2b/0x80 [ 758.487467] ? lock_release+0xc8/0x270 [ 758.487498] ? do_raw_spin_unlock+0x53/0x220 [ 758.487533] kobject_add_internal+0x24c/0x9a0 [ 758.487569] kobject_add+0x157/0x240 [ 758.487598] ? __pfx_kobject_add+0x10/0x10 [ 758.487624] ? lock_release+0xc8/0x270 [ 758.487655] ? do_raw_spin_unlock+0x53/0x220 [ 758.487689] ? kobject_put+0xaa/0x260 [ 758.487727] device_add+0x32d/0x1830 [ 758.487766] ? __pfx_device_add+0x10/0x10 [ 758.487801] ? hci_debugfs_create_conn+0x10f/0x240 [ 758.487826] ? mgmt_send_event_skb+0x2f3/0x460 [ 758.487859] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 758.487891] hci_conn_add_sysfs+0x117/0x1c0 [ 758.487918] le_conn_complete_evt+0x1246/0x1e40 [ 758.487967] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 758.488010] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 758.488047] ? __asan_memcpy+0x3d/0x60 [ 758.488079] hci_le_meta_evt+0x34b/0x530 [ 758.488111] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 758.488149] hci_event_packet+0x66c/0x10e0 [ 758.488185] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 758.488218] ? __pfx_hci_event_packet+0x10/0x10 [ 758.488252] ? mark_held_locks+0x49/0x80 [ 758.488283] ? kcov_remote_start+0x2ce/0x5a0 [ 758.488327] hci_rx_work+0x65b/0x8b0 [ 758.488364] process_one_work+0x8e1/0x1960 [ 758.488408] ? __pfx_process_one_work+0x10/0x10 [ 758.488437] ? move_linked_works+0x172/0x270 [ 758.488478] ? assign_work+0x196/0x240 [ 758.488510] worker_thread+0x67e/0xe90 [ 758.488541] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 758.488581] ? __pfx_worker_thread+0x10/0x10 [ 758.488613] kthread+0x3c8/0x740 [ 758.488639] ? __pfx_kthread+0x10/0x10 [ 758.488664] ? ret_from_fork+0x79/0x7a0 [ 758.488686] ? lock_release+0xc8/0x270 [ 758.488715] ? __pfx_kthread+0x10/0x10 [ 758.488754] ret_from_fork+0x67a/0x7a0 [ 758.488776] ? __pfx_ret_from_fork+0x10/0x10 [ 758.488803] ? __switch_to+0x759/0x1030 [ 758.488831] ? __pfx_kthread+0x10/0x10 [ 758.488860] ret_from_fork_asm+0x1a/0x30 [ 758.488907] [ 758.522628] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 758.524673] Bluetooth: hci3: failed to register connection device [ 758.746012] Bluetooth: hci6: command 0x2016 tx timeout [ 759.897492] Bluetooth: hci4: command 0x0406 tx timeout [ 759.897527] Bluetooth: hci5: command 0x0406 tx timeout [ 760.281011] Bluetooth: hci3: command 0x0406 tx timeout [ 760.793007] Bluetooth: hci6: command 0x2016 tx timeout [ 761.945138] Bluetooth: hci4: command 0x0406 tx timeout [ 761.945152] Bluetooth: hci5: command 0x0406 tx timeout [ 762.329035] Bluetooth: hci3: command 0x0406 tx timeout [ 763.993197] Bluetooth: hci5: command 0x0406 tx timeout [ 763.993227] Bluetooth: hci4: command 0x0406 tx timeout [ 764.377209] Bluetooth: hci3: command 0x0406 tx timeout [ 766.041087] Bluetooth: hci4: command 0x0406 tx timeout [ 766.042002] Bluetooth: hci5: command 0x0406 tx timeout [ 766.425147] Bluetooth: hci3: command 0x0406 tx timeout [ 768.089025] Bluetooth: hci5: command 0x0406 tx timeout [ 768.473061] Bluetooth: hci3: command 0x0406 tx timeout 06:43:01 executing program 2: prctl$PR_PAC_RESET_KEYS(0x36, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @none, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x14}, "eeb76f7c4dc8c6eaf7c18b7dffcf8cc56983ab28"}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900be5386dbf056775bee7c1a95839c73b9d7f3f894933defe4a747b582e601f983fd9d59c77f9287a1e35042a1e8913cca1738d017ae1bd0abdd1f53265ccf34a627fd2a1fe07588506674dbcabe3e5da5538c47b6373509ec9b36c71ba5db01df61f7613f3cd6f69a0dfc05cc5aa91d640f954f125f6d83c6669956fa665fe670502501f6073b8dfb98c1dc22e259197c6f59102e0549e17a5045e23f69022a5f9d06bd5f7453b28e966587085261303c949ebbcceb329310de434cdfad67a2"], 0xc2) 06:43:01 executing program 7: syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x11}, {0x4, [{0xc8, 0x1}, {0xc8, 0x7fff}, {0xc9, 0xb2}, {0xc8, 0x400}]}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb0}, "672f96a7a9ac12d890d184894f14211a5187e09f09b6e021d66d48e0324beacf84153f5a5409d65a12b10e9126bdbb376142236c2bf5610709e2b8a7d8211058f6aefd4e599ec627a3dcb6be3b337d82b7a0dcbf889c06aa66ed652e2965be755a784b0e6919fde6d0cd2e15649e79bd023f04453b74225a8ac859dac5c655ce06c38491878bea29da7e6759ab18219a9db7f191235aebea76f5fbc53dac34e6856d8e0a489ef913832f663180ac2d3b"}, 0xb4) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0x0, 0x7}}}}, 0x11) syz_emit_vhci(0x0, 0x0) 06:43:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$dupfd(r0, 0x0, r0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0xc0080) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 06:43:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000300)=[{&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000000200)="750a41306c3bedf0cd718e40ff05f593c24f7e51843ed41f7cf4f72dac428f4af6ac79c915de7878592326dbb66cf485d9316f6fb40803010cc220ecf34e77a39abcda203b6f9d0c21e66a83fd3f6ed96b8b8a9ad5099d054cc810ffc973883c9464c2a583fe88d894a9198f4b55ccc3e7a2c01d5838373fa3b5095a8ff5f4e5419d9bed66b536779cd6f50edc99c14eb5a534f50f050cef341690226354456e588a674bd3f28ff3bf66169141e106a6bef3b29eacdc39da91fe76bde0c9721efa7be29eb142cc", 0xc7, 0x100}], 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB='overriderockperm,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB="0d2c6f76657272696465726f636b7075726d2c7375626a5f757365723d5e252c7d272a2f7b26272f892c7065726d69745f646972656374696f2c00"]) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) 06:43:01 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x7, 0x0, 0x40, 0x9, "317ceccafa9cefbb"}}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x9, 0xc9, 0xff, 0x80, 0x4}}}, 0xb) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8d00c00080105e11509040003000180"], 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) 06:43:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000f30000000052c0785859285a9f629453666f7c77c232e8f1804f9a27f3dd1cace8a0c7aed8bbc7f60fbf5ea7ab948aae7dc986f961d4b118b94f23745a3d0efa9dc025f4e8c7dc2cfa83b94a5842", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f0000000080)=0x482e, 0x4) copy_file_range(r2, &(0x7f0000000000)=0x800, 0xffffffffffffffff, 0x0, 0x2, 0x0) 06:43:01 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) (fail_nth: 1) 06:43:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x55, 0x5, 0xa0, 0x4, 0x0, 0x101, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffff73c}, 0x1408, 0x0, 0x3f, 0x2, 0xfff, 0x6, 0xd5e, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0x9, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 769.881626] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 769.883624] debugfs: '0' already exists in 'hci5' [ 769.884742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 769.886292] CPU: 0 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 769.886323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 769.886339] Workqueue: hci5 hci_rx_work [ 769.886377] Call Trace: [ 769.886386] [ 769.886395] dump_stack_lvl+0xfa/0x120 [ 769.886422] sysfs_warn_dup+0x80/0xa0 [ 769.886448] sysfs_create_dir_ns+0x23b/0x2a0 [ 769.886472] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 769.886495] ? find_held_lock+0x2b/0x80 [ 769.886522] ? lock_release+0xc8/0x270 [ 769.886555] ? do_raw_spin_unlock+0x53/0x220 [ 769.886592] kobject_add_internal+0x24c/0x9a0 [ 769.886629] kobject_add+0x157/0x240 [ 769.886659] ? __pfx_kobject_add+0x10/0x10 [ 769.886687] ? lock_release+0xc8/0x270 [ 769.886719] ? do_raw_spin_unlock+0x53/0x220 [ 769.886756] ? kobject_put+0xaa/0x260 [ 769.886798] device_add+0x32d/0x1830 [ 769.886840] ? __pfx_device_add+0x10/0x10 [ 769.886877] ? hci_debugfs_create_conn+0x10f/0x240 [ 769.886903] ? mgmt_send_event_skb+0x2f3/0x460 [ 769.886946] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 769.886980] hci_conn_add_sysfs+0x117/0x1c0 [ 769.887007] le_conn_complete_evt+0x1246/0x1e40 [ 769.887052] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 769.887097] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 769.887136] ? __asan_memcpy+0x3d/0x60 [ 769.887170] hci_le_meta_evt+0x34b/0x530 [ 769.887202] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 769.887243] hci_event_packet+0x66c/0x10e0 [ 769.887279] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 769.887313] ? __pfx_hci_event_packet+0x10/0x10 [ 769.887349] ? mark_held_locks+0x49/0x80 [ 769.887381] ? kcov_remote_start+0x2ce/0x5a0 [ 769.887427] hci_rx_work+0x65b/0x8b0 [ 769.887468] process_one_work+0x8e1/0x1960 [ 769.887515] ? __pfx_process_one_work+0x10/0x10 [ 769.887546] ? move_linked_works+0x172/0x270 [ 769.887591] ? assign_work+0x196/0x240 [ 769.887625] worker_thread+0x67e/0xe90 [ 769.887658] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 769.887701] ? __pfx_worker_thread+0x10/0x10 [ 769.887735] kthread+0x3c8/0x740 [ 769.887764] ? __pfx_kthread+0x10/0x10 [ 769.887791] ? ret_from_fork+0x79/0x7a0 [ 769.887815] ? lock_release+0xc8/0x270 [ 769.887846] ? __pfx_kthread+0x10/0x10 [ 769.887877] ret_from_fork+0x67a/0x7a0 [ 769.887901] ? __pfx_ret_from_fork+0x10/0x10 [ 769.887929] ? __switch_to+0x759/0x1030 [ 769.887962] ? __pfx_kthread+0x10/0x10 [ 769.887992] ret_from_fork_asm+0x1a/0x30 [ 769.888042] [ 769.925574] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 769.929201] Bluetooth: hci5: failed to register connection device [ 769.934167] debugfs: '0' already exists in 'hci3' [ 769.935258] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 769.936621] CPU: 0 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 769.936652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 769.936668] Workqueue: hci3 hci_rx_work [ 769.936702] Call Trace: [ 769.936710] [ 769.936720] dump_stack_lvl+0xfa/0x120 [ 769.936746] sysfs_warn_dup+0x80/0xa0 [ 769.936770] sysfs_create_dir_ns+0x23b/0x2a0 [ 769.936794] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 769.936817] ? find_held_lock+0x2b/0x80 [ 769.936843] ? lock_release+0xc8/0x270 [ 769.936875] ? do_raw_spin_unlock+0x53/0x220 [ 769.936932] kobject_add_internal+0x24c/0x9a0 [ 769.936970] kobject_add+0x157/0x240 [ 769.937000] ? __pfx_kobject_add+0x10/0x10 [ 769.937029] ? lock_release+0xc8/0x270 [ 769.937061] ? do_raw_spin_unlock+0x53/0x220 [ 769.937097] ? kobject_put+0xaa/0x260 [ 769.937138] device_add+0x32d/0x1830 [ 769.937178] ? __pfx_device_add+0x10/0x10 [ 769.937216] ? hci_debugfs_create_conn+0x10f/0x240 [ 769.937241] ? mgmt_send_event_skb+0x2f3/0x460 [ 769.937276] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 769.937310] hci_conn_add_sysfs+0x117/0x1c0 [ 769.937338] le_conn_complete_evt+0x1246/0x1e40 [ 769.937382] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 769.937428] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 769.937474] hci_le_meta_evt+0x34b/0x530 [ 769.937506] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 769.937547] hci_event_packet+0x66c/0x10e0 [ 769.937584] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 769.937618] ? __pfx_hci_event_packet+0x10/0x10 [ 769.937654] ? mark_held_locks+0x49/0x80 [ 769.937686] ? kcov_remote_start+0x2ce/0x5a0 [ 769.937732] hci_rx_work+0x65b/0x8b0 [ 769.937773] process_one_work+0x8e1/0x1960 [ 769.937820] ? __pfx_process_one_work+0x10/0x10 [ 769.937851] ? move_linked_works+0x172/0x270 [ 769.937896] ? assign_work+0x196/0x240 [ 769.937931] worker_thread+0x67e/0xe90 [ 769.937963] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 769.938006] ? __pfx_worker_thread+0x10/0x10 [ 769.938040] kthread+0x3c8/0x740 [ 769.938069] ? __pfx_kthread+0x10/0x10 [ 769.938096] ? ret_from_fork+0x79/0x7a0 [ 769.938120] ? lock_release+0xc8/0x270 [ 769.938151] ? __pfx_kthread+0x10/0x10 [ 769.938183] ret_from_fork+0x67a/0x7a0 [ 769.938207] ? __pfx_ret_from_fork+0x10/0x10 [ 769.938236] ? __switch_to+0x759/0x1030 [ 769.938267] ? __pfx_kthread+0x10/0x10 [ 769.938298] ret_from_fork_asm+0x1a/0x30 [ 769.938347] [ 769.973777] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 769.975857] Bluetooth: hci3: failed to register connection device [ 769.976966] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 769.978539] Bluetooth: hci3: hcon 00000000cce189ec sent 0 < count 178 [ 769.979892] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 769.981403] debugfs: '0' already exists in 'hci3' [ 769.982477] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 769.983869] CPU: 0 UID: 0 PID: 313 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 769.983901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 769.983916] Workqueue: hci3 hci_rx_work [ 769.983957] Call Trace: [ 769.983965] [ 769.983975] dump_stack_lvl+0xfa/0x120 [ 769.984000] sysfs_warn_dup+0x80/0xa0 [ 769.984025] sysfs_create_dir_ns+0x23b/0x2a0 [ 769.984050] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 769.984073] ? find_held_lock+0x2b/0x80 [ 769.984100] ? lock_release+0xc8/0x270 [ 769.984132] ? do_raw_spin_unlock+0x53/0x220 [ 769.984171] kobject_add_internal+0x24c/0x9a0 [ 769.984209] kobject_add+0x157/0x240 [ 769.984240] ? __pfx_kobject_add+0x10/0x10 [ 769.984270] ? lock_release+0xc8/0x270 [ 769.984302] ? do_raw_spin_unlock+0x53/0x220 [ 769.984340] ? kobject_put+0xaa/0x260 [ 769.984381] device_add+0x32d/0x1830 [ 769.984422] ? __pfx_device_add+0x10/0x10 [ 769.984461] ? hci_debugfs_create_conn+0x10f/0x240 [ 769.984487] ? mgmt_send_event_skb+0x2f3/0x460 [ 769.984522] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 769.984557] hci_conn_add_sysfs+0x117/0x1c0 [ 769.984585] le_conn_complete_evt+0x1246/0x1e40 [ 769.984630] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 769.984677] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 769.984717] ? __asan_memcpy+0x3d/0x60 [ 769.984751] hci_le_meta_evt+0x34b/0x530 [ 769.984784] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 769.984826] hci_event_packet+0x66c/0x10e0 [ 769.984863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 769.984899] ? __pfx_hci_event_packet+0x10/0x10 [ 769.984947] ? mark_held_locks+0x49/0x80 [ 769.984980] ? kcov_remote_start+0x2ce/0x5a0 [ 769.985026] hci_rx_work+0x65b/0x8b0 [ 769.985068] process_one_work+0x8e1/0x1960 [ 769.985115] ? __pfx_process_one_work+0x10/0x10 [ 769.985148] ? move_linked_works+0x172/0x270 [ 769.985194] ? assign_work+0x196/0x240 [ 769.985229] worker_thread+0x67e/0xe90 [ 769.985263] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 769.985306] ? __pfx_worker_thread+0x10/0x10 [ 769.985341] kthread+0x3c8/0x740 [ 769.985371] ? __pfx_kthread+0x10/0x10 [ 769.985399] ? ret_from_fork+0x79/0x7a0 [ 769.985422] ? lock_release+0xc8/0x270 [ 769.985454] ? __pfx_kthread+0x10/0x10 [ 769.985486] ret_from_fork+0x67a/0x7a0 [ 769.985511] ? __pfx_ret_from_fork+0x10/0x10 [ 769.985540] ? __switch_to+0x759/0x1030 [ 769.985572] ? __pfx_kthread+0x10/0x10 [ 769.985603] ret_from_fork_asm+0x1a/0x30 [ 769.985654] [ 770.026439] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 770.028620] Bluetooth: hci3: failed to register connection device [ 770.031593] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 770.034733] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 770.036077] Bluetooth: hci3: hcon 00000000cce189ec sent 0 < count 178 [ 770.053657] loop3: detected capacity change from 0 to 3 06:43:01 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="443e1f0a7578000000aaaaaaaaa000ffffffffffff42a5ffffffff00000000000000d7e69d4bd871324c54d85d9e4a130fc1f4c157253dc74bda92fa3f312d8daf5d2133bf87ec599bf9fbe32b039764e20c0daaa67a4a22fb835a90393dafd9f51c712312540000000000"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02005041003d0001000f0804008100070003060800870a0500340003000f800400ff0f01000c05050080010000090324080000087eff930b02000a0302000000010702002000"], 0x46) 06:43:01 executing program 2: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) (fail_nth: 1) 06:43:01 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) [ 770.140232] Bluetooth: hci5: command 0x0406 tx timeout [ 770.140747] FAULT_INJECTION: forcing a failure. [ 770.140747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.143028] CPU: 0 UID: 0 PID: 7826 Comm: syz-executor.0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 770.143061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.143076] Call Trace: [ 770.143086] [ 770.143097] dump_stack_lvl+0xfa/0x120 [ 770.143133] should_fail_ex+0x4d7/0x5e0 [ 770.143180] _copy_to_user+0x32/0xd0 [ 770.143223] inotify_read+0x3d9/0x830 [ 770.143293] ? __pfx_inotify_read+0x10/0x10 [ 770.143340] ? __pfx_woken_wake_function+0x10/0x10 [ 770.143399] ? security_file_permission+0x22/0x90 [ 770.143442] ? __pfx_inotify_read+0x10/0x10 [ 770.143485] vfs_read+0x1eb/0xc70 [ 770.143527] ? lock_acquire+0x15e/0x2d0 [ 770.143559] ? __fget_files+0x34/0x3b0 [ 770.143593] ? __pfx_vfs_read+0x10/0x10 [ 770.143625] ? __fget_files+0x203/0x3b0 [ 770.143658] ? lock_release+0xc8/0x270 [ 770.143707] ? __fget_files+0x20d/0x3b0 [ 770.143777] ksys_read+0x121/0x240 [ 770.143810] ? __pfx_ksys_read+0x10/0x10 [ 770.143876] do_syscall_64+0xbf/0x420 [ 770.143911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.143944] RIP: 0033:0x7fe7c3894b19 [ 770.143964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 770.143988] RSP: 002b:00007fe7c0e0a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.144011] RAX: ffffffffffffffda RBX: 00007fe7c39a7f60 RCX: 00007fe7c3894b19 [ 770.144027] RDX: 00000000000000d0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 770.144042] RBP: 00007fe7c0e0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.144057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.144072] R13: 00007ffed481510f R14: 00007fe7c0e0a300 R15: 0000000000022000 [ 770.144143] 06:43:01 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) (fail_nth: 2) 06:43:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', r4, 0x29, 0x0, 0x1, 0x66, 0x40, @remote, @private0, 0x40, 0x700, 0xda7}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x0, 0x0, @fixed, @none, @none}}}}, 0x22) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000140), 0x4) 06:43:01 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) [ 770.296355] debugfs: '0' already exists in 'hci3' [ 770.297596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 770.299158] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 770.299192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.299208] Workqueue: hci3 hci_rx_work [ 770.299249] Call Trace: [ 770.299258] [ 770.299268] dump_stack_lvl+0xfa/0x120 [ 770.299297] sysfs_warn_dup+0x80/0xa0 [ 770.299324] sysfs_create_dir_ns+0x23b/0x2a0 [ 770.299350] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 770.299374] ? find_held_lock+0x2b/0x80 [ 770.299404] ? lock_release+0xc8/0x270 [ 770.299439] ? do_raw_spin_unlock+0x53/0x220 [ 770.299479] kobject_add_internal+0x24c/0x9a0 [ 770.299519] kobject_add+0x157/0x240 [ 770.299552] ? __pfx_kobject_add+0x10/0x10 [ 770.299581] ? lock_release+0xc8/0x270 [ 770.299617] ? do_raw_spin_unlock+0x53/0x220 [ 770.299654] ? kobject_put+0xaa/0x260 [ 770.299700] device_add+0x32d/0x1830 [ 770.299744] ? __pfx_device_add+0x10/0x10 [ 770.299785] ? hci_debugfs_create_conn+0x10f/0x240 [ 770.299813] ? mgmt_send_event_skb+0x2f3/0x460 [ 770.299851] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 770.299887] hci_conn_add_sysfs+0x117/0x1c0 [ 770.299918] le_conn_complete_evt+0x1246/0x1e40 [ 770.299974] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 770.300023] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 770.300066] ? __asan_memcpy+0x3d/0x60 [ 770.300102] hci_le_meta_evt+0x34b/0x530 [ 770.300137] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 770.300181] hci_event_packet+0x66c/0x10e0 [ 770.300221] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 770.300256] ? __pfx_hci_event_packet+0x10/0x10 [ 770.300295] ? mark_held_locks+0x49/0x80 [ 770.300329] ? kcov_remote_start+0x2ce/0x5a0 [ 770.300381] hci_rx_work+0x65b/0x8b0 [ 770.300425] process_one_work+0x8e1/0x1960 [ 770.300478] ? __pfx_process_one_work+0x10/0x10 [ 770.300513] ? move_linked_works+0x172/0x270 [ 770.300561] ? assign_work+0x196/0x240 [ 770.300598] worker_thread+0x67e/0xe90 [ 770.300632] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 770.300680] ? __pfx_worker_thread+0x10/0x10 [ 770.300716] kthread+0x3c8/0x740 [ 770.300749] ? __pfx_kthread+0x10/0x10 [ 770.300777] ? ret_from_fork+0x79/0x7a0 [ 770.300809] ? __pfx_kthread+0x10/0x10 [ 770.300842] ret_from_fork+0x67a/0x7a0 [ 770.300868] ? __pfx_ret_from_fork+0x10/0x10 [ 770.300893] ? save_fpregs_to_fpstate+0x145/0x270 [ 770.300950] ? __switch_to+0x759/0x1030 [ 770.300982] ? __pfx_kthread+0x10/0x10 [ 770.301015] ret_from_fork_asm+0x1a/0x30 [ 770.301070] [ 770.339514] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 770.343409] Bluetooth: hci3: failed to register connection device [ 770.347568] debugfs: '0' already exists in 'hci3' [ 770.348965] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 770.350492] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 770.350523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.350540] Workqueue: hci3 hci_rx_work [ 770.350579] Call Trace: [ 770.350588] [ 770.350599] dump_stack_lvl+0xfa/0x120 [ 770.350627] sysfs_warn_dup+0x80/0xa0 [ 770.350653] sysfs_create_dir_ns+0x23b/0x2a0 [ 770.350677] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 770.350700] ? find_held_lock+0x2b/0x80 [ 770.350728] ? lock_release+0xc8/0x270 [ 770.350761] ? do_raw_spin_unlock+0x53/0x220 [ 770.350800] kobject_add_internal+0x24c/0x9a0 [ 770.350838] kobject_add+0x157/0x240 [ 770.350868] ? __pfx_kobject_add+0x10/0x10 [ 770.350896] ? lock_release+0xc8/0x270 [ 770.350936] ? do_raw_spin_unlock+0x53/0x220 [ 770.350973] ? kobject_put+0xaa/0x260 [ 770.351016] device_add+0x32d/0x1830 [ 770.351059] ? __pfx_device_add+0x10/0x10 [ 770.351097] ? hci_debugfs_create_conn+0x10f/0x240 [ 770.351123] ? mgmt_send_event_skb+0x2f3/0x460 [ 770.351159] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 770.351194] hci_conn_add_sysfs+0x117/0x1c0 [ 770.351223] le_conn_complete_evt+0x1246/0x1e40 [ 770.351270] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 770.351319] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 770.351358] ? __asan_memcpy+0x3d/0x60 [ 770.351394] hci_le_meta_evt+0x34b/0x530 [ 770.351427] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 770.351469] hci_event_packet+0x66c/0x10e0 [ 770.351507] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 770.351542] ? __pfx_hci_event_packet+0x10/0x10 [ 770.351578] ? mark_held_locks+0x49/0x80 [ 770.351611] ? kcov_remote_start+0x2ce/0x5a0 [ 770.351660] hci_rx_work+0x65b/0x8b0 [ 770.351702] process_one_work+0x8e1/0x1960 [ 770.351752] ? __pfx_process_one_work+0x10/0x10 [ 770.351785] ? move_linked_works+0x172/0x270 [ 770.351831] ? assign_work+0x196/0x240 [ 770.351867] worker_thread+0x67e/0xe90 [ 770.351900] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 770.351945] ? __pfx_worker_thread+0x10/0x10 [ 770.351980] kthread+0x3c8/0x740 [ 770.352010] ? __pfx_kthread+0x10/0x10 [ 770.352037] ? ret_from_fork+0x79/0x7a0 [ 770.352067] ? __pfx_kthread+0x10/0x10 [ 770.352098] ret_from_fork+0x67a/0x7a0 [ 770.352123] ? __pfx_ret_from_fork+0x10/0x10 [ 770.352144] ? save_fpregs_to_fpstate+0x145/0x270 [ 770.352178] ? __switch_to+0x759/0x1030 [ 770.352210] ? __pfx_kthread+0x10/0x10 [ 770.352241] ret_from_fork_asm+0x1a/0x30 [ 770.352295] [ 770.388090] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 770.390283] Bluetooth: hci3: failed to register connection device [ 770.421860] FAULT_INJECTION: forcing a failure. [ 770.421860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.423925] CPU: 1 UID: 0 PID: 7839 Comm: syz-executor.2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 770.423964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.423979] Call Trace: [ 770.423990] [ 770.424003] dump_stack_lvl+0xfa/0x120 [ 770.424038] should_fail_ex+0x4d7/0x5e0 [ 770.424073] _copy_to_user+0x32/0xd0 [ 770.424105] simple_read_from_buffer+0xe0/0x180 [ 770.424138] proc_fail_nth_read+0x18a/0x240 [ 770.424178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.424216] ? security_file_permission+0x22/0x90 [ 770.424253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.424290] vfs_read+0x1eb/0xc70 [ 770.424322] ? __pfx___mutex_lock+0x10/0x10 [ 770.424344] ? __fget_files+0x34/0x3b0 [ 770.424375] ? __pfx_vfs_read+0x10/0x10 [ 770.424406] ? lock_release+0xc8/0x270 [ 770.424443] ? __fget_files+0x20d/0x3b0 [ 770.424488] ksys_read+0x121/0x240 [ 770.424516] ? __pfx_ksys_read+0x10/0x10 [ 770.424559] do_syscall_64+0xbf/0x420 [ 770.424587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.424611] RIP: 0033:0x7fc0b9bd069c [ 770.424630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 770.424654] RSP: 002b:00007fc0b7193170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.424678] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc0b9bd069c [ 770.424694] RDX: 000000000000000f RSI: 00007fc0b71931e0 RDI: 0000000000000005 [ 770.424709] RBP: 00007fc0b71931d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.424723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.424737] R13: 00007ffd6197162f R14: 00007fc0b7193300 R15: 0000000000022000 [ 770.424776] 06:43:01 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0x192, 0x2, 0x2, 0x11c}, @l2cap_cid_signaling={{0x118}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x2, 0x3ff}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x8, 0x9}}, @l2cap_create_chan_req={{0xc, 0xc6, 0x5}, {0x7, 0x1}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x8, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x1, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x6, 0x7, 0x8, 0x3ff}}, @l2cap_move_chan_req={{0xe, 0xff, 0x3}, {0xfe, 0x5}}, @l2cap_info_rsp={{0xb, 0x4, 0xa2}, {0x3f, 0xc4, "76041be5631bb9f170c2a546a7f5d0b8d9d8e4de659925cb1d69de4a397f2cbd9aa1b8eb59ea452c260b5a644c71ce81dace4bb64402f242a16ffec923140bff5dc02b5f6ee7921bb364e85a2d47b0cca2ba348a0fcb89b182e6533fbcc74a9364201492ff74a733a3275e267ba97ec23c8bea43ad498eda7ae96a98cb42b9294b800e28ef31af210a50eadcf54b154212b1f570fd9b567ca975a1b24448"}}, @l2cap_conf_req={{0x4, 0x0, 0x1a}, {0x400, 0x3a6, [@l2cap_conf_flushto={0x2, 0x2, 0x1000}, @l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x7f}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_info_rsp={{0xb, 0x1, 0x15}, {0x7, 0x4dc2, "6c7b80567e93274dedbfb6755775084683"}}]}}, 0x121) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) [ 770.522103] Bluetooth: hci3: command 0x0406 tx timeout [ 770.536289] FAULT_INJECTION: forcing a failure. [ 770.536289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.538378] CPU: 1 UID: 0 PID: 7842 Comm: syz-executor.0 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 770.538410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.538424] Call Trace: [ 770.538432] [ 770.538441] dump_stack_lvl+0xfa/0x120 [ 770.538472] should_fail_ex+0x4d7/0x5e0 [ 770.538507] _copy_to_user+0x32/0xd0 [ 770.538539] simple_read_from_buffer+0xe0/0x180 [ 770.538572] proc_fail_nth_read+0x18a/0x240 [ 770.538611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.538650] ? security_file_permission+0x22/0x90 [ 770.538686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.538723] vfs_read+0x1eb/0xc70 [ 770.538756] ? __pfx___mutex_lock+0x10/0x10 [ 770.538778] ? __fget_files+0x34/0x3b0 [ 770.538809] ? __pfx_vfs_read+0x10/0x10 06:43:01 executing program 7: syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x4) syz_emit_vhci(0x0, 0x0) 06:43:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) kcmp(0xffffffffffffffff, 0x0, 0x0, r0, r1) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xad, 0x49, 0x4, 0x7, 0x0, 0x7, 0x8202, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0xfb14ec3f72c90133, 0xfffffffffffffff9, 0xfffffffd, 0x3, 0xff, 0x20, 0x2, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 770.538840] ? lock_release+0xc8/0x270 [ 770.538878] ? __fget_files+0x20d/0x3b0 [ 770.538923] ksys_read+0x121/0x240 [ 770.538960] ? __pfx_ksys_read+0x10/0x10 [ 770.539002] do_syscall_64+0xbf/0x420 [ 770.539030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.539055] RIP: 0033:0x7fe7c384769c [ 770.539073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 770.539097] RSP: 002b:00007fe7c0e0a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.539121] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00007fe7c384769c [ 770.539136] RDX: 000000000000000f RSI: 00007fe7c0e0a1e0 RDI: 0000000000000005 [ 770.539151] RBP: 00007fe7c0e0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.539165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.539179] R13: 00007ffed481510f R14: 00007fe7c0e0a300 R15: 0000000000022000 [ 770.539217] 06:43:01 executing program 2: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) [ 770.639046] Bluetooth: hci5: ACL packet for unknown connection handle 402 [ 770.647318] Bluetooth: hci5: ACL packet for unknown connection handle 402 [ 770.807000] debugfs: '0' already exists in 'hci6' [ 770.810236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 770.811528] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 770.811557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.811572] Workqueue: hci6 hci_rx_work [ 770.811610] Call Trace: [ 770.811618] [ 770.811628] dump_stack_lvl+0xfa/0x120 [ 770.811654] sysfs_warn_dup+0x80/0xa0 [ 770.811678] sysfs_create_dir_ns+0x23b/0x2a0 [ 770.811701] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 770.811721] ? find_held_lock+0x2b/0x80 [ 770.811747] ? lock_release+0xc8/0x270 [ 770.811777] ? do_raw_spin_unlock+0x53/0x220 [ 770.811812] kobject_add_internal+0x24c/0x9a0 [ 770.811847] kobject_add+0x157/0x240 [ 770.811875] ? __pfx_kobject_add+0x10/0x10 [ 770.811901] ? lock_release+0xc8/0x270 [ 770.811937] ? do_raw_spin_unlock+0x53/0x220 [ 770.811971] ? kobject_put+0xaa/0x260 [ 770.812008] device_add+0x32d/0x1830 [ 770.812047] ? __pfx_device_add+0x10/0x10 [ 770.812081] ? hci_debugfs_create_conn+0x10f/0x240 [ 770.812106] ? mgmt_send_event_skb+0x2f3/0x460 [ 770.812139] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 770.812170] hci_conn_add_sysfs+0x117/0x1c0 [ 770.812197] le_conn_complete_evt+0x1246/0x1e40 [ 770.812238] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 770.812280] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 770.812316] ? __asan_memcpy+0x3d/0x60 [ 770.812348] hci_le_meta_evt+0x34b/0x530 [ 770.812378] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 770.812416] hci_event_packet+0x66c/0x10e0 [ 770.812450] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 770.812482] ? __pfx_hci_event_packet+0x10/0x10 [ 770.812521] ? kcov_remote_start+0x2ce/0x5a0 [ 770.812555] ? kcov_remote_start+0x2d3/0x5a0 [ 770.812595] hci_rx_work+0x65b/0x8b0 [ 770.812633] process_one_work+0x8e1/0x1960 [ 770.812677] ? __pfx_process_one_work+0x10/0x10 [ 770.812707] ? move_linked_works+0x172/0x270 [ 770.812749] ? assign_work+0x196/0x240 [ 770.812781] worker_thread+0x67e/0xe90 [ 770.812811] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 770.812851] ? __pfx_worker_thread+0x10/0x10 [ 770.812883] kthread+0x3c8/0x740 [ 770.812910] ? __pfx_kthread+0x10/0x10 [ 770.812954] ? ret_from_fork+0x79/0x7a0 [ 770.812982] ? __pfx_kthread+0x10/0x10 [ 770.813010] ret_from_fork+0x67a/0x7a0 [ 770.813033] ? __pfx_ret_from_fork+0x10/0x10 [ 770.813053] ? save_fpregs_to_fpstate+0x145/0x270 [ 770.813084] ? __switch_to+0x759/0x1030 [ 770.813114] ? __pfx_kthread+0x10/0x10 [ 770.813142] ret_from_fork_asm+0x1a/0x30 [ 770.813189] [ 770.849086] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 770.852604] Bluetooth: hci6: failed to register connection device [ 771.929200] ------------[ cut here ]------------ [ 771.929777] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x82/0x130, CPU#1: kworker/u11:2/6379 [ 771.930600] Modules linked in: [ 771.930916] CPU: 1 UID: 0 PID: 6379 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 771.931733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 771.932410] Workqueue: hci5 hci_conn_timeout [ 771.932774] RIP: 0010:hci_conn_timeout+0x82/0x130 [ 771.933216] Code: e8 33 a6 25 fd 85 ed 78 1b e8 0a ab 25 fd 31 ff 89 ee e8 21 a6 25 fd 85 ed 74 12 5b 5d 41 5c e9 f4 aa 25 fd e8 ef aa 25 fd 90 <0f> 0b 90 e8 e6 aa 25 fd 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 771.934666] RSP: 0018:ffff88804a61fbe8 EFLAGS: 00010293 [ 771.935110] RAX: 0000000000000000 RBX: ffff88800a994a40 RCX: ffffffff844fc73d [ 771.935672] RDX: ffff88801a889bc0 RSI: ffffffff844fc761 RDI: 0000000000000005 [ 771.936260] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffed1001532802 [ 771.936824] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88800fa16000 [ 771.937418] R13: ffff88804a61fcb8 R14: 0000000000000001 R15: 0000000000000000 [ 771.937998] FS: 0000000000000000(0000) GS:ffff8880e5465000(0000) knlGS:0000000000000000 [ 771.938628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.939115] CR2: 00007ffd03083fd8 CR3: 000000004a202000 CR4: 0000000000350ef0 [ 771.939678] Call Trace: [ 771.939888] [ 771.940095] process_one_work+0x8e1/0x1960 [ 771.940449] ? __pfx_process_one_work+0x10/0x10 [ 771.940835] ? move_linked_works+0x172/0x270 [ 771.941234] ? assign_work+0x196/0x240 [ 771.941556] worker_thread+0x67e/0xe90 [ 771.943854] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 771.946113] ? __pfx_worker_thread+0x10/0x10 [ 771.946985] kthread+0x3c8/0x740 [ 771.947651] ? __pfx_kthread+0x10/0x10 [ 771.948000] ? ret_from_fork+0x79/0x7a0 [ 771.948328] ? __pfx_kthread+0x10/0x10 [ 771.948648] ret_from_fork+0x67a/0x7a0 [ 771.948993] ? __pfx_ret_from_fork+0x10/0x10 [ 771.949349] ? save_fpregs_to_fpstate+0x145/0x270 [ 771.949739] ? __switch_to+0x759/0x1030 [ 771.950085] ? __pfx_kthread+0x10/0x10 [ 771.950402] ret_from_fork_asm+0x1a/0x30 [ 771.950745] [ 771.950957] irq event stamp: 75835 [ 771.951243] hardirqs last enabled at (75843): [] __up_console_sem+0x78/0x80 [ 771.951957] hardirqs last disabled at (75852): [] __up_console_sem+0x5d/0x80 [ 771.952642] softirqs last enabled at (75726): [] handle_softirqs+0x4d8/0x740 [ 771.953364] softirqs last disabled at (75423): [] __irq_exit_rcu+0xc4/0x100 [ 771.954066] ---[ end trace 0000000000000000 ]--- [ 772.056996] Bluetooth: hci4: command 0x0406 tx timeout [ 772.185316] Bluetooth: hci5: command 0x0406 tx timeout [ 772.569138] Bluetooth: hci3: command 0x0406 tx timeout [ 772.697232] Bluetooth: hci6: command 0x2016 tx timeout [ 774.105049] Bluetooth: hci4: command 0x0406 tx timeout [ 774.233070] Bluetooth: hci5: command 0x0406 tx timeout [ 774.617086] Bluetooth: hci3: command 0x0406 tx timeout [ 774.745138] Bluetooth: hci6: command 0x2016 tx timeout [ 776.281060] Bluetooth: hci5: command 0x0406 tx timeout [ 776.665228] Bluetooth: hci3: command 0x0406 tx timeout [ 776.793138] Bluetooth: hci6: command 0x2016 tx timeout [ 778.330006] Bluetooth: hci5: command 0x0406 tx timeout [ 778.713022] Bluetooth: hci3: command 0x0406 tx timeout [ 778.841022] Bluetooth: hci6: command 0x2016 tx timeout [ 780.762142] Bluetooth: hci3: command 0x0406 tx timeout [ 780.763407] Bluetooth: hci3: hardware error 0x1c 06:43:12 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0x0, 0x8, 0x0, @fixed, @none, @none, 0x0, 0x0, 0x0, 0xff}}}}, 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf2}, "bb42f5baa2fbec66b208d778d7714baa68134eaccebc200f5eddb3698ad71dc736ba635ce87ade2596b2446015322227919e63db29eb9fc067a7c0525cb72ab34f56c0663f1d31aa973ebfce303176ebc7486e85162b9bcb1e1aefe0eb505fb71a56bd415e966d6c25602435f856de518fd31aed13249ba81258c08d5eb9042c610daded97e9263a67638ce34c6b1362d17ae47c0d4c1ccea4b5ffd43c85f9ef28da6dae25747f0c3d6e4bc2a1492d3fe69c62eb039bc3347130765d713b4074c8bcacffb2e4beef566cc34c0b8a50bea0b1103a7c7c0c58062ee970206b3587b176b87201b6add842f3ec795e9c3f73b668"}, 0xf6) 06:43:12 executing program 2: r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x26) 06:43:12 executing program 7: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x2, 0x0, 0x0, 0x0, @any, @none, @none, 0x2000}}}}, 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x6, 0xc9, @any, 0x0, 0x7f, 0x20, 0x7c23, 0x9, 0xff}}}, 0x14) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 06:43:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x55, 0x5, 0xa0, 0x4, 0x0, 0x101, 0x20, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffff73c}, 0x1408, 0x0, 0x3f, 0x2, 0xfff, 0x6, 0xd5e, 0x0, 0x40, 0x0, 0xffffffff}, r0, 0x9, 0xffffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 06:43:12 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0xd0) 06:43:12 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x94, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffd, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) r2 = creat(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0xc}, {}, {0x0, 0x0, 0x0, 0xfffffffffffff800}, 0x0, 0x0, 0x2, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x7, 0x24, 0x9, 0x0, 0x0, [{{}, 0x2a33}, {{r4}, 0x10000}, {{r1}, 0x7}, {{r5}, 0xff}, {{r1}, 0xb20}, {{r7}, 0xffffffffffffffe1}, {{r2}, 0x7ff}, {{r1}, 0x7}, {{r8}, 0x2ea5}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) 06:43:12 executing program 6: tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe22d, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x1, 0x0, 0x2}}, 0xe8) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESHEX], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_conf_rsp={{0x5, 0x3f, 0x16}, {0x0, 0x0, 0x0, [@l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffd}, @l2cap_conf_mtu={0x1, 0x2, 0x21}]}}]}}, 0x23) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x81}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000080) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3c, 0x4}, {0x9, 0x200}}}}, 0x11) 06:43:12 executing program 5: perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 781.032427] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 781.032548] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 781.038967] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 781.101496] Bluetooth: hci5: ACL packet for unknown connection handle 200 06:43:12 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') read(r0, &(0x7f00000000c0)=""/208, 0x10) 06:43:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x81, 0x3, 0x1, 0x4, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x54ee6c3370931781}, 0x40808, 0x1, 0x0, 0x3, 0xff, 0x7, 0x9, 0x0, 0x1ff, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaa0800fffffffffff7ffffffffffff00030000000000"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "73e5037174bb8b0df18645dcecb99e9d", 0x6}}}, 0x1a) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x8, 0x80800) write(r0, &(0x7f0000000180)="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", 0x1000) 06:43:12 executing program 7: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1f, 0xc9}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 06:43:12 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) unlink(&(0x7f0000000340)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6, 0x63, 0x1, 0x0, 0x0, 0x4848, 0x138420, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x1288, 0x2, 0xdd51, 0x1, 0x7fff, 0x1, 0x1000, 0x0, 0x400, 0x0, 0xadc}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb, 0x859}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x0, 0x4, 0x7}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, @xdp={0x2c, 0x0, 0x0, 0x34}, @in={0x2, 0x4e24, @empty}, @llc={0x1a, 0xffff, 0x1, 0xff, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x10000000007f, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000002f5c000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb633396643b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ac1414aa000000000000000000000000000004d46c00000000000000000000000000000000000000dd0e0000000000004d0000000000000000010000000000000200000000000000060000000000000005000000000000001f00000000000000000005000000000000005f9300000000000008000000000000002000000007000000500f000028bd700007350000020002d64700"/168], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x4, 0x7fff, 0x5, 0x0, 0x18, "afd55f6730692714b1ccb56f75d2ff4942d7af"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r5, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f0000001e80)=ANY=[@ANYBLOB="78000000000000001801000000020000a08c91caac0f43fc3cb00da6deaa503d79c2788ee4d392585369571d6b3b5fe333a0101160d84446c61524fe40193f23bd7e51071f6d5ea4046c878dde9afb63a167d45f7ad6a6e6e78ef400108f16fa06ea13f8a810f24df6dab8adf0da7f78379300000000000000b000000000000000080100000100000013deec1a0eb8fbb8006a7f053477a6bb35ded80f390fc302bb2c2fc621d130b0a9faac44ad575c375bebc64be388335dde0396309a0f26e04bf2c811cf1b186a172737036879eb03e1af7b9f0f546b0410833748770cd99f2a070a53897783c6969afed592c6a33544c9aa20b2b857d0cec7eec10a9c9ba8b3523e6a57e4afca28e8a6483606d1adc06cbc507380769d12755703000000d04d8f70abbe1cff9f234ad661eb1de8470ed0d870000000ac88e3ed900000000000000010010000080000000e15cb0fa60f112f155fed0e14594608dba2c60edc3f67a64c32dad570e1cad670c937ba9d86cb5fdcc8d5d29972e7bbee34dc5efeb89089924e9f3894a588d10de678f4cb1493b73f2595f213ced0433e4f7e6491d46b73be682f279e1ebda8aec575151e6cd43977a30600000000000000162fa30e3307e1afdc00000000007502ab9cf99b8711100100005a0c0000dc0acc25165a6643ec30c42bc00e4b94c40da6103d8409d01471b0d21e703f331dbe40d13402c97552900264ee5f43ae09743d2d8359819e4259e54d4d5fa4c9e239eb947418a389d38f1707078344084de6ab59f44b4c1d3a5ef99cdc3f7c232f29996710047ac144e234ce926ff9c57281e30ba564a30902d942db2f337f52a9702b3d16f33505d3310fdddfdcd44ea54f610bae7d4948e15aef8081cb8dc9fa76cc812b17279f7fd65d866b36e85e1a385716864215bcabc555e2704b158073bf3993f9424521ee878ab65f9f3212cd7fee5dfc181d937b86f5f2473f08557e5c842510010000000000000101000000020000c593133edd9b0501b546088b8b7199e31f1d4479443cd500f307183db7c0eff02809b2448ac3fb9306000000000000002ed87c2ffbae9fa4c7d3fb3cd7c734a39724003df6e9765293f411501ad1f8a90101c525c29e54173c6e633edf30ce98c9338d522a50b3ebf809ee69f432ec41f9b47f7a1ba2f9474aaeb91150a94012913776a97426414b504fb5cf5d865dfdfa63108a18cf03a9c3d58014209ef9c5021a637f4b1036a2658b1b2a7edf0724ceb130f63f1045c70d1d58ecad85718f9046565ca300da940d64b248bcbf8601157786d886c84eacbb06a53d17363bce8c5b2b4b45dacbb8e53aed6f45fd3965aae271dbc75651a0d54920e034d2ba1928e5d10000000066a5d91d703d97317a8cbc869dd93bd874942735ba3867067a38ff7405e6d6f9997b472d6f2641f1abd56388dca26a64a2d3ae0a6013f4d53977b047ba150afe2c345613677f03dfc4bddf7226e7e3a3f908675787a4f3000000000000000000000000000000bb4071768aaae2e8cb2d8b701dbfe590faee3b1c243706e23cb5074d1ea55e1a17f0b23381467d1aeb2fd3a9000000000000000000000000305d1441fd648348c98a83520c649d3a6f15a4670651efc41530ec8811905b5ed7fa6b16bdb69e5ac79dfedd98283a70bcc0b526d7ac941dd3d79aadff04ac7c72002d7970cdffe13e83c6b52076a90d0a4c7433a410e9dbde119dbdf914026a53b4147325530166ce659f47c2b5fd4a7406ee9320643ede93a2ce9db63bb20751f9c4526451fdf08cd4340ba77fd1f640920d3e181ac30c15c6f5ccf9f020dc477bf7b7d9e2d2bdc8a689eaa8fd4c998ae36f35ce58d733b6626dbc2854dcb280b377f97965ffe9347a01d57e1614d7dfc48eae9dfeca182cfe9a0ab82403b6ec8d12dc600d25fc5607946a30139edd735082d61f74efb938"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r7}}, 0x6) [ 781.288301] debugfs: '0' already exists in 'hci6' [ 781.289396] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 781.290681] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:7 Tainted: G W 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 781.290716] Tainted: [W]=WARN [ 781.290723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 781.290738] Workqueue: hci6 hci_rx_work [ 781.290775] Call Trace: [ 781.290784] [ 781.290793] dump_stack_lvl+0xfa/0x120 [ 781.290820] sysfs_warn_dup+0x80/0xa0 [ 781.290845] sysfs_create_dir_ns+0x23b/0x2a0 [ 781.290867] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 781.290888] ? find_held_lock+0x2b/0x80 [ 781.290915] ? lock_release+0xc8/0x270 [ 781.290953] ? do_raw_spin_unlock+0x53/0x220 [ 781.290990] kobject_add_internal+0x24c/0x9a0 [ 781.291026] kobject_add+0x157/0x240 [ 781.291054] ? __pfx_kobject_add+0x10/0x10 [ 781.291080] ? lock_release+0xc8/0x270 [ 781.291110] ? do_raw_spin_unlock+0x53/0x220 [ 781.291144] ? kobject_put+0xaa/0x260 [ 781.291183] device_add+0x32d/0x1830 [ 781.291223] ? __pfx_device_add+0x10/0x10 [ 781.291259] ? hci_debugfs_create_conn+0x10f/0x240 [ 781.291283] ? mgmt_send_event_skb+0x2f3/0x460 [ 781.291316] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 781.291349] hci_conn_add_sysfs+0x117/0x1c0 [ 781.291376] le_conn_complete_evt+0x1246/0x1e40 [ 781.291420] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 781.291465] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 781.291502] ? __asan_memcpy+0x3d/0x60 [ 781.291535] hci_le_meta_evt+0x34b/0x530 [ 781.291566] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 781.291605] hci_event_packet+0x66c/0x10e0 [ 781.291641] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 781.291673] ? __pfx_hci_event_packet+0x10/0x10 [ 781.291707] ? mark_held_locks+0x49/0x80 [ 781.291738] ? kcov_remote_start+0x2ce/0x5a0 [ 781.291784] hci_rx_work+0x65b/0x8b0 [ 781.291823] process_one_work+0x8e1/0x1960 [ 781.291870] ? __pfx_process_one_work+0x10/0x10 [ 781.291900] ? move_linked_works+0x172/0x270 [ 781.291944] ? assign_work+0x196/0x240 [ 781.291977] worker_thread+0x67e/0xe90 [ 781.292009] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 781.292051] ? __pfx_worker_thread+0x10/0x10 [ 781.292083] kthread+0x3c8/0x740 [ 781.292112] ? __pfx_kthread+0x10/0x10 [ 781.292137] ? ret_from_fork+0x79/0x7a0 [ 781.292160] ? lock_release+0xc8/0x270 [ 781.292190] ? __pfx_kthread+0x10/0x10 [ 781.292219] ret_from_fork+0x67a/0x7a0 [ 781.292242] ? __pfx_ret_from_fork+0x10/0x10 [ 781.292270] ? __switch_to+0x759/0x1030 [ 781.292301] ? __pfx_kthread+0x10/0x10 [ 781.292330] ret_from_fork_asm+0x1a/0x30 [ 781.292379] [ 781.326157] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 781.328255] Bluetooth: hci6: failed to register connection device [ 781.331391] debugfs: '0' already exists in 'hci6' [ 781.332438] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 781.334092] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:7 Tainted: G W 6.18.0-next-20251203 #1 PREEMPT(voluntary) [ 781.334126] Tainted: [W]=WARN [ 781.334133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 781.334148] Workqueue: hci6 hci_rx_work [ 781.334179] Call Trace: [ 781.334186] [ 781.334196] dump_stack_lvl+0xfa/0x120 [ 781.334219] sysfs_warn_dup+0x80/0xa0 [ 781.334242] sysfs_create_dir_ns+0x23b/0x2a0 [ 781.334264] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 781.334285] ? find_held_lock+0x2b/0x80 [ 781.334310] ? lock_release+0xc8/0x270 [ 781.334340] ? do_raw_spin_unlock+0x53/0x220 [ 781.334376] kobject_add_internal+0x24c/0x9a0 [ 781.334411] kobject_add+0x157/0x240 [ 781.334439] ? __pfx_kobject_add+0x10/0x10 [ 781.334465] ? lock_release+0xc8/0x270 [ 781.334495] ? do_raw_spin_unlock+0x53/0x220 [ 781.334529] ? kobject_put+0xaa/0x260 [ 781.334569] device_add+0x32d/0x1830 [ 781.334607] ? __pfx_device_add+0x10/0x10 [ 781.334643] ? hci_debugfs_create_conn+0x10f/0x240 [ 781.334666] ? mgmt_send_event_skb+0x2f3/0x460 [ 781.334698] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 781.334731] hci_conn_add_sysfs+0x117/0x1c0 [ 781.334757] le_conn_complete_evt+0x1246/0x1e40 [ 781.334800] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 781.334845] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 781.334882] ? __asan_memcpy+0x3d/0x60 [ 781.334914] hci_le_meta_evt+0x34b/0x530 [ 781.334951] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 781.334991] hci_event_packet+0x66c/0x10e0 [ 781.335027] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 781.335060] ? __pfx_hci_event_packet+0x10/0x10 [ 781.335094] ? mark_held_locks+0x49/0x80 [ 781.335124] ? kcov_remote_start+0x2ce/0x5a0 [ 781.335169] hci_rx_work+0x65b/0x8b0 [ 781.335208] process_one_work+0x8e1/0x1960 [ 781.335254] ? __pfx_process_one_work+0x10/0x10 [ 781.335284] ? move_linked_works+0x172/0x270 [ 781.335327] ? assign_work+0x196/0x240 [ 781.335360] worker_thread+0x67e/0xe90 [ 781.335391] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 781.335432] ? __pfx_worker_thread+0x10/0x10 [ 781.335465] kthread+0x3c8/0x740 [ 781.335492] ? __pfx_kthread+0x10/0x10 [ 781.335517] ? ret_from_fork+0x79/0x7a0 [ 781.335539] ? lock_release+0xc8/0x270 [ 781.335569] ? __pfx_kthread+0x10/0x10 [ 781.335598] ret_from_fork+0x67a/0x7a0 [ 781.335621] ? __pfx_ret_from_fork+0x10/0x10 [ 781.335649] ? __switch_to+0x759/0x1030 [ 781.335677] ? __pfx_kthread+0x10/0x10 [ 781.335707] ret_from_fork_asm+0x1a/0x30 [ 781.335756] [ 781.372435] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 781.375707] Bluetooth: hci6: failed to register connection device [ 781.376747] Bluetooth: hci5: ACL packet for unknown connection handle 200 VM DIAGNOSIS: 06:43:03 Registers: info registers vcpu 0 RAX=ffff88800cd76590 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85d27b20 RBP=ffffffff85e21a60 RSP=ffff888009626fc8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003cd50 R11=00000000000bd6e3 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff8880096270b0 RIP=ffffffff81528e7b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5365000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9e379d000 CR3=000000000a1c5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ffff00000000000000 XMM02=00000000000000ffff00000000000000 XMM03=383033306466663730303030203a3252 XMM04=62203834206666206666203566206466 XMM05=6161203665203865203039206230203e XMM06=66652038652064662035322061612034 XMM07=00000000000000000000000000000000 XMM08=3a3352432038640000303578302f6332 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8295bb30 RDI=ffffffff8899eb40 RBP=ffffffff8899eb00 RSP=ffff88804a61f3a8 R8 =0000000000000001 R9 =ffffed10094c3e66 R10=0000000000000000 R11=0000000000000001 R12=0000000000000024 R13=ffffffff8899eb50 R14=ffffffff8899eb00 R15=ffffffff8899edc0 RIP=ffffffff8295bb85 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5465000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd03083fd8 CR3=000000004a202000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffffffffffff0f0e0d0c0b XMM03=00000000000000910065006563697600 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000ff00ffff0000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000