1996), BIOS 1.12.0-1 04/01/2014 [ 388.464367] Workqueue: hci3 hci_rx_work [ 388.464398] Call Trace: [ 388.464406] [ 388.464415] dump_stack_lvl+0xfa/0x120 [ 388.464453] sysfs_warn_dup+0x80/0xa0 [ 388.464484] sysfs_create_dir_ns+0x23b/0x2a0 [ 388.464514] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 388.464541] ? find_held_lock+0x2b/0x80 [ 388.464581] ? lock_release+0xc8/0x270 [ 388.464609] ? do_raw_spin_unlock+0x53/0x220 [ 388.464645] kobject_add_internal+0x24c/0x9a0 [ 388.464700] kobject_add+0x157/0x240 [ 388.464736] ? __pfx_kobject_add+0x10/0x10 [ 388.464771] ? lock_release+0xc8/0x270 [ 388.464798] ? do_raw_spin_unlock+0x53/0x220 [ 388.464837] ? kobject_put+0xaa/0x260 [ 388.464882] device_add+0x32d/0x1830 [ 388.464914] ? __pfx_device_add+0x10/0x10 [ 388.464943] ? hci_debugfs_create_conn+0x10f/0x240 [ 388.464975] ? mgmt_send_event_skb+0x2f3/0x460 [ 388.465000] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 388.465038] hci_conn_add_sysfs+0x117/0x1c0 [ 388.465071] le_conn_complete_evt+0x1246/0x1e40 [ 388.465121] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 388.465171] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 388.465198] ? __asan_memcpy+0x3d/0x60 [ 388.465240] hci_le_meta_evt+0x34b/0x530 [ 388.465261] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 388.465290] hci_event_packet+0x66c/0x10e0 [ 388.465315] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 388.465338] ? __pfx_hci_event_packet+0x10/0x10 [ 388.465363] ? mark_held_locks+0x49/0x80 [ 388.465391] ? kcov_remote_start+0x2ce/0x5a0 [ 388.465433] hci_rx_work+0x65b/0x8b0 [ 388.465462] process_one_work+0x8e1/0x1960 [ 388.465504] ? __pfx_process_one_work+0x10/0x10 [ 388.465533] ? move_linked_works+0x172/0x270 [ 388.465575] ? assign_work+0x196/0x240 [ 388.465605] worker_thread+0x67e/0xe90 [ 388.465634] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 388.465683] ? __pfx_worker_thread+0x10/0x10 [ 388.465713] kthread+0x3c8/0x740 [ 388.465739] ? __pfx_kthread+0x10/0x10 [ 388.465762] ? ret_from_fork+0x79/0x7a0 [ 388.465786] ? lock_release+0xc8/0x270 [ 388.465813] ? __pfx_kthread+0x10/0x10 [ 388.465840] ret_from_fork+0x67a/0x7a0 [ 388.465864] ? __pfx_ret_from_fork+0x10/0x10 [ 388.465890] ? __switch_to+0x759/0x1030 [ 388.465924] ? __pfx_kthread+0x10/0x10 [ 388.465950] ret_from_fork_asm+0x1a/0x30 [ 388.465999] [ 388.501989] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.504196] Bluetooth: hci3: failed to register connection device 18:25:21 executing program 6: 18:25:21 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d7"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) [ 388.555609] debugfs: '0' already exists in 'hci2' [ 388.557167] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 388.558662] CPU: 0 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 388.558694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.558711] Workqueue: hci2 hci_rx_work [ 388.558742] Call Trace: [ 388.558750] [ 388.558760] dump_stack_lvl+0xfa/0x120 [ 388.558793] sysfs_warn_dup+0x80/0xa0 [ 388.558824] sysfs_create_dir_ns+0x23b/0x2a0 [ 388.558861] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 388.558889] ? find_held_lock+0x2b/0x80 [ 388.558929] ? lock_release+0xc8/0x270 [ 388.558958] ? do_raw_spin_unlock+0x53/0x220 [ 388.558993] kobject_add_internal+0x24c/0x9a0 [ 388.559036] kobject_add+0x157/0x240 [ 388.559073] ? __pfx_kobject_add+0x10/0x10 [ 388.559109] ? lock_release+0xc8/0x270 [ 388.559137] ? do_raw_spin_unlock+0x53/0x220 [ 388.559171] ? kobject_put+0xaa/0x260 [ 388.559216] device_add+0x32d/0x1830 [ 388.559249] ? __pfx_device_add+0x10/0x10 [ 388.559279] ? hci_debugfs_create_conn+0x10f/0x240 [ 388.559312] ? mgmt_send_event_skb+0x2f3/0x460 [ 388.559337] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 388.559376] hci_conn_add_sysfs+0x117/0x1c0 [ 388.559409] le_conn_complete_evt+0x1246/0x1e40 [ 388.559461] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 388.559512] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 388.559540] ? __asan_memcpy+0x3d/0x60 [ 388.559583] hci_le_meta_evt+0x34b/0x530 [ 388.559605] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 388.559634] hci_event_packet+0x66c/0x10e0 [ 388.559660] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 388.559684] ? __pfx_hci_event_packet+0x10/0x10 [ 388.559709] ? mark_held_locks+0x49/0x80 [ 388.559738] ? kcov_remote_start+0x2ce/0x5a0 [ 388.559781] hci_rx_work+0x65b/0x8b0 [ 388.559810] process_one_work+0x8e1/0x1960 [ 388.559854] ? __pfx_process_one_work+0x10/0x10 [ 388.559883] ? move_linked_works+0x172/0x270 [ 388.559926] ? assign_work+0x196/0x240 [ 388.559957] worker_thread+0x67e/0xe90 [ 388.559987] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 388.560037] ? __pfx_worker_thread+0x10/0x10 [ 388.560068] kthread+0x3c8/0x740 [ 388.560094] ? __pfx_kthread+0x10/0x10 [ 388.560119] ? ret_from_fork+0x79/0x7a0 [ 388.560143] ? lock_release+0xc8/0x270 [ 388.560171] ? __pfx_kthread+0x10/0x10 [ 388.560198] ret_from_fork+0x67a/0x7a0 [ 388.560223] ? __pfx_ret_from_fork+0x10/0x10 [ 388.560250] ? __switch_to+0x759/0x1030 [ 388.560284] ? __pfx_kthread+0x10/0x10 [ 388.560312] ret_from_fork_asm+0x1a/0x30 [ 388.560367] [ 388.596801] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.598885] Bluetooth: hci2: failed to register connection device 18:25:21 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe39288426c0312df0865a409c8e642d54308c036a97c9ac3da0e9f6a6df625f1d24f0dfc44c8cddc4a7620cf464715e0a7"], 0x22) 18:25:21 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:25:21 executing program 4: 18:25:21 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:25:21 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) [ 388.679633] debugfs: '0' already exists in 'hci5' [ 388.680773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 388.682265] CPU: 0 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 388.682295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.682310] Workqueue: hci5 hci_rx_work [ 388.682339] Call Trace: [ 388.682346] [ 388.682355] dump_stack_lvl+0xfa/0x120 [ 388.682386] sysfs_warn_dup+0x80/0xa0 [ 388.682417] sysfs_create_dir_ns+0x23b/0x2a0 [ 388.682445] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 388.682473] ? find_held_lock+0x2b/0x80 [ 388.682511] ? lock_release+0xc8/0x270 [ 388.682539] ? do_raw_spin_unlock+0x53/0x220 [ 388.682575] kobject_add_internal+0x24c/0x9a0 [ 388.682620] kobject_add+0x157/0x240 [ 388.682656] ? __pfx_kobject_add+0x10/0x10 [ 388.682691] ? lock_release+0xc8/0x270 [ 388.682719] ? do_raw_spin_unlock+0x53/0x220 [ 388.682752] ? kobject_put+0xaa/0x260 [ 388.682796] device_add+0x32d/0x1830 [ 388.682835] ? __pfx_device_add+0x10/0x10 [ 388.682865] ? hci_debugfs_create_conn+0x10f/0x240 [ 388.682897] ? mgmt_send_event_skb+0x2f3/0x460 [ 388.682921] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 388.682960] hci_conn_add_sysfs+0x117/0x1c0 [ 388.682993] le_conn_complete_evt+0x1246/0x1e40 [ 388.683042] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 388.683093] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 388.683120] ? __asan_memcpy+0x3d/0x60 [ 388.683162] hci_le_meta_evt+0x34b/0x530 [ 388.683182] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 388.683211] hci_event_packet+0x66c/0x10e0 [ 388.683236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 388.683259] ? __pfx_hci_event_packet+0x10/0x10 [ 388.683283] ? mark_held_locks+0x49/0x80 [ 388.683311] ? kcov_remote_start+0x2ce/0x5a0 [ 388.683352] hci_rx_work+0x65b/0x8b0 [ 388.683381] process_one_work+0x8e1/0x1960 [ 388.683422] ? __pfx_process_one_work+0x10/0x10 [ 388.683451] ? move_linked_works+0x172/0x270 [ 388.683493] ? assign_work+0x196/0x240 [ 388.683523] worker_thread+0x67e/0xe90 [ 388.683552] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 388.683599] ? __pfx_worker_thread+0x10/0x10 [ 388.683630] kthread+0x3c8/0x740 [ 388.683656] ? __pfx_kthread+0x10/0x10 [ 388.683679] ? ret_from_fork+0x79/0x7a0 [ 388.683703] ? lock_release+0xc8/0x270 [ 388.683730] ? __pfx_kthread+0x10/0x10 [ 388.683757] ret_from_fork+0x67a/0x7a0 [ 388.683780] ? __pfx_ret_from_fork+0x10/0x10 [ 388.683806] ? __switch_to+0x759/0x1030 [ 388.683840] ? __pfx_kthread+0x10/0x10 [ 388.683866] ret_from_fork_asm+0x1a/0x30 [ 388.683915] [ 388.719539] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.721949] Bluetooth: hci5: failed to register connection device [ 388.747706] debugfs: '0' already exists in 'hci1' [ 388.749572] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 388.751038] CPU: 0 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 388.751066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.751080] Workqueue: hci1 hci_rx_work [ 388.751103] Call Trace: [ 388.751110] [ 388.751119] dump_stack_lvl+0xfa/0x120 [ 388.751146] sysfs_warn_dup+0x80/0xa0 [ 388.751173] sysfs_create_dir_ns+0x23b/0x2a0 [ 388.751200] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 388.751225] ? find_held_lock+0x2b/0x80 [ 388.751260] ? lock_release+0xc8/0x270 [ 388.751286] ? do_raw_spin_unlock+0x53/0x220 [ 388.751318] kobject_add_internal+0x24c/0x9a0 [ 388.751356] kobject_add+0x157/0x240 [ 388.751396] ? __pfx_kobject_add+0x10/0x10 [ 388.751428] ? lock_release+0xc8/0x270 [ 388.751454] ? do_raw_spin_unlock+0x53/0x220 [ 388.751484] ? kobject_put+0xaa/0x260 [ 388.751525] device_add+0x32d/0x1830 [ 388.751554] ? __pfx_device_add+0x10/0x10 [ 388.751581] ? hci_debugfs_create_conn+0x10f/0x240 [ 388.751610] ? mgmt_send_event_skb+0x2f3/0x460 [ 388.751632] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 388.751668] hci_conn_add_sysfs+0x117/0x1c0 [ 388.751697] le_conn_complete_evt+0x1246/0x1e40 [ 388.751750] ? __pfx_le_conn_complete_evt+0x10/0x10 18:25:22 executing program 6: syz_emit_vhci(0x0, 0x22) [ 388.751804] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 388.751840] ? __asan_memcpy+0x3d/0x60 [ 388.751884] hci_le_meta_evt+0x34b/0x530 [ 388.751906] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 388.751937] hci_event_packet+0x66c/0x10e0 [ 388.751964] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 388.751989] ? __pfx_hci_event_packet+0x10/0x10 [ 388.752015] ? mark_held_locks+0x49/0x80 [ 388.752045] ? kcov_remote_start+0x2ce/0x5a0 [ 388.752088] hci_rx_work+0x65b/0x8b0 [ 388.752119] process_one_work+0x8e1/0x1960 [ 388.752162] ? __pfx_process_one_work+0x10/0x10 [ 388.752193] ? move_linked_works+0x172/0x270 [ 388.752237] ? assign_work+0x196/0x240 [ 388.752269] worker_thread+0x67e/0xe90 [ 388.752300] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 388.752351] ? __pfx_worker_thread+0x10/0x10 [ 388.752384] kthread+0x3c8/0x740 [ 388.752411] ? __pfx_kthread+0x10/0x10 [ 388.752437] ? ret_from_fork+0x79/0x7a0 [ 388.752461] ? lock_release+0xc8/0x270 [ 388.752490] ? __pfx_kthread+0x10/0x10 [ 388.752519] ret_from_fork+0x67a/0x7a0 [ 388.752543] ? __pfx_ret_from_fork+0x10/0x10 [ 388.752572] ? __switch_to+0x759/0x1030 [ 388.752607] ? __pfx_kthread+0x10/0x10 [ 388.752635] ret_from_fork_asm+0x1a/0x30 [ 388.752698] [ 388.786502] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.789956] Bluetooth: hci1: failed to register connection device 18:25:22 executing program 4: 18:25:22 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe39288426c0312df0865a409c8e642d54308c036a97c9ac3da0e9f6a6df625f1d24f0dfc44c8cddc4a7620cf464715e0a7"], 0x22) [ 388.820389] debugfs: '0' already exists in 'hci2' [ 388.821990] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 388.823259] CPU: 0 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 388.823287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.823301] Workqueue: hci2 hci_rx_work [ 388.823323] Call Trace: [ 388.823331] [ 388.823339] dump_stack_lvl+0xfa/0x120 [ 388.823367] sysfs_warn_dup+0x80/0xa0 [ 388.823393] sysfs_create_dir_ns+0x23b/0x2a0 [ 388.823420] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 388.823445] ? find_held_lock+0x2b/0x80 [ 388.823480] ? lock_release+0xc8/0x270 [ 388.823505] ? do_raw_spin_unlock+0x53/0x220 [ 388.823538] kobject_add_internal+0x24c/0x9a0 [ 388.823576] kobject_add+0x157/0x240 [ 388.823610] ? __pfx_kobject_add+0x10/0x10 [ 388.823642] ? lock_release+0xc8/0x270 [ 388.823668] ? do_raw_spin_unlock+0x53/0x220 [ 388.823704] ? kobject_put+0xaa/0x260 [ 388.823745] device_add+0x32d/0x1830 [ 388.823774] ? __pfx_device_add+0x10/0x10 [ 388.823800] ? hci_debugfs_create_conn+0x10f/0x240 [ 388.823835] ? mgmt_send_event_skb+0x2f3/0x460 [ 388.823857] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 388.823892] hci_conn_add_sysfs+0x117/0x1c0 [ 388.823922] le_conn_complete_evt+0x1246/0x1e40 [ 388.823968] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 388.824015] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 388.824040] ? __asan_memcpy+0x3d/0x60 [ 388.824077] hci_le_meta_evt+0x34b/0x530 [ 388.824097] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 388.824124] hci_event_packet+0x66c/0x10e0 [ 388.824147] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 388.824169] ? __pfx_hci_event_packet+0x10/0x10 [ 388.824192] ? mark_held_locks+0x49/0x80 [ 388.824218] ? kcov_remote_start+0x2ce/0x5a0 [ 388.824256] hci_rx_work+0x65b/0x8b0 [ 388.824282] process_one_work+0x8e1/0x1960 [ 388.824320] ? __pfx_process_one_work+0x10/0x10 [ 388.824347] ? move_linked_works+0x172/0x270 [ 388.824386] ? assign_work+0x196/0x240 [ 388.824414] worker_thread+0x67e/0xe90 [ 388.824441] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 388.824485] ? __pfx_worker_thread+0x10/0x10 [ 388.824513] kthread+0x3c8/0x740 [ 388.824537] ? __pfx_kthread+0x10/0x10 [ 388.824559] ? ret_from_fork+0x79/0x7a0 [ 388.824580] ? lock_release+0xc8/0x270 [ 388.824605] ? __pfx_kthread+0x10/0x10 [ 388.824630] ret_from_fork+0x67a/0x7a0 [ 388.824652] ? __pfx_ret_from_fork+0x10/0x10 [ 388.824688] ? __switch_to+0x759/0x1030 [ 388.824719] ? __pfx_kthread+0x10/0x10 [ 388.824744] ret_from_fork_asm+0x1a/0x30 [ 388.824788] [ 388.859562] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.863014] Bluetooth: hci2: failed to register connection device [ 388.899492] debugfs: '0' already exists in 'hci1' [ 388.903076] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 388.904486] CPU: 0 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 388.904515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.904529] Workqueue: hci1 hci_rx_work [ 388.904552] Call Trace: [ 388.904559] [ 388.904568] dump_stack_lvl+0xfa/0x120 [ 388.904595] sysfs_warn_dup+0x80/0xa0 [ 388.904622] sysfs_create_dir_ns+0x23b/0x2a0 [ 388.904649] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 388.904686] ? find_held_lock+0x2b/0x80 [ 388.904721] ? lock_release+0xc8/0x270 [ 388.904747] ? do_raw_spin_unlock+0x53/0x220 [ 388.904779] kobject_add_internal+0x24c/0x9a0 [ 388.904818] kobject_add+0x157/0x240 [ 388.904858] ? __pfx_kobject_add+0x10/0x10 [ 388.904895] ? lock_release+0xc8/0x270 [ 388.904921] ? do_raw_spin_unlock+0x53/0x220 [ 388.904953] ? kobject_put+0xaa/0x260 [ 388.904995] device_add+0x32d/0x1830 [ 388.905026] ? __pfx_device_add+0x10/0x10 [ 388.905054] ? hci_debugfs_create_conn+0x10f/0x240 [ 388.905083] ? mgmt_send_event_skb+0x2f3/0x460 [ 388.905106] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 388.905142] hci_conn_add_sysfs+0x117/0x1c0 [ 388.905174] le_conn_complete_evt+0x1246/0x1e40 [ 388.905221] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 388.905270] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 388.905296] ? __asan_memcpy+0x3d/0x60 [ 388.905334] hci_le_meta_evt+0x34b/0x530 [ 388.905354] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 388.905381] hci_event_packet+0x66c/0x10e0 [ 388.905404] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 388.905426] ? __pfx_hci_event_packet+0x10/0x10 [ 388.905449] ? mark_held_locks+0x49/0x80 [ 388.905474] ? kcov_remote_start+0x2ce/0x5a0 [ 388.905513] hci_rx_work+0x65b/0x8b0 [ 388.905539] process_one_work+0x8e1/0x1960 [ 388.905577] ? __pfx_process_one_work+0x10/0x10 [ 388.905604] ? move_linked_works+0x172/0x270 [ 388.905643] ? assign_work+0x196/0x240 [ 388.905671] worker_thread+0x67e/0xe90 [ 388.905698] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 388.905742] ? __pfx_worker_thread+0x10/0x10 [ 388.905770] kthread+0x3c8/0x740 [ 388.905794] ? __pfx_kthread+0x10/0x10 [ 388.905816] ? ret_from_fork+0x79/0x7a0 [ 388.905838] ? lock_release+0xc8/0x270 [ 388.905863] ? __pfx_kthread+0x10/0x10 [ 388.905888] ret_from_fork+0x67a/0x7a0 [ 388.905910] ? __pfx_ret_from_fork+0x10/0x10 [ 388.905935] ? __switch_to+0x759/0x1030 [ 388.905965] ? __pfx_kthread+0x10/0x10 [ 388.905990] ret_from_fork_asm+0x1a/0x30 [ 388.906034] [ 388.939759] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.943891] Bluetooth: hci1: failed to register connection device [ 390.350969] Bluetooth: hci3: command 0x2016 tx timeout [ 390.415042] Bluetooth: hci0: command 0x2016 tx timeout [ 390.415169] Bluetooth: hci7: command 0x2016 tx timeout [ 390.415551] Bluetooth: hci5: command 0x0406 tx timeout [ 390.416558] Bluetooth: hci2: command 0x2016 tx timeout [ 390.417001] Bluetooth: hci4: command 0x0406 tx timeout [ 390.542905] Bluetooth: hci1: command 0x2016 tx timeout [ 392.398949] Bluetooth: hci3: command 0x2016 tx timeout [ 392.463182] Bluetooth: hci2: command 0x2016 tx timeout [ 392.464173] Bluetooth: hci4: command 0x0406 tx timeout [ 392.464304] Bluetooth: hci0: command 0x2016 tx timeout [ 392.465253] Bluetooth: hci5: command 0x0406 tx timeout [ 392.466278] Bluetooth: hci7: command 0x2016 tx timeout [ 392.591214] Bluetooth: hci1: command 0x2016 tx timeout [ 394.448077] Bluetooth: hci3: command 0x2016 tx timeout [ 394.511045] Bluetooth: hci2: command 0x2016 tx timeout [ 394.512061] Bluetooth: hci5: command 0x0406 tx timeout [ 394.638925] Bluetooth: hci1: command 0x2016 tx timeout [ 396.494934] Bluetooth: hci3: command 0x2016 tx timeout [ 396.558915] Bluetooth: hci2: command 0x2016 tx timeout [ 396.558942] Bluetooth: hci5: command 0x0406 tx timeout [ 396.686970] Bluetooth: hci1: command 0x2016 tx timeout 18:25:30 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:25:30 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe39288426c0312df0865a409c8e642d54308c036a97c9ac3da0e9f6a6df625f1d24f0dfc44c8cddc4a7620cf464715e0a7"], 0x22) 18:25:30 executing program 4: 18:25:30 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:25:30 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d7"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:25:30 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa"], 0x22) syz_emit_vhci(0x0, 0x0) 18:25:30 executing program 6: syz_emit_vhci(0x0, 0x22) 18:25:30 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 18:25:31 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddf"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:25:31 executing program 4: syz_emit_vhci(0x0, 0x22) 18:25:31 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x4}}}, 0xd) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) 18:25:31 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:25:31 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:25:31 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:25:31 executing program 6: syz_emit_vhci(0x0, 0x22) [ 397.786700] debugfs: '0' already exists in 'hci5' [ 397.787786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 397.789217] CPU: 0 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 397.789247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.789261] Workqueue: hci5 hci_rx_work [ 397.789291] Call Trace: [ 397.789298] [ 397.789307] dump_stack_lvl+0xfa/0x120 [ 397.789337] sysfs_warn_dup+0x80/0xa0 [ 397.789365] sysfs_create_dir_ns+0x23b/0x2a0 [ 397.789392] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 397.789417] ? find_held_lock+0x2b/0x80 [ 397.789454] ? lock_release+0xc8/0x270 [ 397.789480] ? do_raw_spin_unlock+0x53/0x220 [ 397.789512] kobject_add_internal+0x24c/0x9a0 [ 397.789551] kobject_add+0x157/0x240 [ 397.789584] ? __pfx_kobject_add+0x10/0x10 [ 397.789617] ? lock_release+0xc8/0x270 [ 397.789642] ? do_raw_spin_unlock+0x53/0x220 [ 397.789673] ? kobject_put+0xaa/0x260 [ 397.789714] device_add+0x32d/0x1830 [ 397.789746] ? __pfx_device_add+0x10/0x10 [ 397.789775] ? hci_debugfs_create_conn+0x10f/0x240 [ 397.789806] ? mgmt_send_event_skb+0x2f3/0x460 [ 397.789836] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 397.789872] hci_conn_add_sysfs+0x117/0x1c0 [ 397.789903] le_conn_complete_evt+0x1246/0x1e40 [ 397.789949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 397.789996] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 397.790021] ? __asan_memcpy+0x3d/0x60 [ 397.790059] hci_le_meta_evt+0x34b/0x530 [ 397.790078] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 397.790105] hci_event_packet+0x66c/0x10e0 [ 397.790129] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 397.790150] ? __pfx_hci_event_packet+0x10/0x10 [ 397.790173] ? mark_held_locks+0x49/0x80 [ 397.790200] ? kcov_remote_start+0x2ce/0x5a0 [ 397.790239] hci_rx_work+0x65b/0x8b0 [ 397.790265] process_one_work+0x8e1/0x1960 [ 397.790304] ? __pfx_process_one_work+0x10/0x10 [ 397.790330] ? move_linked_works+0x172/0x270 [ 397.790370] ? assign_work+0x196/0x240 [ 397.790398] worker_thread+0x67e/0xe90 [ 397.790425] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 397.790470] ? __pfx_worker_thread+0x10/0x10 [ 397.790498] kthread+0x3c8/0x740 [ 397.790523] ? __pfx_kthread+0x10/0x10 [ 397.790544] ? ret_from_fork+0x79/0x7a0 [ 397.790567] ? lock_release+0xc8/0x270 [ 397.790592] ? __pfx_kthread+0x10/0x10 [ 397.790617] ret_from_fork+0x67a/0x7a0 [ 397.790639] ? __pfx_ret_from_fork+0x10/0x10 [ 397.790663] ? __switch_to+0x759/0x1030 [ 397.790695] ? __pfx_kthread+0x10/0x10 [ 397.790719] ret_from_fork_asm+0x1a/0x30 [ 397.790765] [ 397.823774] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 397.825676] Bluetooth: hci5: failed to register connection device [ 397.827006] debugfs: '0' already exists in 'hci3' [ 397.827992] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 397.829241] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 397.829269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.829284] Workqueue: hci3 hci_rx_work [ 397.829310] Call Trace: [ 397.829318] [ 397.829326] dump_stack_lvl+0xfa/0x120 [ 397.829355] sysfs_warn_dup+0x80/0xa0 [ 397.829384] sysfs_create_dir_ns+0x23b/0x2a0 [ 397.829410] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 397.829436] ? find_held_lock+0x2b/0x80 [ 397.829472] ? lock_release+0xc8/0x270 [ 397.829498] ? do_raw_spin_unlock+0x53/0x220 [ 397.829531] kobject_add_internal+0x24c/0x9a0 [ 397.829569] kobject_add+0x157/0x240 [ 397.829603] ? __pfx_kobject_add+0x10/0x10 [ 397.829635] ? lock_release+0xc8/0x270 [ 397.829661] ? do_raw_spin_unlock+0x53/0x220 [ 397.829692] ? kobject_put+0xaa/0x260 [ 397.829733] device_add+0x32d/0x1830 [ 397.829763] ? __pfx_device_add+0x10/0x10 [ 397.829789] ? hci_debugfs_create_conn+0x10f/0x240 [ 397.829820] ? mgmt_send_event_skb+0x2f3/0x460 [ 397.829850] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 397.829885] hci_conn_add_sysfs+0x117/0x1c0 [ 397.829915] le_conn_complete_evt+0x1246/0x1e40 [ 397.829962] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 397.830009] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 397.830034] ? __asan_memcpy+0x3d/0x60 [ 397.830073] hci_le_meta_evt+0x34b/0x530 [ 397.830092] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 397.830119] hci_event_packet+0x66c/0x10e0 [ 397.830143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 397.830165] ? __pfx_hci_event_packet+0x10/0x10 [ 397.830187] ? mark_held_locks+0x49/0x80 [ 397.830214] ? kcov_remote_start+0x2ce/0x5a0 [ 397.830253] hci_rx_work+0x65b/0x8b0 [ 397.830279] process_one_work+0x8e1/0x1960 [ 397.830319] ? __pfx_process_one_work+0x10/0x10 [ 397.830345] ? move_linked_works+0x172/0x270 [ 397.830384] ? assign_work+0x196/0x240 [ 397.830412] worker_thread+0x67e/0xe90 [ 397.830440] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 397.830484] ? __pfx_worker_thread+0x10/0x10 [ 397.830513] kthread+0x3c8/0x740 [ 397.830537] ? __pfx_kthread+0x10/0x10 [ 397.830559] ? ret_from_fork+0x79/0x7a0 [ 397.830581] ? lock_release+0xc8/0x270 [ 397.830606] ? __pfx_kthread+0x10/0x10 [ 397.830631] ret_from_fork+0x67a/0x7a0 [ 397.830653] ? __pfx_ret_from_fork+0x10/0x10 [ 397.830678] ? __switch_to+0x759/0x1030 [ 397.830709] ? __pfx_kthread+0x10/0x10 [ 397.830734] ret_from_fork_asm+0x1a/0x30 [ 397.830779] [ 397.865702] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 397.869277] Bluetooth: hci3: failed to register connection device [ 397.872737] debugfs: '0' already exists in 'hci3' [ 397.873738] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 397.875188] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 397.875217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.875232] Workqueue: hci3 hci_rx_work [ 397.875259] Call Trace: [ 397.875267] [ 397.875275] dump_stack_lvl+0xfa/0x120 [ 397.875305] sysfs_warn_dup+0x80/0xa0 [ 397.875333] sysfs_create_dir_ns+0x23b/0x2a0 [ 397.875360] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 397.875386] ? find_held_lock+0x2b/0x80 [ 397.875422] ? lock_release+0xc8/0x270 [ 397.875447] ? do_raw_spin_unlock+0x53/0x220 [ 397.875480] kobject_add_internal+0x24c/0x9a0 [ 397.875519] kobject_add+0x157/0x240 [ 397.875553] ? __pfx_kobject_add+0x10/0x10 [ 397.875585] ? lock_release+0xc8/0x270 [ 397.875610] ? do_raw_spin_unlock+0x53/0x220 [ 397.875641] ? kobject_put+0xaa/0x260 [ 397.875682] device_add+0x32d/0x1830 [ 397.875712] ? __pfx_device_add+0x10/0x10 [ 397.875739] ? hci_debugfs_create_conn+0x10f/0x240 [ 397.875769] ? mgmt_send_event_skb+0x2f3/0x460 [ 397.875791] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 397.875827] hci_conn_add_sysfs+0x117/0x1c0 [ 397.875865] le_conn_complete_evt+0x1246/0x1e40 [ 397.875912] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 397.875959] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 397.875984] ? __asan_memcpy+0x3d/0x60 [ 397.876022] hci_le_meta_evt+0x34b/0x530 [ 397.876042] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 397.876069] hci_event_packet+0x66c/0x10e0 [ 397.876092] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 397.876114] ? __pfx_hci_event_packet+0x10/0x10 [ 397.876137] ? mark_held_locks+0x49/0x80 [ 397.876162] ? kcov_remote_start+0x2ce/0x5a0 [ 397.876202] hci_rx_work+0x65b/0x8b0 [ 397.876228] process_one_work+0x8e1/0x1960 [ 397.876267] ? __pfx_process_one_work+0x10/0x10 [ 397.876294] ? move_linked_works+0x172/0x270 [ 397.876333] ? assign_work+0x196/0x240 [ 397.876361] worker_thread+0x67e/0xe90 [ 397.876388] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 397.876433] ? __pfx_worker_thread+0x10/0x10 [ 397.876462] kthread+0x3c8/0x740 [ 397.876485] ? __pfx_kthread+0x10/0x10 [ 397.876507] ? ret_from_fork+0x79/0x7a0 [ 397.876529] ? lock_release+0xc8/0x270 [ 397.876554] ? __pfx_kthread+0x10/0x10 [ 397.876579] ret_from_fork+0x67a/0x7a0 [ 397.876601] ? __pfx_ret_from_fork+0x10/0x10 [ 397.876626] ? __switch_to+0x759/0x1030 [ 397.876670] ? __pfx_kthread+0x10/0x10 [ 397.876695] ret_from_fork_asm+0x1a/0x30 [ 397.876739] [ 397.909815] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 397.912007] Bluetooth: hci3: failed to register connection device [ 397.994042] debugfs: '0' already exists in 'hci1' [ 397.995962] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 397.997236] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 397.997265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 397.997280] Workqueue: hci1 hci_rx_work [ 397.997309] Call Trace: [ 397.997317] [ 397.997325] dump_stack_lvl+0xfa/0x120 [ 397.997355] sysfs_warn_dup+0x80/0xa0 [ 397.997384] sysfs_create_dir_ns+0x23b/0x2a0 [ 397.997411] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 397.997437] ? find_held_lock+0x2b/0x80 [ 397.997474] ? lock_release+0xc8/0x270 [ 397.997499] ? do_raw_spin_unlock+0x53/0x220 [ 397.997532] kobject_add_internal+0x24c/0x9a0 [ 397.997571] kobject_add+0x157/0x240 [ 397.997604] ? __pfx_kobject_add+0x10/0x10 [ 397.997637] ? lock_release+0xc8/0x270 [ 397.997662] ? do_raw_spin_unlock+0x53/0x220 [ 397.997692] ? kobject_put+0xaa/0x260 [ 397.997733] device_add+0x32d/0x1830 [ 397.997764] ? __pfx_device_add+0x10/0x10 [ 397.997791] ? hci_debugfs_create_conn+0x10f/0x240 [ 397.997820] ? mgmt_send_event_skb+0x2f3/0x460 [ 397.997851] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 397.997887] hci_conn_add_sysfs+0x117/0x1c0 [ 397.997917] le_conn_complete_evt+0x1246/0x1e40 [ 397.997964] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 397.998011] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 397.998035] ? __asan_memcpy+0x3d/0x60 [ 397.998075] hci_le_meta_evt+0x34b/0x530 [ 397.998094] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 397.998121] hci_event_packet+0x66c/0x10e0 [ 397.998145] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 397.998166] ? __pfx_hci_event_packet+0x10/0x10 [ 397.998189] ? mark_held_locks+0x49/0x80 [ 397.998215] ? kcov_remote_start+0x2ce/0x5a0 [ 397.998254] hci_rx_work+0x65b/0x8b0 [ 397.998281] process_one_work+0x8e1/0x1960 [ 397.998320] ? __pfx_process_one_work+0x10/0x10 [ 397.998347] ? move_linked_works+0x172/0x270 [ 397.998386] ? assign_work+0x196/0x240 [ 397.998414] worker_thread+0x67e/0xe90 [ 397.998441] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 397.998486] ? __pfx_worker_thread+0x10/0x10 [ 397.998514] kthread+0x3c8/0x740 [ 397.998538] ? __pfx_kthread+0x10/0x10 [ 397.998559] ? ret_from_fork+0x79/0x7a0 [ 397.998582] ? lock_release+0xc8/0x270 [ 397.998607] ? __pfx_kthread+0x10/0x10 [ 397.998632] ret_from_fork+0x67a/0x7a0 [ 397.998653] ? __pfx_ret_from_fork+0x10/0x10 [ 397.998679] ? __switch_to+0x759/0x1030 [ 397.998709] ? __pfx_kthread+0x10/0x10 [ 397.998734] ret_from_fork_asm+0x1a/0x30 [ 397.998780] [ 398.031895] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 398.034085] Bluetooth: hci1: failed to register connection device [ 398.035696] debugfs: '0' already exists in 'hci1' [ 398.036699] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 398.037960] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 398.037988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 398.038003] Workqueue: hci1 hci_rx_work [ 398.038031] Call Trace: [ 398.038039] [ 398.038048] dump_stack_lvl+0xfa/0x120 [ 398.038077] sysfs_warn_dup+0x80/0xa0 [ 398.038107] sysfs_create_dir_ns+0x23b/0x2a0 [ 398.038133] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 398.038159] ? find_held_lock+0x2b/0x80 [ 398.038196] ? lock_release+0xc8/0x270 [ 398.038222] ? do_raw_spin_unlock+0x53/0x220 [ 398.038255] kobject_add_internal+0x24c/0x9a0 [ 398.038294] kobject_add+0x157/0x240 [ 398.038329] ? __pfx_kobject_add+0x10/0x10 [ 398.038363] ? lock_release+0xc8/0x270 [ 398.038389] ? do_raw_spin_unlock+0x53/0x220 [ 398.038420] ? kobject_put+0xaa/0x260 [ 398.038462] device_add+0x32d/0x1830 [ 398.038492] ? __pfx_device_add+0x10/0x10 [ 398.038520] ? hci_debugfs_create_conn+0x10f/0x240 [ 398.038550] ? mgmt_send_event_skb+0x2f3/0x460 [ 398.038573] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 398.038609] hci_conn_add_sysfs+0x117/0x1c0 [ 398.038641] le_conn_complete_evt+0x1246/0x1e40 [ 398.038689] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 398.038737] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 398.038763] ? __asan_memcpy+0x3d/0x60 [ 398.038803] hci_le_meta_evt+0x34b/0x530 [ 398.038822] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 398.038857] hci_event_packet+0x66c/0x10e0 [ 398.038881] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 398.038902] ? __pfx_hci_event_packet+0x10/0x10 [ 398.038925] ? mark_held_locks+0x49/0x80 [ 398.038952] ? kcov_remote_start+0x2ce/0x5a0 [ 398.038992] hci_rx_work+0x65b/0x8b0 [ 398.039018] process_one_work+0x8e1/0x1960 [ 398.039058] ? __pfx_process_one_work+0x10/0x10 [ 398.039085] ? move_linked_works+0x172/0x270 [ 398.039125] ? assign_work+0x196/0x240 [ 398.039154] worker_thread+0x67e/0xe90 [ 398.039182] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 398.039228] ? __pfx_worker_thread+0x10/0x10 [ 398.039256] kthread+0x3c8/0x740 [ 398.039280] ? __pfx_kthread+0x10/0x10 [ 398.039303] ? ret_from_fork+0x79/0x7a0 [ 398.039325] ? lock_release+0xc8/0x270 [ 398.039351] ? __pfx_kthread+0x10/0x10 [ 398.039376] ret_from_fork+0x67a/0x7a0 [ 398.039398] ? __pfx_ret_from_fork+0x10/0x10 [ 398.039423] ? __switch_to+0x759/0x1030 [ 398.039455] ? __pfx_kthread+0x10/0x10 [ 398.039480] ret_from_fork_asm+0x1a/0x30 [ 398.039526] [ 398.074676] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 398.078139] Bluetooth: hci1: failed to register connection device [ 398.607041] Bluetooth: hci2: command 0x2016 tx timeout [ 398.735897] Bluetooth: hci1: command 0x2016 tx timeout [ 399.695947] Bluetooth: hci3: command 0x2016 tx timeout [ 399.695982] Bluetooth: hci5: command 0x0406 tx timeout [ 400.654950] Bluetooth: hci2: command 0x2016 tx timeout [ 400.783011] Bluetooth: hci1: command 0x2016 tx timeout [ 401.743007] Bluetooth: hci5: command 0x0406 tx timeout [ 401.744126] Bluetooth: hci3: command 0x2016 tx timeout [ 402.702947] Bluetooth: hci2: command 0x2016 tx timeout [ 402.831124] Bluetooth: hci1: command 0x2016 tx timeout [ 403.790919] Bluetooth: hci3: command 0x2016 tx timeout [ 403.790944] Bluetooth: hci5: command 0x0406 tx timeout [ 404.750890] Bluetooth: hci2: command 0x2016 tx timeout [ 404.878970] Bluetooth: hci1: command 0x2016 tx timeout [ 405.838963] Bluetooth: hci3: command 0x2016 tx timeout [ 405.839920] Bluetooth: hci5: command 0x0406 tx timeout [ 406.926984] Bluetooth: hci1: command 0x2016 tx timeout [ 407.887038] Bluetooth: hci3: command 0x2016 tx timeout 18:25:42 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00000000"], 0x22) 18:25:42 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES64=r0, @ANYBLOB="01030000fbffffffffff20"], 0x28}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x41}, "8064f848d29d434aab190f5f40a77a5a3af2820fad289a05bc383284df24e1611faf3465e1cd951a1d80a99ec0c5aa4af93b51117362b8b43d093f282a18c7b39b"}, 0x45) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xb3, 0xa}, {0x5, 0x20, 0x4134, 0x7, 0x100}}}}, 0x17) syz_emit_vhci(0x0, 0x0) 18:25:42 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) 18:25:42 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:25:42 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddf"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:25:42 executing program 4: syz_emit_vhci(0x0, 0x22) 18:25:42 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="b3a6ef8b3c9c74b189db9aedb92662877f646ec942d438af026098fc95063c7e7c31dce364f935902e59f808dd7f7f56fe99969ee451551017744731b9e7eb74bff662fbab1c9f8d58832b4b6163a889dffd66f6fbdd769ac8551928a263c9cde2d60967", @ANYRES32], 0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x88}, "8ff7a018e579a2f6eb777f4127e8bc4788fb099fe618e89f7b54bda900565edf791c20143c0cb21538e05287e2cfb78e0a081330d144c6f6468ff904579a09aa81220b26b020b3ce76904084c4a0af9b738857b97d9565adc8c883e55fedd799a9c19507d25830a01d53ed9abd60dc3be1fade9f864e2fb09367877777e992caa17355e6bfc064fb"}}, 0x8b) 18:25:42 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 408.839577] debugfs: '0' already exists in 'hci3' [ 408.842523] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 408.844208] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 408.844256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.844276] Workqueue: hci3 hci_rx_work [ 408.844311] Call Trace: [ 408.844321] [ 408.844333] dump_stack_lvl+0xfa/0x120 [ 408.844370] sysfs_warn_dup+0x80/0xa0 [ 408.844407] sysfs_create_dir_ns+0x23b/0x2a0 [ 408.844442] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 408.844475] ? find_held_lock+0x2b/0x80 [ 408.844523] ? lock_release+0xc8/0x270 [ 408.844557] ? do_raw_spin_unlock+0x53/0x220 [ 408.844602] kobject_add_internal+0x24c/0x9a0 [ 408.844669] kobject_add+0x157/0x240 [ 408.844714] ? __pfx_kobject_add+0x10/0x10 [ 408.844756] ? lock_release+0xc8/0x270 [ 408.844790] ? do_raw_spin_unlock+0x53/0x220 [ 408.844838] ? kobject_put+0xaa/0x260 [ 408.844892] device_add+0x32d/0x1830 [ 408.844931] ? __pfx_device_add+0x10/0x10 [ 408.844967] ? hci_debugfs_create_conn+0x10f/0x240 [ 408.845005] ? mgmt_send_event_skb+0x2f3/0x460 [ 408.845035] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 408.845082] hci_conn_add_sysfs+0x117/0x1c0 [ 408.845122] le_conn_complete_evt+0x1246/0x1e40 [ 408.845183] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 408.845245] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 408.845278] ? __asan_memcpy+0x3d/0x60 [ 408.845329] hci_le_meta_evt+0x34b/0x530 [ 408.845355] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 408.845390] hci_event_packet+0x66c/0x10e0 [ 408.845422] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 408.845450] ? __pfx_hci_event_packet+0x10/0x10 [ 408.845480] ? mark_held_locks+0x49/0x80 [ 408.845514] ? kcov_remote_start+0x2ce/0x5a0 [ 408.845565] hci_rx_work+0x65b/0x8b0 [ 408.845601] process_one_work+0x8e1/0x1960 [ 408.845652] ? __pfx_process_one_work+0x10/0x10 [ 408.845687] ? move_linked_works+0x172/0x270 [ 408.845738] ? assign_work+0x196/0x240 [ 408.845774] worker_thread+0x67e/0xe90 [ 408.845810] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 408.845868] ? __pfx_worker_thread+0x10/0x10 [ 408.845905] kthread+0x3c8/0x740 [ 408.845936] ? __pfx_kthread+0x10/0x10 [ 408.845965] ? ret_from_fork+0x79/0x7a0 [ 408.845993] ? lock_release+0xc8/0x270 [ 408.846026] ? __pfx_kthread+0x10/0x10 [ 408.846059] ret_from_fork+0x67a/0x7a0 [ 408.846087] ? __pfx_ret_from_fork+0x10/0x10 [ 408.846120] ? __switch_to+0x759/0x1030 [ 408.846160] ? __pfx_kthread+0x10/0x10 [ 408.846193] ret_from_fork_asm+0x1a/0x30 [ 408.846251] [ 408.883216] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 408.885452] Bluetooth: hci3: failed to register connection device [ 408.889110] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 408.889189] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 408.893224] debugfs: '0' already exists in 'hci1' [ 408.894367] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 408.895978] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 408.896010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.896026] Workqueue: hci1 hci_rx_work [ 408.896057] Call Trace: [ 408.896065] [ 408.896075] dump_stack_lvl+0xfa/0x120 [ 408.896108] sysfs_warn_dup+0x80/0xa0 [ 408.896141] sysfs_create_dir_ns+0x23b/0x2a0 [ 408.896171] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 408.896200] ? find_held_lock+0x2b/0x80 [ 408.896242] ? lock_release+0xc8/0x270 [ 408.896272] ? do_raw_spin_unlock+0x53/0x220 [ 408.896309] kobject_add_internal+0x24c/0x9a0 [ 408.896354] kobject_add+0x157/0x240 [ 408.896393] ? __pfx_kobject_add+0x10/0x10 [ 408.896431] ? lock_release+0xc8/0x270 [ 408.896460] ? do_raw_spin_unlock+0x53/0x220 [ 408.896496] ? kobject_put+0xaa/0x260 [ 408.896543] device_add+0x32d/0x1830 [ 408.896577] ? __pfx_device_add+0x10/0x10 [ 408.896628] ? hci_debugfs_create_conn+0x10f/0x240 [ 408.896663] ? mgmt_send_event_skb+0x2f3/0x460 [ 408.896688] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 408.896729] hci_conn_add_sysfs+0x117/0x1c0 [ 408.896764] le_conn_complete_evt+0x1246/0x1e40 [ 408.896818] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 408.896879] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 408.896908] ? __asan_memcpy+0x3d/0x60 [ 408.896952] hci_le_meta_evt+0x34b/0x530 [ 408.896974] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 408.897005] hci_event_packet+0x66c/0x10e0 [ 408.897032] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 408.897056] ? __pfx_hci_event_packet+0x10/0x10 [ 408.897082] ? mark_held_locks+0x49/0x80 [ 408.897112] ? kcov_remote_start+0x2ce/0x5a0 [ 408.897156] hci_rx_work+0x65b/0x8b0 [ 408.897186] process_one_work+0x8e1/0x1960 [ 408.897230] ? __pfx_process_one_work+0x10/0x10 [ 408.897260] ? move_linked_works+0x172/0x270 [ 408.897305] ? assign_work+0x196/0x240 [ 408.897337] worker_thread+0x67e/0xe90 [ 408.897367] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 408.897418] ? __pfx_worker_thread+0x10/0x10 [ 408.897450] kthread+0x3c8/0x740 [ 408.897477] ? __pfx_kthread+0x10/0x10 [ 408.897502] ? ret_from_fork+0x79/0x7a0 [ 408.897527] ? lock_release+0xc8/0x270 [ 408.897556] ? __pfx_kthread+0x10/0x10 [ 408.897584] ret_from_fork+0x67a/0x7a0 [ 408.897609] ? __pfx_ret_from_fork+0x10/0x10 [ 408.897637] ? __switch_to+0x759/0x1030 [ 408.897672] ? __pfx_kthread+0x10/0x10 [ 408.897700] ret_from_fork_asm+0x1a/0x30 [ 408.897751] [ 408.938751] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 408.942657] Bluetooth: hci1: failed to register connection device [ 408.945644] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 408.945714] Bluetooth: hci1: ACL packet for unknown connection handle 200 18:25:42 executing program 4: syz_emit_vhci(0x0, 0x22) 18:25:42 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:25:42 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x35}, @l2cap_cid_signaling={{0x31}, [@l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0x1f}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x4, 0x5}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x7, 0x5, 0x1, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0x81, 0x4}, {0x7, 0x20}}, @l2cap_conn_req={{0x2, 0x40, 0x4}, {0x8, 0x2}}]}}, 0x3a) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x8}, {0x9, "d5746b56358ef958"}}}}, 0xf) [ 408.975538] Bluetooth: hci1: command 0x2016 tx timeout [ 408.988000] debugfs: '0' already exists in 'hci2' [ 408.989135] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 408.990674] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 408.990705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.990721] Workqueue: hci2 hci_rx_work [ 408.990752] Call Trace: [ 408.990760] [ 408.990769] dump_stack_lvl+0xfa/0x120 [ 408.990801] sysfs_warn_dup+0x80/0xa0 [ 408.990839] sysfs_create_dir_ns+0x23b/0x2a0 [ 408.990867] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 408.990895] ? find_held_lock+0x2b/0x80 [ 408.990934] ? lock_release+0xc8/0x270 [ 408.990962] ? do_raw_spin_unlock+0x53/0x220 [ 408.990997] kobject_add_internal+0x24c/0x9a0 [ 408.991038] kobject_add+0x157/0x240 [ 408.991074] ? __pfx_kobject_add+0x10/0x10 [ 408.991109] ? lock_release+0xc8/0x270 [ 408.991136] ? do_raw_spin_unlock+0x53/0x220 [ 408.991169] ? kobject_put+0xaa/0x260 [ 408.991213] device_add+0x32d/0x1830 [ 408.991245] ? __pfx_device_add+0x10/0x10 [ 408.991274] ? hci_debugfs_create_conn+0x10f/0x240 [ 408.991306] ? mgmt_send_event_skb+0x2f3/0x460 [ 408.991330] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 408.991368] hci_conn_add_sysfs+0x117/0x1c0 [ 408.991401] le_conn_complete_evt+0x1246/0x1e40 [ 408.991450] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 408.991501] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 408.991528] ? __asan_memcpy+0x3d/0x60 [ 408.991570] hci_le_meta_evt+0x34b/0x530 [ 408.991591] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 408.991621] hci_event_packet+0x66c/0x10e0 [ 408.991646] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 408.991669] ? __pfx_hci_event_packet+0x10/0x10 [ 408.991694] ? mark_held_locks+0x49/0x80 [ 408.991722] ? kcov_remote_start+0x2ce/0x5a0 18:25:42 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) 18:25:42 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x2, 0x8}, {0x3, 0xffc1, 0xfff, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 408.991765] hci_rx_work+0x65b/0x8b0 [ 408.991793] process_one_work+0x8e1/0x1960 [ 408.991836] ? __pfx_process_one_work+0x10/0x10 [ 408.991864] ? move_linked_works+0x172/0x270 [ 408.991906] ? assign_work+0x196/0x240 [ 408.991936] worker_thread+0x67e/0xe90 [ 408.991966] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 408.992015] ? __pfx_worker_thread+0x10/0x10 [ 408.992045] kthread+0x3c8/0x740 [ 408.992071] ? __pfx_kthread+0x10/0x10 [ 408.992095] ? ret_from_fork+0x79/0x7a0 [ 408.992118] ? lock_release+0xc8/0x270 [ 408.992146] ? __pfx_kthread+0x10/0x10 [ 408.992172] ret_from_fork+0x67a/0x7a0 [ 408.992196] ? __pfx_ret_from_fork+0x10/0x10 [ 408.992223] ? __switch_to+0x759/0x1030 [ 408.992256] ? __pfx_kthread+0x10/0x10 [ 408.992283] ret_from_fork_asm+0x1a/0x30 [ 408.992331] [ 409.031578] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. 18:25:42 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:25:42 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:25:42 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddf"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) [ 409.035967] Bluetooth: hci2: failed to register connection device [ 409.039044] debugfs: '0' already exists in 'hci3' [ 409.040344] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 409.041890] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.041922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.041938] Workqueue: hci3 hci_rx_work [ 409.041968] Call Trace: [ 409.041976] [ 409.041986] dump_stack_lvl+0xfa/0x120 [ 409.042018] sysfs_warn_dup+0x80/0xa0 [ 409.042049] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.042078] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.042105] ? find_held_lock+0x2b/0x80 [ 409.042144] ? lock_release+0xc8/0x270 [ 409.042172] ? do_raw_spin_unlock+0x53/0x220 [ 409.042207] kobject_add_internal+0x24c/0x9a0 [ 409.042250] kobject_add+0x157/0x240 [ 409.042286] ? __pfx_kobject_add+0x10/0x10 [ 409.042321] ? lock_release+0xc8/0x270 [ 409.042348] ? do_raw_spin_unlock+0x53/0x220 [ 409.042381] ? kobject_put+0xaa/0x260 [ 409.042426] device_add+0x32d/0x1830 [ 409.042458] ? __pfx_device_add+0x10/0x10 [ 409.042487] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.042519] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.042543] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.042581] hci_conn_add_sysfs+0x117/0x1c0 [ 409.042613] le_conn_complete_evt+0x1246/0x1e40 [ 409.042664] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.042714] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.042741] ? __asan_memcpy+0x3d/0x60 [ 409.042783] hci_le_meta_evt+0x34b/0x530 [ 409.042804] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.042840] hci_event_packet+0x66c/0x10e0 [ 409.042865] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.042888] ? __pfx_hci_event_packet+0x10/0x10 [ 409.042912] ? mark_held_locks+0x49/0x80 [ 409.042941] ? kcov_remote_start+0x2ce/0x5a0 [ 409.042983] hci_rx_work+0x65b/0x8b0 [ 409.043011] process_one_work+0x8e1/0x1960 [ 409.043053] ? __pfx_process_one_work+0x10/0x10 [ 409.043081] ? move_linked_works+0x172/0x270 [ 409.043123] ? assign_work+0x196/0x240 [ 409.043154] worker_thread+0x67e/0xe90 [ 409.043183] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.043230] ? __pfx_worker_thread+0x10/0x10 [ 409.043261] kthread+0x3c8/0x740 [ 409.043286] ? __pfx_kthread+0x10/0x10 [ 409.043310] ? ret_from_fork+0x79/0x7a0 [ 409.043333] ? lock_release+0xc8/0x270 [ 409.043361] ? __pfx_kthread+0x10/0x10 [ 409.043387] ret_from_fork+0x67a/0x7a0 [ 409.043411] ? __pfx_ret_from_fork+0x10/0x10 [ 409.043437] ? __switch_to+0x759/0x1030 [ 409.043470] ? __pfx_kthread+0x10/0x10 [ 409.043496] ret_from_fork_asm+0x1a/0x30 [ 409.043545] [ 409.078911] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.081135] Bluetooth: hci3: failed to register connection device [ 409.083256] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 409.084640] debugfs: '0' already exists in 'hci3' [ 409.085658] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 409.086936] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.086967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.086983] Workqueue: hci3 hci_rx_work [ 409.087013] Call Trace: [ 409.087021] [ 409.087030] dump_stack_lvl+0xfa/0x120 [ 409.087062] sysfs_warn_dup+0x80/0xa0 [ 409.087092] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.087121] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.087148] ? find_held_lock+0x2b/0x80 [ 409.087188] ? lock_release+0xc8/0x270 [ 409.087215] ? do_raw_spin_unlock+0x53/0x220 [ 409.087250] kobject_add_internal+0x24c/0x9a0 [ 409.087292] kobject_add+0x157/0x240 [ 409.087328] ? __pfx_kobject_add+0x10/0x10 [ 409.087363] ? lock_release+0xc8/0x270 [ 409.087391] ? do_raw_spin_unlock+0x53/0x220 [ 409.087424] ? kobject_put+0xaa/0x260 [ 409.087468] device_add+0x32d/0x1830 [ 409.087500] ? __pfx_device_add+0x10/0x10 [ 409.087529] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.087561] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.087586] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.087624] hci_conn_add_sysfs+0x117/0x1c0 [ 409.087657] le_conn_complete_evt+0x1246/0x1e40 [ 409.087706] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.087757] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.087784] ? __asan_memcpy+0x3d/0x60 [ 409.087825] hci_le_meta_evt+0x34b/0x530 [ 409.087854] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.087883] hci_event_packet+0x66c/0x10e0 [ 409.087909] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.087932] ? __pfx_hci_event_packet+0x10/0x10 [ 409.087956] ? mark_held_locks+0x49/0x80 [ 409.087984] ? kcov_remote_start+0x2ce/0x5a0 [ 409.088026] hci_rx_work+0x65b/0x8b0 [ 409.088054] process_one_work+0x8e1/0x1960 [ 409.088096] ? __pfx_process_one_work+0x10/0x10 [ 409.088125] ? move_linked_works+0x172/0x270 [ 409.088166] ? assign_work+0x196/0x240 [ 409.088197] worker_thread+0x67e/0xe90 [ 409.088226] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.088274] ? __pfx_worker_thread+0x10/0x10 [ 409.088305] kthread+0x3c8/0x740 [ 409.088330] ? __pfx_kthread+0x10/0x10 [ 409.088354] ? ret_from_fork+0x79/0x7a0 [ 409.088377] ? lock_release+0xc8/0x270 [ 409.088405] ? __pfx_kthread+0x10/0x10 [ 409.088431] ret_from_fork+0x67a/0x7a0 [ 409.088455] ? __pfx_ret_from_fork+0x10/0x10 [ 409.088482] ? __switch_to+0x759/0x1030 [ 409.088515] ? __pfx_kthread+0x10/0x10 [ 409.088541] ret_from_fork_asm+0x1a/0x30 [ 409.088590] [ 409.125171] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.129009] Bluetooth: hci3: failed to register connection device [ 409.134105] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 409.141088] debugfs: '0' already exists in 'hci5' [ 409.142136] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 409.143423] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.143453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.143468] Workqueue: hci5 hci_rx_work [ 409.143498] Call Trace: [ 409.143506] [ 409.143516] dump_stack_lvl+0xfa/0x120 [ 409.143547] sysfs_warn_dup+0x80/0xa0 [ 409.143578] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.143607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.143634] ? find_held_lock+0x2b/0x80 [ 409.143674] ? lock_release+0xc8/0x270 [ 409.143701] ? do_raw_spin_unlock+0x53/0x220 [ 409.143736] kobject_add_internal+0x24c/0x9a0 [ 409.143779] kobject_add+0x157/0x240 [ 409.143815] ? __pfx_kobject_add+0x10/0x10 [ 409.143857] ? lock_release+0xc8/0x270 [ 409.143884] ? do_raw_spin_unlock+0x53/0x220 [ 409.143917] ? kobject_put+0xaa/0x260 [ 409.143961] device_add+0x32d/0x1830 [ 409.143993] ? __pfx_device_add+0x10/0x10 [ 409.144022] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.144054] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.144079] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.144118] hci_conn_add_sysfs+0x117/0x1c0 [ 409.144150] le_conn_complete_evt+0x1246/0x1e40 [ 409.144200] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.144251] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.144278] ? __asan_memcpy+0x3d/0x60 [ 409.144320] hci_le_meta_evt+0x34b/0x530 [ 409.144341] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.144370] hci_event_packet+0x66c/0x10e0 [ 409.144396] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.144419] ? __pfx_hci_event_packet+0x10/0x10 [ 409.144443] ? mark_held_locks+0x49/0x80 [ 409.144471] ? kcov_remote_start+0x2ce/0x5a0 [ 409.144514] hci_rx_work+0x65b/0x8b0 [ 409.144542] process_one_work+0x8e1/0x1960 [ 409.144584] ? __pfx_process_one_work+0x10/0x10 [ 409.144631] ? move_linked_works+0x172/0x270 [ 409.144673] ? assign_work+0x196/0x240 [ 409.144703] worker_thread+0x67e/0xe90 [ 409.144733] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.144780] ? __pfx_worker_thread+0x10/0x10 [ 409.144811] kthread+0x3c8/0x740 [ 409.144837] ? __pfx_kthread+0x10/0x10 [ 409.144861] ? ret_from_fork+0x79/0x7a0 [ 409.144884] ? lock_release+0xc8/0x270 [ 409.144911] ? __pfx_kthread+0x10/0x10 [ 409.144938] ret_from_fork+0x67a/0x7a0 [ 409.144961] ? __pfx_ret_from_fork+0x10/0x10 [ 409.144988] ? __switch_to+0x759/0x1030 [ 409.145022] ? __pfx_kthread+0x10/0x10 [ 409.145049] ret_from_fork_asm+0x1a/0x30 [ 409.145097] [ 409.179676] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.181930] Bluetooth: hci5: failed to register connection device [ 409.190248] debugfs: '0' already exists in 'hci2' [ 409.191301] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 409.192589] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.192631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.192647] Workqueue: hci2 hci_rx_work [ 409.192677] Call Trace: [ 409.192685] [ 409.192695] dump_stack_lvl+0xfa/0x120 [ 409.192726] sysfs_warn_dup+0x80/0xa0 [ 409.192757] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.192786] ? __pfx_sysfs_create_dir_ns+0x10/0x10 18:25:42 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00000000"], 0x22) [ 409.192813] ? find_held_lock+0x2b/0x80 [ 409.192859] ? lock_release+0xc8/0x270 [ 409.192887] ? do_raw_spin_unlock+0x53/0x220 [ 409.192922] kobject_add_internal+0x24c/0x9a0 [ 409.192964] kobject_add+0x157/0x240 [ 409.193000] ? __pfx_kobject_add+0x10/0x10 [ 409.193035] ? lock_release+0xc8/0x270 [ 409.193062] ? do_raw_spin_unlock+0x53/0x220 [ 409.193095] ? kobject_put+0xaa/0x260 [ 409.193139] device_add+0x32d/0x1830 [ 409.193172] ? __pfx_device_add+0x10/0x10 [ 409.193201] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.193232] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.193257] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.193295] hci_conn_add_sysfs+0x117/0x1c0 [ 409.193327] le_conn_complete_evt+0x1246/0x1e40 [ 409.193377] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.193428] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.193455] ? __asan_memcpy+0x3d/0x60 [ 409.193497] hci_le_meta_evt+0x34b/0x530 [ 409.193518] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.193547] hci_event_packet+0x66c/0x10e0 [ 409.193573] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.193596] ? __pfx_hci_event_packet+0x10/0x10 [ 409.193620] ? mark_held_locks+0x49/0x80 [ 409.193648] ? kcov_remote_start+0x2ce/0x5a0 [ 409.193689] hci_rx_work+0x65b/0x8b0 [ 409.193718] process_one_work+0x8e1/0x1960 [ 409.193760] ? __pfx_process_one_work+0x10/0x10 [ 409.193788] ? move_linked_works+0x172/0x270 [ 409.193830] ? assign_work+0x196/0x240 [ 409.193861] worker_thread+0x67e/0xe90 [ 409.193890] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.193938] ? __pfx_worker_thread+0x10/0x10 [ 409.193969] kthread+0x3c8/0x740 [ 409.193995] ? __pfx_kthread+0x10/0x10 [ 409.194019] ? ret_from_fork+0x79/0x7a0 [ 409.194042] ? lock_release+0xc8/0x270 [ 409.194069] ? __pfx_kthread+0x10/0x10 [ 409.194096] ret_from_fork+0x67a/0x7a0 [ 409.194120] ? __pfx_ret_from_fork+0x10/0x10 [ 409.194147] ? __switch_to+0x759/0x1030 [ 409.194180] ? __pfx_kthread+0x10/0x10 [ 409.194207] ret_from_fork_asm+0x1a/0x30 [ 409.194255] [ 409.231570] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. 18:25:42 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) 18:25:42 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:25:42 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="cb2584b18fe9bd9c9af2c5"], 0x3) [ 409.236949] Bluetooth: hci2: failed to register connection device [ 409.267799] debugfs: '0' already exists in 'hci3' [ 409.268978] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 409.270395] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.270426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.270442] Workqueue: hci3 hci_rx_work [ 409.270472] Call Trace: [ 409.270480] [ 409.270489] dump_stack_lvl+0xfa/0x120 [ 409.270521] sysfs_warn_dup+0x80/0xa0 [ 409.270551] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.270580] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.270607] ? find_held_lock+0x2b/0x80 [ 409.270647] ? lock_release+0xc8/0x270 [ 409.270674] ? do_raw_spin_unlock+0x53/0x220 [ 409.270709] kobject_add_internal+0x24c/0x9a0 [ 409.270752] kobject_add+0x157/0x240 [ 409.270788] ? __pfx_kobject_add+0x10/0x10 [ 409.270823] ? lock_release+0xc8/0x270 [ 409.270858] ? do_raw_spin_unlock+0x53/0x220 [ 409.270891] ? kobject_put+0xaa/0x260 [ 409.270935] device_add+0x32d/0x1830 [ 409.270967] ? __pfx_device_add+0x10/0x10 [ 409.270996] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.271028] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.271053] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.271091] hci_conn_add_sysfs+0x117/0x1c0 [ 409.271124] le_conn_complete_evt+0x1246/0x1e40 [ 409.271174] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.271225] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.271251] ? __asan_memcpy+0x3d/0x60 [ 409.271294] hci_le_meta_evt+0x34b/0x530 [ 409.271315] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.271344] hci_event_packet+0x66c/0x10e0 [ 409.271369] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.271392] ? __pfx_hci_event_packet+0x10/0x10 [ 409.271417] ? mark_held_locks+0x49/0x80 [ 409.271445] ? kcov_remote_start+0x2ce/0x5a0 [ 409.271487] hci_rx_work+0x65b/0x8b0 [ 409.271515] process_one_work+0x8e1/0x1960 [ 409.271557] ? __pfx_process_one_work+0x10/0x10 [ 409.271586] ? move_linked_works+0x172/0x270 [ 409.271628] ? assign_work+0x196/0x240 [ 409.271658] worker_thread+0x67e/0xe90 [ 409.271687] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.271735] ? __pfx_worker_thread+0x10/0x10 [ 409.271766] kthread+0x3c8/0x740 [ 409.271792] ? __pfx_kthread+0x10/0x10 [ 409.271816] ? ret_from_fork+0x79/0x7a0 [ 409.271839] ? lock_release+0xc8/0x270 [ 409.271866] ? __pfx_kthread+0x10/0x10 [ 409.271893] ret_from_fork+0x67a/0x7a0 [ 409.271917] ? __pfx_ret_from_fork+0x10/0x10 [ 409.271944] ? __switch_to+0x759/0x1030 [ 409.271977] ? __pfx_kthread+0x10/0x10 [ 409.272004] ret_from_fork_asm+0x1a/0x30 [ 409.272052] [ 409.278273] debugfs: '0' already exists in 'hci1' [ 409.278775] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.279403] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 409.279785] Bluetooth: hci3: failed to register connection device [ 409.280467] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.280493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.280505] Workqueue: hci1 hci_rx_work [ 409.280531] Call Trace: [ 409.280538] [ 409.280545] dump_stack_lvl+0xfa/0x120 [ 409.280570] sysfs_warn_dup+0x80/0xa0 [ 409.280596] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.280631] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.280652] ? find_held_lock+0x2b/0x80 [ 409.280683] ? lock_release+0xc8/0x270 [ 409.280705] ? do_raw_spin_unlock+0x53/0x220 [ 409.280731] kobject_add_internal+0x24c/0x9a0 [ 409.280762] kobject_add+0x157/0x240 [ 409.280787] ? __pfx_kobject_add+0x10/0x10 [ 409.280811] ? lock_release+0xc8/0x270 [ 409.280840] ? do_raw_spin_unlock+0x53/0x220 [ 409.280864] ? kobject_put+0xaa/0x260 [ 409.280898] device_add+0x32d/0x1830 [ 409.280924] ? __pfx_device_add+0x10/0x10 [ 409.280947] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.280973] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.280992] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.281022] hci_conn_add_sysfs+0x117/0x1c0 [ 409.281047] le_conn_complete_evt+0x1246/0x1e40 [ 409.281087] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.281126] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.281148] ? __asan_memcpy+0x3d/0x60 [ 409.281182] hci_le_meta_evt+0x34b/0x530 [ 409.281198] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.281222] hci_event_packet+0x66c/0x10e0 [ 409.281241] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.281259] ? __pfx_hci_event_packet+0x10/0x10 [ 409.281278] ? mark_held_locks+0x49/0x80 [ 409.281299] ? kcov_remote_start+0x2ce/0x5a0 [ 409.281333] hci_rx_work+0x65b/0x8b0 [ 409.281356] process_one_work+0x8e1/0x1960 [ 409.281390] ? __pfx_process_one_work+0x10/0x10 [ 409.281412] ? move_linked_works+0x172/0x270 [ 409.281446] ? assign_work+0x196/0x240 [ 409.281468] worker_thread+0x67e/0xe90 [ 409.281490] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.281528] ? __pfx_worker_thread+0x10/0x10 [ 409.281552] kthread+0x3c8/0x740 [ 409.281572] ? __pfx_kthread+0x10/0x10 [ 409.281591] ? ret_from_fork+0x79/0x7a0 [ 409.281610] ? lock_release+0xc8/0x270 [ 409.281630] ? __pfx_kthread+0x10/0x10 [ 409.281651] ret_from_fork+0x67a/0x7a0 [ 409.281669] ? __pfx_ret_from_fork+0x10/0x10 [ 409.281689] ? __switch_to+0x759/0x1030 [ 409.281716] ? __pfx_kthread+0x10/0x10 [ 409.281736] ret_from_fork_asm+0x1a/0x30 [ 409.281774] [ 409.282087] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.283044] debugfs: '0' already exists in 'hci3' [ 409.283384] Bluetooth: hci1: failed to register connection device [ 409.284019] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 409.284977] debugfs: '0' already exists in 'hci4' [ 409.285623] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.285655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.285670] Workqueue: hci3 hci_rx_work [ 409.285698] Call Trace: [ 409.285705] [ 409.285715] dump_stack_lvl+0xfa/0x120 [ 409.285746] sysfs_warn_dup+0x80/0xa0 [ 409.285775] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.285804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.285839] ? find_held_lock+0x2b/0x80 [ 409.285877] ? lock_release+0xc8/0x270 [ 409.285905] ? do_raw_spin_unlock+0x53/0x220 [ 409.285940] kobject_add_internal+0x24c/0x9a0 [ 409.285982] kobject_add+0x157/0x240 [ 409.286019] ? __pfx_kobject_add+0x10/0x10 [ 409.286054] ? lock_release+0xc8/0x270 [ 409.286081] ? do_raw_spin_unlock+0x53/0x220 [ 409.286114] ? kobject_put+0xaa/0x260 [ 409.286159] device_add+0x32d/0x1830 [ 409.286190] ? __pfx_device_add+0x10/0x10 [ 409.286219] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.286251] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.286276] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.286314] hci_conn_add_sysfs+0x117/0x1c0 [ 409.286347] le_conn_complete_evt+0x1246/0x1e40 [ 409.286397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.286448] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.286475] ? __asan_memcpy+0x3d/0x60 [ 409.286516] hci_le_meta_evt+0x34b/0x530 [ 409.286538] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.286567] hci_event_packet+0x66c/0x10e0 [ 409.286592] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.286615] ? __pfx_hci_event_packet+0x10/0x10 [ 409.286640] ? mark_held_locks+0x49/0x80 [ 409.286668] ? kcov_remote_start+0x2ce/0x5a0 [ 409.286710] hci_rx_work+0x65b/0x8b0 [ 409.286739] process_one_work+0x8e1/0x1960 [ 409.286780] ? __pfx_process_one_work+0x10/0x10 [ 409.286809] ? move_linked_works+0x172/0x270 [ 409.286850] ? assign_work+0x196/0x240 [ 409.286881] worker_thread+0x67e/0xe90 [ 409.286910] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.286959] ? __pfx_worker_thread+0x10/0x10 [ 409.286990] kthread+0x3c8/0x740 [ 409.287015] ? __pfx_kthread+0x10/0x10 [ 409.287039] ? ret_from_fork+0x79/0x7a0 [ 409.287062] ? lock_release+0xc8/0x270 [ 409.287090] ? __pfx_kthread+0x10/0x10 [ 409.287117] ret_from_fork+0x67a/0x7a0 [ 409.287140] ? __pfx_ret_from_fork+0x10/0x10 [ 409.287167] ? __switch_to+0x759/0x1030 [ 409.287200] ? __pfx_kthread+0x10/0x10 [ 409.287227] ret_from_fork_asm+0x1a/0x30 [ 409.287275] [ 409.287371] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.288029] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 409.288684] Bluetooth: hci3: failed to register connection device [ 409.324887] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 409.325290] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.325324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.325339] Workqueue: hci4 hci_rx_work [ 409.325365] Call Trace: [ 409.325372] [ 409.325381] dump_stack_lvl+0xfa/0x120 [ 409.325410] sysfs_warn_dup+0x80/0xa0 [ 409.325437] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.325465] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.325491] ? find_held_lock+0x2b/0x80 [ 409.325527] ? lock_release+0xc8/0x270 [ 409.325553] ? do_raw_spin_unlock+0x53/0x220 [ 409.325587] kobject_add_internal+0x24c/0x9a0 [ 409.325626] kobject_add+0x157/0x240 [ 409.325660] ? __pfx_kobject_add+0x10/0x10 [ 409.325693] ? lock_release+0xc8/0x270 [ 409.325720] ? do_raw_spin_unlock+0x53/0x220 [ 409.325751] ? kobject_put+0xaa/0x260 [ 409.325794] device_add+0x32d/0x1830 [ 409.325823] ? __pfx_device_add+0x10/0x10 [ 409.325860] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.325889] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.325912] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.325949] hci_conn_add_sysfs+0x117/0x1c0 [ 409.325980] le_conn_complete_evt+0x1246/0x1e40 [ 409.326027] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.326075] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.326102] ? __asan_memcpy+0x3d/0x60 [ 409.326140] hci_le_meta_evt+0x34b/0x530 [ 409.326161] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.326189] hci_event_packet+0x66c/0x10e0 [ 409.326214] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.326236] ? __pfx_hci_event_packet+0x10/0x10 [ 409.326260] ? mark_held_locks+0x49/0x80 [ 409.326287] ? kcov_remote_start+0x2ce/0x5a0 [ 409.326326] hci_rx_work+0x65b/0x8b0 [ 409.326354] process_one_work+0x8e1/0x1960 [ 409.326394] ? __pfx_process_one_work+0x10/0x10 [ 409.326421] ? move_linked_works+0x172/0x270 [ 409.326461] ? assign_work+0x196/0x240 [ 409.326490] worker_thread+0x67e/0xe90 [ 409.326519] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.326564] ? __pfx_worker_thread+0x10/0x10 [ 409.326593] kthread+0x3c8/0x740 [ 409.326617] ? __pfx_kthread+0x10/0x10 [ 409.326640] ? ret_from_fork+0x79/0x7a0 [ 409.326662] ? lock_release+0xc8/0x270 [ 409.326689] ? __pfx_kthread+0x10/0x10 [ 409.326714] ret_from_fork+0x67a/0x7a0 [ 409.326737] ? __pfx_ret_from_fork+0x10/0x10 [ 409.326763] ? __switch_to+0x759/0x1030 [ 409.326794] ? __pfx_kthread+0x10/0x10 [ 409.326820] ret_from_fork_asm+0x1a/0x30 [ 409.326866] [ 409.326948] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.327523] debugfs: '0' already exists in 'hci1' [ 409.327890] Bluetooth: hci4: failed to register connection device [ 409.452404] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 409.453787] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.453818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.453840] Workqueue: hci1 hci_rx_work [ 409.453870] Call Trace: [ 409.453878] [ 409.453889] dump_stack_lvl+0xfa/0x120 [ 409.453921] sysfs_warn_dup+0x80/0xa0 [ 409.453952] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.453981] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.454008] ? find_held_lock+0x2b/0x80 [ 409.454047] ? lock_release+0xc8/0x270 [ 409.454075] ? do_raw_spin_unlock+0x53/0x220 [ 409.454110] kobject_add_internal+0x24c/0x9a0 [ 409.454152] kobject_add+0x157/0x240 [ 409.454189] ? __pfx_kobject_add+0x10/0x10 [ 409.454223] ? lock_release+0xc8/0x270 [ 409.454251] ? do_raw_spin_unlock+0x53/0x220 [ 409.454284] ? kobject_put+0xaa/0x260 [ 409.454328] device_add+0x32d/0x1830 [ 409.454360] ? __pfx_device_add+0x10/0x10 [ 409.454390] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.454422] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.454447] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.454485] hci_conn_add_sysfs+0x117/0x1c0 [ 409.454518] le_conn_complete_evt+0x1246/0x1e40 [ 409.454568] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.454619] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.454646] ? __asan_memcpy+0x3d/0x60 [ 409.454689] hci_le_meta_evt+0x34b/0x530 [ 409.454710] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.454739] hci_event_packet+0x66c/0x10e0 [ 409.454765] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.454788] ? __pfx_hci_event_packet+0x10/0x10 [ 409.454812] ? mark_held_locks+0x49/0x80 [ 409.454841] ? kcov_remote_start+0x2ce/0x5a0 [ 409.454884] hci_rx_work+0x65b/0x8b0 [ 409.454913] process_one_work+0x8e1/0x1960 [ 409.454955] ? __pfx_process_one_work+0x10/0x10 [ 409.454983] ? move_linked_works+0x172/0x270 [ 409.455026] ? assign_work+0x196/0x240 [ 409.455056] worker_thread+0x67e/0xe90 [ 409.455086] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.455134] ? __pfx_worker_thread+0x10/0x10 [ 409.455165] kthread+0x3c8/0x740 [ 409.455190] ? __pfx_kthread+0x10/0x10 [ 409.455214] ? ret_from_fork+0x79/0x7a0 [ 409.455238] ? lock_release+0xc8/0x270 [ 409.455265] ? __pfx_kthread+0x10/0x10 [ 409.455292] ret_from_fork+0x67a/0x7a0 [ 409.455315] ? __pfx_ret_from_fork+0x10/0x10 [ 409.455342] ? __switch_to+0x759/0x1030 [ 409.455376] ? __pfx_kthread+0x10/0x10 [ 409.455402] ret_from_fork_asm+0x1a/0x30 [ 409.455451] [ 409.490497] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.492493] Bluetooth: hci1: failed to register connection device [ 409.493788] Bluetooth: hci1: ACL packet for unknown connection handle 200 18:25:42 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) 18:25:42 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xda}, "2880e60a2bef831b00fd979d7bf32eb3895aa84de83a96543f26876110662f18bb7a5aeb69b9b56af6129ffc94486e777a6c7abe2973cdac815f23bfae94e78dba4ca9775a5bef94f14ada7ace26ebcbad8a7bf0fddc73f1d29177d77fd3ea71c216f32d504424921134b56091375ea1e61ef7a85de757554b5dde241b919095dee9a707588e68d7980fb48c182c3c025f74872a6e7fe8207fcdcfbf091a7b9faec2e6c939d2fda907a893b8afcb7440b97434a464c1aea3a32eea183b269c35237925ea7cd297cc3dab06b00886315641190778c306ef5b70e3"}, 0xde) 18:25:42 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe3"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) [ 409.604659] debugfs: '0' already exists in 'hci5' [ 409.605765] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 409.607113] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 409.607143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.607159] Workqueue: hci5 hci_rx_work [ 409.607190] Call Trace: [ 409.607198] [ 409.607207] dump_stack_lvl+0xfa/0x120 [ 409.607240] sysfs_warn_dup+0x80/0xa0 [ 409.607270] sysfs_create_dir_ns+0x23b/0x2a0 [ 409.607299] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.607327] ? find_held_lock+0x2b/0x80 [ 409.607367] ? lock_release+0xc8/0x270 [ 409.607395] ? do_raw_spin_unlock+0x53/0x220 [ 409.607430] kobject_add_internal+0x24c/0x9a0 [ 409.607473] kobject_add+0x157/0x240 [ 409.607509] ? __pfx_kobject_add+0x10/0x10 [ 409.607544] ? lock_release+0xc8/0x270 [ 409.607572] ? do_raw_spin_unlock+0x53/0x220 [ 409.607605] ? kobject_put+0xaa/0x260 [ 409.607649] device_add+0x32d/0x1830 [ 409.607681] ? __pfx_device_add+0x10/0x10 [ 409.607711] ? hci_debugfs_create_conn+0x10f/0x240 [ 409.607742] ? mgmt_send_event_skb+0x2f3/0x460 [ 409.607766] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 409.607805] hci_conn_add_sysfs+0x117/0x1c0 [ 409.607845] le_conn_complete_evt+0x1246/0x1e40 [ 409.607896] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 409.607946] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 409.607974] ? __asan_memcpy+0x3d/0x60 [ 409.608016] hci_le_meta_evt+0x34b/0x530 [ 409.608038] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 409.608067] hci_event_packet+0x66c/0x10e0 [ 409.608092] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 409.608115] ? __pfx_hci_event_packet+0x10/0x10 [ 409.608140] ? mark_held_locks+0x49/0x80 [ 409.608168] ? kcov_remote_start+0x2ce/0x5a0 [ 409.608211] hci_rx_work+0x65b/0x8b0 [ 409.608239] process_one_work+0x8e1/0x1960 [ 409.608282] ? __pfx_process_one_work+0x10/0x10 [ 409.608311] ? move_linked_works+0x172/0x270 [ 409.608353] ? assign_work+0x196/0x240 [ 409.608383] worker_thread+0x67e/0xe90 [ 409.608413] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 409.608462] ? __pfx_worker_thread+0x10/0x10 [ 409.608492] kthread+0x3c8/0x740 [ 409.608518] ? __pfx_kthread+0x10/0x10 [ 409.608542] ? ret_from_fork+0x79/0x7a0 [ 409.608565] ? lock_release+0xc8/0x270 [ 409.608593] ? __pfx_kthread+0x10/0x10 [ 409.608634] ret_from_fork+0x67a/0x7a0 [ 409.608658] ? __pfx_ret_from_fork+0x10/0x10 [ 409.608685] ? __switch_to+0x759/0x1030 [ 409.608718] ? __pfx_kthread+0x10/0x10 [ 409.608745] ret_from_fork_asm+0x1a/0x30 [ 409.608794] [ 409.623577] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 409.626033] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.634098] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 409.634594] Bluetooth: hci5: failed to register connection device [ 410.831187] Bluetooth: hci5: command 0x0406 tx timeout [ 410.831248] Bluetooth: hci2: command 0x2016 tx timeout [ 410.832221] Bluetooth: hci4: command 0x0406 tx timeout [ 411.023146] Bluetooth: hci1: command 0x2016 tx timeout [ 412.879307] Bluetooth: hci3: command 0x2016 tx timeout [ 412.879355] Bluetooth: hci2: command 0x2016 tx timeout [ 412.880409] Bluetooth: hci4: command 0x0406 tx timeout [ 412.881259] Bluetooth: hci5: command 0x0406 tx timeout [ 413.071004] Bluetooth: hci1: command 0x2016 tx timeout [ 414.927055] Bluetooth: hci5: command 0x0406 tx timeout [ 414.928454] Bluetooth: hci3: command 0x2016 tx timeout [ 414.929895] Bluetooth: hci4: command 0x0406 tx timeout [ 414.929952] Bluetooth: hci2: command 0x2016 tx timeout [ 415.119011] Bluetooth: hci1: command 0x2016 tx timeout [ 416.975042] Bluetooth: hci2: command 0x2016 tx timeout [ 416.975956] Bluetooth: hci5: command 0x0406 tx timeout [ 416.976771] Bluetooth: hci3: command 0x2016 tx timeout [ 416.977624] Bluetooth: hci4: command 0x0406 tx timeout [ 417.166899] Bluetooth: hci1: command 0x2016 tx timeout 18:25:52 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a79ab30f302bd65c52a2c1e67766aeabc2053cf3b9a7cd121c003905666ec61be2cbcbf2b9021bf2ea8631a755eb7f2c0ad37c416edf44884185b7e1da203990332c2ea2b0306111846e509a199d6af5627f7b9d4db41f7f906470008c3128b92c33940c741bf98a70b099361493f2f0235a0d6b096bd2f6b8589fe7c48a3430ea42b1284287dc2b35dcf7d89613f920a95"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x0, 0xad, "e2ff050000004000"}}}, 0x10) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xfd, 0xc9, 0x80, 0x2, "67f337ed78d56f9e"}}}, 0x10) 18:25:52 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) 18:25:52 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:25:52 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0xa}, {0x0, 0x7ff, 0x8, 0x96e7, [0x9]}}}}, 0x17) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x81, 0x4}, {0x600, 0xfff}}}}, 0x11) 18:25:52 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:25:52 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe3"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:25:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40024) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x40d37dbe24eefad9, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xb4, 0x2, 0x2, 0x5, 0x0, 0x0, {0xe, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}]}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x48814) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x40d37dbe24eefad9, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r6, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2c27f7db, 0x14}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040015}, 0x200408d0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x4000811) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="79b7e93c88fdc29feb8ec6b600245fbf2625248d682dffda52710d9eb14dc6d68d919e2709969629b174c4b842"], 0xfffffffffffffe4e) 18:25:52 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) [ 418.887024] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 418.889971] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 418.891951] debugfs: '0' already exists in 'hci3' [ 418.893009] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 418.894214] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 418.894244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.894259] Workqueue: hci3 hci_rx_work [ 418.894289] Call Trace: [ 418.894297] [ 418.894306] dump_stack_lvl+0xfa/0x120 [ 418.894337] sysfs_warn_dup+0x80/0xa0 [ 418.894366] sysfs_create_dir_ns+0x23b/0x2a0 [ 418.894393] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 418.894419] ? find_held_lock+0x2b/0x80 [ 418.894456] ? lock_release+0xc8/0x270 [ 418.894482] ? do_raw_spin_unlock+0x53/0x220 [ 418.894515] kobject_add_internal+0x24c/0x9a0 [ 418.894555] kobject_add+0x157/0x240 [ 418.894588] ? __pfx_kobject_add+0x10/0x10 [ 418.894621] ? lock_release+0xc8/0x270 [ 418.894646] ? do_raw_spin_unlock+0x53/0x220 [ 418.894677] ? kobject_put+0xaa/0x260 [ 418.894719] device_add+0x32d/0x1830 [ 418.894749] ? __pfx_device_add+0x10/0x10 [ 418.894776] ? hci_debugfs_create_conn+0x10f/0x240 [ 418.894806] ? mgmt_send_event_skb+0x2f3/0x460 [ 418.894836] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 418.894872] hci_conn_add_sysfs+0x117/0x1c0 [ 418.894903] le_conn_complete_evt+0x1246/0x1e40 [ 418.894950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 418.894998] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 418.895023] ? __asan_memcpy+0x3d/0x60 [ 418.895062] hci_le_meta_evt+0x34b/0x530 [ 418.895082] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 418.895109] hci_event_packet+0x66c/0x10e0 [ 418.895133] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 418.895154] ? __pfx_hci_event_packet+0x10/0x10 [ 418.895177] ? mark_held_locks+0x49/0x80 [ 418.895203] ? kcov_remote_start+0x2ce/0x5a0 [ 418.895243] hci_rx_work+0x65b/0x8b0 [ 418.895270] process_one_work+0x8e1/0x1960 [ 418.895310] ? __pfx_process_one_work+0x10/0x10 [ 418.895336] ? move_linked_works+0x172/0x270 [ 418.895376] ? assign_work+0x196/0x240 [ 418.895404] worker_thread+0x67e/0xe90 [ 418.895432] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 418.895477] ? __pfx_worker_thread+0x10/0x10 [ 418.895505] kthread+0x3c8/0x740 [ 418.895530] ? __pfx_kthread+0x10/0x10 [ 418.895552] ? ret_from_fork+0x79/0x7a0 [ 418.895575] ? lock_release+0xc8/0x270 [ 418.895601] ? __pfx_kthread+0x10/0x10 [ 418.895626] ret_from_fork+0x67a/0x7a0 [ 418.895648] ? __pfx_ret_from_fork+0x10/0x10 [ 418.895673] ? __switch_to+0x759/0x1030 [ 418.895704] ? __pfx_kthread+0x10/0x10 [ 418.895729] ret_from_fork_asm+0x1a/0x30 [ 418.895775] [ 418.927340] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 418.929288] Bluetooth: hci3: failed to register connection device [ 418.945815] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 418.949563] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 418.965537] debugfs: '0' already exists in 'hci2' [ 418.967167] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 418.968376] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 418.968404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.968419] Workqueue: hci2 hci_rx_work [ 418.968441] Call Trace: [ 418.968449] [ 418.968457] dump_stack_lvl+0xfa/0x120 [ 418.968484] sysfs_warn_dup+0x80/0xa0 [ 418.968512] sysfs_create_dir_ns+0x23b/0x2a0 [ 418.968539] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 418.968565] ? find_held_lock+0x2b/0x80 [ 418.968612] ? lock_release+0xc8/0x270 [ 418.968638] ? do_raw_spin_unlock+0x53/0x220 [ 418.968670] kobject_add_internal+0x24c/0x9a0 [ 418.968709] kobject_add+0x157/0x240 [ 418.968743] ? __pfx_kobject_add+0x10/0x10 [ 418.968776] ? lock_release+0xc8/0x270 [ 418.968801] ? do_raw_spin_unlock+0x53/0x220 [ 418.968838] ? kobject_put+0xaa/0x260 [ 418.968879] device_add+0x32d/0x1830 [ 418.968908] ? __pfx_device_add+0x10/0x10 [ 418.968935] ? hci_debugfs_create_conn+0x10f/0x240 [ 418.968964] ? mgmt_send_event_skb+0x2f3/0x460 [ 418.968986] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 418.969021] hci_conn_add_sysfs+0x117/0x1c0 [ 418.969051] le_conn_complete_evt+0x1246/0x1e40 [ 418.969098] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 418.969145] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 418.969170] ? __asan_memcpy+0x3d/0x60 [ 418.969207] hci_le_meta_evt+0x34b/0x530 [ 418.969227] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 418.969254] hci_event_packet+0x66c/0x10e0 [ 418.969278] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 418.969300] ? __pfx_hci_event_packet+0x10/0x10 [ 418.969323] ? mark_held_locks+0x49/0x80 [ 418.969349] ? kcov_remote_start+0x2ce/0x5a0 [ 418.969387] hci_rx_work+0x65b/0x8b0 [ 418.969414] process_one_work+0x8e1/0x1960 [ 418.969451] ? __pfx_process_one_work+0x10/0x10 [ 418.969478] ? move_linked_works+0x172/0x270 [ 418.969517] ? assign_work+0x196/0x240 [ 418.969546] worker_thread+0x67e/0xe90 [ 418.969573] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 418.969617] ? __pfx_worker_thread+0x10/0x10 [ 418.969645] kthread+0x3c8/0x740 [ 418.969669] ? __pfx_kthread+0x10/0x10 [ 418.969691] ? ret_from_fork+0x79/0x7a0 [ 418.969713] ? lock_release+0xc8/0x270 [ 418.969738] ? __pfx_kthread+0x10/0x10 [ 418.969763] ret_from_fork+0x67a/0x7a0 [ 418.969785] ? __pfx_ret_from_fork+0x10/0x10 [ 418.969810] ? __switch_to+0x759/0x1030 [ 418.969840] ? __pfx_kthread+0x10/0x10 [ 418.969865] ret_from_fork_asm+0x1a/0x30 [ 418.969910] [ 419.001626] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.003576] Bluetooth: hci2: failed to register connection device 18:25:52 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe3"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) [ 419.023119] Bluetooth: hci3: command 0x2016 tx timeout [ 419.023154] Bluetooth: hci2: command 0x2016 tx timeout [ 419.023946] Bluetooth: hci5: command 0x0406 tx timeout [ 419.157421] debugfs: '0' already exists in 'hci5' [ 419.158582] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 419.160181] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 419.160214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 419.160231] Workqueue: hci5 hci_rx_work [ 419.160262] Call Trace: [ 419.160271] [ 419.160282] dump_stack_lvl+0xfa/0x120 [ 419.160314] sysfs_warn_dup+0x80/0xa0 [ 419.160346] sysfs_create_dir_ns+0x23b/0x2a0 [ 419.160378] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 419.160408] ? find_held_lock+0x2b/0x80 [ 419.160449] ? lock_release+0xc8/0x270 [ 419.160478] ? do_raw_spin_unlock+0x53/0x220 [ 419.160516] kobject_add_internal+0x24c/0x9a0 [ 419.160562] kobject_add+0x157/0x240 [ 419.160613] ? __pfx_kobject_add+0x10/0x10 [ 419.160651] ? lock_release+0xc8/0x270 [ 419.160682] ? do_raw_spin_unlock+0x53/0x220 [ 419.160724] ? kobject_put+0xaa/0x260 [ 419.160783] device_add+0x32d/0x1830 [ 419.160823] ? __pfx_device_add+0x10/0x10 [ 419.160862] ? hci_debugfs_create_conn+0x10f/0x240 [ 419.160899] ? mgmt_send_event_skb+0x2f3/0x460 [ 419.160927] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 419.160968] hci_conn_add_sysfs+0x117/0x1c0 [ 419.161006] le_conn_complete_evt+0x1246/0x1e40 [ 419.161063] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 419.161120] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 419.161150] ? __asan_memcpy+0x3d/0x60 [ 419.161200] hci_le_meta_evt+0x34b/0x530 [ 419.161229] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 419.161260] hci_event_packet+0x66c/0x10e0 [ 419.161289] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 419.161317] ? __pfx_hci_event_packet+0x10/0x10 [ 419.161344] ? mark_held_locks+0x49/0x80 [ 419.161376] ? kcov_remote_start+0x2ce/0x5a0 [ 419.161432] hci_rx_work+0x65b/0x8b0 [ 419.161469] process_one_work+0x8e1/0x1960 [ 419.161520] ? __pfx_process_one_work+0x10/0x10 [ 419.161552] ? move_linked_works+0x172/0x270 [ 419.161601] ? assign_work+0x196/0x240 [ 419.161638] worker_thread+0x67e/0xe90 [ 419.161675] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 419.161730] ? __pfx_worker_thread+0x10/0x10 [ 419.161768] kthread+0x3c8/0x740 [ 419.161798] ? __pfx_kthread+0x10/0x10 [ 419.161829] ? ret_from_fork+0x79/0x7a0 [ 419.161859] ? __pfx_kthread+0x10/0x10 [ 419.161888] ret_from_fork+0x67a/0x7a0 [ 419.161915] ? __pfx_ret_from_fork+0x10/0x10 [ 419.161950] ? __switch_to+0x759/0x1030 [ 419.161989] ? __pfx_kthread+0x10/0x10 [ 419.162018] ret_from_fork_asm+0x1a/0x30 [ 419.162073] [ 419.196683] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.199024] Bluetooth: hci5: failed to register connection device [ 419.215572] Bluetooth: hci1: command 0x2016 tx timeout [ 421.070940] Bluetooth: hci5: command 0x0406 tx timeout [ 421.071032] Bluetooth: hci2: command 0x2016 tx timeout [ 421.071450] Bluetooth: hci3: command 0x2016 tx timeout [ 421.262895] Bluetooth: hci1: command 0x2016 tx timeout [ 423.119035] Bluetooth: hci3: command 0x2016 tx timeout [ 423.119124] Bluetooth: hci2: command 0x2016 tx timeout [ 423.120217] Bluetooth: hci5: command 0x0406 tx timeout [ 423.311184] Bluetooth: hci1: command 0x2016 tx timeout [ 425.167035] Bluetooth: hci2: command 0x2016 tx timeout [ 425.167951] Bluetooth: hci5: command 0x0406 tx timeout [ 425.168009] Bluetooth: hci3: command 0x2016 tx timeout [ 425.358922] Bluetooth: hci1: command 0x2016 tx timeout [ 427.215050] Bluetooth: hci5: command 0x0406 tx timeout [ 427.215115] Bluetooth: hci3: command 0x2016 tx timeout [ 427.215970] Bluetooth: hci2: command 0x2016 tx timeout [ 427.406958] Bluetooth: hci1: command 0x2016 tx timeout [ 429.031028] debugfs: '0' already exists in 'hci0' [ 429.032362] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 429.033971] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 429.034007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.034025] Workqueue: hci0 hci_rx_work [ 429.034059] Call Trace: [ 429.034069] [ 429.034079] dump_stack_lvl+0xfa/0x120 [ 429.034117] sysfs_warn_dup+0x80/0xa0 [ 429.034152] sysfs_create_dir_ns+0x23b/0x2a0 [ 429.034186] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.034218] ? find_held_lock+0x2b/0x80 [ 429.034264] ? lock_release+0xc8/0x270 [ 429.034295] ? do_raw_spin_unlock+0x53/0x220 [ 429.034336] kobject_add_internal+0x24c/0x9a0 [ 429.034385] kobject_add+0x157/0x240 [ 429.034427] ? __pfx_kobject_add+0x10/0x10 [ 429.034467] ? lock_release+0xc8/0x270 [ 429.034499] ? do_raw_spin_unlock+0x53/0x220 [ 429.034537] ? kobject_put+0xaa/0x260 [ 429.034589] device_add+0x32d/0x1830 [ 429.034625] ? __pfx_device_add+0x10/0x10 [ 429.034659] ? hci_debugfs_create_conn+0x10f/0x240 [ 429.034696] ? mgmt_send_event_skb+0x2f3/0x460 [ 429.034725] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 429.034769] hci_conn_add_sysfs+0x117/0x1c0 [ 429.034806] le_conn_complete_evt+0x1246/0x1e40 [ 429.034872] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.034931] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 429.034962] ? __asan_memcpy+0x3d/0x60 [ 429.035010] hci_le_meta_evt+0x34b/0x530 [ 429.035034] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 429.035068] hci_event_packet+0x66c/0x10e0 [ 429.035097] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 429.035124] ? __pfx_hci_event_packet+0x10/0x10 [ 429.035152] ? mark_held_locks+0x49/0x80 [ 429.035184] ? kcov_remote_start+0x2ce/0x5a0 [ 429.035233] hci_rx_work+0x65b/0x8b0 [ 429.035266] process_one_work+0x8e1/0x1960 [ 429.035315] ? __pfx_process_one_work+0x10/0x10 [ 429.035349] ? move_linked_works+0x172/0x270 [ 429.035397] ? assign_work+0x196/0x240 [ 429.035432] worker_thread+0x67e/0xe90 [ 429.035466] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 429.035522] ? __pfx_worker_thread+0x10/0x10 [ 429.035557] kthread+0x3c8/0x740 [ 429.035587] ? __pfx_kthread+0x10/0x10 [ 429.035614] ? ret_from_fork+0x79/0x7a0 [ 429.035641] ? lock_release+0xc8/0x270 [ 429.035672] ? __pfx_kthread+0x10/0x10 [ 429.035702] ret_from_fork+0x67a/0x7a0 [ 429.035729] ? __pfx_ret_from_fork+0x10/0x10 [ 429.035760] ? __switch_to+0x759/0x1030 [ 429.035799] ? __pfx_kthread+0x10/0x10 [ 429.035830] ret_from_fork_asm+0x1a/0x30 [ 429.035887] [ 429.077256] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. 18:26:02 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) 18:26:02 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x6, 0x2}, {0x6a}}]}}, 0xf) 18:26:02 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(0x0, 0x0) 18:26:02 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:26:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048010}, 0x24000055) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x2, 0x6}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x2, 0x6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r10, 0x2, 0x6}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xfe, 0x1, 0xec278f57ccc50f54, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x64}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280a000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1ec, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x4855) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 18:26:02 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) 18:26:02 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) flock(r0, 0x4) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:26:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x66}, {0x1, "74450811386b80d432d79cdf0715456a927bff4ca656c06adda4e299885153c04d09bb81055530d0c0dd7a2f72e8bd315e03598d04891da22718500d878bc50b3dfc4185ed92604345785148d8178500d13cf2df63df0f1a11657146c92e047dd3f1170f"}}}, 0x69) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042fff00"], 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x62}, "577024a7146fbacb833f6367edb8fa766341d158c581a1cc0d93d7a2d80dc592745fc37fdbdf7992a239cfa203c4233bfb58b83e3c190afc8bc60ec95d6099a524e5ab7fcb231a0ce50cdeb30c4b0a421b2df69384565837a582589ef532d5c6f3ec"}, 0x66) [ 429.082708] Bluetooth: hci0: failed to register connection device [ 429.098475] Bluetooth: hci3: unexpected event 0x2f length: 0 < 1 [ 429.100725] Bluetooth: hci3: unexpected event 0x2f length: 0 < 1 18:26:02 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(0x0, 0x0) 18:26:02 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0xffffffffffffffc3) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:26:02 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYRESDEC=0x0], 0xe) [ 429.138084] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode 18:26:02 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:26:02 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) [ 429.182059] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 429.193372] debugfs: '0' already exists in 'hci5' [ 429.195099] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 429.196699] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 429.196731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.196747] Workqueue: hci5 hci_rx_work [ 429.196779] Call Trace: [ 429.196786] [ 429.196796] dump_stack_lvl+0xfa/0x120 [ 429.196835] sysfs_warn_dup+0x80/0xa0 [ 429.196869] sysfs_create_dir_ns+0x23b/0x2a0 [ 429.196898] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.196927] ? find_held_lock+0x2b/0x80 [ 429.196969] ? lock_release+0xc8/0x270 [ 429.196997] ? do_raw_spin_unlock+0x53/0x220 [ 429.197033] kobject_add_internal+0x24c/0x9a0 [ 429.197077] kobject_add+0x157/0x240 [ 429.197114] ? __pfx_kobject_add+0x10/0x10 [ 429.197150] ? lock_release+0xc8/0x270 [ 429.197178] ? do_raw_spin_unlock+0x53/0x220 [ 429.197212] ? kobject_put+0xaa/0x260 [ 429.197258] device_add+0x32d/0x1830 [ 429.197291] ? __pfx_device_add+0x10/0x10 [ 429.197321] ? hci_debugfs_create_conn+0x10f/0x240 [ 429.197354] ? mgmt_send_event_skb+0x2f3/0x460 [ 429.197379] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 429.197418] hci_conn_add_sysfs+0x117/0x1c0 [ 429.197452] le_conn_complete_evt+0x1246/0x1e40 [ 429.197504] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.197556] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 429.197584] ? __asan_memcpy+0x3d/0x60 [ 429.197627] hci_le_meta_evt+0x34b/0x530 [ 429.197649] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 429.197678] hci_event_packet+0x66c/0x10e0 [ 429.197705] ? __pfx_hci_le_meta_evt+0x10/0x10 18:26:02 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) [ 429.197729] ? __pfx_hci_event_packet+0x10/0x10 [ 429.197753] ? mark_held_locks+0x49/0x80 [ 429.197782] ? kcov_remote_start+0x2ce/0x5a0 [ 429.197826] hci_rx_work+0x65b/0x8b0 [ 429.197854] process_one_work+0x8e1/0x1960 [ 429.197898] ? __pfx_process_one_work+0x10/0x10 [ 429.197928] ? move_linked_works+0x172/0x270 [ 429.197970] ? assign_work+0x196/0x240 [ 429.198001] worker_thread+0x67e/0xe90 [ 429.198031] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 429.198080] ? __pfx_worker_thread+0x10/0x10 [ 429.198112] kthread+0x3c8/0x740 [ 429.198138] ? __pfx_kthread+0x10/0x10 [ 429.198163] ? ret_from_fork+0x79/0x7a0 [ 429.198191] ? __pfx_kthread+0x10/0x10 [ 429.198218] ret_from_fork+0x67a/0x7a0 [ 429.198242] ? __pfx_ret_from_fork+0x10/0x10 [ 429.198270] ? __switch_to+0x759/0x1030 [ 429.198304] ? __pfx_kthread+0x10/0x10 [ 429.198332] ret_from_fork_asm+0x1a/0x30 [ 429.198382] [ 429.207226] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 429.208092] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 429.216509] debugfs: '0' already exists in 'hci2' [ 429.217094] Bluetooth: hci5: failed to register connection device [ 429.226593] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 429.235570] CPU: 1 UID: 0 PID: 4323 Comm: kworker/u11:8 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 429.235587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.235595] Workqueue: hci2 hci_rx_work [ 429.235613] Call Trace: [ 429.235618] [ 429.235622] dump_stack_lvl+0xfa/0x120 [ 429.235641] sysfs_warn_dup+0x80/0xa0 [ 429.235657] sysfs_create_dir_ns+0x23b/0x2a0 [ 429.235672] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.235686] ? find_held_lock+0x2b/0x80 [ 429.235707] ? lock_release+0xc8/0x270 [ 429.235721] ? do_raw_spin_unlock+0x53/0x220 [ 429.235739] kobject_add_internal+0x24c/0x9a0 [ 429.235761] kobject_add+0x157/0x240 [ 429.235779] ? __pfx_kobject_add+0x10/0x10 [ 429.235797] ? lock_release+0xc8/0x270 [ 429.235811] ? do_raw_spin_unlock+0x53/0x220 [ 429.235833] ? kobject_put+0xaa/0x260 [ 429.235855] device_add+0x32d/0x1830 [ 429.235872] ? __pfx_device_add+0x10/0x10 [ 429.235887] ? hci_debugfs_create_conn+0x10f/0x240 [ 429.235904] ? mgmt_send_event_skb+0x2f3/0x460 [ 429.235917] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 429.235937] hci_conn_add_sysfs+0x117/0x1c0 [ 429.235954] le_conn_complete_evt+0x1246/0x1e40 [ 429.235980] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.236006] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 429.236020] ? __asan_memcpy+0x3d/0x60 [ 429.236042] hci_le_meta_evt+0x34b/0x530 [ 429.236053] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 429.236068] hci_event_packet+0x66c/0x10e0 [ 429.236081] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 429.236093] ? __pfx_hci_event_packet+0x10/0x10 [ 429.236106] ? mark_held_locks+0x49/0x80 [ 429.236120] ? kcov_remote_start+0x2ce/0x5a0 [ 429.236142] hci_rx_work+0x65b/0x8b0 [ 429.236157] process_one_work+0x8e1/0x1960 [ 429.236178] ? __pfx_process_one_work+0x10/0x10 [ 429.236193] ? move_linked_works+0x172/0x270 [ 429.236215] ? assign_work+0x196/0x240 [ 429.236230] worker_thread+0x67e/0xe90 [ 429.236245] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 429.236270] ? __pfx_worker_thread+0x10/0x10 [ 429.236285] kthread+0x3c8/0x740 [ 429.236298] ? __pfx_kthread+0x10/0x10 [ 429.236310] ? ret_from_fork+0x79/0x7a0 [ 429.236325] ? __pfx_kthread+0x10/0x10 [ 429.236339] ret_from_fork+0x67a/0x7a0 [ 429.236351] ? __pfx_ret_from_fork+0x10/0x10 [ 429.236364] ? __switch_to+0x759/0x1030 [ 429.236382] ? __pfx_kthread+0x10/0x10 [ 429.236396] ret_from_fork_asm+0x1a/0x30 [ 429.236421] [ 429.254155] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 429.255187] Bluetooth: hci2: failed to register connection device [ 429.261069] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 429.263349] Bluetooth: hci2: command 0x2016 tx timeout [ 429.263471] Bluetooth: hci5: command 0x0406 tx timeout [ 429.263786] Bluetooth: hci3: command 0x2016 tx timeout [ 429.295789] debugfs: '0' already exists in 'hci3' [ 429.297139] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 429.298690] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 429.298722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.298737] Workqueue: hci3 hci_rx_work [ 429.298765] Call Trace: [ 429.298773] [ 429.298782] dump_stack_lvl+0xfa/0x120 [ 429.298815] sysfs_warn_dup+0x80/0xa0 [ 429.298853] sysfs_create_dir_ns+0x23b/0x2a0 [ 429.298882] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.298909] ? find_held_lock+0x2b/0x80 [ 429.298949] ? lock_release+0xc8/0x270 [ 429.298976] ? do_raw_spin_unlock+0x53/0x220 [ 429.299011] kobject_add_internal+0x24c/0x9a0 [ 429.299054] kobject_add+0x157/0x240 [ 429.299090] ? __pfx_kobject_add+0x10/0x10 [ 429.299125] ? lock_release+0xc8/0x270 [ 429.299152] ? do_raw_spin_unlock+0x53/0x220 [ 429.299185] ? kobject_put+0xaa/0x260 [ 429.299229] device_add+0x32d/0x1830 [ 429.299262] ? __pfx_device_add+0x10/0x10 [ 429.299291] ? hci_debugfs_create_conn+0x10f/0x240 [ 429.299323] ? mgmt_send_event_skb+0x2f3/0x460 [ 429.299348] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 429.299386] hci_conn_add_sysfs+0x117/0x1c0 [ 429.299419] le_conn_complete_evt+0x1246/0x1e40 [ 429.299469] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.299520] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 429.299547] ? __asan_memcpy+0x3d/0x60 [ 429.299589] hci_le_meta_evt+0x34b/0x530 [ 429.299611] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 429.299640] hci_event_packet+0x66c/0x10e0 [ 429.299665] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 429.299688] ? __pfx_hci_event_packet+0x10/0x10 [ 429.299713] ? mark_held_locks+0x49/0x80 [ 429.299741] ? kcov_remote_start+0x2ce/0x5a0 [ 429.299783] hci_rx_work+0x65b/0x8b0 [ 429.299812] process_one_work+0x8e1/0x1960 [ 429.299854] ? __pfx_process_one_work+0x10/0x10 [ 429.299883] ? move_linked_works+0x172/0x270 [ 429.299925] ? assign_work+0x196/0x240 [ 429.299955] worker_thread+0x67e/0xe90 [ 429.299985] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 429.300033] ? __pfx_worker_thread+0x10/0x10 [ 429.300063] kthread+0x3c8/0x740 [ 429.300089] ? __pfx_kthread+0x10/0x10 [ 429.300113] ? ret_from_fork+0x79/0x7a0 [ 429.300140] ? __pfx_kthread+0x10/0x10 [ 429.300169] ret_from_fork+0x67a/0x7a0 [ 429.300193] ? __pfx_ret_from_fork+0x10/0x10 [ 429.300220] ? __switch_to+0x759/0x1030 [ 429.300253] ? __pfx_kthread+0x10/0x10 [ 429.300280] ret_from_fork_asm+0x1a/0x30 [ 429.300328] [ 429.335138] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 429.337150] Bluetooth: hci3: failed to register connection device [ 429.338748] debugfs: '0' already exists in 'hci3' [ 429.339802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 429.341170] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 429.341201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.341217] Workqueue: hci3 hci_rx_work [ 429.341240] Call Trace: [ 429.341248] [ 429.341257] dump_stack_lvl+0xfa/0x120 [ 429.341289] sysfs_warn_dup+0x80/0xa0 [ 429.341319] sysfs_create_dir_ns+0x23b/0x2a0 [ 429.341348] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.341375] ? find_held_lock+0x2b/0x80 [ 429.341413] ? lock_release+0xc8/0x270 [ 429.341440] ? do_raw_spin_unlock+0x53/0x220 [ 429.341475] kobject_add_internal+0x24c/0x9a0 [ 429.341517] kobject_add+0x157/0x240 [ 429.341553] ? __pfx_kobject_add+0x10/0x10 [ 429.341588] ? lock_release+0xc8/0x270 [ 429.341616] ? do_raw_spin_unlock+0x53/0x220 [ 429.341649] ? kobject_put+0xaa/0x260 [ 429.341693] device_add+0x32d/0x1830 [ 429.341724] ? __pfx_device_add+0x10/0x10 [ 429.341753] ? hci_debugfs_create_conn+0x10f/0x240 [ 429.341785] ? mgmt_send_event_skb+0x2f3/0x460 [ 429.341809] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 429.341855] hci_conn_add_sysfs+0x117/0x1c0 [ 429.341887] le_conn_complete_evt+0x1246/0x1e40 [ 429.341937] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.341988] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 429.342015] ? __asan_memcpy+0x3d/0x60 [ 429.342056] hci_le_meta_evt+0x34b/0x530 [ 429.342078] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 429.342107] hci_event_packet+0x66c/0x10e0 [ 429.342132] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 429.342155] ? __pfx_hci_event_packet+0x10/0x10 [ 429.342180] ? mark_held_locks+0x49/0x80 [ 429.342208] ? kcov_remote_start+0x2ce/0x5a0 [ 429.342249] hci_rx_work+0x65b/0x8b0 [ 429.342278] process_one_work+0x8e1/0x1960 [ 429.342319] ? __pfx_process_one_work+0x10/0x10 [ 429.342347] ? move_linked_works+0x172/0x270 [ 429.342389] ? assign_work+0x196/0x240 [ 429.342419] worker_thread+0x67e/0xe90 [ 429.342449] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 429.342496] ? __pfx_worker_thread+0x10/0x10 [ 429.342526] kthread+0x3c8/0x740 [ 429.342551] ? __pfx_kthread+0x10/0x10 [ 429.342575] ? ret_from_fork+0x79/0x7a0 [ 429.342601] ? __pfx_kthread+0x10/0x10 [ 429.342628] ret_from_fork+0x67a/0x7a0 [ 429.342652] ? __pfx_ret_from_fork+0x10/0x10 [ 429.342679] ? __switch_to+0x759/0x1030 [ 429.342712] ? __pfx_kthread+0x10/0x10 [ 429.342739] ret_from_fork_asm+0x1a/0x30 [ 429.342786] [ 429.377438] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 429.381902] Bluetooth: hci3: failed to register connection device [ 429.386336] debugfs: '0' already exists in 'hci1' [ 429.387356] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 429.388702] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 429.388732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.388747] Workqueue: hci1 hci_rx_work [ 429.388771] Call Trace: [ 429.388779] [ 429.388788] dump_stack_lvl+0xfa/0x120 [ 429.388817] sysfs_warn_dup+0x80/0xa0 [ 429.388853] sysfs_create_dir_ns+0x23b/0x2a0 [ 429.388882] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 429.388909] ? find_held_lock+0x2b/0x80 [ 429.388948] ? lock_release+0xc8/0x270 [ 429.388975] ? do_raw_spin_unlock+0x53/0x220 [ 429.389010] kobject_add_internal+0x24c/0x9a0 [ 429.389052] kobject_add+0x157/0x240 [ 429.389088] ? __pfx_kobject_add+0x10/0x10 [ 429.389123] ? lock_release+0xc8/0x270 [ 429.389151] ? do_raw_spin_unlock+0x53/0x220 [ 429.389184] ? kobject_put+0xaa/0x260 [ 429.389228] device_add+0x32d/0x1830 [ 429.389259] ? __pfx_device_add+0x10/0x10 [ 429.389288] ? hci_debugfs_create_conn+0x10f/0x240 [ 429.389319] ? mgmt_send_event_skb+0x2f3/0x460 [ 429.389343] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 429.389384] hci_conn_add_sysfs+0x117/0x1c0 [ 429.389416] le_conn_complete_evt+0x1246/0x1e40 [ 429.389466] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 429.389517] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 429.389544] ? __asan_memcpy+0x3d/0x60 [ 429.389585] hci_le_meta_evt+0x34b/0x530 [ 429.389606] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 429.389635] hci_event_packet+0x66c/0x10e0 [ 429.389661] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 429.389684] ? __pfx_hci_event_packet+0x10/0x10 [ 429.389708] ? mark_held_locks+0x49/0x80 [ 429.389737] ? kcov_remote_start+0x2ce/0x5a0 [ 429.389778] hci_rx_work+0x65b/0x8b0 [ 429.389807] process_one_work+0x8e1/0x1960 [ 429.389848] ? __pfx_process_one_work+0x10/0x10 [ 429.389877] ? move_linked_works+0x172/0x270 [ 429.389919] ? assign_work+0x196/0x240 [ 429.389949] worker_thread+0x67e/0xe90 [ 429.389979] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 429.390026] ? __pfx_worker_thread+0x10/0x10 [ 429.390057] kthread+0x3c8/0x740 [ 429.390082] ? __pfx_kthread+0x10/0x10 [ 429.390106] ? ret_from_fork+0x79/0x7a0 [ 429.390132] ? __pfx_kthread+0x10/0x10 [ 429.390159] ret_from_fork+0x67a/0x7a0 [ 429.390183] ? __pfx_ret_from_fork+0x10/0x10 [ 429.390210] ? __switch_to+0x759/0x1030 [ 429.390243] ? __pfx_kthread+0x10/0x10 [ 429.390270] ret_from_fork_asm+0x1a/0x30 [ 429.390317] [ 429.424890] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 429.426897] Bluetooth: hci1: failed to register connection device [ 429.454901] Bluetooth: hci1: command 0x2016 tx timeout [ 431.118970] Bluetooth: hci0: command 0x2016 tx timeout [ 431.310933] Bluetooth: hci3: command 0x2016 tx timeout [ 431.311202] Bluetooth: hci2: command 0x2016 tx timeout [ 431.311463] Bluetooth: hci5: command 0x0406 tx timeout [ 431.503024] Bluetooth: hci6: command 0x2016 tx timeout [ 431.504122] Bluetooth: hci1: command 0x2016 tx timeout [ 433.167180] Bluetooth: hci0: command 0x2016 tx timeout [ 433.359155] Bluetooth: hci2: command 0x2016 tx timeout [ 433.359465] Bluetooth: hci3: command 0x2016 tx timeout [ 433.360240] Bluetooth: hci5: command 0x0406 tx timeout [ 433.551206] Bluetooth: hci6: command 0x2016 tx timeout [ 433.551257] Bluetooth: hci1: command 0x2016 tx timeout [ 435.214993] Bluetooth: hci0: command 0x2016 tx timeout [ 435.406968] Bluetooth: hci5: command 0x0406 tx timeout [ 435.407908] Bluetooth: hci3: command 0x2016 tx timeout [ 435.407979] Bluetooth: hci2: command 0x2016 tx timeout [ 435.599028] Bluetooth: hci1: command 0x2016 tx timeout [ 437.263015] Bluetooth: hci0: command 0x2016 tx timeout [ 437.454966] Bluetooth: hci2: command 0x2016 tx timeout [ 437.455007] Bluetooth: hci3: command 0x2016 tx timeout [ 437.456011] Bluetooth: hci5: command 0x0406 tx timeout [ 437.646923] Bluetooth: hci1: command 0x2016 tx timeout 18:26:12 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) 18:26:12 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(0x0, 0x0) 18:26:12 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000), 0xfffffffffffffd39) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:26:12 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16], 0x22) 18:26:12 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="ba55043e1f"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x6d}, @l2cap_cid_signaling={{0x69}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x47}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x8, 0x6}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x1000, 0xfa73}}, @l2cap_info_rsp={{0xb, 0x46, 0x3c}, {0x1, 0x20, "7bac287644398d13750f5ef3790f9373cbd0f0774b38981f8f409eb8a0f7be031ea7fb2e28a013605ef4b07b443dab913de7e2641fb6431e"}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x7, 0x4}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0x200}}]}}, 0x72) 18:26:12 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) 18:26:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0aaf7b37eaa7437bf4e93639e8ab5f690b279af8742d459583a3d62442e4be064b1a4247d60f8ece10ae043fe4c561241f240888bc6b1dcfbac58f6a219e7cf0de427024f022e61e62"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:12 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000"], 0x22) [ 438.995743] debugfs: '0' already exists in 'hci1' [ 438.999078] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 439.000374] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) 18:26:12 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) [ 439.000403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.000418] Workqueue: hci1 hci_rx_work [ 439.000447] Call Trace: [ 439.000455] [ 439.000464] dump_stack_lvl+0xfa/0x120 [ 439.000494] sysfs_warn_dup+0x80/0xa0 [ 439.000522] sysfs_create_dir_ns+0x23b/0x2a0 [ 439.000569] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.000595] ? find_held_lock+0x2b/0x80 [ 439.000632] ? lock_release+0xc8/0x270 [ 439.000658] ? do_raw_spin_unlock+0x53/0x220 [ 439.000690] kobject_add_internal+0x24c/0x9a0 [ 439.000729] kobject_add+0x157/0x240 [ 439.000763] ? __pfx_kobject_add+0x10/0x10 [ 439.000796] ? lock_release+0xc8/0x270 [ 439.000821] ? do_raw_spin_unlock+0x53/0x220 [ 439.000859] ? kobject_put+0xaa/0x260 [ 439.000900] device_add+0x32d/0x1830 [ 439.000930] ? __pfx_device_add+0x10/0x10 [ 439.000957] ? hci_debugfs_create_conn+0x10f/0x240 [ 439.000987] ? mgmt_send_event_skb+0x2f3/0x460 [ 439.001009] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 439.001045] hci_conn_add_sysfs+0x117/0x1c0 18:26:12 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000"], 0x22) [ 439.001076] le_conn_complete_evt+0x1246/0x1e40 [ 439.001122] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 439.001169] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 439.001194] ? __asan_memcpy+0x3d/0x60 [ 439.001233] hci_le_meta_evt+0x34b/0x530 [ 439.001253] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 439.001280] hci_event_packet+0x66c/0x10e0 [ 439.001303] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 439.001325] ? __pfx_hci_event_packet+0x10/0x10 [ 439.001348] ? mark_held_locks+0x49/0x80 [ 439.001374] ? kcov_remote_start+0x2ce/0x5a0 [ 439.001414] hci_rx_work+0x65b/0x8b0 [ 439.001440] process_one_work+0x8e1/0x1960 [ 439.001480] ? __pfx_process_one_work+0x10/0x10 [ 439.001507] ? move_linked_works+0x172/0x270 [ 439.001546] ? assign_work+0x196/0x240 [ 439.001574] worker_thread+0x67e/0xe90 [ 439.001602] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 439.001646] ? __pfx_worker_thread+0x10/0x10 [ 439.001674] kthread+0x3c8/0x740 [ 439.001698] ? __pfx_kthread+0x10/0x10 [ 439.001720] ? ret_from_fork+0x79/0x7a0 [ 439.001746] ? __pfx_kthread+0x10/0x10 [ 439.001771] ret_from_fork+0x67a/0x7a0 [ 439.001793] ? __pfx_ret_from_fork+0x10/0x10 [ 439.001817] ? __switch_to+0x759/0x1030 [ 439.001848] ? __pfx_kthread+0x10/0x10 [ 439.001873] ret_from_fork_asm+0x1a/0x30 [ 439.001918] [ 439.036360] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. 18:26:12 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32], 0x22) syz_emit_vhci(0x0, 0x0) [ 439.040865] Bluetooth: hci1: failed to register connection device 18:26:12 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) 18:26:12 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) 18:26:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="10", 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x233f, r0, &(0x7f0000000000)="c0ddd8a048cb69104c766cfbebb3b3d7e1d5940eba720349b3b51722bec52e23d84b", 0x22, 0x5, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000200)="e23d3a600b93808f0cd809e4216599e2cbe361d356e1d962a5be5ffa7e29a1adbbf91e375ba4cf9970304028b06051363cbda0fb863fca0c51897bd7384d905b6161ace6476e95e0c9734a5eef306ade5efb7525831b65563551d53b8f89be82df2bf288bfd133ea8f84cd20d3f6d29b7e85def5dcd849ea633cdf1577f5a6a6388aaffdcb5ebab32a3ac53cab2dbe8bb933a4523d6273cc6d2a1e02ee89e9b613eb16af8dea646f32b42b8076eba93d8e19925cb464fee3c1f95d1618d5e7d603663132c3cd1405c86d897b909e22c3871db0f55b995aef2dd8c08b60659e90a7948e5c", 0xe4, 0x2, 0x0, 0x3, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x9f9, 0xffffffffffffffff, &(0x7f0000000300)="5bc2ede5118f3976a40f92bf845115b3ef103264a99dc5384a4243b5b7733c97579ed1e169a9e8f0be2afdaa185b53e4df1f74917e7eed59972ba0de6a42ebebc2d1490ac7b2416dc8342ea9bea698f26ffe8815eb18b7944bbfd05b211851d5ad149f39a94526c3f4977b8e38b05b20e920eb37608cbb66fc9703f7dde94a1117c26c29b11139bdcc2e663c4b29b3c12e65e138ab6fff91650d4b70889c", 0x9e, 0x121, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x7fff, 0xffffffffffffffff, &(0x7f00000003c0)="2ccb75ecd6d0b790d6556499b05c0e50fd92845a57a3fb2bbe07777449e53dfe16f9651fc796bc3f56c9ec5927ecb1dcc8e9b0db0e78193bb742c3ce1eae4e9032a983e08ca609eeec06834a82517a8d9434240d19901385af85fa67565768e679570519972f5350d4fbbb8d8ff8eb556a0c1cbe6dc2a0feaf797e225e54d73390f04df2501a84d1a87d86cb29d63e97e3e8d93dc29b9873a16dd521cf5b6ae6949257", 0xa3, 0x10001, 0x0, 0x3}]) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x26) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900ab5194a2b292cd0d78a8601e34d7e20047a1708ef0f29d6405c4d4b85bd8fc6e1694de389c78b5a3bde8a497f52dfc2f743cc2b5d93f81e4193e901cc44a9202000000000000009704d8a23327e027e5f1cd95fbe2abda12f7309c6e723aa4af8d012fcdc3e424c04eebcb9dff4118abb67f2da5cbe387236d06fe02419ab623e8fdf0fa648bff1111ff99f290ebf5a6a545bddbe0bcf917a72b75538891f66438c9142f858ab944c99a2a4076f99d"], 0xaf) [ 439.122517] debugfs: '0' already exists in 'hci4' [ 439.123118] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 439.123793] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 439.123809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.123818] Workqueue: hci4 hci_rx_work [ 439.123842] Call Trace: [ 439.123847] [ 439.123852] dump_stack_lvl+0xfa/0x120 [ 439.123872] sysfs_warn_dup+0x80/0xa0 [ 439.123890] sysfs_create_dir_ns+0x23b/0x2a0 [ 439.123904] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.123918] ? find_held_lock+0x2b/0x80 [ 439.123940] ? lock_release+0xc8/0x270 [ 439.123954] ? do_raw_spin_unlock+0x53/0x220 [ 439.123973] kobject_add_internal+0x24c/0x9a0 [ 439.123995] kobject_add+0x157/0x240 [ 439.124013] ? __pfx_kobject_add+0x10/0x10 [ 439.124031] ? lock_release+0xc8/0x270 [ 439.124045] ? do_raw_spin_unlock+0x53/0x220 [ 439.124062] ? kobject_put+0xaa/0x260 [ 439.124084] device_add+0x32d/0x1830 [ 439.124102] ? __pfx_device_add+0x10/0x10 [ 439.124117] ? hci_debugfs_create_conn+0x10f/0x240 [ 439.124134] ? mgmt_send_event_skb+0x2f3/0x460 [ 439.124148] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 439.124167] hci_conn_add_sysfs+0x117/0x1c0 [ 439.124184] le_conn_complete_evt+0x1246/0x1e40 [ 439.124211] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 439.124236] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 439.124250] ? __asan_memcpy+0x3d/0x60 [ 439.124273] hci_le_meta_evt+0x34b/0x530 [ 439.124285] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 439.124300] hci_event_packet+0x66c/0x10e0 [ 439.124313] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 439.124324] ? __pfx_hci_event_packet+0x10/0x10 [ 439.124337] ? mark_held_locks+0x49/0x80 [ 439.124352] ? kcov_remote_start+0x2ce/0x5a0 [ 439.124374] hci_rx_work+0x65b/0x8b0 [ 439.124389] process_one_work+0x8e1/0x1960 [ 439.124411] ? __pfx_process_one_work+0x10/0x10 [ 439.124427] ? move_linked_works+0x172/0x270 [ 439.124448] ? assign_work+0x196/0x240 [ 439.124464] worker_thread+0x67e/0xe90 [ 439.124479] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 439.124504] ? __pfx_worker_thread+0x10/0x10 [ 439.124520] kthread+0x3c8/0x740 [ 439.124533] ? __pfx_kthread+0x10/0x10 [ 439.124545] ? ret_from_fork+0x79/0x7a0 [ 439.124569] ? lock_release+0xc8/0x270 [ 439.124583] ? __pfx_kthread+0x10/0x10 [ 439.124597] ret_from_fork+0x67a/0x7a0 [ 439.124609] ? __pfx_ret_from_fork+0x10/0x10 [ 439.124623] ? __switch_to+0x759/0x1030 [ 439.124640] ? __pfx_kthread+0x10/0x10 [ 439.124654] ret_from_fork_asm+0x1a/0x30 [ 439.124681] [ 439.142767] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 439.143882] Bluetooth: hci4: failed to register connection device [ 439.170479] debugfs: '0' already exists in 'hci4' [ 439.171040] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 439.171719] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 439.171734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.171742] Workqueue: hci4 hci_rx_work [ 439.171754] Call Trace: [ 439.171758] [ 439.171762] dump_stack_lvl+0xfa/0x120 [ 439.171778] sysfs_warn_dup+0x80/0xa0 [ 439.171792] sysfs_create_dir_ns+0x23b/0x2a0 [ 439.171807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.171821] ? find_held_lock+0x2b/0x80 [ 439.171843] ? lock_release+0xc8/0x270 [ 439.171857] ? do_raw_spin_unlock+0x53/0x220 [ 439.171875] kobject_add_internal+0x24c/0x9a0 [ 439.171896] kobject_add+0x157/0x240 [ 439.171914] ? __pfx_kobject_add+0x10/0x10 [ 439.171931] ? lock_release+0xc8/0x270 [ 439.171945] ? do_raw_spin_unlock+0x53/0x220 [ 439.171962] ? kobject_put+0xaa/0x260 [ 439.171984] device_add+0x32d/0x1830 [ 439.171999] ? __pfx_device_add+0x10/0x10 [ 439.172014] ? hci_debugfs_create_conn+0x10f/0x240 [ 439.172030] ? mgmt_send_event_skb+0x2f3/0x460 18:26:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a634dc07ffd8191d5604e6dadd21bd96b8a05f6164f28662d18f2a410389f7a000000000000b2200000000000f39868eff3766c97ac8dd95a59cf5b5a8b114601d5e30c74dc69ecdd3ed284351f55bf56659c2455438b63f6d9ba5ddbe9b579615407fa0f1484b844fe8a3f371669d2e9c1ebd8658c4d06a1dc6ee4f68547b929da"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:12 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000"], 0x22) [ 439.172042] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 439.172062] hci_conn_add_sysfs+0x117/0x1c0 [ 439.172078] le_conn_complete_evt+0x1246/0x1e40 [ 439.172103] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 439.172129] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 439.172143] ? __asan_memcpy+0x3d/0x60 [ 439.172163] hci_le_meta_evt+0x34b/0x530 [ 439.172174] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 439.172189] hci_event_packet+0x66c/0x10e0 [ 439.172202] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 439.172214] ? __pfx_hci_event_packet+0x10/0x10 [ 439.172226] ? mark_held_locks+0x49/0x80 [ 439.172240] ? kcov_remote_start+0x2ce/0x5a0 [ 439.172262] hci_rx_work+0x65b/0x8b0 [ 439.172276] process_one_work+0x8e1/0x1960 [ 439.172297] ? __pfx_process_one_work+0x10/0x10 [ 439.172311] ? move_linked_works+0x172/0x270 [ 439.172332] ? assign_work+0x196/0x240 [ 439.172347] worker_thread+0x67e/0xe90 [ 439.172362] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 439.172385] ? __pfx_worker_thread+0x10/0x10 [ 439.172401] kthread+0x3c8/0x740 [ 439.172414] ? __pfx_kthread+0x10/0x10 [ 439.172426] ? ret_from_fork+0x79/0x7a0 [ 439.172437] ? lock_release+0xc8/0x270 [ 439.172451] ? __pfx_kthread+0x10/0x10 [ 439.172465] ret_from_fork+0x67a/0x7a0 [ 439.172477] ? __pfx_ret_from_fork+0x10/0x10 [ 439.172490] ? __switch_to+0x759/0x1030 [ 439.172506] ? __pfx_kthread+0x10/0x10 [ 439.172520] ret_from_fork_asm+0x1a/0x30 [ 439.172544] [ 439.190792] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 439.191820] Bluetooth: hci4: failed to register connection device 18:26:12 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) [ 439.236381] Bluetooth: hci0: unexpected subevent 0x0a length: 34 > 30 18:26:12 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 439.264406] Bluetooth: hci0: unexpected subevent 0x0a length: 34 > 30 [ 439.265417] debugfs: '0' already exists in 'hci0' [ 439.265954] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 439.266621] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 439.266636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.266645] Workqueue: hci0 hci_rx_work [ 439.266659] Call Trace: [ 439.266664] [ 439.266669] dump_stack_lvl+0xfa/0x120 [ 439.266687] sysfs_warn_dup+0x80/0xa0 [ 439.266702] sysfs_create_dir_ns+0x23b/0x2a0 [ 439.266717] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.266731] ? find_held_lock+0x2b/0x80 [ 439.266751] ? lock_release+0xc8/0x270 [ 439.266765] ? do_raw_spin_unlock+0x53/0x220 [ 439.266783] kobject_add_internal+0x24c/0x9a0 [ 439.266804] kobject_add+0x157/0x240 [ 439.266823] ? __pfx_kobject_add+0x10/0x10 [ 439.266846] ? lock_release+0xc8/0x270 [ 439.266863] ? do_raw_spin_unlock+0x53/0x220 [ 439.266880] ? kobject_put+0xaa/0x260 [ 439.266902] device_add+0x32d/0x1830 [ 439.266919] ? __pfx_device_add+0x10/0x10 [ 439.266934] ? hci_debugfs_create_conn+0x10f/0x240 [ 439.266950] ? mgmt_send_event_skb+0x2f3/0x460 [ 439.266963] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 439.266983] hci_conn_add_sysfs+0x117/0x1c0 [ 439.267000] le_conn_complete_evt+0x1246/0x1e40 [ 439.267026] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 439.267046] ? __pfx_bt_warn+0x10/0x10 [ 439.267061] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 439.267077] hci_le_meta_evt+0x34b/0x530 [ 439.267088] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 439.267103] hci_event_packet+0x66c/0x10e0 [ 439.267116] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 439.267128] ? __pfx_hci_event_packet+0x10/0x10 [ 439.267140] ? mark_held_locks+0x49/0x80 [ 439.267154] ? kcov_remote_start+0x2ce/0x5a0 [ 439.267176] hci_rx_work+0x65b/0x8b0 [ 439.267191] process_one_work+0x8e1/0x1960 [ 439.267213] ? __pfx_process_one_work+0x10/0x10 [ 439.267227] ? move_linked_works+0x172/0x270 [ 439.267248] ? assign_work+0x196/0x240 [ 439.267263] worker_thread+0x67e/0xe90 [ 439.267278] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 439.267302] ? __pfx_worker_thread+0x10/0x10 [ 439.267318] kthread+0x3c8/0x740 [ 439.267331] ? __pfx_kthread+0x10/0x10 [ 439.267343] ? ret_from_fork+0x79/0x7a0 [ 439.267355] ? lock_release+0xc8/0x270 [ 439.267368] ? __pfx_kthread+0x10/0x10 [ 439.267382] ret_from_fork+0x67a/0x7a0 [ 439.267394] ? __pfx_ret_from_fork+0x10/0x10 [ 439.267407] ? __switch_to+0x759/0x1030 [ 439.267425] ? __pfx_kthread+0x10/0x10 [ 439.267438] ret_from_fork_asm+0x1a/0x30 [ 439.267462] [ 439.285453] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 439.286481] Bluetooth: hci0: failed to register connection device [ 439.306602] debugfs: '0' already exists in 'hci6' [ 439.307171] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 439.307960] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 439.307975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.307983] Workqueue: hci6 hci_rx_work [ 439.307994] Call Trace: [ 439.307998] [ 439.308002] dump_stack_lvl+0xfa/0x120 [ 439.308017] sysfs_warn_dup+0x80/0xa0 [ 439.308031] sysfs_create_dir_ns+0x23b/0x2a0 [ 439.308045] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.308059] ? find_held_lock+0x2b/0x80 [ 439.308078] ? lock_release+0xc8/0x270 [ 439.308092] ? do_raw_spin_unlock+0x53/0x220 [ 439.308109] kobject_add_internal+0x24c/0x9a0 [ 439.308130] kobject_add+0x157/0x240 [ 439.308148] ? __pfx_kobject_add+0x10/0x10 [ 439.308166] ? lock_release+0xc8/0x270 [ 439.308180] ? do_raw_spin_unlock+0x53/0x220 [ 439.308196] ? kobject_put+0xaa/0x260 [ 439.308219] device_add+0x32d/0x1830 [ 439.308234] ? __pfx_device_add+0x10/0x10 [ 439.308248] ? hci_debugfs_create_conn+0x10f/0x240 [ 439.308264] ? mgmt_send_event_skb+0x2f3/0x460 [ 439.308276] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 439.308295] hci_conn_add_sysfs+0x117/0x1c0 [ 439.308311] le_conn_complete_evt+0x1246/0x1e40 [ 439.308336] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 439.308361] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 439.308375] ? __asan_memcpy+0x3d/0x60 [ 439.308396] hci_le_meta_evt+0x34b/0x530 [ 439.308406] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 439.308421] hci_event_packet+0x66c/0x10e0 [ 439.308434] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 439.308446] ? __pfx_hci_event_packet+0x10/0x10 [ 439.308458] ? mark_held_locks+0x49/0x80 [ 439.308472] ? kcov_remote_start+0x2ce/0x5a0 [ 439.308493] hci_rx_work+0x65b/0x8b0 [ 439.308507] process_one_work+0x8e1/0x1960 [ 439.308528] ? __pfx_process_one_work+0x10/0x10 [ 439.308543] ? move_linked_works+0x172/0x270 [ 439.308572] ? assign_work+0x196/0x240 [ 439.308587] worker_thread+0x67e/0xe90 [ 439.308602] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 439.308626] ? __pfx_worker_thread+0x10/0x10 [ 439.308641] kthread+0x3c8/0x740 [ 439.308654] ? __pfx_kthread+0x10/0x10 [ 439.308666] ? ret_from_fork+0x79/0x7a0 [ 439.308677] ? lock_release+0xc8/0x270 [ 439.308691] ? __pfx_kthread+0x10/0x10 [ 439.308705] ret_from_fork+0x67a/0x7a0 [ 439.308716] ? __pfx_ret_from_fork+0x10/0x10 [ 439.308730] ? __switch_to+0x759/0x1030 [ 439.308747] ? __pfx_kthread+0x10/0x10 [ 439.308760] ret_from_fork_asm+0x1a/0x30 [ 439.308784] [ 439.308803] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 439.330089] Bluetooth: hci6: failed to register connection device [ 439.383077] debugfs: '0' already exists in 'hci5' [ 439.383611] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 439.384306] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 439.384322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 439.384330] Workqueue: hci5 hci_rx_work [ 439.384343] Call Trace: [ 439.384347] [ 439.384352] dump_stack_lvl+0xfa/0x120 [ 439.384368] sysfs_warn_dup+0x80/0xa0 [ 439.384383] sysfs_create_dir_ns+0x23b/0x2a0 [ 439.384398] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 439.384412] ? find_held_lock+0x2b/0x80 [ 439.384432] ? lock_release+0xc8/0x270 [ 439.384446] ? do_raw_spin_unlock+0x53/0x220 [ 439.384464] kobject_add_internal+0x24c/0x9a0 [ 439.384485] kobject_add+0x157/0x240 [ 439.384503] ? __pfx_kobject_add+0x10/0x10 [ 439.384520] ? lock_release+0xc8/0x270 [ 439.384534] ? do_raw_spin_unlock+0x53/0x220 [ 439.384560] ? kobject_put+0xaa/0x260 [ 439.384582] device_add+0x32d/0x1830 [ 439.384598] ? __pfx_device_add+0x10/0x10 [ 439.384613] ? hci_debugfs_create_conn+0x10f/0x240 [ 439.384628] ? mgmt_send_event_skb+0x2f3/0x460 [ 439.384640] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 439.384660] hci_conn_add_sysfs+0x117/0x1c0 [ 439.384676] le_conn_complete_evt+0x1246/0x1e40 [ 439.384701] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 439.384726] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 439.384740] ? __asan_memcpy+0x3d/0x60 [ 439.384761] hci_le_meta_evt+0x34b/0x530 [ 439.384771] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 439.384786] hci_event_packet+0x66c/0x10e0 [ 439.384799] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 439.384810] ? __pfx_hci_event_packet+0x10/0x10 [ 439.384827] ? mark_held_locks+0x49/0x80 [ 439.384841] ? kcov_remote_start+0x2ce/0x5a0 [ 439.384862] hci_rx_work+0x65b/0x8b0 [ 439.384876] process_one_work+0x8e1/0x1960 [ 439.384897] ? __pfx_process_one_work+0x10/0x10 [ 439.384912] ? move_linked_works+0x172/0x270 [ 439.384933] ? assign_work+0x196/0x240 [ 439.384948] worker_thread+0x67e/0xe90 [ 439.384963] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 439.384987] ? __pfx_worker_thread+0x10/0x10 [ 439.385002] kthread+0x3c8/0x740 [ 439.385015] ? __pfx_kthread+0x10/0x10 [ 439.385027] ? ret_from_fork+0x79/0x7a0 [ 439.385039] ? lock_release+0xc8/0x270 [ 439.385052] ? __pfx_kthread+0x10/0x10 [ 439.385066] ret_from_fork+0x67a/0x7a0 [ 439.385078] ? __pfx_ret_from_fork+0x10/0x10 [ 439.385092] ? __switch_to+0x759/0x1030 [ 439.385109] ? __pfx_kthread+0x10/0x10 [ 439.385122] ret_from_fork_asm+0x1a/0x30 [ 439.385146] [ 439.403162] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 439.404266] Bluetooth: hci5: failed to register connection device [ 439.503966] Bluetooth: hci3: command 0x2016 tx timeout [ 441.041427] Bluetooth: hci4: command 0x0406 tx timeout [ 441.102949] Bluetooth: hci1: command 0x2016 tx timeout [ 441.104018] Bluetooth: hci6: command 0x2016 tx timeout [ 441.166924] Bluetooth: hci5: command 0x0406 tx timeout [ 441.294916] Bluetooth: hci0: command 0x2016 tx timeout [ 441.550942] Bluetooth: hci3: command 0x2016 tx timeout [ 443.086995] Bluetooth: hci4: command 0x0406 tx timeout [ 443.150961] Bluetooth: hci1: command 0x2016 tx timeout [ 443.152006] Bluetooth: hci6: command 0x2016 tx timeout [ 443.214900] Bluetooth: hci5: command 0x0406 tx timeout [ 443.343129] Bluetooth: hci0: command 0x2016 tx timeout [ 443.598983] Bluetooth: hci3: command 0x2016 tx timeout [ 445.134946] Bluetooth: hci4: command 0x0406 tx timeout [ 445.199152] Bluetooth: hci1: command 0x2016 tx timeout [ 445.199188] Bluetooth: hci6: command 0x2016 tx timeout [ 445.262910] Bluetooth: hci5: command 0x0406 tx timeout [ 445.391017] Bluetooth: hci0: command 0x2016 tx timeout [ 445.647036] Bluetooth: hci3: command 0x2016 tx timeout [ 447.182976] Bluetooth: hci4: command 0x0406 tx timeout [ 447.247009] Bluetooth: hci1: command 0x2016 tx timeout [ 447.247058] Bluetooth: hci6: command 0x2016 tx timeout [ 447.311123] Bluetooth: hci5: command 0x0406 tx timeout [ 447.438961] Bluetooth: hci0: command 0x2016 tx timeout [ 447.695015] Bluetooth: hci3: command 0x2016 tx timeout 18:26:22 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000"], 0x22) 18:26:22 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:22 executing program 1: syncfs(0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:26:22 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 18:26:22 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:26:22 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) 18:26:22 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)="c85fb1765d0b669e9721e1dab16c49b8212c2ee358f61b595274f70a0cdb8bc09dd016c34a45ef7f5fdf42a0016adaff4656c2ddc6272d9941cb3547f608bbd629288c2501b08fc63830f3e0892737cdc2e5256ee3940355f5fdcfeec84e5955b346e4f0fb62d70002020686e9dfcd054d", 0x71}, {&(0x7f0000000140)="3190eb837c8fbb1ac1d970d936c93fe504bb7dfe07eab800f3085724889676651576c45dc5d325cff8da56a58fb7b2991dce9099be0a22c7a96c9ed6f1", 0x3d}, {&(0x7f0000000180)="dae334eb2576b709055218a0401c42ecd1ab11e185b1180f7f18473ce805c6c582a6", 0x22}, {&(0x7f0000000200)="5d48fe55fe95905075a5d0712923ec4ca5c0bbb531b3b7", 0x17}, {&(0x7f0000000240)="b2cd33fe6e8193a544dfc6c557c00ceb3dd82b0ea64ce4a82e837cb99bb30f35c1052b1c1ca2d706a63bd58c6ec1aae999", 0x31}, {&(0x7f00000002c0)="39e8bc969686fdbace30c2c039aa69a7df9a766775fee5bd8264ecf5be6e3a8944eaa519f5c6f4894da8fc51f6bd0c77a1f87595577de4b6981c2f93f78abc008d5bec141f162f7c724757571d90759dc020f47f93f784b1debe1a9e82eaf69fdf1ce47eae912e711c670f2499b4601608104eec8ee3ff7c338e7573b53799abe4b285298a6b1c2f9930f3ad8b537aa9794f376b76cfa47cb35aa98135ac1a1a4b55f75f79f4ddb7a4ee46bd1e5ab5a196", 0xb1}, {&(0x7f0000000380)="f26327cdec9c3ea6510491dd0c594c2f3e8915f145a42ae3d629cf0e3cddfd4b9504e6f06369fb97e3aa0907788d804a96439fca7386ba05aaf0e456df498fd495d69137183a1a8ca2fbd70db51d7745d9b5a78bd80dca207732d5698e169b767f598e4ec3153c4c78432fb4019c33f6c42f2d0bd2fa74808c4870af48aa336b8e62476551ac5a73ae0224ab0ec3d94f46c4c79cd8c54b13ebeea516520252f620fba2f019425e1ba16280f4fda0639480fdd184f83580f865a9178fe1aa512b75b64c059b44f335254a44264e38032e76b51bcd3e19b3e4574a3a", 0xdb}, {&(0x7f0000000480)="8273f2d9c571e2df15e4a8ee2b7aac7c55be54569ca9cac41fe7b2c6979e97db1012215364b7ee6e2e2cc1dad8b4a981e13ecefaba4b558312a4bbc7c9efa3df7e1c2718e0bb81fd56c300a4b968cc47ffc4f502a3bde19fa01d72c7dff42cee45894fe95b400b8fc8a7d65502c5db91619f53ae1dce201e01df0f4861b1241365769bd74a37db4db29b91a056c1b533d7562cb00c461a0346ef19ac419d35944278d68af585ccdee6b258b75616fb2d5261ef0b1be31961e21b78da1f414ee5ca808b1c50355e82aee414139fdefe0f98e97d1eb57021dc0297c50b0a608f7307", 0xe1}, {&(0x7f0000000580)="bb54e8e52b3f669f335c7986c347f2694099ad9896eaf332c1e61fc3cd5bac5a6bb3ea6eacab6e144ac84a8ef5a18a225537b93a3732751e8bec9ba0fbe8b6d9087b68e463a1d2a86677ba7c5abea350c5801efe92c7e121f1e0c4f76d6f22ce77eedacbf7c8", 0x66}, {&(0x7f0000000600)="ada128090987434779eb74abe1167b4e33b704b27693997f56178b21d6ca8ce12a49244ebe7d2da1002e524de7028cf798ee196c54027a7b0a6a5fc453e4a1266e0b7142a400b1c990dc053089c460af939fb27e6d5a13a170af169b2a9923b3b92ab5ded9bc7555680b87e491a23c0d36608b", 0x73}], 0xa, 0x0, 0x0, 0x4004084}, 0x4004) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_req={{0x17, 0x80, 0x16}, {0x20, 0x101, 0x7ff, 0x1ff, [0x1, 0x5, 0x8001, 0x3ff, 0x802, 0x3, 0x400]}}}}, 0x23) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:22 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2423ff17d6e60d1d26f7fa28c7229950484ea9be4dcbf0b56d20073968c76613012119e31a77bf043700"/65], 0x22) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x3, 0x7f}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "9d815b", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x4, 0x67d, 0x3f}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x3, 0x200}}, @l2cap_cmd_rej_unk={{0x1, 0xa0, 0x2}, {0x20}}]}}, 0x20) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9d}, "155185ea1df80cc656b81aab44e64c7efbaea67091f56c53e85c21d7957f787dcfbcf1b5338a0f413dbe0540dbb4d593f4b616b7ce3ade40d39cbfc2493222e81dae6e5e5a7faa60ec45861000dd7b7a9845ab8716aa06b478a7c0d66e147979963837333d2d87c9080dbde9bfcf70bc231d5b61b2e2b9d56ec105492d32359617380bee776860cc56a717b61510b232b47e5a94263c965bfb900e0106"}, 0xa1) 18:26:22 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000"], 0x22) [ 448.871369] debugfs: '0' already exists in 'hci6' [ 448.872400] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 448.874054] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 448.874083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 448.874097] Workqueue: hci6 hci_rx_work [ 448.874127] Call Trace: [ 448.874134] [ 448.874143] dump_stack_lvl+0xfa/0x120 [ 448.874172] sysfs_warn_dup+0x80/0xa0 [ 448.874200] sysfs_create_dir_ns+0x23b/0x2a0 [ 448.874226] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 448.874251] ? find_held_lock+0x2b/0x80 [ 448.874288] ? lock_release+0xc8/0x270 [ 448.874312] ? do_raw_spin_unlock+0x53/0x220 [ 448.874345] kobject_add_internal+0x24c/0x9a0 [ 448.874383] kobject_add+0x157/0x240 [ 448.874416] ? __pfx_kobject_add+0x10/0x10 [ 448.874448] ? lock_release+0xc8/0x270 [ 448.874472] ? do_raw_spin_unlock+0x53/0x220 [ 448.874502] ? kobject_put+0xaa/0x260 [ 448.874543] device_add+0x32d/0x1830 [ 448.874573] ? __pfx_device_add+0x10/0x10 [ 448.874599] ? hci_debugfs_create_conn+0x10f/0x240 [ 448.874629] ? mgmt_send_event_skb+0x2f3/0x460 [ 448.874651] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 448.874686] hci_conn_add_sysfs+0x117/0x1c0 [ 448.874716] le_conn_complete_evt+0x1246/0x1e40 [ 448.874762] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 448.874808] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 448.874840] ? __asan_memcpy+0x3d/0x60 [ 448.874878] hci_le_meta_evt+0x34b/0x530 [ 448.874898] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 448.874925] hci_event_packet+0x66c/0x10e0 [ 448.874950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 448.874972] ? __pfx_hci_event_packet+0x10/0x10 [ 448.874996] ? mark_held_locks+0x49/0x80 [ 448.875023] ? kcov_remote_start+0x2ce/0x5a0 [ 448.875064] hci_rx_work+0x65b/0x8b0 [ 448.875090] process_one_work+0x8e1/0x1960 [ 448.875128] ? __pfx_process_one_work+0x10/0x10 [ 448.875155] ? move_linked_works+0x172/0x270 [ 448.875194] ? assign_work+0x196/0x240 [ 448.875221] worker_thread+0x67e/0xe90 [ 448.875249] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 448.875293] ? __pfx_worker_thread+0x10/0x10 [ 448.875321] kthread+0x3c8/0x740 [ 448.875345] ? __pfx_kthread+0x10/0x10 [ 448.875367] ? ret_from_fork+0x79/0x7a0 [ 448.875390] ? lock_release+0xc8/0x270 [ 448.875415] ? __pfx_kthread+0x10/0x10 [ 448.875439] ret_from_fork+0x67a/0x7a0 [ 448.875461] ? __pfx_ret_from_fork+0x10/0x10 [ 448.875485] ? __switch_to+0x759/0x1030 [ 448.875516] ? __pfx_kthread+0x10/0x10 [ 448.875540] ret_from_fork_asm+0x1a/0x30 [ 448.875585] [ 448.887374] debugfs: '0' already exists in 'hci3' [ 448.887941] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 448.888500] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 448.889170] Bluetooth: hci6: failed to register connection device [ 448.889526] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 448.889544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 448.889552] Workqueue: hci3 hci_rx_work [ 448.889573] Call Trace: [ 448.889578] [ 448.889582] dump_stack_lvl+0xfa/0x120 [ 448.889600] sysfs_warn_dup+0x80/0xa0 [ 448.889618] sysfs_create_dir_ns+0x23b/0x2a0 [ 448.889633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 448.889647] ? find_held_lock+0x2b/0x80 [ 448.889669] ? lock_release+0xc8/0x270 [ 448.889683] ? do_raw_spin_unlock+0x53/0x220 [ 448.889701] kobject_add_internal+0x24c/0x9a0 [ 448.889723] kobject_add+0x157/0x240 [ 448.889741] ? __pfx_kobject_add+0x10/0x10 [ 448.889759] ? lock_release+0xc8/0x270 [ 448.889773] ? do_raw_spin_unlock+0x53/0x220 [ 448.889790] ? kobject_put+0xaa/0x260 [ 448.889812] device_add+0x32d/0x1830 [ 448.889834] ? __pfx_device_add+0x10/0x10 [ 448.889849] ? hci_debugfs_create_conn+0x10f/0x240 [ 448.889867] ? mgmt_send_event_skb+0x2f3/0x460 [ 448.889880] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 448.889900] hci_conn_add_sysfs+0x117/0x1c0 [ 448.889917] le_conn_complete_evt+0x1246/0x1e40 [ 448.889943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 448.889969] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 448.889983] ? __asan_memcpy+0x3d/0x60 [ 448.890005] hci_le_meta_evt+0x34b/0x530 [ 448.890016] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 448.890031] hci_event_packet+0x66c/0x10e0 [ 448.890043] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 448.890055] ? __pfx_hci_event_packet+0x10/0x10 [ 448.890068] ? mark_held_locks+0x49/0x80 [ 448.890082] ? kcov_remote_start+0x2ce/0x5a0 [ 448.890104] hci_rx_work+0x65b/0x8b0 [ 448.890119] process_one_work+0x8e1/0x1960 [ 448.890141] ? __pfx_process_one_work+0x10/0x10 [ 448.890156] ? move_linked_works+0x172/0x270 [ 448.890178] ? assign_work+0x196/0x240 [ 448.890194] worker_thread+0x67e/0xe90 [ 448.890209] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 448.890234] ? __pfx_worker_thread+0x10/0x10 [ 448.890249] kthread+0x3c8/0x740 [ 448.890263] ? __pfx_kthread+0x10/0x10 [ 448.890276] ? ret_from_fork+0x79/0x7a0 [ 448.890289] ? lock_release+0xc8/0x270 [ 448.890303] ? __pfx_kthread+0x10/0x10 [ 448.890316] ret_from_fork+0x67a/0x7a0 [ 448.890328] ? __pfx_ret_from_fork+0x10/0x10 [ 448.890342] ? __switch_to+0x759/0x1030 [ 448.890359] ? __pfx_kthread+0x10/0x10 [ 448.890373] ret_from_fork_asm+0x1a/0x30 [ 448.890398] [ 448.890479] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 448.922295] Bluetooth: hci3: failed to register connection device [ 448.927120] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 448.927358] Bluetooth: hci1: connection err: -111 [ 448.937316] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 448.954672] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 448.956433] Bluetooth: hci1: connection err: -111 18:26:22 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) [ 448.973201] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 448.973444] debugfs: '0' already exists in 'hci0' [ 448.974648] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 448.975472] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 448.975499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 448.975508] Workqueue: hci0 hci_rx_work [ 448.975526] Call Trace: [ 448.975531] [ 448.975536] dump_stack_lvl+0xfa/0x120 [ 448.975553] sysfs_warn_dup+0x80/0xa0 [ 448.975569] sysfs_create_dir_ns+0x23b/0x2a0 [ 448.975584] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 448.975598] ? find_held_lock+0x2b/0x80 [ 448.975618] ? lock_release+0xc8/0x270 [ 448.975633] ? do_raw_spin_unlock+0x53/0x220 [ 448.975650] kobject_add_internal+0x24c/0x9a0 [ 448.975672] kobject_add+0x157/0x240 [ 448.975690] ? __pfx_kobject_add+0x10/0x10 [ 448.975708] ? lock_release+0xc8/0x270 [ 448.975722] ? do_raw_spin_unlock+0x53/0x220 [ 448.975739] ? kobject_put+0xaa/0x260 [ 448.975761] device_add+0x32d/0x1830 [ 448.975778] ? __pfx_device_add+0x10/0x10 [ 448.975793] ? hci_debugfs_create_conn+0x10f/0x240 [ 448.975809] ? mgmt_send_event_skb+0x2f3/0x460 [ 448.975822] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 448.975846] hci_conn_add_sysfs+0x117/0x1c0 [ 448.975863] le_conn_complete_evt+0x1246/0x1e40 [ 448.975888] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 448.975914] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 448.975927] ? __asan_memcpy+0x3d/0x60 [ 448.975949] hci_le_meta_evt+0x34b/0x530 [ 448.975960] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 448.975974] hci_event_packet+0x66c/0x10e0 [ 448.975987] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 448.975999] ? __pfx_hci_event_packet+0x10/0x10 [ 448.976011] ? mark_held_locks+0x49/0x80 [ 448.976025] ? kcov_remote_start+0x2ce/0x5a0 [ 448.976047] hci_rx_work+0x65b/0x8b0 [ 448.976061] process_one_work+0x8e1/0x1960 [ 448.976083] ? __pfx_process_one_work+0x10/0x10 [ 448.976098] ? move_linked_works+0x172/0x270 [ 448.976119] ? assign_work+0x196/0x240 [ 448.976134] worker_thread+0x67e/0xe90 [ 448.976149] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 448.976174] ? __pfx_worker_thread+0x10/0x10 [ 448.976190] kthread+0x3c8/0x740 [ 448.976203] ? __pfx_kthread+0x10/0x10 [ 448.976214] ? ret_from_fork+0x79/0x7a0 [ 448.976227] ? lock_release+0xc8/0x270 [ 448.976241] ? __pfx_kthread+0x10/0x10 [ 448.976255] ret_from_fork+0x67a/0x7a0 [ 448.976266] ? __pfx_ret_from_fork+0x10/0x10 [ 448.976280] ? __switch_to+0x759/0x1030 [ 448.976297] ? __pfx_kthread+0x10/0x10 [ 448.976311] ret_from_fork_asm+0x1a/0x30 [ 448.976335] [ 448.994482] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 448.995565] Bluetooth: hci0: failed to register connection device 18:26:22 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:22 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_wakeup_irq', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/130, 0x82, 0x81) pwrite64(r0, &(0x7f0000000200)="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", 0x1000, 0x8000) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:26:22 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) syz_emit_vhci(0x0, 0x0) [ 449.059229] debugfs: '0' already exists in 'hci7' [ 449.060202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 449.060909] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 449.060924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.060933] Workqueue: hci7 hci_rx_work [ 449.060952] Call Trace: [ 449.060956] [ 449.060961] dump_stack_lvl+0xfa/0x120 [ 449.060978] sysfs_warn_dup+0x80/0xa0 [ 449.060995] sysfs_create_dir_ns+0x23b/0x2a0 [ 449.061009] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.061023] ? find_held_lock+0x2b/0x80 [ 449.061045] ? lock_release+0xc8/0x270 [ 449.061058] ? do_raw_spin_unlock+0x53/0x220 [ 449.061076] kobject_add_internal+0x24c/0x9a0 [ 449.061098] kobject_add+0x157/0x240 [ 449.061121] ? __pfx_kobject_add+0x10/0x10 [ 449.061139] ? lock_release+0xc8/0x270 [ 449.061153] ? do_raw_spin_unlock+0x53/0x220 [ 449.061170] ? kobject_put+0xaa/0x260 [ 449.061192] device_add+0x32d/0x1830 [ 449.061209] ? __pfx_device_add+0x10/0x10 [ 449.061224] ? hci_debugfs_create_conn+0x10f/0x240 [ 449.061241] ? mgmt_send_event_skb+0x2f3/0x460 [ 449.061254] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 449.061274] hci_conn_add_sysfs+0x117/0x1c0 [ 449.061291] le_conn_complete_evt+0x1246/0x1e40 [ 449.061316] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.061342] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 449.061356] ? __asan_memcpy+0x3d/0x60 [ 449.061378] hci_le_meta_evt+0x34b/0x530 [ 449.061388] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 449.061403] hci_event_packet+0x66c/0x10e0 [ 449.061416] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.061427] ? __pfx_hci_event_packet+0x10/0x10 [ 449.061440] ? mark_held_locks+0x49/0x80 [ 449.061454] ? kcov_remote_start+0x2ce/0x5a0 [ 449.061476] hci_rx_work+0x65b/0x8b0 [ 449.061491] process_one_work+0x8e1/0x1960 [ 449.061513] ? __pfx_process_one_work+0x10/0x10 [ 449.061528] ? move_linked_works+0x172/0x270 [ 449.061550] ? assign_work+0x196/0x240 [ 449.061565] worker_thread+0x67e/0xe90 [ 449.061580] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 449.061605] ? __pfx_worker_thread+0x10/0x10 [ 449.061621] kthread+0x3c8/0x740 [ 449.061634] ? __pfx_kthread+0x10/0x10 [ 449.061646] ? ret_from_fork+0x79/0x7a0 [ 449.061659] ? lock_release+0xc8/0x270 [ 449.061672] ? __pfx_kthread+0x10/0x10 [ 449.061686] ret_from_fork+0x67a/0x7a0 [ 449.061698] ? __pfx_ret_from_fork+0x10/0x10 [ 449.061711] ? __switch_to+0x759/0x1030 [ 449.061728] ? __pfx_kthread+0x10/0x10 [ 449.061742] ret_from_fork_asm+0x1a/0x30 [ 449.061767] [ 449.061795] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.081170] Bluetooth: hci7: failed to register connection device [ 449.113407] debugfs: '0' already exists in 'hci5' [ 449.114062] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 449.114728] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 449.114744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.114752] Workqueue: hci5 hci_rx_work [ 449.114767] Call Trace: [ 449.114771] [ 449.114776] dump_stack_lvl+0xfa/0x120 [ 449.114792] sysfs_warn_dup+0x80/0xa0 [ 449.114807] sysfs_create_dir_ns+0x23b/0x2a0 [ 449.114826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.114840] ? find_held_lock+0x2b/0x80 [ 449.114860] ? lock_release+0xc8/0x270 [ 449.114874] ? do_raw_spin_unlock+0x53/0x220 [ 449.114892] kobject_add_internal+0x24c/0x9a0 [ 449.114913] kobject_add+0x157/0x240 [ 449.114931] ? __pfx_kobject_add+0x10/0x10 [ 449.114948] ? lock_release+0xc8/0x270 [ 449.114962] ? do_raw_spin_unlock+0x53/0x220 [ 449.114979] ? kobject_put+0xaa/0x260 [ 449.115001] device_add+0x32d/0x1830 [ 449.115017] ? __pfx_device_add+0x10/0x10 [ 449.115031] ? hci_debugfs_create_conn+0x10f/0x240 [ 449.115048] ? mgmt_send_event_skb+0x2f3/0x460 [ 449.115060] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 449.115079] hci_conn_add_sysfs+0x117/0x1c0 [ 449.115096] le_conn_complete_evt+0x1246/0x1e40 [ 449.115121] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.115147] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 449.115160] ? __asan_memcpy+0x3d/0x60 [ 449.115181] hci_le_meta_evt+0x34b/0x530 [ 449.115192] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 449.115206] hci_event_packet+0x66c/0x10e0 [ 449.115219] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.115231] ? __pfx_hci_event_packet+0x10/0x10 [ 449.115243] ? mark_held_locks+0x49/0x80 [ 449.115257] ? kcov_remote_start+0x2ce/0x5a0 [ 449.115279] hci_rx_work+0x65b/0x8b0 [ 449.115293] process_one_work+0x8e1/0x1960 [ 449.115315] ? __pfx_process_one_work+0x10/0x10 [ 449.115330] ? move_linked_works+0x172/0x270 [ 449.115351] ? assign_work+0x196/0x240 [ 449.115366] worker_thread+0x67e/0xe90 [ 449.115381] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 449.115405] ? __pfx_worker_thread+0x10/0x10 [ 449.115420] kthread+0x3c8/0x740 [ 449.115433] ? __pfx_kthread+0x10/0x10 [ 449.115445] ? ret_from_fork+0x79/0x7a0 [ 449.115458] ? lock_release+0xc8/0x270 [ 449.115471] ? __pfx_kthread+0x10/0x10 [ 449.115485] ret_from_fork+0x67a/0x7a0 [ 449.115497] ? __pfx_ret_from_fork+0x10/0x10 [ 449.115510] ? __switch_to+0x759/0x1030 [ 449.115527] ? __pfx_kthread+0x10/0x10 [ 449.115541] ret_from_fork_asm+0x1a/0x30 [ 449.115565] [ 449.133652] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.134751] Bluetooth: hci5: failed to register connection device [ 449.165916] debugfs: '0' already exists in 'hci1' [ 449.166454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 449.167259] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 449.167275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.167283] Workqueue: hci1 hci_rx_work [ 449.167297] Call Trace: [ 449.167302] [ 449.167307] dump_stack_lvl+0xfa/0x120 [ 449.167322] sysfs_warn_dup+0x80/0xa0 [ 449.167338] sysfs_create_dir_ns+0x23b/0x2a0 [ 449.167352] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.167366] ? find_held_lock+0x2b/0x80 [ 449.167385] ? lock_release+0xc8/0x270 [ 449.167399] ? do_raw_spin_unlock+0x53/0x220 [ 449.167417] kobject_add_internal+0x24c/0x9a0 [ 449.167438] kobject_add+0x157/0x240 [ 449.167456] ? __pfx_kobject_add+0x10/0x10 [ 449.167474] ? lock_release+0xc8/0x270 [ 449.167488] ? do_raw_spin_unlock+0x53/0x220 [ 449.167504] ? kobject_put+0xaa/0x260 [ 449.167526] device_add+0x32d/0x1830 [ 449.167543] ? __pfx_device_add+0x10/0x10 [ 449.167557] ? hci_debugfs_create_conn+0x10f/0x240 [ 449.167573] ? mgmt_send_event_skb+0x2f3/0x460 [ 449.167586] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 449.167608] hci_conn_add_sysfs+0x117/0x1c0 [ 449.167627] le_conn_complete_evt+0x1246/0x1e40 [ 449.167652] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.167678] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 449.167691] ? __asan_memcpy+0x3d/0x60 [ 449.167713] hci_le_meta_evt+0x34b/0x530 [ 449.167723] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 449.167738] hci_event_packet+0x66c/0x10e0 [ 449.167751] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.167762] ? __pfx_hci_event_packet+0x10/0x10 [ 449.167775] ? mark_held_locks+0x49/0x80 [ 449.167789] ? kcov_remote_start+0x2ce/0x5a0 [ 449.167810] hci_rx_work+0x65b/0x8b0 [ 449.167829] process_one_work+0x8e1/0x1960 [ 449.167851] ? __pfx_process_one_work+0x10/0x10 [ 449.167865] ? move_linked_works+0x172/0x270 [ 449.167886] ? assign_work+0x196/0x240 [ 449.167901] worker_thread+0x67e/0xe90 [ 449.167916] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 449.167940] ? __pfx_worker_thread+0x10/0x10 [ 449.167955] kthread+0x3c8/0x740 [ 449.167968] ? __pfx_kthread+0x10/0x10 [ 449.167980] ? ret_from_fork+0x79/0x7a0 [ 449.167992] ? lock_release+0xc8/0x270 [ 449.168006] ? __pfx_kthread+0x10/0x10 [ 449.168020] ret_from_fork+0x67a/0x7a0 [ 449.168032] ? __pfx_ret_from_fork+0x10/0x10 [ 449.168045] ? __switch_to+0x759/0x1030 [ 449.168062] ? __pfx_kthread+0x10/0x10 [ 449.168076] ret_from_fork_asm+0x1a/0x30 [ 449.168100] [ 449.186201] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.187327] Bluetooth: hci1: failed to register connection device [ 449.188234] debugfs: '0' already exists in 'hci0' [ 449.188753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 449.189870] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 449.189885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.189893] Workqueue: hci0 hci_rx_work [ 449.189906] Call Trace: [ 449.189909] [ 449.189914] dump_stack_lvl+0xfa/0x120 [ 449.189929] sysfs_warn_dup+0x80/0xa0 [ 449.189943] sysfs_create_dir_ns+0x23b/0x2a0 [ 449.189958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.189972] ? find_held_lock+0x2b/0x80 [ 449.189991] ? lock_release+0xc8/0x270 [ 449.190005] ? do_raw_spin_unlock+0x53/0x220 [ 449.190023] kobject_add_internal+0x24c/0x9a0 [ 449.190044] kobject_add+0x157/0x240 [ 449.190062] ? __pfx_kobject_add+0x10/0x10 [ 449.190080] ? lock_release+0xc8/0x270 [ 449.190094] ? do_raw_spin_unlock+0x53/0x220 [ 449.190111] ? kobject_put+0xaa/0x260 [ 449.190133] device_add+0x32d/0x1830 [ 449.190149] ? __pfx_device_add+0x10/0x10 [ 449.190163] ? hci_debugfs_create_conn+0x10f/0x240 [ 449.190178] ? mgmt_send_event_skb+0x2f3/0x460 [ 449.190190] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 449.190210] hci_conn_add_sysfs+0x117/0x1c0 [ 449.190226] le_conn_complete_evt+0x1246/0x1e40 [ 449.190250] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.190277] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 449.190290] ? __asan_memcpy+0x3d/0x60 [ 449.190311] hci_le_meta_evt+0x34b/0x530 [ 449.190322] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 449.190336] hci_event_packet+0x66c/0x10e0 [ 449.190349] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.190361] ? __pfx_hci_event_packet+0x10/0x10 [ 449.190373] ? mark_held_locks+0x49/0x80 [ 449.190387] ? kcov_remote_start+0x2ce/0x5a0 [ 449.190408] hci_rx_work+0x65b/0x8b0 [ 449.190422] process_one_work+0x8e1/0x1960 [ 449.190443] ? __pfx_process_one_work+0x10/0x10 [ 449.190458] ? move_linked_works+0x172/0x270 [ 449.190479] ? assign_work+0x196/0x240 [ 449.190494] worker_thread+0x67e/0xe90 [ 449.190509] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 449.190532] ? __pfx_worker_thread+0x10/0x10 [ 449.190548] kthread+0x3c8/0x740 [ 449.190561] ? __pfx_kthread+0x10/0x10 [ 449.190573] ? ret_from_fork+0x79/0x7a0 [ 449.190584] ? lock_release+0xc8/0x270 [ 449.190598] ? __pfx_kthread+0x10/0x10 [ 449.190612] ret_from_fork+0x67a/0x7a0 [ 449.190623] ? __pfx_ret_from_fork+0x10/0x10 [ 449.190637] ? __switch_to+0x759/0x1030 [ 449.190654] ? __pfx_kthread+0x10/0x10 [ 449.190667] ret_from_fork_asm+0x1a/0x30 [ 449.190691] [ 449.190709] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.210281] Bluetooth: hci0: failed to register connection device [ 449.211361] debugfs: '0' already exists in 'hci0' [ 449.211890] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 449.212560] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 449.212576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.212584] Workqueue: hci0 hci_rx_work [ 449.212596] Call Trace: [ 449.212600] [ 449.212605] dump_stack_lvl+0xfa/0x120 [ 449.212620] sysfs_warn_dup+0x80/0xa0 [ 449.212634] sysfs_create_dir_ns+0x23b/0x2a0 [ 449.212649] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.212663] ? find_held_lock+0x2b/0x80 [ 449.212682] ? lock_release+0xc8/0x270 [ 449.212696] ? do_raw_spin_unlock+0x53/0x220 [ 449.212714] kobject_add_internal+0x24c/0x9a0 [ 449.212735] kobject_add+0x157/0x240 [ 449.212754] ? __pfx_kobject_add+0x10/0x10 [ 449.212772] ? lock_release+0xc8/0x270 [ 449.212786] ? do_raw_spin_unlock+0x53/0x220 [ 449.212803] ? kobject_put+0xaa/0x260 [ 449.212829] device_add+0x32d/0x1830 [ 449.212845] ? __pfx_device_add+0x10/0x10 [ 449.212860] ? hci_debugfs_create_conn+0x10f/0x240 [ 449.212876] ? mgmt_send_event_skb+0x2f3/0x460 [ 449.212888] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 449.212907] hci_conn_add_sysfs+0x117/0x1c0 [ 449.212923] le_conn_complete_evt+0x1246/0x1e40 [ 449.212948] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.212973] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 449.212987] ? __asan_memcpy+0x3d/0x60 [ 449.213007] hci_le_meta_evt+0x34b/0x530 [ 449.213018] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 449.213033] hci_event_packet+0x66c/0x10e0 [ 449.213046] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.213059] ? __pfx_hci_event_packet+0x10/0x10 [ 449.213073] ? mark_held_locks+0x49/0x80 [ 449.213087] ? kcov_remote_start+0x2ce/0x5a0 [ 449.213108] hci_rx_work+0x65b/0x8b0 [ 449.213123] process_one_work+0x8e1/0x1960 [ 449.213144] ? __pfx_process_one_work+0x10/0x10 [ 449.213160] ? move_linked_works+0x172/0x270 [ 449.213181] ? assign_work+0x196/0x240 [ 449.213196] worker_thread+0x67e/0xe90 [ 449.213212] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 449.213235] ? __pfx_worker_thread+0x10/0x10 [ 449.213251] kthread+0x3c8/0x740 [ 449.213264] ? __pfx_kthread+0x10/0x10 [ 449.213276] ? ret_from_fork+0x79/0x7a0 [ 449.213289] ? lock_release+0xc8/0x270 [ 449.213303] ? __pfx_kthread+0x10/0x10 [ 449.213317] ret_from_fork+0x67a/0x7a0 [ 449.213329] ? __pfx_ret_from_fork+0x10/0x10 [ 449.213343] ? __switch_to+0x759/0x1030 [ 449.213360] ? __pfx_kthread+0x10/0x10 [ 449.213374] ret_from_fork_asm+0x1a/0x30 [ 449.213398] [ 449.231499] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.232533] Bluetooth: hci0: failed to register connection device [ 449.233052] Bluetooth: hci4: command 0x0406 tx timeout [ 449.742915] Bluetooth: hci3: command 0x2016 tx timeout [ 450.830915] Bluetooth: hci6: command 0x2016 tx timeout [ 450.894976] Bluetooth: hci5: command 0x0406 tx timeout [ 450.958913] Bluetooth: hci7: command 0x2016 tx timeout [ 451.022953] Bluetooth: hci0: command 0x2016 tx timeout [ 451.214877] Bluetooth: hci1: command 0x2016 tx timeout [ 451.278897] Bluetooth: hci4: command 0x0406 tx timeout [ 451.791039] Bluetooth: hci3: command 0x2016 tx timeout [ 452.879153] Bluetooth: hci6: command 0x2016 tx timeout [ 452.942972] Bluetooth: hci5: command 0x0406 tx timeout [ 453.006947] Bluetooth: hci7: command 0x2016 tx timeout [ 453.071011] Bluetooth: hci0: command 0x2016 tx timeout [ 453.263003] Bluetooth: hci1: command 0x2016 tx timeout [ 453.327075] Bluetooth: hci4: command 0x0406 tx timeout [ 453.838945] Bluetooth: hci3: command 0x2016 tx timeout [ 454.927009] Bluetooth: hci6: command 0x2016 tx timeout [ 454.990958] Bluetooth: hci5: command 0x0406 tx timeout [ 455.054948] Bluetooth: hci7: command 0x2016 tx timeout [ 455.119021] Bluetooth: hci0: command 0x2016 tx timeout [ 455.310921] Bluetooth: hci1: command 0x2016 tx timeout [ 455.374939] Bluetooth: hci4: command 0x0406 tx timeout [ 455.886950] Bluetooth: hci3: command 0x2016 tx timeout [ 456.974970] Bluetooth: hci6: command 0x2016 tx timeout [ 457.038908] Bluetooth: hci5: command 0x0406 tx timeout [ 457.102985] Bluetooth: hci7: command 0x2016 tx timeout [ 457.167004] Bluetooth: hci0: command 0x2016 tx timeout [ 457.359009] Bluetooth: hci1: command 0x2016 tx timeout 18:26:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) flistxattr(r0, &(0x7f0000000140)=""/97, 0x61) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04d327b3fea922d745ab5ad50f3e1f8a"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) 18:26:31 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000140)=0x9, 0x3e79) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x0, 0x83b, 0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x2) close_range(0xffffffffffffffff, r4, 0x2) fcntl$setstatus(r0, 0x4, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x8, &(0x7f0000000380)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r5, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0xc1, 0x20, 0x0, 0xfffffffffffffffd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x4, 0x7, 0xfffffeffffff929e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYRES64=r5, @ANYBLOB="1e5bde88029ac81da59cf58080047e00e3ce87", @ANYRESDEC=r4, @ANYRES32=r0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES32], 0x22) 18:26:31 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x63}, "612d9bb1878ede1f05b9acd4e189a791847ec711dd4285728a80d9dc6665511e15ee1035f8b3edb33cffa2640a46faa1b8be33ed1c06f0394cdd4cc8c97539e2bd6414b59a12f01090fad7989d9b537291c51451627e93511431eddbdba66a9f1adc94"}, 0x67) 18:26:31 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "cc4c42271d91f49f"}}}, 0x11) 18:26:31 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:26:31 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x69}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd182"}}, 0x6c) 18:26:31 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000"], 0x22) 18:26:31 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) 18:26:31 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x58}, "94cb6f4cfa19b3652be175f799eb04dbe08608edacac7cc792d4f69a618dcb69a588807d050211ea85f35f68721c72f89b0e7f2a598bbf14b5b0bb12af19a1fd69e63afac298027d288c8313235dd171a9b9730dce09c187"}, 0x5c) [ 457.904056] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 457.935002] Bluetooth: hci3: command 0x2016 tx timeout 18:26:31 executing program 1: syz_usb_ep_write(0xffffffffffffffff, 0x8d, 0x3a, &(0x7f0000000040)="4f6a754363d983c63e16b3f0412a927276a810ead51c0f8a56f872695bfeaaf63ed69c80d5d6c7ed776dc9e0e2f3c662ba05eab50080ddf7e0b1") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x24}}}, 0xd) 18:26:31 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x69}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd182"}}, 0x6c) 18:26:31 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x7}}}}, 0x11) syz_emit_vhci(0x0, 0x0) 18:26:31 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000"], 0x22) 18:26:31 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000"], 0x22) 18:26:31 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) [ 458.010228] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 458.069058] debugfs: '0' already exists in 'hci5' 18:26:31 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="dd08a521f3cda7bbadc894abc6391d1c0f7db181f7a16889554a2ff34170a5af6384df16131a7c3d75e409fd25a7bec72a8f64fb8819f5ded14eb86e70d79970f0d67f475173b86f4da1867fb87f3495347afced232651bb00280b733a3157444e2e2dfde5ae2a6b80db362a6f33f1a2bfd2a3f7fc7369790722556567fe54cc00"/162], 0x22) [ 458.071437] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 458.072901] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.072931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.072946] Workqueue: hci5 hci_rx_work [ 458.072978] Call Trace: [ 458.072986] [ 458.072995] dump_stack_lvl+0xfa/0x120 [ 458.073026] sysfs_warn_dup+0x80/0xa0 [ 458.073056] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.073083] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.073109] ? find_held_lock+0x2b/0x80 [ 458.073146] ? lock_release+0xc8/0x270 [ 458.073172] ? do_raw_spin_unlock+0x53/0x220 [ 458.073205] kobject_add_internal+0x24c/0x9a0 [ 458.073245] kobject_add+0x157/0x240 [ 458.073279] ? __pfx_kobject_add+0x10/0x10 [ 458.073312] ? lock_release+0xc8/0x270 [ 458.073338] ? do_raw_spin_unlock+0x53/0x220 [ 458.073369] ? kobject_put+0xaa/0x260 [ 458.073415] device_add+0x32d/0x1830 [ 458.073446] ? __pfx_device_add+0x10/0x10 [ 458.073473] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.073504] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.073527] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.073563] hci_conn_add_sysfs+0x117/0x1c0 [ 458.073594] le_conn_complete_evt+0x1246/0x1e40 [ 458.073641] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.073689] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.073714] ? __asan_memcpy+0x3d/0x60 [ 458.073754] hci_le_meta_evt+0x34b/0x530 [ 458.073774] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.073802] hci_event_packet+0x66c/0x10e0 [ 458.073833] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.073855] ? __pfx_hci_event_packet+0x10/0x10 [ 458.073879] ? mark_held_locks+0x49/0x80 [ 458.073905] ? kcov_remote_start+0x2ce/0x5a0 [ 458.073945] hci_rx_work+0x65b/0x8b0 [ 458.073972] process_one_work+0x8e1/0x1960 [ 458.074013] ? __pfx_process_one_work+0x10/0x10 [ 458.074040] ? move_linked_works+0x172/0x270 [ 458.074079] ? assign_work+0x196/0x240 [ 458.074108] worker_thread+0x67e/0xe90 [ 458.074136] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.074181] ? __pfx_worker_thread+0x10/0x10 [ 458.074210] kthread+0x3c8/0x740 [ 458.074234] ? __pfx_kthread+0x10/0x10 [ 458.074257] ? ret_from_fork+0x79/0x7a0 [ 458.074283] ? __pfx_kthread+0x10/0x10 [ 458.074308] ret_from_fork+0x67a/0x7a0 [ 458.074331] ? __pfx_ret_from_fork+0x10/0x10 [ 458.074356] ? __switch_to+0x759/0x1030 [ 458.074388] ? __pfx_kthread+0x10/0x10 [ 458.074413] ret_from_fork_asm+0x1a/0x30 [ 458.074458] [ 458.075116] debugfs: '0' already exists in 'hci6' [ 458.076391] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.077011] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 458.077381] Bluetooth: hci5: failed to register connection device [ 458.077576] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.077595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.077605] Workqueue: hci6 hci_rx_work [ 458.077628] Call Trace: [ 458.077633] [ 458.077638] dump_stack_lvl+0xfa/0x120 [ 458.077659] sysfs_warn_dup+0x80/0xa0 [ 458.077679] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.077699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.077713] ? find_held_lock+0x2b/0x80 [ 458.077737] ? lock_release+0xc8/0x270 [ 458.077752] ? do_raw_spin_unlock+0x53/0x220 [ 458.077771] kobject_add_internal+0x24c/0x9a0 [ 458.077794] kobject_add+0x157/0x240 [ 458.077813] ? __pfx_kobject_add+0x10/0x10 [ 458.077831] ? lock_release+0xc8/0x270 [ 458.077845] ? do_raw_spin_unlock+0x53/0x220 [ 458.077862] ? kobject_put+0xaa/0x260 [ 458.077885] device_add+0x32d/0x1830 [ 458.077904] ? __pfx_device_add+0x10/0x10 [ 458.077919] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.077938] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.077952] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.077972] hci_conn_add_sysfs+0x117/0x1c0 [ 458.077990] le_conn_complete_evt+0x1246/0x1e40 [ 458.078018] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.078044] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.078058] ? __asan_memcpy+0x3d/0x60 [ 458.078082] hci_le_meta_evt+0x34b/0x530 [ 458.078094] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.078108] hci_event_packet+0x66c/0x10e0 [ 458.078123] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.078134] ? __pfx_hci_event_packet+0x10/0x10 [ 458.078147] ? mark_held_locks+0x49/0x80 [ 458.078162] ? kcov_remote_start+0x2ce/0x5a0 [ 458.078186] hci_rx_work+0x65b/0x8b0 [ 458.078201] process_one_work+0x8e1/0x1960 [ 458.078224] ? __pfx_process_one_work+0x10/0x10 [ 458.078239] ? move_linked_works+0x172/0x270 [ 458.078262] ? assign_work+0x196/0x240 [ 458.078278] worker_thread+0x67e/0xe90 [ 458.078293] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.078319] ? __pfx_worker_thread+0x10/0x10 [ 458.078335] kthread+0x3c8/0x740 [ 458.078349] ? __pfx_kthread+0x10/0x10 [ 458.078362] ? ret_from_fork+0x79/0x7a0 [ 458.078375] ? lock_release+0xc8/0x270 [ 458.078390] ? __pfx_kthread+0x10/0x10 18:26:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1d0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_SEC_DEVKEY={0x148, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xb8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1d0}}, 0x40) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf3}, "2823841f0c592cb574799e3170a955c6271996ac39f329ac63860234529e334b7cb01ae39e56a3fc94d7c7e2a2dd45e7db2743677e46b2cee5549a3ab58a02f95cfd26ebd30c6703e723d23e90f28624b5391e625ddf8ea483c6271e37846f639032ce725c2d919babf478e0d6acab2e7ed8457c03d8e5f56018dac0d762038e02246030b3bb0597883e7a0ac5aba19c8446e0d68e5a32f2589415ae035a57bf3914dfac7cb1817f8d150b0dee54e70d3127fd9ad3a36103f72ebd5a6418e3b344bb3148de3df00234152cd0115fb9c21773f89ff3e70d7d2b693c7744114689a77f899575004ae5e03a4bc56abf029d17f6e5"}, 0xf7) [ 458.078403] ret_from_fork+0x67a/0x7a0 [ 458.078416] ? __pfx_ret_from_fork+0x10/0x10 [ 458.078430] ? __switch_to+0x759/0x1030 [ 458.078448] ? __pfx_kthread+0x10/0x10 [ 458.078462] ret_from_fork_asm+0x1a/0x30 [ 458.078489] [ 458.078535] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.104552] debugfs: '0' already exists in 'hci1' [ 458.104863] Bluetooth: hci6: failed to register connection device [ 458.130775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 458.132067] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.132098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.132114] Workqueue: hci1 hci_rx_work [ 458.132145] Call Trace: [ 458.132154] [ 458.132164] dump_stack_lvl+0xfa/0x120 [ 458.132195] sysfs_warn_dup+0x80/0xa0 [ 458.132224] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.132252] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.132279] ? find_held_lock+0x2b/0x80 [ 458.132317] ? lock_release+0xc8/0x270 [ 458.132344] ? do_raw_spin_unlock+0x53/0x220 [ 458.132378] kobject_add_internal+0x24c/0x9a0 [ 458.132418] kobject_add+0x157/0x240 [ 458.132453] ? __pfx_kobject_add+0x10/0x10 [ 458.132487] ? lock_release+0xc8/0x270 [ 458.132514] ? do_raw_spin_unlock+0x53/0x220 [ 458.132560] ? kobject_put+0xaa/0x260 [ 458.132603] device_add+0x32d/0x1830 [ 458.132634] ? __pfx_device_add+0x10/0x10 [ 458.132662] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.132694] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.132718] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.132755] hci_conn_add_sysfs+0x117/0x1c0 [ 458.132787] le_conn_complete_evt+0x1246/0x1e40 [ 458.132841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.132890] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.132915] ? __asan_memcpy+0x3d/0x60 [ 458.132956] hci_le_meta_evt+0x34b/0x530 [ 458.132977] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.133004] hci_event_packet+0x66c/0x10e0 [ 458.133028] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.133050] ? __pfx_hci_event_packet+0x10/0x10 [ 458.133073] ? mark_held_locks+0x49/0x80 [ 458.133100] ? kcov_remote_start+0x2ce/0x5a0 [ 458.133141] hci_rx_work+0x65b/0x8b0 [ 458.133168] process_one_work+0x8e1/0x1960 [ 458.133209] ? __pfx_process_one_work+0x10/0x10 [ 458.133237] ? move_linked_works+0x172/0x270 [ 458.133278] ? assign_work+0x196/0x240 [ 458.133307] worker_thread+0x67e/0xe90 [ 458.133335] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.133381] ? __pfx_worker_thread+0x10/0x10 [ 458.133411] kthread+0x3c8/0x740 [ 458.133436] ? __pfx_kthread+0x10/0x10 [ 458.133459] ? ret_from_fork+0x79/0x7a0 [ 458.133485] ? __pfx_kthread+0x10/0x10 [ 458.133511] ret_from_fork+0x67a/0x7a0 [ 458.133534] ? __pfx_ret_from_fork+0x10/0x10 [ 458.133559] ? __switch_to+0x759/0x1030 [ 458.133592] ? __pfx_kthread+0x10/0x10 [ 458.133617] ret_from_fork_asm+0x1a/0x30 [ 458.133663] [ 458.167670] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.171025] Bluetooth: hci1: failed to register connection device [ 458.172585] debugfs: '0' already exists in 'hci7' [ 458.173588] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 458.175073] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.175103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.175118] Workqueue: hci7 hci_rx_work [ 458.175143] Call Trace: [ 458.175150] [ 458.175160] dump_stack_lvl+0xfa/0x120 [ 458.175189] sysfs_warn_dup+0x80/0xa0 [ 458.175217] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.175245] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.175271] ? find_held_lock+0x2b/0x80 [ 458.175307] ? lock_release+0xc8/0x270 [ 458.175334] ? do_raw_spin_unlock+0x53/0x220 [ 458.175367] kobject_add_internal+0x24c/0x9a0 [ 458.175406] kobject_add+0x157/0x240 [ 458.175440] ? __pfx_kobject_add+0x10/0x10 [ 458.175473] ? lock_release+0xc8/0x270 [ 458.175499] ? do_raw_spin_unlock+0x53/0x220 [ 458.175531] ? kobject_put+0xaa/0x260 [ 458.175573] device_add+0x32d/0x1830 [ 458.175603] ? __pfx_device_add+0x10/0x10 [ 458.175631] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.175661] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.175684] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.175721] hci_conn_add_sysfs+0x117/0x1c0 [ 458.175751] le_conn_complete_evt+0x1246/0x1e40 [ 458.175797] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.175853] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.175878] ? __asan_memcpy+0x3d/0x60 [ 458.175918] hci_le_meta_evt+0x34b/0x530 18:26:31 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x69}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd182"}}, 0x6c) [ 458.175938] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.175966] hci_event_packet+0x66c/0x10e0 [ 458.175990] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.176012] ? __pfx_hci_event_packet+0x10/0x10 [ 458.176035] ? mark_held_locks+0x49/0x80 [ 458.176061] ? kcov_remote_start+0x2ce/0x5a0 [ 458.176101] hci_rx_work+0x65b/0x8b0 [ 458.176129] process_one_work+0x8e1/0x1960 [ 458.176168] ? __pfx_process_one_work+0x10/0x10 [ 458.176195] ? move_linked_works+0x172/0x270 [ 458.176235] ? assign_work+0x196/0x240 [ 458.176263] worker_thread+0x67e/0xe90 [ 458.176291] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.176336] ? __pfx_worker_thread+0x10/0x10 [ 458.176365] kthread+0x3c8/0x740 [ 458.176390] ? __pfx_kthread+0x10/0x10 [ 458.176412] ? ret_from_fork+0x79/0x7a0 [ 458.176438] ? __pfx_kthread+0x10/0x10 [ 458.176464] ret_from_fork+0x67a/0x7a0 [ 458.176486] ? __pfx_ret_from_fork+0x10/0x10 [ 458.176512] ? __switch_to+0x759/0x1030 [ 458.176555] ? __pfx_kthread+0x10/0x10 [ 458.176581] ret_from_fork_asm+0x1a/0x30 [ 458.176626] [ 458.209251] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. 18:26:31 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000"], 0x22) [ 458.211617] Bluetooth: hci7: failed to register connection device 18:26:31 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000"], 0x22) 18:26:31 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 458.284348] debugfs: '0' already exists in 'hci3' [ 458.285596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 458.286803] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.286838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.286854] Workqueue: hci3 hci_rx_work [ 458.286882] Call Trace: [ 458.286890] [ 458.286899] dump_stack_lvl+0xfa/0x120 [ 458.286929] sysfs_warn_dup+0x80/0xa0 [ 458.286958] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.286986] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.287012] ? find_held_lock+0x2b/0x80 [ 458.287049] ? lock_release+0xc8/0x270 [ 458.287075] ? do_raw_spin_unlock+0x53/0x220 [ 458.287109] kobject_add_internal+0x24c/0x9a0 [ 458.287148] kobject_add+0x157/0x240 [ 458.287182] ? __pfx_kobject_add+0x10/0x10 [ 458.287215] ? lock_release+0xc8/0x270 [ 458.287241] ? do_raw_spin_unlock+0x53/0x220 [ 458.287273] ? kobject_put+0xaa/0x260 [ 458.287315] device_add+0x32d/0x1830 [ 458.287345] ? __pfx_device_add+0x10/0x10 [ 458.287372] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.287404] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.287427] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.287464] hci_conn_add_sysfs+0x117/0x1c0 [ 458.287495] le_conn_complete_evt+0x1246/0x1e40 [ 458.287542] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.287589] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.287615] ? __asan_memcpy+0x3d/0x60 [ 458.287654] hci_le_meta_evt+0x34b/0x530 [ 458.287673] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.287701] hci_event_packet+0x66c/0x10e0 [ 458.287725] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.287747] ? __pfx_hci_event_packet+0x10/0x10 [ 458.287770] ? mark_held_locks+0x49/0x80 [ 458.287797] ? kcov_remote_start+0x2ce/0x5a0 [ 458.287837] hci_rx_work+0x65b/0x8b0 [ 458.287864] process_one_work+0x8e1/0x1960 [ 458.287904] ? __pfx_process_one_work+0x10/0x10 [ 458.287931] ? move_linked_works+0x172/0x270 [ 458.287971] ? assign_work+0x196/0x240 [ 458.287999] worker_thread+0x67e/0xe90 [ 458.288027] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.288073] ? __pfx_worker_thread+0x10/0x10 [ 458.288102] kthread+0x3c8/0x740 [ 458.288126] ? __pfx_kthread+0x10/0x10 [ 458.288148] ? ret_from_fork+0x79/0x7a0 [ 458.288175] ? __pfx_kthread+0x10/0x10 [ 458.288200] ret_from_fork+0x67a/0x7a0 [ 458.288222] ? __pfx_ret_from_fork+0x10/0x10 [ 458.288248] ? __switch_to+0x759/0x1030 [ 458.288280] ? __pfx_kthread+0x10/0x10 [ 458.288305] ret_from_fork_asm+0x1a/0x30 [ 458.288351] [ 458.301707] debugfs: '0' already exists in 'hci5' [ 458.302326] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.303270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 458.303572] Bluetooth: hci3: failed to register connection device [ 458.303710] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.303728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.303737] Workqueue: hci5 hci_rx_work [ 458.303760] Call Trace: [ 458.303766] [ 458.303772] dump_stack_lvl+0xfa/0x120 [ 458.303793] sysfs_warn_dup+0x80/0xa0 [ 458.303813] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.303836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.303851] ? find_held_lock+0x2b/0x80 [ 458.303875] ? lock_release+0xc8/0x270 [ 458.303890] ? do_raw_spin_unlock+0x53/0x220 [ 458.303909] kobject_add_internal+0x24c/0x9a0 [ 458.303931] kobject_add+0x157/0x240 [ 458.303950] ? __pfx_kobject_add+0x10/0x10 [ 458.303968] ? lock_release+0xc8/0x270 [ 458.303983] ? do_raw_spin_unlock+0x53/0x220 [ 458.304000] ? kobject_put+0xaa/0x260 [ 458.304023] device_add+0x32d/0x1830 [ 458.304042] ? __pfx_device_add+0x10/0x10 [ 458.304057] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.304075] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.304089] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.304109] hci_conn_add_sysfs+0x117/0x1c0 [ 458.304127] le_conn_complete_evt+0x1246/0x1e40 [ 458.304154] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.304180] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.304194] ? __asan_memcpy+0x3d/0x60 [ 458.304218] hci_le_meta_evt+0x34b/0x530 [ 458.304230] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.304245] hci_event_packet+0x66c/0x10e0 [ 458.304259] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.304271] ? __pfx_hci_event_packet+0x10/0x10 [ 458.304284] ? mark_held_locks+0x49/0x80 [ 458.304299] ? kcov_remote_start+0x2ce/0x5a0 [ 458.304322] hci_rx_work+0x65b/0x8b0 [ 458.304337] process_one_work+0x8e1/0x1960 [ 458.304361] ? __pfx_process_one_work+0x10/0x10 [ 458.304375] ? move_linked_works+0x172/0x270 [ 458.304398] ? assign_work+0x196/0x240 [ 458.304414] worker_thread+0x67e/0xe90 [ 458.304429] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.304455] ? __pfx_worker_thread+0x10/0x10 [ 458.304471] kthread+0x3c8/0x740 [ 458.304485] ? __pfx_kthread+0x10/0x10 [ 458.304498] ? ret_from_fork+0x79/0x7a0 [ 458.304512] ? lock_release+0xc8/0x270 [ 458.304540] ? __pfx_kthread+0x10/0x10 [ 458.304554] ret_from_fork+0x67a/0x7a0 [ 458.304566] ? __pfx_ret_from_fork+0x10/0x10 [ 458.304581] ? __switch_to+0x759/0x1030 [ 458.304599] ? __pfx_kthread+0x10/0x10 [ 458.304614] ret_from_fork_asm+0x1a/0x30 [ 458.304640] [ 458.304683] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.337592] Bluetooth: hci5: failed to register connection device [ 458.339283] debugfs: '0' already exists in 'hci7' [ 458.339799] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 458.340901] CPU: 1 UID: 0 PID: 313 Comm: kworker/u11:5 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.340918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.340925] Workqueue: hci7 hci_rx_work [ 458.340938] Call Trace: [ 458.340942] [ 458.340948] dump_stack_lvl+0xfa/0x120 [ 458.340963] sysfs_warn_dup+0x80/0xa0 [ 458.340978] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.340993] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.341007] ? find_held_lock+0x2b/0x80 [ 458.341026] ? lock_release+0xc8/0x270 [ 458.341040] ? do_raw_spin_unlock+0x53/0x220 [ 458.341058] kobject_add_internal+0x24c/0x9a0 [ 458.341079] kobject_add+0x157/0x240 [ 458.341098] ? __pfx_kobject_add+0x10/0x10 [ 458.341116] ? lock_release+0xc8/0x270 [ 458.341130] ? do_raw_spin_unlock+0x53/0x220 [ 458.341147] ? kobject_put+0xaa/0x260 [ 458.341169] device_add+0x32d/0x1830 [ 458.341185] ? __pfx_device_add+0x10/0x10 [ 458.341200] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.341215] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.341227] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.341247] hci_conn_add_sysfs+0x117/0x1c0 [ 458.341264] le_conn_complete_evt+0x1246/0x1e40 [ 458.341289] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.341314] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.341328] ? __asan_memcpy+0x3d/0x60 [ 458.341349] hci_le_meta_evt+0x34b/0x530 [ 458.341360] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.341375] hci_event_packet+0x66c/0x10e0 [ 458.341388] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.341400] ? __pfx_hci_event_packet+0x10/0x10 [ 458.341413] ? mark_held_locks+0x49/0x80 [ 458.341427] ? kcov_remote_start+0x2ce/0x5a0 [ 458.341448] hci_rx_work+0x65b/0x8b0 [ 458.341463] process_one_work+0x8e1/0x1960 [ 458.341484] ? __pfx_process_one_work+0x10/0x10 [ 458.341499] ? move_linked_works+0x172/0x270 [ 458.341520] ? assign_work+0x196/0x240 [ 458.341535] worker_thread+0x67e/0xe90 [ 458.341551] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.341575] ? __pfx_worker_thread+0x10/0x10 [ 458.341591] kthread+0x3c8/0x740 [ 458.341604] ? __pfx_kthread+0x10/0x10 [ 458.341616] ? ret_from_fork+0x79/0x7a0 [ 458.341628] ? lock_release+0xc8/0x270 [ 458.341642] ? __pfx_kthread+0x10/0x10 [ 458.341656] ret_from_fork+0x67a/0x7a0 [ 458.341669] ? __pfx_ret_from_fork+0x10/0x10 [ 458.341682] ? __switch_to+0x759/0x1030 [ 458.341699] ? __pfx_kthread+0x10/0x10 [ 458.341713] ret_from_fork_asm+0x1a/0x30 [ 458.341737] [ 458.341755] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.348468] debugfs: '0' already exists in 'hci6' [ 458.348636] Bluetooth: hci7: failed to register connection device [ 458.349995] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 458.377254] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.377287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.377303] Workqueue: hci6 hci_rx_work [ 458.377335] Call Trace: [ 458.377344] [ 458.377354] dump_stack_lvl+0xfa/0x120 [ 458.377385] sysfs_warn_dup+0x80/0xa0 [ 458.377414] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.377442] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.377469] ? find_held_lock+0x2b/0x80 [ 458.377507] ? lock_release+0xc8/0x270 [ 458.377533] ? do_raw_spin_unlock+0x53/0x220 [ 458.377567] kobject_add_internal+0x24c/0x9a0 [ 458.377607] kobject_add+0x157/0x240 [ 458.377641] ? __pfx_kobject_add+0x10/0x10 [ 458.377674] ? lock_release+0xc8/0x270 [ 458.377701] ? do_raw_spin_unlock+0x53/0x220 [ 458.377732] ? kobject_put+0xaa/0x260 [ 458.377774] device_add+0x32d/0x1830 [ 458.377806] ? __pfx_device_add+0x10/0x10 [ 458.377841] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.377872] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.377896] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.377932] hci_conn_add_sysfs+0x117/0x1c0 [ 458.377964] le_conn_complete_evt+0x1246/0x1e40 [ 458.378011] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.378059] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.378085] ? __asan_memcpy+0x3d/0x60 [ 458.378124] hci_le_meta_evt+0x34b/0x530 [ 458.378145] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.378172] hci_event_packet+0x66c/0x10e0 [ 458.378197] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.378219] ? __pfx_hci_event_packet+0x10/0x10 [ 458.378242] ? mark_held_locks+0x49/0x80 [ 458.378269] ? kcov_remote_start+0x2ce/0x5a0 [ 458.378310] hci_rx_work+0x65b/0x8b0 [ 458.378337] process_one_work+0x8e1/0x1960 [ 458.378377] ? __pfx_process_one_work+0x10/0x10 [ 458.378404] ? move_linked_works+0x172/0x270 [ 458.378444] ? assign_work+0x196/0x240 [ 458.378473] worker_thread+0x67e/0xe90 [ 458.378500] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.378546] ? __pfx_worker_thread+0x10/0x10 [ 458.378575] kthread+0x3c8/0x740 [ 458.378600] ? __pfx_kthread+0x10/0x10 [ 458.378622] ? ret_from_fork+0x79/0x7a0 [ 458.378649] ? __pfx_kthread+0x10/0x10 [ 458.378675] ret_from_fork+0x67a/0x7a0 [ 458.378697] ? __pfx_ret_from_fork+0x10/0x10 [ 458.378723] ? __switch_to+0x759/0x1030 [ 458.378754] ? __pfx_kthread+0x10/0x10 [ 458.378779] ret_from_fork_asm+0x1a/0x30 [ 458.378825] [ 458.389028] debugfs: '0' already exists in 'hci2' [ 458.389390] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.389734] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 458.390332] Bluetooth: hci6: failed to register connection device [ 458.407155] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.407173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.407181] Workqueue: hci2 hci_rx_work [ 458.407197] Call Trace: [ 458.407201] [ 458.407206] dump_stack_lvl+0xfa/0x120 [ 458.407225] sysfs_warn_dup+0x80/0xa0 [ 458.407242] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.407257] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.407271] ? find_held_lock+0x2b/0x80 [ 458.407293] ? lock_release+0xc8/0x270 [ 458.407308] ? do_raw_spin_unlock+0x53/0x220 [ 458.407327] kobject_add_internal+0x24c/0x9a0 [ 458.407348] kobject_add+0x157/0x240 [ 458.407367] ? __pfx_kobject_add+0x10/0x10 [ 458.407386] ? lock_release+0xc8/0x270 [ 458.407400] ? do_raw_spin_unlock+0x53/0x220 [ 458.407417] ? kobject_put+0xaa/0x260 [ 458.407440] device_add+0x32d/0x1830 [ 458.407457] ? __pfx_device_add+0x10/0x10 [ 458.407472] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.407489] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.407502] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.407521] hci_conn_add_sysfs+0x117/0x1c0 [ 458.407539] le_conn_complete_evt+0x1246/0x1e40 [ 458.407565] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.407591] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.407605] ? __asan_memcpy+0x3d/0x60 [ 458.407627] hci_le_meta_evt+0x34b/0x530 [ 458.407639] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.407654] hci_event_packet+0x66c/0x10e0 [ 458.407667] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.407680] ? __pfx_hci_event_packet+0x10/0x10 [ 458.407692] ? mark_held_locks+0x49/0x80 [ 458.407707] ? kcov_remote_start+0x2ce/0x5a0 [ 458.407729] hci_rx_work+0x65b/0x8b0 [ 458.407743] process_one_work+0x8e1/0x1960 [ 458.407765] ? __pfx_process_one_work+0x10/0x10 [ 458.407780] ? move_linked_works+0x172/0x270 [ 458.407801] ? assign_work+0x196/0x240 [ 458.407817] worker_thread+0x67e/0xe90 [ 458.407837] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.407861] ? __pfx_worker_thread+0x10/0x10 [ 458.407877] kthread+0x3c8/0x740 [ 458.407891] ? __pfx_kthread+0x10/0x10 [ 458.407903] ? ret_from_fork+0x79/0x7a0 [ 458.407917] ? lock_release+0xc8/0x270 [ 458.407931] ? __pfx_kthread+0x10/0x10 [ 458.407945] ret_from_fork+0x67a/0x7a0 [ 458.407957] ? __pfx_ret_from_fork+0x10/0x10 [ 458.407971] ? __switch_to+0x759/0x1030 [ 458.407988] ? __pfx_kthread+0x10/0x10 [ 458.408001] ret_from_fork_asm+0x1a/0x30 [ 458.408027] [ 458.426189] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.427339] Bluetooth: hci2: failed to register connection device [ 458.549326] debugfs: '0' already exists in 'hci0' [ 458.549945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 458.550621] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 458.550637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 458.550646] Workqueue: hci0 hci_rx_work [ 458.550662] Call Trace: [ 458.550667] [ 458.550671] dump_stack_lvl+0xfa/0x120 [ 458.550689] sysfs_warn_dup+0x80/0xa0 [ 458.550705] sysfs_create_dir_ns+0x23b/0x2a0 [ 458.550720] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.550734] ? find_held_lock+0x2b/0x80 [ 458.550755] ? lock_release+0xc8/0x270 [ 458.550770] ? do_raw_spin_unlock+0x53/0x220 [ 458.550789] kobject_add_internal+0x24c/0x9a0 [ 458.550811] kobject_add+0x157/0x240 [ 458.550834] ? __pfx_kobject_add+0x10/0x10 [ 458.550852] ? lock_release+0xc8/0x270 [ 458.550866] ? do_raw_spin_unlock+0x53/0x220 [ 458.550883] ? kobject_put+0xaa/0x260 [ 458.550905] device_add+0x32d/0x1830 [ 458.550923] ? __pfx_device_add+0x10/0x10 [ 458.550937] ? hci_debugfs_create_conn+0x10f/0x240 [ 458.550954] ? mgmt_send_event_skb+0x2f3/0x460 [ 458.550968] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 458.550987] hci_conn_add_sysfs+0x117/0x1c0 [ 458.551004] le_conn_complete_evt+0x1246/0x1e40 [ 458.551031] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.551057] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 458.551071] ? __asan_memcpy+0x3d/0x60 [ 458.551093] hci_le_meta_evt+0x34b/0x530 [ 458.551105] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 458.551120] hci_event_packet+0x66c/0x10e0 [ 458.551134] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.551146] ? __pfx_hci_event_packet+0x10/0x10 [ 458.551159] ? mark_held_locks+0x49/0x80 [ 458.551173] ? kcov_remote_start+0x2ce/0x5a0 [ 458.551196] hci_rx_work+0x65b/0x8b0 [ 458.551210] process_one_work+0x8e1/0x1960 [ 458.551233] ? __pfx_process_one_work+0x10/0x10 [ 458.551248] ? move_linked_works+0x172/0x270 [ 458.551270] ? assign_work+0x196/0x240 [ 458.551288] worker_thread+0x67e/0xe90 [ 458.551305] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 458.551330] ? __pfx_worker_thread+0x10/0x10 [ 458.551346] kthread+0x3c8/0x740 [ 458.551360] ? __pfx_kthread+0x10/0x10 [ 458.551372] ? ret_from_fork+0x79/0x7a0 [ 458.551386] ? lock_release+0xc8/0x270 [ 458.551400] ? __pfx_kthread+0x10/0x10 [ 458.551413] ret_from_fork+0x67a/0x7a0 [ 458.551426] ? __pfx_ret_from_fork+0x10/0x10 [ 458.551440] ? __switch_to+0x759/0x1030 [ 458.551458] ? __pfx_kthread+0x10/0x10 [ 458.551472] ret_from_fork_asm+0x1a/0x30 [ 458.551496] [ 458.570548] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.572219] Bluetooth: hci0: failed to register connection device [ 459.214923] Bluetooth: hci0: command 0x2016 tx timeout [ 459.983034] Bluetooth: hci7: command 0x2016 tx timeout [ 459.983111] Bluetooth: hci6: command 0x2016 tx timeout [ 459.983551] Bluetooth: hci5: command 0x0406 tx timeout [ 459.984652] Bluetooth: hci3: command 0x2016 tx timeout [ 460.111149] Bluetooth: hci1: command 0x2016 tx timeout [ 460.430918] Bluetooth: hci2: command 0x2016 tx timeout [ 461.262894] Bluetooth: hci0: command 0x2016 tx timeout [ 462.031585] Bluetooth: hci6: command 0x2016 tx timeout [ 462.031642] Bluetooth: hci5: command 0x0406 tx timeout [ 462.032720] Bluetooth: hci3: command 0x2016 tx timeout [ 462.034211] Bluetooth: hci7: command 0x2016 tx timeout [ 462.158951] Bluetooth: hci1: command 0x2016 tx timeout [ 462.480002] Bluetooth: hci2: command 0x2016 tx timeout [ 463.311045] Bluetooth: hci0: command 0x2016 tx timeout [ 464.079143] Bluetooth: hci6: command 0x2016 tx timeout [ 464.079173] Bluetooth: hci3: command 0x2016 tx timeout [ 464.080334] Bluetooth: hci5: command 0x0406 tx timeout [ 464.081134] Bluetooth: hci7: command 0x2016 tx timeout [ 464.207940] Bluetooth: hci1: command 0x2016 tx timeout [ 464.526950] Bluetooth: hci2: command 0x2016 tx timeout [ 465.359007] Bluetooth: hci0: command 0x2016 tx timeout [ 466.127080] Bluetooth: hci7: command 0x2016 tx timeout [ 466.128083] Bluetooth: hci3: command 0x2016 tx timeout [ 466.128114] Bluetooth: hci5: command 0x0406 tx timeout [ 466.129042] Bluetooth: hci6: command 0x2016 tx timeout [ 466.255050] Bluetooth: hci1: command 0x2016 tx timeout [ 466.574955] Bluetooth: hci2: command 0x2016 tx timeout 18:26:40 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB="b6ae0657304ae74ce909550325510fcda306ea", @ANYBLOB="f9ad165851fdae7fca1f5648030225097094991caf176b976e8a5325d6c3d41d82997a5fead96ca6cb908c85c2f0bb369344444aae583156d0f188e32f3e2c7b6b99"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "e92d04674d8a3bd316606268e9c9a32e33551054a9f754f9ad89148e2b339c61dd70ab304cde428b89d2c317e8ea2965ef8926bb6db11399dad05b2a3cd9b1ff478436e453677946c182620bcaa6a14e22180584a3d71d9d39af603eb744071928f6c400d2985052070ed0b31189d50ba5e3d26679b61da4725adb4cdc19f9e6c7fcf30e9e7b2cdf9cc07e9196b9a67034e815"}, 0x97) 18:26:40 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2a}, "c3a40998cdd70465ecfdef970c26aac023225c9732de010c1a2727127c440e7fe35bbf938d56b3af9f2a"}, 0x2e) 18:26:40 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:26:40 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x9e}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f125"}}, 0xa1) 18:26:40 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) 18:26:40 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xc9, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:40 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000"], 0x22) 18:26:40 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000"], 0x22) [ 467.192165] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 467.192554] debugfs: '0' already exists in 'hci2' [ 467.194980] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' 18:26:40 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) io_cancel(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x8001, r0, &(0x7f0000000000)="8a5ee7a20847b8d60c7abcab8f3fd60b97717f04cc5c001e87d35706", 0x1c, 0x2, 0x0, 0x3}, &(0x7f0000000080)) [ 467.196529] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 467.196565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.196583] Workqueue: hci2 hci_rx_work [ 467.196618] Call Trace: [ 467.196627] [ 467.196638] dump_stack_lvl+0xfa/0x120 [ 467.196674] sysfs_warn_dup+0x80/0xa0 [ 467.196708] sysfs_create_dir_ns+0x23b/0x2a0 [ 467.196741] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 467.196773] ? find_held_lock+0x2b/0x80 [ 467.196818] ? lock_release+0xc8/0x270 [ 467.196857] ? do_raw_spin_unlock+0x53/0x220 [ 467.196897] kobject_add_internal+0x24c/0x9a0 [ 467.196945] kobject_add+0x157/0x240 [ 467.196986] ? __pfx_kobject_add+0x10/0x10 [ 467.197026] ? lock_release+0xc8/0x270 [ 467.197057] ? do_raw_spin_unlock+0x53/0x220 [ 467.197095] ? kobject_put+0xaa/0x260 [ 467.197146] device_add+0x32d/0x1830 [ 467.197182] ? __pfx_device_add+0x10/0x10 [ 467.197215] ? hci_debugfs_create_conn+0x10f/0x240 [ 467.197252] ? mgmt_send_event_skb+0x2f3/0x460 [ 467.197280] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 467.197324] hci_conn_add_sysfs+0x117/0x1c0 [ 467.197361] le_conn_complete_evt+0x1246/0x1e40 [ 467.197418] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 467.197476] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 467.197507] ? __asan_memcpy+0x3d/0x60 [ 467.197554] hci_le_meta_evt+0x34b/0x530 [ 467.197579] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 467.197612] hci_event_packet+0x66c/0x10e0 [ 467.197641] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 467.197668] ? __pfx_hci_event_packet+0x10/0x10 [ 467.197697] ? mark_held_locks+0x49/0x80 [ 467.197729] ? kcov_remote_start+0x2ce/0x5a0 [ 467.197795] hci_rx_work+0x65b/0x8b0 [ 467.197832] process_one_work+0x8e1/0x1960 [ 467.197880] ? __pfx_process_one_work+0x10/0x10 [ 467.197913] ? move_linked_works+0x172/0x270 [ 467.197961] ? assign_work+0x196/0x240 [ 467.197995] worker_thread+0x67e/0xe90 [ 467.198030] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 467.198084] ? __pfx_worker_thread+0x10/0x10 [ 467.198119] kthread+0x3c8/0x740 [ 467.198148] ? __pfx_kthread+0x10/0x10 [ 467.198175] ? ret_from_fork+0x79/0x7a0 [ 467.198202] ? lock_release+0xc8/0x270 [ 467.198240] ? __pfx_kthread+0x10/0x10 [ 467.198271] ret_from_fork+0x67a/0x7a0 [ 467.198298] ? __pfx_ret_from_fork+0x10/0x10 [ 467.198328] ? __switch_to+0x759/0x1030 [ 467.198366] ? __pfx_kthread+0x10/0x10 [ 467.198402] ret_from_fork_asm+0x1a/0x30 [ 467.198456] [ 467.238187] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.240572] Bluetooth: hci2: failed to register connection device [ 467.241688] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 467.243704] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 467.271724] debugfs: '0' already exists in 'hci3' [ 467.276121] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 467.277515] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 467.277557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.277580] Workqueue: hci3 hci_rx_work [ 467.277611] Call Trace: [ 467.277620] [ 467.277630] dump_stack_lvl+0xfa/0x120 [ 467.277662] sysfs_warn_dup+0x80/0xa0 [ 467.277693] sysfs_create_dir_ns+0x23b/0x2a0 [ 467.277723] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 467.277753] ? find_held_lock+0x2b/0x80 [ 467.277795] ? lock_release+0xc8/0x270 [ 467.277823] ? do_raw_spin_unlock+0x53/0x220 [ 467.277867] kobject_add_internal+0x24c/0x9a0 [ 467.277909] kobject_add+0x157/0x240 [ 467.277946] ? __pfx_kobject_add+0x10/0x10 [ 467.277982] ? lock_release+0xc8/0x270 [ 467.278010] ? do_raw_spin_unlock+0x53/0x220 [ 467.278043] ? kobject_put+0xaa/0x260 [ 467.278088] device_add+0x32d/0x1830 [ 467.278121] ? __pfx_device_add+0x10/0x10 [ 467.278151] ? hci_debugfs_create_conn+0x10f/0x240 [ 467.278183] ? mgmt_send_event_skb+0x2f3/0x460 [ 467.278208] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 467.278247] hci_conn_add_sysfs+0x117/0x1c0 [ 467.278281] le_conn_complete_evt+0x1246/0x1e40 [ 467.278331] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 467.278383] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 467.278410] ? __asan_memcpy+0x3d/0x60 [ 467.278453] hci_le_meta_evt+0x34b/0x530 [ 467.278475] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 467.278504] hci_event_packet+0x66c/0x10e0 [ 467.278530] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 467.278554] ? __pfx_hci_event_packet+0x10/0x10 [ 467.278579] ? mark_held_locks+0x49/0x80 [ 467.278608] ? kcov_remote_start+0x2ce/0x5a0 [ 467.278666] hci_rx_work+0x65b/0x8b0 [ 467.278698] process_one_work+0x8e1/0x1960 [ 467.278740] ? __pfx_process_one_work+0x10/0x10 [ 467.278770] ? move_linked_works+0x172/0x270 [ 467.278813] ? assign_work+0x196/0x240 [ 467.278844] worker_thread+0x67e/0xe90 [ 467.278873] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 467.278922] ? __pfx_worker_thread+0x10/0x10 [ 467.278953] kthread+0x3c8/0x740 [ 467.278979] ? __pfx_kthread+0x10/0x10 [ 467.279003] ? ret_from_fork+0x79/0x7a0 [ 467.279028] ? lock_release+0xc8/0x270 [ 467.279056] ? __pfx_kthread+0x10/0x10 [ 467.279083] ret_from_fork+0x67a/0x7a0 [ 467.279107] ? __pfx_ret_from_fork+0x10/0x10 [ 467.279134] ? __switch_to+0x759/0x1030 [ 467.279168] ? __pfx_kthread+0x10/0x10 [ 467.279195] ret_from_fork_asm+0x1a/0x30 [ 467.279245] [ 467.315235] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.317374] Bluetooth: hci3: failed to register connection device 18:26:40 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40}}}, 0xb) syz_emit_vhci(0x0, 0x0) 18:26:40 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x9e}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f125"}}, 0xa1) 18:26:40 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:26:40 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000"], 0x22) 18:26:40 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4) [ 467.407045] Bluetooth: hci0: command 0x2016 tx timeout [ 467.452166] debugfs: '0' already exists in 'hci7' [ 467.453684] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 467.454173] debugfs: '0' already exists in 'hci5' [ 467.455331] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 467.455367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.455385] Workqueue: hci7 hci_rx_work [ 467.455418] Call Trace: [ 467.455427] [ 467.455438] dump_stack_lvl+0xfa/0x120 [ 467.455472] sysfs_warn_dup+0x80/0xa0 [ 467.455504] sysfs_create_dir_ns+0x23b/0x2a0 [ 467.455536] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 467.455566] ? find_held_lock+0x2b/0x80 [ 467.455608] ? lock_release+0xc8/0x270 [ 467.455637] ? do_raw_spin_unlock+0x53/0x220 [ 467.455675] kobject_add_internal+0x24c/0x9a0 [ 467.455720] kobject_add+0x157/0x240 [ 467.455758] ? __pfx_kobject_add+0x10/0x10 [ 467.455796] ? lock_release+0xc8/0x270 [ 467.455835] ? do_raw_spin_unlock+0x53/0x220 [ 467.455882] ? kobject_put+0xaa/0x260 [ 467.455935] device_add+0x32d/0x1830 [ 467.455970] ? __pfx_device_add+0x10/0x10 [ 467.456001] ? hci_debugfs_create_conn+0x10f/0x240 [ 467.456035] ? mgmt_send_event_skb+0x2f3/0x460 [ 467.456062] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 467.456103] hci_conn_add_sysfs+0x117/0x1c0 [ 467.456138] le_conn_complete_evt+0x1246/0x1e40 [ 467.456191] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 467.456245] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 467.456274] ? __asan_memcpy+0x3d/0x60 [ 467.456318] hci_le_meta_evt+0x34b/0x530 [ 467.456341] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 467.456373] hci_event_packet+0x66c/0x10e0 [ 467.456401] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 467.456426] ? __pfx_hci_event_packet+0x10/0x10 [ 467.456452] ? mark_held_locks+0x49/0x80 [ 467.456482] ? kcov_remote_start+0x2ce/0x5a0 [ 467.456550] hci_rx_work+0x65b/0x8b0 [ 467.456581] process_one_work+0x8e1/0x1960 [ 467.456627] ? __pfx_process_one_work+0x10/0x10 [ 467.456661] ? move_linked_works+0x172/0x270 [ 467.456719] ? assign_work+0x196/0x240 [ 467.456751] worker_thread+0x67e/0xe90 [ 467.456783] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 467.456835] ? __pfx_worker_thread+0x10/0x10 [ 467.456867] kthread+0x3c8/0x740 [ 467.456895] ? __pfx_kthread+0x10/0x10 [ 467.456921] ? ret_from_fork+0x79/0x7a0 [ 467.456950] ? __pfx_kthread+0x10/0x10 [ 467.456979] ret_from_fork+0x67a/0x7a0 [ 467.457004] ? __pfx_ret_from_fork+0x10/0x10 [ 467.457033] ? __switch_to+0x759/0x1030 [ 467.457069] ? __pfx_kthread+0x10/0x10 [ 467.457098] ret_from_fork_asm+0x1a/0x30 [ 467.457150] [ 467.457230] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.458586] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 467.458888] Bluetooth: hci7: failed to register connection device [ 467.459162] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 467.459181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.459190] Workqueue: hci5 hci_rx_work [ 467.459211] Call Trace: [ 467.459216] [ 467.459221] dump_stack_lvl+0xfa/0x120 [ 467.459240] sysfs_warn_dup+0x80/0xa0 [ 467.459258] sysfs_create_dir_ns+0x23b/0x2a0 [ 467.459273] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 467.459287] ? find_held_lock+0x2b/0x80 [ 467.459309] ? lock_release+0xc8/0x270 [ 467.459324] ? do_raw_spin_unlock+0x53/0x220 [ 467.459343] kobject_add_internal+0x24c/0x9a0 [ 467.459365] kobject_add+0x157/0x240 [ 467.459384] ? __pfx_kobject_add+0x10/0x10 [ 467.459402] ? lock_release+0xc8/0x270 [ 467.459416] ? do_raw_spin_unlock+0x53/0x220 [ 467.459434] ? kobject_put+0xaa/0x260 [ 467.459457] device_add+0x32d/0x1830 [ 467.459475] ? __pfx_device_add+0x10/0x10 [ 467.459490] ? hci_debugfs_create_conn+0x10f/0x240 [ 467.459508] ? mgmt_send_event_skb+0x2f3/0x460 [ 467.459522] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 467.459542] hci_conn_add_sysfs+0x117/0x1c0 [ 467.459560] le_conn_complete_evt+0x1246/0x1e40 [ 467.459587] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 467.459613] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 467.459627] ? __asan_memcpy+0x3d/0x60 [ 467.459650] hci_le_meta_evt+0x34b/0x530 [ 467.459662] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 467.459678] hci_event_packet+0x66c/0x10e0 [ 467.459691] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 467.459703] ? __pfx_hci_event_packet+0x10/0x10 [ 467.459716] ? mark_held_locks+0x49/0x80 [ 467.459730] ? kcov_remote_start+0x2ce/0x5a0 [ 467.459754] hci_rx_work+0x65b/0x8b0 [ 467.459768] process_one_work+0x8e1/0x1960 [ 467.459792] ? __pfx_process_one_work+0x10/0x10 [ 467.459807] ? move_linked_works+0x172/0x270 [ 467.459835] ? assign_work+0x196/0x240 [ 467.459851] worker_thread+0x67e/0xe90 [ 467.459866] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 467.459892] ? __pfx_worker_thread+0x10/0x10 [ 467.459907] kthread+0x3c8/0x740 [ 467.459922] ? __pfx_kthread+0x10/0x10 [ 467.459934] ? ret_from_fork+0x79/0x7a0 [ 467.459950] ? __pfx_kthread+0x10/0x10 [ 467.459964] ret_from_fork+0x67a/0x7a0 [ 467.459976] ? __pfx_ret_from_fork+0x10/0x10 [ 467.459989] ? __switch_to+0x759/0x1030 [ 467.460008] ? __pfx_kthread+0x10/0x10 [ 467.460022] ret_from_fork_asm+0x1a/0x30 [ 467.460048] [ 467.460087] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.482726] debugfs: '0' already exists in 'hci0' [ 467.483071] Bluetooth: hci5: failed to register connection device [ 467.514173] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 467.515689] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 467.515720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 467.515735] Workqueue: hci0 hci_rx_work [ 467.515766] Call Trace: [ 467.515774] [ 467.515783] dump_stack_lvl+0xfa/0x120 [ 467.515814] sysfs_warn_dup+0x80/0xa0 [ 467.515856] sysfs_create_dir_ns+0x23b/0x2a0 [ 467.515884] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 467.515910] ? find_held_lock+0x2b/0x80 [ 467.515947] ? lock_release+0xc8/0x270 [ 467.515973] ? do_raw_spin_unlock+0x53/0x220 [ 467.516006] kobject_add_internal+0x24c/0x9a0 [ 467.516055] kobject_add+0x157/0x240 [ 467.516097] ? __pfx_kobject_add+0x10/0x10 [ 467.516130] ? lock_release+0xc8/0x270 [ 467.516156] ? do_raw_spin_unlock+0x53/0x220 [ 467.516188] ? kobject_put+0xaa/0x260 [ 467.516229] device_add+0x32d/0x1830 [ 467.516260] ? __pfx_device_add+0x10/0x10 [ 467.516288] ? hci_debugfs_create_conn+0x10f/0x240 [ 467.516319] ? mgmt_send_event_skb+0x2f3/0x460 [ 467.516343] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 467.516379] hci_conn_add_sysfs+0x117/0x1c0 [ 467.516411] le_conn_complete_evt+0x1246/0x1e40 [ 467.516459] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 467.516506] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 467.516551] ? __asan_memcpy+0x3d/0x60 [ 467.516591] hci_le_meta_evt+0x34b/0x530 [ 467.516611] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 467.516639] hci_event_packet+0x66c/0x10e0 [ 467.516663] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 467.516685] ? __pfx_hci_event_packet+0x10/0x10 [ 467.516709] ? mark_held_locks+0x49/0x80 [ 467.516736] ? kcov_remote_start+0x2ce/0x5a0 [ 467.516776] hci_rx_work+0x65b/0x8b0 [ 467.516803] process_one_work+0x8e1/0x1960 [ 467.516844] ? __pfx_process_one_work+0x10/0x10 [ 467.516871] ? move_linked_works+0x172/0x270 [ 467.516911] ? assign_work+0x196/0x240 [ 467.516940] worker_thread+0x67e/0xe90 [ 467.516967] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 467.517012] ? __pfx_worker_thread+0x10/0x10 [ 467.517041] kthread+0x3c8/0x740 [ 467.517066] ? __pfx_kthread+0x10/0x10 [ 467.517089] ? ret_from_fork+0x79/0x7a0 [ 467.517115] ? __pfx_kthread+0x10/0x10 [ 467.517141] ret_from_fork+0x67a/0x7a0 [ 467.517163] ? __pfx_ret_from_fork+0x10/0x10 [ 467.517189] ? __switch_to+0x759/0x1030 [ 467.517220] ? __pfx_kthread+0x10/0x10 [ 467.517246] ret_from_fork_asm+0x1a/0x30 [ 467.517292] [ 467.549876] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.551959] Bluetooth: hci0: failed to register connection device [ 468.174989] Bluetooth: hci5: command 0x0406 tx timeout [ 468.175014] Bluetooth: hci3: command 0x2016 tx timeout [ 468.175809] Bluetooth: hci7: command 0x2016 tx timeout [ 468.176326] Bluetooth: hci6: command 0x2016 tx timeout [ 469.262897] Bluetooth: hci2: command 0x2016 tx timeout [ 469.454912] Bluetooth: hci0: command 0x2016 tx timeout [ 470.222978] Bluetooth: hci6: command 0x2016 tx timeout [ 470.223449] Bluetooth: hci7: command 0x2016 tx timeout [ 470.223486] Bluetooth: hci3: command 0x2016 tx timeout [ 470.223511] Bluetooth: hci5: command 0x0406 tx timeout [ 471.311103] Bluetooth: hci2: command 0x2016 tx timeout [ 471.503093] Bluetooth: hci0: command 0x2016 tx timeout [ 472.271369] Bluetooth: hci7: command 0x2016 tx timeout [ 472.271422] Bluetooth: hci6: command 0x2016 tx timeout [ 472.272686] Bluetooth: hci5: command 0x0406 tx timeout [ 472.273660] Bluetooth: hci3: command 0x2016 tx timeout [ 473.358955] Bluetooth: hci2: command 0x2016 tx timeout [ 473.551009] Bluetooth: hci0: command 0x2016 tx timeout [ 474.319227] Bluetooth: hci6: command 0x2016 tx timeout [ 474.320373] Bluetooth: hci7: command 0x2016 tx timeout [ 474.321647] Bluetooth: hci5: command 0x0406 tx timeout [ 474.322676] Bluetooth: hci3: command 0x2016 tx timeout [ 475.406985] Bluetooth: hci2: command 0x2016 tx timeout [ 475.599158] Bluetooth: hci0: command 0x2016 tx timeout [ 476.366914] Bluetooth: hci3: command 0x2016 tx timeout [ 476.367789] Bluetooth: hci7: command 0x2016 tx timeout [ 476.368647] Bluetooth: hci5: command 0x0406 tx timeout 18:26:50 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(0x0, 0x0) 18:26:50 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e5c0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x1, 0x401}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 18:26:50 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_conn_req={{0x2, 0x0, 0x4}, {0x7fff, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0x8}}, @l2cap_info_req={{0xa, 0x5, 0x2}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x1ff, 0x4}}]}}, 0x25) 18:26:50 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:26:50 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000"], 0x22) 18:26:50 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x9e}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f125"}}, 0xa1) 18:26:50 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005f080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000060080)={{0x0, 0x1f, 0x3, 0x5, 0x3, 0x0, 0x6, 0xffff, 0x5, 0x984, 0x800, 0x4, 0x6, 0x10001, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061080)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "26dbb28c343087"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062080)={0x0}) [ 477.439115] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 477.455439] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 477.456028] debugfs: '0' already exists in 'hci0' [ 477.458126] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 477.459522] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.459555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.459572] Workqueue: hci0 hci_rx_work [ 477.459605] Call Trace: [ 477.459614] [ 477.459625] dump_stack_lvl+0xfa/0x120 [ 477.459658] sysfs_warn_dup+0x80/0xa0 [ 477.459691] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.459722] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.459752] ? find_held_lock+0x2b/0x80 [ 477.459794] ? lock_release+0xc8/0x270 [ 477.459831] ? do_raw_spin_unlock+0x53/0x220 [ 477.459869] kobject_add_internal+0x24c/0x9a0 [ 477.459914] kobject_add+0x157/0x240 [ 477.459953] ? __pfx_kobject_add+0x10/0x10 [ 477.459991] ? lock_release+0xc8/0x270 [ 477.460020] ? do_raw_spin_unlock+0x53/0x220 [ 477.460056] ? kobject_put+0xaa/0x260 [ 477.460103] device_add+0x32d/0x1830 [ 477.460138] ? __pfx_device_add+0x10/0x10 [ 477.460170] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.460204] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.460231] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.460272] hci_conn_add_sysfs+0x117/0x1c0 [ 477.460307] le_conn_complete_evt+0x1246/0x1e40 [ 477.460361] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.460415] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.460444] ? __asan_memcpy+0x3d/0x60 [ 477.460489] hci_le_meta_evt+0x34b/0x530 [ 477.460527] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.460558] hci_event_packet+0x66c/0x10e0 [ 477.460585] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.460610] ? __pfx_hci_event_packet+0x10/0x10 [ 477.460637] ? mark_held_locks+0x49/0x80 [ 477.460667] ? kcov_remote_start+0x2ce/0x5a0 [ 477.460712] hci_rx_work+0x65b/0x8b0 [ 477.460743] process_one_work+0x8e1/0x1960 [ 477.460788] ? __pfx_process_one_work+0x10/0x10 [ 477.460819] ? move_linked_works+0x172/0x270 [ 477.460864] ? assign_work+0x196/0x240 [ 477.460897] worker_thread+0x67e/0xe90 [ 477.460929] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.460981] ? __pfx_worker_thread+0x10/0x10 [ 477.461013] kthread+0x3c8/0x740 [ 477.461041] ? __pfx_kthread+0x10/0x10 [ 477.461067] ? ret_from_fork+0x79/0x7a0 [ 477.461092] ? lock_release+0xc8/0x270 [ 477.461122] ? __pfx_kthread+0x10/0x10 [ 477.461151] ret_from_fork+0x67a/0x7a0 [ 477.461176] ? __pfx_ret_from_fork+0x10/0x10 [ 477.461205] ? __switch_to+0x759/0x1030 [ 477.461241] ? __pfx_kthread+0x10/0x10 [ 477.461270] ret_from_fork_asm+0x1a/0x30 [ 477.461321] [ 477.498164] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.500335] Bluetooth: hci0: failed to register connection device [ 477.506222] debugfs: '0' already exists in 'hci3' [ 477.512753] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 477.513634] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000062280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "1bb05a59c8e09c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000064280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005f080)={0x0, 0x0, "879100546695fa0dcd665088d7e753e5c2808c7f79dab7ee479262a9beedb47504df5218c2014b20d93d498a47a20383a4d113247c0250df47ef3bcbd6640e0da066e517783220d120e05c158b80ba9b42cb745b98ace6ee8fc438e2096c1c4e98b0352e83ecd3b2beff49b798ef64640a69afb1ad306f8857a89eb0fe364f25c939249f67b33ba8fa37342fde0549413565a54ab7a475374e940299803ee322bc71703c5e110ead3462f55589962871c925e2928d3bbba3a1b77ea3d2a5647fea1f2d89899c09956c9bed35b2c8548570ac127c82220dd8122e9fa227e38029b40c3f9f3fdfc5690f7531a9b085f26bd758fd845868404536f123cbfa709400", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000060080)={{0x0, 0x1f, 0x3, 0x5, 0x3, 0x0, 0x6, 0xffff, 0x5, 0x984, 0x800, 0x4, 0x6, 0x10001, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061080)={0x2, [], 0x1f, "26dbb28c343087"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062080)) [ 477.516579] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.516613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.516630] Workqueue: hci3 hci_rx_work [ 477.516660] Call Trace: [ 477.516668] [ 477.516678] dump_stack_lvl+0xfa/0x120 [ 477.516710] sysfs_warn_dup+0x80/0xa0 [ 477.516742] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.516772] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.516801] ? find_held_lock+0x2b/0x80 [ 477.516849] ? lock_release+0xc8/0x270 [ 477.516877] ? do_raw_spin_unlock+0x53/0x220 [ 477.516914] kobject_add_internal+0x24c/0x9a0 [ 477.516957] kobject_add+0x157/0x240 [ 477.516994] ? __pfx_kobject_add+0x10/0x10 [ 477.517033] ? lock_release+0xc8/0x270 [ 477.517063] ? do_raw_spin_unlock+0x53/0x220 [ 477.517098] ? kobject_put+0xaa/0x260 [ 477.517143] device_add+0x32d/0x1830 [ 477.517177] ? __pfx_device_add+0x10/0x10 [ 477.517206] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.517240] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.517265] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.517305] hci_conn_add_sysfs+0x117/0x1c0 [ 477.517339] le_conn_complete_evt+0x1246/0x1e40 [ 477.517391] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.517443] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.517471] ? __asan_memcpy+0x3d/0x60 [ 477.517514] hci_le_meta_evt+0x34b/0x530 [ 477.517536] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.517566] hci_event_packet+0x66c/0x10e0 [ 477.517593] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.517617] ? __pfx_hci_event_packet+0x10/0x10 [ 477.517649] ? mark_held_locks+0x49/0x80 [ 477.517678] ? kcov_remote_start+0x2ce/0x5a0 [ 477.517723] hci_rx_work+0x65b/0x8b0 [ 477.517753] process_one_work+0x8e1/0x1960 [ 477.517796] ? __pfx_process_one_work+0x10/0x10 [ 477.517826] ? move_linked_works+0x172/0x270 [ 477.517870] ? assign_work+0x196/0x240 [ 477.517901] worker_thread+0x67e/0xe90 [ 477.517932] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.517981] ? __pfx_worker_thread+0x10/0x10 [ 477.518013] kthread+0x3c8/0x740 [ 477.518040] ? __pfx_kthread+0x10/0x10 [ 477.518065] ? ret_from_fork+0x79/0x7a0 [ 477.518094] ? __pfx_kthread+0x10/0x10 [ 477.518122] ret_from_fork+0x67a/0x7a0 [ 477.518146] ? __pfx_ret_from_fork+0x10/0x10 [ 477.518175] ? __switch_to+0x759/0x1030 [ 477.518209] ? __pfx_kthread+0x10/0x10 [ 477.518237] ret_from_fork_asm+0x1a/0x30 [ 477.518286] [ 477.555089] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.560291] Bluetooth: hci3: failed to register connection device ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000062280)={0x0, 0x0, "d6de1b6c267ed5269843e10b39c11e2d07c43fae766f321de30acbb7fd8c6d4431d663c308f3d0b50d1b90611e9b7a854bbb6052ffa2c2651d531957f6af084333a9e75c0a974bebf56e83d12af40921d5ff17114d6fdb1aea883b00ce82dbb24611a77ed9706aa26f27521663ae17b3b2288f60092d28a5fcbe27b83e9fc4640a57faf6457b1a64b53b547ad222c0236cb7464e6b8fd6a29ca76ce67462c130636bf9a1c7a90e55ef520a7df1fbc7402b0042f95dfe6a56c0e4490ae4cdc2e0ae2b0d356ff6be3b8d7af52353abf295a9348ec36b33ebd24d8a96b285eec27ddb5f2856898d856cc79dda13150b1befd258a899b615870961f2b5582c04341f", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063280)={0x0, [], 0x8, "1bb05a59c8e09c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000064280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065480)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065680)={0x5, [{}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {r1, r2}, {r4, r5}, {}, {}, {}, {}, {}, {r7, r8}, {0x0, r9}], 0x7, "70c6d8b2c5d315"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4, 0x7f}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:50 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3"], 0x22) 18:26:50 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3"], 0x22) 18:26:50 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9"}}, 0xbb) 18:26:50 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="d98590128aaf6059b5fa3a2b734b7e5e8054575699d8d68f0017825e4d7288c29e7cc652ae9f67874a83e36ef5a13e5ebd42b493bbff98d039f82c4ebad53e5775870f229e4bdc8d27b3be7e13c719aa10917cedb45fcdb08dd6d4a473fb996c36868a7118d94497dec770dd317a3cdbe90f63b804b7fe805e8b606d4ea40201acb96bcc1cfc568d03c38c066a7e780c149cab5c4fa521aeb638cd0aa1d876bcfb33bcd1ca71e83ad3259591065e7f07000000a2ff1b250e5b0f0c31d1b81160a34b42b9c23e1b7ba659b2c0824dab48e25491373eabb23f8dfb9f13eadd666bfdfe45036f734d0428"], 0x22) 18:26:50 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04fa4aacdb913e68c1814a7c373e1f0a"], 0x22) 18:26:50 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000"], 0x22) 18:26:50 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 477.647890] Bluetooth: hci0: command 0x2016 tx timeout [ 477.652068] debugfs: '0' already exists in 'hci5' [ 477.653266] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 477.654669] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.654708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.654724] Workqueue: hci5 hci_rx_work [ 477.654756] Call Trace: [ 477.654765] [ 477.654774] dump_stack_lvl+0xfa/0x120 [ 477.654807] sysfs_warn_dup+0x80/0xa0 [ 477.654845] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.654874] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.654902] ? find_held_lock+0x2b/0x80 [ 477.654941] ? lock_release+0xc8/0x270 [ 477.654969] ? do_raw_spin_unlock+0x53/0x220 [ 477.655004] kobject_add_internal+0x24c/0x9a0 [ 477.655046] kobject_add+0x157/0x240 [ 477.655082] ? __pfx_kobject_add+0x10/0x10 [ 477.655117] ? lock_release+0xc8/0x270 [ 477.655144] ? do_raw_spin_unlock+0x53/0x220 [ 477.655178] ? kobject_put+0xaa/0x260 [ 477.655222] device_add+0x32d/0x1830 [ 477.655254] ? __pfx_device_add+0x10/0x10 [ 477.655283] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.655315] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.655340] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.655378] hci_conn_add_sysfs+0x117/0x1c0 [ 477.655411] le_conn_complete_evt+0x1246/0x1e40 [ 477.655461] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.655512] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.655539] ? __asan_memcpy+0x3d/0x60 [ 477.655581] hci_le_meta_evt+0x34b/0x530 [ 477.655602] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.655631] hci_event_packet+0x66c/0x10e0 [ 477.655657] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.655680] ? __pfx_hci_event_packet+0x10/0x10 [ 477.655705] ? mark_held_locks+0x49/0x80 [ 477.655733] ? kcov_remote_start+0x2ce/0x5a0 [ 477.655775] hci_rx_work+0x65b/0x8b0 [ 477.655804] process_one_work+0x8e1/0x1960 [ 477.655847] ? __pfx_process_one_work+0x10/0x10 [ 477.655875] ? move_linked_works+0x172/0x270 [ 477.655917] ? assign_work+0x196/0x240 [ 477.655948] worker_thread+0x67e/0xe90 [ 477.655977] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.656026] ? __pfx_worker_thread+0x10/0x10 [ 477.656056] kthread+0x3c8/0x740 [ 477.656082] ? __pfx_kthread+0x10/0x10 [ 477.656106] ? ret_from_fork+0x79/0x7a0 [ 477.656134] ? __pfx_kthread+0x10/0x10 [ 477.656161] ret_from_fork+0x67a/0x7a0 [ 477.656185] ? __pfx_ret_from_fork+0x10/0x10 [ 477.656211] ? __switch_to+0x759/0x1030 [ 477.656245] ? __pfx_kthread+0x10/0x10 [ 477.656271] ret_from_fork_asm+0x1a/0x30 [ 477.656320] [ 477.691874] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.693955] Bluetooth: hci5: failed to register connection device [ 477.699136] Bluetooth: hci3: unexpected event 0x04 length: 31 > 10 [ 477.699243] Bluetooth: hci3: connection err: -111 [ 477.702475] debugfs: '0' already exists in 'hci6' [ 477.703553] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 477.704941] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.704979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.704994] Workqueue: hci6 hci_rx_work [ 477.705018] Call Trace: [ 477.705027] [ 477.705037] dump_stack_lvl+0xfa/0x120 [ 477.705066] sysfs_warn_dup+0x80/0xa0 [ 477.705096] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.705124] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.705152] ? find_held_lock+0x2b/0x80 [ 477.705189] ? lock_release+0xc8/0x270 [ 477.705216] ? do_raw_spin_unlock+0x53/0x220 [ 477.705251] kobject_add_internal+0x24c/0x9a0 [ 477.705292] kobject_add+0x157/0x240 [ 477.705327] ? __pfx_kobject_add+0x10/0x10 [ 477.705362] ? lock_release+0xc8/0x270 [ 477.705389] ? do_raw_spin_unlock+0x53/0x220 [ 477.705424] ? kobject_put+0xaa/0x260 [ 477.705468] device_add+0x32d/0x1830 [ 477.705498] ? __pfx_device_add+0x10/0x10 [ 477.705527] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.705557] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.705580] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.705618] hci_conn_add_sysfs+0x117/0x1c0 [ 477.705650] le_conn_complete_evt+0x1246/0x1e40 [ 477.705699] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.705749] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.705776] ? __asan_memcpy+0x3d/0x60 [ 477.705816] hci_le_meta_evt+0x34b/0x530 [ 477.705846] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.705875] hci_event_packet+0x66c/0x10e0 [ 477.705900] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.705923] ? __pfx_hci_event_packet+0x10/0x10 [ 477.705948] ? mark_held_locks+0x49/0x80 [ 477.705976] ? kcov_remote_start+0x2ce/0x5a0 [ 477.706017] hci_rx_work+0x65b/0x8b0 [ 477.706045] process_one_work+0x8e1/0x1960 [ 477.706086] ? __pfx_process_one_work+0x10/0x10 [ 477.706114] ? move_linked_works+0x172/0x270 [ 477.706155] ? assign_work+0x196/0x240 [ 477.706185] worker_thread+0x67e/0xe90 [ 477.706214] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.706261] ? __pfx_worker_thread+0x10/0x10 [ 477.706291] kthread+0x3c8/0x740 [ 477.706316] ? __pfx_kthread+0x10/0x10 [ 477.706342] ? ret_from_fork+0x79/0x7a0 [ 477.706368] ? __pfx_kthread+0x10/0x10 [ 477.706395] ret_from_fork+0x67a/0x7a0 [ 477.706418] ? __pfx_ret_from_fork+0x10/0x10 [ 477.706445] ? __switch_to+0x759/0x1030 [ 477.706478] ? __pfx_kthread+0x10/0x10 [ 477.706505] ret_from_fork_asm+0x1a/0x30 [ 477.706552] [ 477.719754] debugfs: '0' already exists in 'hci7' [ 477.723167] kobject: kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.723765] Bluetooth: hci3: unexpected event 0x04 length: 31 > 10 [ 477.726101] Bluetooth: hci6: failed to register connection device [ 477.729989] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 477.740489] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.740529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.740542] Workqueue: hci7 hci_rx_work [ 477.740567] Call Trace: [ 477.740574] [ 477.740580] dump_stack_lvl+0xfa/0x120 [ 477.740604] sysfs_warn_dup+0x80/0xa0 [ 477.740627] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.740646] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.740663] ? find_held_lock+0x2b/0x80 [ 477.740691] ? lock_release+0xc8/0x270 [ 477.740709] ? do_raw_spin_unlock+0x53/0x220 [ 477.740732] kobject_add_internal+0x24c/0x9a0 [ 477.740760] kobject_add+0x157/0x240 [ 477.740783] ? __pfx_kobject_add+0x10/0x10 [ 477.740805] ? lock_release+0xc8/0x270 [ 477.740827] ? do_raw_spin_unlock+0x53/0x220 [ 477.740848] ? kobject_put+0xaa/0x260 [ 477.740876] device_add+0x32d/0x1830 [ 477.740899] ? __pfx_device_add+0x10/0x10 [ 477.740918] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.740939] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.740956] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.740981] hci_conn_add_sysfs+0x117/0x1c0 [ 477.741003] le_conn_complete_evt+0x1246/0x1e40 [ 477.741036] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.741069] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.741086] ? __asan_memcpy+0x3d/0x60 [ 477.741114] hci_le_meta_evt+0x34b/0x530 [ 477.741129] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.741148] hci_event_packet+0x66c/0x10e0 [ 477.741164] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.741179] ? __pfx_hci_event_packet+0x10/0x10 [ 477.741199] ? mark_held_locks+0x49/0x80 [ 477.741218] ? kcov_remote_start+0x2ce/0x5a0 [ 477.741246] hci_rx_work+0x65b/0x8b0 [ 477.741264] process_one_work+0x8e1/0x1960 [ 477.741293] ? __pfx_process_one_work+0x10/0x10 [ 477.741312] ? move_linked_works+0x172/0x270 [ 477.741339] ? assign_work+0x196/0x240 [ 477.741359] worker_thread+0x67e/0xe90 [ 477.741378] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.741410] ? __pfx_worker_thread+0x10/0x10 [ 477.741429] kthread+0x3c8/0x740 [ 477.741446] ? __pfx_kthread+0x10/0x10 [ 477.741462] ? ret_from_fork+0x79/0x7a0 [ 477.741481] ? __pfx_kthread+0x10/0x10 [ 477.741498] ret_from_fork+0x67a/0x7a0 [ 477.741513] ? __pfx_ret_from_fork+0x10/0x10 [ 477.741531] ? __switch_to+0x759/0x1030 [ 477.741553] ? __pfx_kthread+0x10/0x10 [ 477.741570] ret_from_fork_asm+0x1a/0x30 [ 477.741602] [ 477.763916] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.765227] Bluetooth: hci7: failed to register connection device [ 477.770231] Bluetooth: hci3: connection err: -111 18:26:51 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESDEC=r0], 0x22) syz_emit_vhci(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i2c_algo_bit', 0x2002, 0x114) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r5, 0x2, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x23c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$$%(\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xde50}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$(/]]:-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-$\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}/:+[\xd0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!$%$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{#$!\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.!#-&+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc0000}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 18:26:51 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3"], 0x22) 18:26:51 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xfb, 0x2}, {0x1479}}}}, 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x6, 0x1, 0x1}}}, 0xc) [ 477.809506] debugfs: '0' already exists in 'hci7' [ 477.810276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 477.810988] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.811005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.811015] Workqueue: hci7 hci_rx_work [ 477.811035] Call Trace: [ 477.811041] [ 477.811046] dump_stack_lvl+0xfa/0x120 [ 477.811065] sysfs_warn_dup+0x80/0xa0 [ 477.811083] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.811099] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.811114] ? find_held_lock+0x2b/0x80 [ 477.811137] ? lock_release+0xc8/0x270 [ 477.811153] ? do_raw_spin_unlock+0x53/0x220 [ 477.811173] kobject_add_internal+0x24c/0x9a0 [ 477.811196] kobject_add+0x157/0x240 [ 477.811217] ? __pfx_kobject_add+0x10/0x10 [ 477.811237] ? lock_release+0xc8/0x270 [ 477.811252] ? do_raw_spin_unlock+0x53/0x220 [ 477.811269] ? kobject_put+0xaa/0x260 [ 477.811292] device_add+0x32d/0x1830 [ 477.811310] ? __pfx_device_add+0x10/0x10 [ 477.811325] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.811344] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.811357] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.811377] hci_conn_add_sysfs+0x117/0x1c0 [ 477.811395] le_conn_complete_evt+0x1246/0x1e40 [ 477.811422] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.811449] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.811463] ? __asan_memcpy+0x3d/0x60 [ 477.811486] hci_le_meta_evt+0x34b/0x530 [ 477.811497] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.811512] hci_event_packet+0x66c/0x10e0 [ 477.811526] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.811538] ? __pfx_hci_event_packet+0x10/0x10 [ 477.811551] ? mark_held_locks+0x49/0x80 [ 477.811566] ? kcov_remote_start+0x2ce/0x5a0 [ 477.811590] hci_rx_work+0x65b/0x8b0 [ 477.811604] process_one_work+0x8e1/0x1960 [ 477.811628] ? __pfx_process_one_work+0x10/0x10 [ 477.811643] ? move_linked_works+0x172/0x270 [ 477.811665] ? assign_work+0x196/0x240 [ 477.811681] worker_thread+0x67e/0xe90 [ 477.811696] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.811722] ? __pfx_worker_thread+0x10/0x10 [ 477.811738] kthread+0x3c8/0x740 [ 477.811752] ? __pfx_kthread+0x10/0x10 [ 477.811764] ? ret_from_fork+0x79/0x7a0 [ 477.811780] ? __pfx_kthread+0x10/0x10 [ 477.811794] ret_from_fork+0x67a/0x7a0 [ 477.811806] ? __pfx_ret_from_fork+0x10/0x10 [ 477.811824] ? __switch_to+0x759/0x1030 [ 477.811843] ? __pfx_kthread+0x10/0x10 [ 477.811857] ret_from_fork_asm+0x1a/0x30 [ 477.811882] [ 477.830578] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.832285] Bluetooth: hci7: failed to register connection device 18:26:51 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9"}}, 0xbb) 18:26:51 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x7251e65647c71e1}, 0x2) [ 477.884955] debugfs: '0' already exists in 'hci0' [ 477.885565] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 477.886266] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.886283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.886293] Workqueue: hci0 hci_rx_work [ 477.886313] Call Trace: [ 477.886318] [ 477.886324] dump_stack_lvl+0xfa/0x120 [ 477.886343] sysfs_warn_dup+0x80/0xa0 [ 477.886361] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.886376] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.886390] ? find_held_lock+0x2b/0x80 [ 477.886412] ? lock_release+0xc8/0x270 [ 477.886426] ? do_raw_spin_unlock+0x53/0x220 [ 477.886445] kobject_add_internal+0x24c/0x9a0 [ 477.886467] kobject_add+0x157/0x240 [ 477.886485] ? __pfx_kobject_add+0x10/0x10 [ 477.886503] ? lock_release+0xc8/0x270 [ 477.886518] ? do_raw_spin_unlock+0x53/0x220 [ 477.886534] ? kobject_put+0xaa/0x260 [ 477.886557] device_add+0x32d/0x1830 [ 477.886576] ? __pfx_device_add+0x10/0x10 [ 477.886590] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.886608] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.886621] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.886641] hci_conn_add_sysfs+0x117/0x1c0 [ 477.886659] le_conn_complete_evt+0x1246/0x1e40 [ 477.886685] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.886711] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.886725] ? __asan_memcpy+0x3d/0x60 [ 477.886748] hci_le_meta_evt+0x34b/0x530 [ 477.886759] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.886774] hci_event_packet+0x66c/0x10e0 [ 477.886788] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.886800] ? __pfx_hci_event_packet+0x10/0x10 [ 477.886813] ? mark_held_locks+0x49/0x80 [ 477.886832] ? kcov_remote_start+0x2ce/0x5a0 [ 477.886854] hci_rx_work+0x65b/0x8b0 [ 477.886869] process_one_work+0x8e1/0x1960 [ 477.886893] ? __pfx_process_one_work+0x10/0x10 [ 477.886907] ? move_linked_works+0x172/0x270 [ 477.886930] ? assign_work+0x196/0x240 [ 477.886945] worker_thread+0x67e/0xe90 [ 477.886961] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.886986] ? __pfx_worker_thread+0x10/0x10 [ 477.887002] kthread+0x3c8/0x740 [ 477.887015] ? __pfx_kthread+0x10/0x10 [ 477.887028] ? ret_from_fork+0x79/0x7a0 [ 477.887043] ? __pfx_kthread+0x10/0x10 [ 477.887057] ret_from_fork+0x67a/0x7a0 [ 477.887069] ? __pfx_ret_from_fork+0x10/0x10 [ 477.887083] ? __switch_to+0x759/0x1030 [ 477.887101] ? __pfx_kthread+0x10/0x10 [ 477.887115] ret_from_fork_asm+0x1a/0x30 [ 477.887140] [ 477.905080] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.906201] Bluetooth: hci0: failed to register connection device [ 477.907011] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 477.907627] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 477.908973] debugfs: '0' already exists in 'hci0' [ 477.909502] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 477.910308] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.910325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.910335] Workqueue: hci0 hci_rx_work [ 477.910352] Call Trace: [ 477.910358] [ 477.910363] dump_stack_lvl+0xfa/0x120 [ 477.910380] sysfs_warn_dup+0x80/0xa0 [ 477.910397] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.910412] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.910426] ? find_held_lock+0x2b/0x80 [ 477.910447] ? lock_release+0xc8/0x270 [ 477.910461] ? do_raw_spin_unlock+0x53/0x220 [ 477.910480] kobject_add_internal+0x24c/0x9a0 [ 477.910501] kobject_add+0x157/0x240 [ 477.910520] ? __pfx_kobject_add+0x10/0x10 [ 477.910538] ? lock_release+0xc8/0x270 [ 477.910552] ? do_raw_spin_unlock+0x53/0x220 [ 477.910569] ? kobject_put+0xaa/0x260 [ 477.910591] device_add+0x32d/0x1830 [ 477.910608] ? __pfx_device_add+0x10/0x10 [ 477.910624] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.910641] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.910654] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.910674] hci_conn_add_sysfs+0x117/0x1c0 [ 477.910692] le_conn_complete_evt+0x1246/0x1e40 [ 477.910718] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.910744] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.910758] ? __asan_memcpy+0x3d/0x60 [ 477.910785] hci_le_meta_evt+0x34b/0x530 [ 477.910798] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.910813] hci_event_packet+0x66c/0x10e0 [ 477.910831] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.910843] ? __pfx_hci_event_packet+0x10/0x10 [ 477.910856] ? mark_held_locks+0x49/0x80 [ 477.910870] ? kcov_remote_start+0x2ce/0x5a0 [ 477.910893] hci_rx_work+0x65b/0x8b0 [ 477.910908] process_one_work+0x8e1/0x1960 [ 477.910930] ? __pfx_process_one_work+0x10/0x10 [ 477.910945] ? move_linked_works+0x172/0x270 [ 477.910967] ? assign_work+0x196/0x240 [ 477.910982] worker_thread+0x67e/0xe90 [ 477.910998] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.911023] ? __pfx_worker_thread+0x10/0x10 [ 477.911039] kthread+0x3c8/0x740 [ 477.911052] ? __pfx_kthread+0x10/0x10 [ 477.911064] ? ret_from_fork+0x79/0x7a0 [ 477.911079] ? __pfx_kthread+0x10/0x10 [ 477.911093] ret_from_fork+0x67a/0x7a0 [ 477.911105] ? __pfx_ret_from_fork+0x10/0x10 [ 477.911119] ? __switch_to+0x759/0x1030 [ 477.911137] ? __pfx_kthread+0x10/0x10 [ 477.911151] ret_from_fork_asm+0x1a/0x30 [ 477.911176] [ 477.929861] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.931641] Bluetooth: hci0: failed to register connection device [ 477.960117] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 477.974682] debugfs: '0' already exists in 'hci3' [ 477.974773] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 477.975329] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 477.976800] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.976817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.976831] Workqueue: hci3 hci_rx_work [ 477.976851] Call Trace: [ 477.976856] [ 477.976861] dump_stack_lvl+0xfa/0x120 [ 477.976881] sysfs_warn_dup+0x80/0xa0 [ 477.976899] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.976914] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.976929] ? find_held_lock+0x2b/0x80 [ 477.976951] ? lock_release+0xc8/0x270 [ 477.976965] ? do_raw_spin_unlock+0x53/0x220 [ 477.976984] kobject_add_internal+0x24c/0x9a0 [ 477.977006] kobject_add+0x157/0x240 [ 477.977025] ? __pfx_kobject_add+0x10/0x10 [ 477.977043] ? lock_release+0xc8/0x270 [ 477.977057] ? do_raw_spin_unlock+0x53/0x220 [ 477.977074] ? kobject_put+0xaa/0x260 [ 477.977096] device_add+0x32d/0x1830 [ 477.977114] ? __pfx_device_add+0x10/0x10 [ 477.977129] ? hci_debugfs_create_conn+0x10f/0x240 [ 477.977147] ? mgmt_send_event_skb+0x2f3/0x460 [ 477.977161] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 477.977180] hci_conn_add_sysfs+0x117/0x1c0 [ 477.977198] le_conn_complete_evt+0x1246/0x1e40 [ 477.977225] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 477.977251] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 477.977265] ? __asan_memcpy+0x3d/0x60 [ 477.977288] hci_le_meta_evt+0x34b/0x530 [ 477.977300] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 477.977315] hci_event_packet+0x66c/0x10e0 [ 477.977328] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 477.977340] ? __pfx_hci_event_packet+0x10/0x10 [ 477.977353] ? mark_held_locks+0x49/0x80 [ 477.977368] ? kcov_remote_start+0x2ce/0x5a0 [ 477.977390] hci_rx_work+0x65b/0x8b0 [ 477.977405] process_one_work+0x8e1/0x1960 [ 477.977429] ? __pfx_process_one_work+0x10/0x10 [ 477.977444] ? move_linked_works+0x172/0x270 [ 477.977466] ? assign_work+0x196/0x240 [ 477.977482] worker_thread+0x67e/0xe90 [ 477.977497] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 477.977523] ? __pfx_worker_thread+0x10/0x10 [ 477.977538] kthread+0x3c8/0x740 [ 477.977552] ? __pfx_kthread+0x10/0x10 [ 477.977565] ? ret_from_fork+0x79/0x7a0 [ 477.977580] ? __pfx_kthread+0x10/0x10 [ 477.977594] ret_from_fork+0x67a/0x7a0 [ 477.977607] ? __pfx_ret_from_fork+0x10/0x10 [ 477.977620] ? __switch_to+0x759/0x1030 [ 477.977638] ? __pfx_kthread+0x10/0x10 [ 477.977652] ret_from_fork_asm+0x1a/0x30 [ 477.977678] [ 477.995518] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 477.996645] Bluetooth: hci3: failed to register connection device [ 477.998295] debugfs: '0' already exists in 'hci5' [ 477.999028] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 477.999696] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 477.999713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.999723] Workqueue: hci5 hci_rx_work [ 477.999741] Call Trace: [ 477.999746] [ 477.999751] dump_stack_lvl+0xfa/0x120 [ 477.999770] sysfs_warn_dup+0x80/0xa0 [ 477.999788] sysfs_create_dir_ns+0x23b/0x2a0 [ 477.999803] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 477.999817] ? find_held_lock+0x2b/0x80 [ 477.999844] ? lock_release+0xc8/0x270 [ 477.999858] ? do_raw_spin_unlock+0x53/0x220 [ 477.999877] kobject_add_internal+0x24c/0x9a0 [ 477.999899] kobject_add+0x157/0x240 [ 477.999918] ? __pfx_kobject_add+0x10/0x10 [ 477.999936] ? lock_release+0xc8/0x270 [ 477.999951] ? do_raw_spin_unlock+0x53/0x220 [ 477.999968] ? kobject_put+0xaa/0x260 [ 477.999993] device_add+0x32d/0x1830 [ 478.000015] ? __pfx_device_add+0x10/0x10 [ 478.000030] ? hci_debugfs_create_conn+0x10f/0x240 [ 478.000047] ? mgmt_send_event_skb+0x2f3/0x460 [ 478.000061] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 478.000081] hci_conn_add_sysfs+0x117/0x1c0 [ 478.000098] le_conn_complete_evt+0x1246/0x1e40 [ 478.000125] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 478.000151] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 478.000165] ? __asan_memcpy+0x3d/0x60 [ 478.000188] hci_le_meta_evt+0x34b/0x530 [ 478.000200] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 478.000215] hci_event_packet+0x66c/0x10e0 [ 478.000229] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 478.000241] ? __pfx_hci_event_packet+0x10/0x10 [ 478.000254] ? mark_held_locks+0x49/0x80 [ 478.000269] ? kcov_remote_start+0x2ce/0x5a0 [ 478.000292] hci_rx_work+0x65b/0x8b0 [ 478.000307] process_one_work+0x8e1/0x1960 [ 478.000330] ? __pfx_process_one_work+0x10/0x10 [ 478.000345] ? move_linked_works+0x172/0x270 [ 478.000367] ? assign_work+0x196/0x240 [ 478.000383] worker_thread+0x67e/0xe90 [ 478.000398] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 478.000424] ? __pfx_worker_thread+0x10/0x10 [ 478.000439] kthread+0x3c8/0x740 [ 478.000453] ? __pfx_kthread+0x10/0x10 [ 478.000466] ? ret_from_fork+0x79/0x7a0 [ 478.000479] ? lock_release+0xc8/0x270 [ 478.000494] ? __pfx_kthread+0x10/0x10 [ 478.000522] ret_from_fork+0x67a/0x7a0 [ 478.000535] ? __pfx_ret_from_fork+0x10/0x10 [ 478.000549] ? __switch_to+0x759/0x1030 [ 478.000567] ? __pfx_kthread+0x10/0x10 [ 478.000580] ret_from_fork_asm+0x1a/0x30 [ 478.000606] [ 478.018631] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 478.020718] Bluetooth: hci5: failed to register connection device [ 478.022908] debugfs: '0' already exists in 'hci3' [ 478.023435] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 478.024120] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 478.024138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.024148] Workqueue: hci3 hci_rx_work [ 478.024163] Call Trace: [ 478.024167] [ 478.024172] dump_stack_lvl+0xfa/0x120 [ 478.024190] sysfs_warn_dup+0x80/0xa0 [ 478.024206] sysfs_create_dir_ns+0x23b/0x2a0 [ 478.024221] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 478.024236] ? find_held_lock+0x2b/0x80 [ 478.024256] ? lock_release+0xc8/0x270 [ 478.024270] ? do_raw_spin_unlock+0x53/0x220 [ 478.024289] kobject_add_internal+0x24c/0x9a0 [ 478.024311] kobject_add+0x157/0x240 [ 478.024330] ? __pfx_kobject_add+0x10/0x10 [ 478.024348] ? lock_release+0xc8/0x270 [ 478.024362] ? do_raw_spin_unlock+0x53/0x220 [ 478.024379] ? kobject_put+0xaa/0x260 [ 478.024402] device_add+0x32d/0x1830 [ 478.024419] ? __pfx_device_add+0x10/0x10 [ 478.024434] ? hci_debugfs_create_conn+0x10f/0x240 [ 478.024451] ? mgmt_send_event_skb+0x2f3/0x460 [ 478.024465] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 478.024484] hci_conn_add_sysfs+0x117/0x1c0 [ 478.024502] le_conn_complete_evt+0x1246/0x1e40 [ 478.024538] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 478.024564] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 478.024578] ? __asan_memcpy+0x3d/0x60 [ 478.024600] hci_le_meta_evt+0x34b/0x530 [ 478.024612] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 478.024627] hci_event_packet+0x66c/0x10e0 [ 478.024640] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 478.024652] ? __pfx_hci_event_packet+0x10/0x10 [ 478.024665] ? mark_held_locks+0x49/0x80 [ 478.024680] ? kcov_remote_start+0x2ce/0x5a0 [ 478.024702] hci_rx_work+0x65b/0x8b0 [ 478.024721] process_one_work+0x8e1/0x1960 [ 478.024744] ? __pfx_process_one_work+0x10/0x10 [ 478.024758] ? move_linked_works+0x172/0x270 [ 478.024780] ? assign_work+0x196/0x240 [ 478.024796] worker_thread+0x67e/0xe90 [ 478.024811] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 478.024836] ? __pfx_worker_thread+0x10/0x10 [ 478.024852] kthread+0x3c8/0x740 [ 478.024865] ? __pfx_kthread+0x10/0x10 [ 478.024877] ? ret_from_fork+0x79/0x7a0 [ 478.024891] ? __pfx_kthread+0x10/0x10 [ 478.024905] ret_from_fork+0x67a/0x7a0 [ 478.024917] ? __pfx_ret_from_fork+0x10/0x10 [ 478.024931] ? __switch_to+0x759/0x1030 [ 478.024949] ? __pfx_kthread+0x10/0x10 [ 478.024963] ret_from_fork_asm+0x1a/0x30 [ 478.024987] [ 478.042948] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 478.044067] Bluetooth: hci3: failed to register connection device [ 478.074564] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 478.083497] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 478.414901] Bluetooth: hci7: command 0x2016 tx timeout [ 478.415522] Bluetooth: hci5: command 0x0406 tx timeout [ 479.502970] Bluetooth: hci6: command 0x2016 tx timeout [ 479.566864] Bluetooth: hci3: command 0x2016 tx timeout [ 479.695026] Bluetooth: hci0: command 0x2016 tx timeout [ 480.463036] Bluetooth: hci7: command 0x2016 tx timeout [ 480.463143] Bluetooth: hci5: command 0x0406 tx timeout [ 481.551106] Bluetooth: hci6: command 0x2016 tx timeout [ 481.615926] Bluetooth: hci3: command 0x2016 tx timeout [ 481.742995] Bluetooth: hci0: command 0x2016 tx timeout [ 482.511130] Bluetooth: hci5: command 0x0406 tx timeout [ 482.512253] Bluetooth: hci7: command 0x2016 tx timeout [ 483.598961] Bluetooth: hci6: command 0x2016 tx timeout [ 483.663937] Bluetooth: hci3: command 0x2016 tx timeout [ 483.790950] Bluetooth: hci0: command 0x2016 tx timeout [ 484.558985] Bluetooth: hci5: command 0x0406 tx timeout [ 484.559020] Bluetooth: hci7: command 0x2016 tx timeout [ 485.646922] Bluetooth: hci6: command 0x2016 tx timeout [ 485.710945] Bluetooth: hci3: command 0x2016 tx timeout [ 485.838960] Bluetooth: hci0: command 0x2016 tx timeout 18:26:59 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f2e6ffffe035f67d4a5270f7ecba3a6b3069621fd81e86cc9c1c662c24ea8e877267cbf1c1c140bcef665adf0188e6feaf278f226f5177194b0f358b810f6b86df91aaec347f76f9caa030548515410688219d651c42f81d28b28b955a6c47f9c222820d8f9b6d97f24b2ce7e2ce5049b863f5167f7937b5673f22751e4a7e1c8b4e3b402cc06f33d33bf8dc0f1a99c445f6b0192c7b2d7908651e0b588927df595737"], 0x22) 18:26:59 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3"], 0x22) 18:26:59 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e379faaba8e17bb1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x9, 0xc8, 0x81}}}, 0x7) futex(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 18:26:59 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f0ad4b79109267879f3f768f6965cb027d800323ad8f797b3f646e98b1a41aa6efa1eddae3fc0dd6b3d1d1c2b9590d6e7cf43ca61443275fec84dfefd503cf5be9417fed3908953"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:26:59 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3"], 0x22) 18:26:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) r1 = fspick(r0, &(0x7f0000000040)='./file1\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x3, 0xbcd, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:26:59 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb8}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9"}}, 0xbb) 18:26:59 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) 18:26:59 executing program 7: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="aa60efe2ecc1dbc9dcd616f65a422992474a6fe01b0e"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x64}, @l2cap_cid_signaling={{0x60}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0xffff, 0x2}}, @l2cap_info_rsp={{0xb, 0xc8, 0x29}, {0x1f, 0x3f, "cc9128bf4bb3eb97c0f869320d8d5e9b07a1fbbaa5190c0ecc3a009e4fec5212ad9d3f6343"}}, @l2cap_create_chan_req={{0xc, 0x39, 0x5}, {0x5, 0x4, 0x9}}, @l2cap_conf_req={{0x4, 0x6, 0x7}, {0x0, 0x3, [@l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x20, 0xa91}}, @l2cap_disconn_req={{0x6, 0x7b, 0x4}, {0x8, 0xfff}}, @l2cap_move_chan_req={{0xe, 0xf5, 0x3}, {0x5, 0x1}}]}}, 0x69) 18:26:59 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xc5}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad92"}}, 0xc8) [ 486.190971] debugfs: '0' already exists in 'hci5' [ 486.193121] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' 18:26:59 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 486.194482] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 486.194512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.194527] Workqueue: hci5 hci_rx_work [ 486.194558] Call Trace: [ 486.194566] [ 486.194575] dump_stack_lvl+0xfa/0x120 [ 486.194606] sysfs_warn_dup+0x80/0xa0 [ 486.194635] sysfs_create_dir_ns+0x23b/0x2a0 [ 486.194663] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 486.194689] ? find_held_lock+0x2b/0x80 [ 486.194727] ? lock_release+0xc8/0x270 [ 486.194754] ? do_raw_spin_unlock+0x53/0x220 [ 486.194787] kobject_add_internal+0x24c/0x9a0 [ 486.194835] kobject_add+0x157/0x240 [ 486.194870] ? __pfx_kobject_add+0x10/0x10 [ 486.194904] ? lock_release+0xc8/0x270 [ 486.194930] ? do_raw_spin_unlock+0x53/0x220 [ 486.194962] ? kobject_put+0xaa/0x260 [ 486.195004] device_add+0x32d/0x1830 [ 486.195036] ? __pfx_device_add+0x10/0x10 [ 486.195063] ? hci_debugfs_create_conn+0x10f/0x240 [ 486.195094] ? mgmt_send_event_skb+0x2f3/0x460 [ 486.195118] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 486.195155] hci_conn_add_sysfs+0x117/0x1c0 [ 486.195186] le_conn_complete_evt+0x1246/0x1e40 [ 486.195234] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 486.195283] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 486.195308] ? __asan_memcpy+0x3d/0x60 [ 486.195348] hci_le_meta_evt+0x34b/0x530 [ 486.195368] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 486.195396] hci_event_packet+0x66c/0x10e0 [ 486.195420] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 486.195442] ? __pfx_hci_event_packet+0x10/0x10 [ 486.195466] ? mark_held_locks+0x49/0x80 [ 486.195492] ? kcov_remote_start+0x2ce/0x5a0 [ 486.195532] hci_rx_work+0x65b/0x8b0 [ 486.195559] process_one_work+0x8e1/0x1960 [ 486.195599] ? __pfx_process_one_work+0x10/0x10 [ 486.195627] ? move_linked_works+0x172/0x270 [ 486.195667] ? assign_work+0x196/0x240 [ 486.195695] worker_thread+0x67e/0xe90 [ 486.195723] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 486.195768] ? __pfx_worker_thread+0x10/0x10 [ 486.195797] kthread+0x3c8/0x740 [ 486.195822] ? __pfx_kthread+0x10/0x10 [ 486.195844] ? ret_from_fork+0x79/0x7a0 [ 486.195867] ? lock_release+0xc8/0x270 [ 486.195893] ? __pfx_kthread+0x10/0x10 [ 486.195919] ret_from_fork+0x67a/0x7a0 [ 486.195941] ? __pfx_ret_from_fork+0x10/0x10 [ 486.195966] ? __switch_to+0x759/0x1030 [ 486.195998] ? __pfx_kthread+0x10/0x10 [ 486.196023] ret_from_fork_asm+0x1a/0x30 [ 486.196069] [ 486.229936] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 486.233620] Bluetooth: hci5: failed to register connection device 18:26:59 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x1e}, @l2cap_cid_signaling={{0x1a}, [@l2cap_disconn_rsp={{0x7, 0x81, 0x4}, {0x8e0f, 0x3}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0xff, 0x8}, {0x5, 0x8, "31348ea3"}}]}}, 0x23) [ 486.308268] Bluetooth: hci6: unexpected event 0x04 length: 31 > 10 [ 486.308387] Bluetooth: hci6: connection err: -111 [ 486.341355] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 486.348721] debugfs: '0' already exists in 'hci3' [ 486.350572] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 486.352159] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 486.352206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.352230] Workqueue: hci3 hci_rx_work [ 486.352270] Call Trace: [ 486.352283] [ 486.352296] dump_stack_lvl+0xfa/0x120 [ 486.352343] sysfs_warn_dup+0x80/0xa0 [ 486.352389] sysfs_create_dir_ns+0x23b/0x2a0 [ 486.352434] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 486.352474] ? find_held_lock+0x2b/0x80 [ 486.352553] ? lock_release+0xc8/0x270 [ 486.352590] ? do_raw_spin_unlock+0x53/0x220 [ 486.352633] kobject_add_internal+0x24c/0x9a0 [ 486.352675] kobject_add+0x157/0x240 [ 486.352709] ? __pfx_kobject_add+0x10/0x10 [ 486.352742] ? lock_release+0xc8/0x270 [ 486.352768] ? do_raw_spin_unlock+0x53/0x220 [ 486.352800] ? kobject_put+0xaa/0x260 [ 486.352849] device_add+0x32d/0x1830 [ 486.352881] ? __pfx_device_add+0x10/0x10 [ 486.352908] ? hci_debugfs_create_conn+0x10f/0x240 [ 486.352939] ? mgmt_send_event_skb+0x2f3/0x460 [ 486.352962] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 486.352999] hci_conn_add_sysfs+0x117/0x1c0 [ 486.353030] le_conn_complete_evt+0x1246/0x1e40 [ 486.353078] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 486.353126] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 486.353152] ? __asan_memcpy+0x3d/0x60 [ 486.353191] hci_le_meta_evt+0x34b/0x530 [ 486.353211] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 486.353239] hci_event_packet+0x66c/0x10e0 [ 486.353263] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 486.353285] ? __pfx_hci_event_packet+0x10/0x10 [ 486.353309] ? mark_held_locks+0x49/0x80 [ 486.353336] ? kcov_remote_start+0x2ce/0x5a0 [ 486.353376] hci_rx_work+0x65b/0x8b0 [ 486.353403] process_one_work+0x8e1/0x1960 [ 486.353443] ? __pfx_process_one_work+0x10/0x10 [ 486.353474] ? move_linked_works+0x172/0x270 [ 486.353513] ? assign_work+0x196/0x240 [ 486.353542] worker_thread+0x67e/0xe90 [ 486.353570] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 486.353615] ? __pfx_worker_thread+0x10/0x10 [ 486.353645] kthread+0x3c8/0x740 [ 486.353669] ? __pfx_kthread+0x10/0x10 [ 486.353694] ? ret_from_fork+0x79/0x7a0 [ 486.353719] ? lock_release+0xc8/0x270 [ 486.353745] ? __pfx_kthread+0x10/0x10 [ 486.353770] ret_from_fork+0x67a/0x7a0 [ 486.353793] ? __pfx_ret_from_fork+0x10/0x10 [ 486.353818] ? __switch_to+0x759/0x1030 [ 486.353850] ? __pfx_kthread+0x10/0x10 [ 486.353876] ret_from_fork_asm+0x1a/0x30 [ 486.353922] [ 486.385708] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 486.387627] Bluetooth: hci3: failed to register connection device [ 486.389896] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 486.606927] Bluetooth: hci5: command 0x0406 tx timeout [ 486.607779] Bluetooth: hci7: command 0x2016 tx timeout [ 487.758902] Bluetooth: hci3: command 0x2016 tx timeout [ 487.886923] Bluetooth: hci0: command 0x2016 tx timeout [ 488.142966] Bluetooth: hci6: command 0x2016 tx timeout [ 488.654997] Bluetooth: hci7: command 0x2016 tx timeout [ 488.654995] Bluetooth: hci5: command 0x0406 tx timeout [ 489.806930] Bluetooth: hci3: command 0x2016 tx timeout [ 489.934976] Bluetooth: hci0: command 0x2016 tx timeout [ 490.191214] Bluetooth: hci6: command 0x2016 tx timeout [ 490.703358] Bluetooth: hci5: command 0x0406 tx timeout [ 490.703433] Bluetooth: hci7: command 0x2016 tx timeout [ 491.854944] Bluetooth: hci3: command 0x2016 tx timeout [ 491.982968] Bluetooth: hci0: command 0x2016 tx timeout [ 492.751033] Bluetooth: hci7: command 0x2016 tx timeout [ 492.752100] Bluetooth: hci5: command 0x0406 tx timeout [ 493.902892] Bluetooth: hci3: command 0x2016 tx timeout [ 494.031009] Bluetooth: hci0: command 0x2016 tx timeout [ 494.799055] Bluetooth: hci7: command 0x2016 tx timeout [ 494.800255] Bluetooth: hci5: command 0x0406 tx timeout 18:27:08 executing program 1: r0 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x1, 0xe3, 0xbe, &(0x7f0000000040)=""/190}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) 18:27:08 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x3d}}}, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x55}, "1deab9194d0e3c40ede4d4c2d3d71dec923d6d9fb985367875ed27dc7b0b12a7137fea5babad362359dc1d6453e742f567d771170944f337404233deda018fe944828dbc4dc9886afbcf95d2bc4bf314cc2d27b81f"}, 0x59) 18:27:08 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:27:08 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xc5}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad92"}}, 0xc8) 18:27:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) syz_emit_vhci(0x0, 0x0) 18:27:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000005) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="0108000000000000180000001d62b50f21aa3f0775d2abf390cfda0d4093e54991052fe652298ec3365e6dd6539c5ec889b92649a890dba0be66eacc2fbbcc60ff73ea693da0e4c1251a25e38b6730810040a3d98f972f426978b46d67fecd", @ANYRES32, @ANYRES16=r0]) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) 18:27:08 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) syz_emit_vhci(0x0, 0x0) 18:27:08 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3"], 0x22) [ 495.615492] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 495.616570] debugfs: '0' already exists in 'hci3' [ 495.618037] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 495.619208] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 495.619229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 495.619240] Workqueue: hci3 hci_rx_work [ 495.619264] Call Trace: [ 495.619269] [ 495.619276] dump_stack_lvl+0xfa/0x120 [ 495.619298] sysfs_warn_dup+0x80/0xa0 [ 495.619320] sysfs_create_dir_ns+0x23b/0x2a0 [ 495.619339] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.619357] ? find_held_lock+0x2b/0x80 [ 495.619384] ? lock_release+0xc8/0x270 [ 495.619402] ? do_raw_spin_unlock+0x53/0x220 [ 495.619425] kobject_add_internal+0x24c/0x9a0 [ 495.619453] kobject_add+0x157/0x240 [ 495.619477] ? __pfx_kobject_add+0x10/0x10 [ 495.619500] ? lock_release+0xc8/0x270 [ 495.619519] ? do_raw_spin_unlock+0x53/0x220 [ 495.619540] ? kobject_put+0xaa/0x260 [ 495.619569] device_add+0x32d/0x1830 [ 495.619592] ? __pfx_device_add+0x10/0x10 [ 495.619611] ? hci_debugfs_create_conn+0x10f/0x240 [ 495.619633] ? mgmt_send_event_skb+0x2f3/0x460 [ 495.619650] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 495.619675] hci_conn_add_sysfs+0x117/0x1c0 [ 495.619697] le_conn_complete_evt+0x1246/0x1e40 [ 495.619730] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.619764] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 495.619782] ? __asan_memcpy+0x3d/0x60 [ 495.619810] hci_le_meta_evt+0x34b/0x530 [ 495.619830] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 495.619854] hci_event_packet+0x66c/0x10e0 [ 495.619871] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.619886] ? __pfx_hci_event_packet+0x10/0x10 [ 495.619902] ? mark_held_locks+0x49/0x80 [ 495.619921] ? kcov_remote_start+0x2ce/0x5a0 [ 495.619950] hci_rx_work+0x65b/0x8b0 [ 495.619969] process_one_work+0x8e1/0x1960 [ 495.619997] ? __pfx_process_one_work+0x10/0x10 [ 495.620016] ? move_linked_works+0x172/0x270 [ 495.620044] ? assign_work+0x196/0x240 [ 495.620064] worker_thread+0x67e/0xe90 [ 495.620083] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 495.620115] ? __pfx_worker_thread+0x10/0x10 [ 495.620135] kthread+0x3c8/0x740 [ 495.620153] ? __pfx_kthread+0x10/0x10 [ 495.620171] ? ret_from_fork+0x79/0x7a0 [ 495.620193] ? __pfx_kthread+0x10/0x10 [ 495.620211] ret_from_fork+0x67a/0x7a0 [ 495.620227] ? __pfx_ret_from_fork+0x10/0x10 [ 495.620245] ? __switch_to+0x759/0x1030 [ 495.620267] ? __pfx_kthread+0x10/0x10 [ 495.620285] ret_from_fork_asm+0x1a/0x30 [ 495.620317] [ 495.643478] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.645768] Bluetooth: hci3: failed to register connection device [ 495.646623] Bluetooth: hci6: unexpected event 0x04 length: 31 > 10 [ 495.646650] Bluetooth: hci6: connection err: -111 18:27:08 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xc5}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad92"}}, 0xc8) 18:27:08 executing program 6: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:27:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x40, 0x103) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x6) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0414df62d48db18ce4"], 0x9) syz_emit_vhci(0x0, 0x0) 18:27:08 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) syz_emit_vhci(0x0, 0x0) [ 495.650513] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 495.707378] debugfs: '0' already exists in 'hci5' [ 495.708783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 495.709599] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 495.709619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 495.709629] Workqueue: hci5 hci_rx_work [ 495.709651] Call Trace: [ 495.709661] [ 495.709667] dump_stack_lvl+0xfa/0x120 [ 495.709688] sysfs_warn_dup+0x80/0xa0 [ 495.709708] sysfs_create_dir_ns+0x23b/0x2a0 [ 495.709726] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.709744] ? find_held_lock+0x2b/0x80 [ 495.709769] ? lock_release+0xc8/0x270 [ 495.709786] ? do_raw_spin_unlock+0x53/0x220 [ 495.709808] kobject_add_internal+0x24c/0x9a0 [ 495.709834] kobject_add+0x157/0x240 [ 495.709856] ? __pfx_kobject_add+0x10/0x10 [ 495.709878] ? lock_release+0xc8/0x270 [ 495.709895] ? do_raw_spin_unlock+0x53/0x220 [ 495.709915] ? kobject_put+0xaa/0x260 [ 495.709942] device_add+0x32d/0x1830 [ 495.709963] ? __pfx_device_add+0x10/0x10 [ 495.709981] ? hci_debugfs_create_conn+0x10f/0x240 [ 495.710001] ? mgmt_send_event_skb+0x2f3/0x460 [ 495.710017] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 495.710041] hci_conn_add_sysfs+0x117/0x1c0 [ 495.710062] le_conn_complete_evt+0x1246/0x1e40 [ 495.710094] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.710125] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 495.710142] ? __asan_memcpy+0x3d/0x60 [ 495.710168] hci_le_meta_evt+0x34b/0x530 [ 495.710181] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 495.710199] hci_event_packet+0x66c/0x10e0 [ 495.710215] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.710229] ? __pfx_hci_event_packet+0x10/0x10 [ 495.710245] ? mark_held_locks+0x49/0x80 [ 495.710262] ? kcov_remote_start+0x2ce/0x5a0 [ 495.710289] hci_rx_work+0x65b/0x8b0 [ 495.710307] process_one_work+0x8e1/0x1960 [ 495.710333] ? __pfx_process_one_work+0x10/0x10 [ 495.710351] ? move_linked_works+0x172/0x270 [ 495.710377] ? assign_work+0x196/0x240 [ 495.710396] worker_thread+0x67e/0xe90 [ 495.710414] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 495.710445] ? __pfx_worker_thread+0x10/0x10 [ 495.710464] kthread+0x3c8/0x740 [ 495.710480] ? __pfx_kthread+0x10/0x10 [ 495.710495] ? ret_from_fork+0x79/0x7a0 [ 495.710513] ? __pfx_kthread+0x10/0x10 [ 495.710529] ret_from_fork+0x67a/0x7a0 [ 495.710544] ? __pfx_ret_from_fork+0x10/0x10 [ 495.710561] ? __switch_to+0x759/0x1030 [ 495.710582] ? __pfx_kthread+0x10/0x10 [ 495.710598] ret_from_fork_asm+0x1a/0x30 [ 495.710629] [ 495.730792] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.731954] Bluetooth: hci5: failed to register connection device [ 495.752378] Bluetooth: hci6: unexpected event 0x04 length: 31 > 10 [ 495.752414] Bluetooth: hci6: connection err: -111 18:27:09 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0ad45e7c29fc396cdeca52d6e8a9fb5a4e33f84a359ef97c7c849f20aed1b1cb70b3e7e3ff6201101c9754af95414e627582749c017a9504b7574207b0a155d9440a0b441a5e296ce2b3818b3c444c245a56839d1f17f9ddcdaffb7f540786b49be2890cf3afd16fdd79f83cb755ea8e80b9b294e182a0c0e4c49c4d1953385acc29f3ba0c09d39d142aeac4a07de0ffaa574cffc4d614907cb97d7813828084a81a1219840560df3c086336a1509f043c75eb3ac7d0365ec48dcb9305dcafc1ca66bef3e252f12d"], 0x22) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ea7e"], 0x3) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 495.769717] debugfs: '0' already exists in 'hci4' [ 495.770485] EXT4-fs warning (device sda): __ext4_ioctl:1554: Setting inode version is not supported with metadata_csum enabled. [ 495.772439] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 495.773279] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 495.773298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 495.773308] Workqueue: hci4 hci_rx_work [ 495.773330] Call Trace: [ 495.773335] [ 495.773341] dump_stack_lvl+0xfa/0x120 [ 495.773362] sysfs_warn_dup+0x80/0xa0 [ 495.773381] sysfs_create_dir_ns+0x23b/0x2a0 [ 495.773398] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.773415] ? find_held_lock+0x2b/0x80 [ 495.773440] ? lock_release+0xc8/0x270 [ 495.773457] ? do_raw_spin_unlock+0x53/0x220 [ 495.773479] kobject_add_internal+0x24c/0x9a0 [ 495.773504] kobject_add+0x157/0x240 [ 495.773526] ? __pfx_kobject_add+0x10/0x10 [ 495.773547] ? lock_release+0xc8/0x270 [ 495.773564] ? do_raw_spin_unlock+0x53/0x220 [ 495.773584] ? kobject_put+0xaa/0x260 [ 495.773610] device_add+0x32d/0x1830 [ 495.773630] ? __pfx_device_add+0x10/0x10 [ 495.773648] ? hci_debugfs_create_conn+0x10f/0x240 [ 495.773668] ? mgmt_send_event_skb+0x2f3/0x460 [ 495.773683] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 495.773706] hci_conn_add_sysfs+0x117/0x1c0 [ 495.773726] le_conn_complete_evt+0x1246/0x1e40 [ 495.773756] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.773787] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 495.773803] ? __asan_memcpy+0x3d/0x60 [ 495.773834] hci_le_meta_evt+0x34b/0x530 [ 495.773847] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 495.773864] hci_event_packet+0x66c/0x10e0 [ 495.773879] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.773893] ? __pfx_hci_event_packet+0x10/0x10 [ 495.773908] ? mark_held_locks+0x49/0x80 [ 495.773925] ? kcov_remote_start+0x2ce/0x5a0 [ 495.773951] hci_rx_work+0x65b/0x8b0 [ 495.773969] process_one_work+0x8e1/0x1960 [ 495.773998] ? __pfx_process_one_work+0x10/0x10 [ 495.774015] ? move_linked_works+0x172/0x270 [ 495.774041] ? assign_work+0x196/0x240 [ 495.774059] worker_thread+0x67e/0xe90 [ 495.774077] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 495.774106] ? __pfx_worker_thread+0x10/0x10 [ 495.774124] kthread+0x3c8/0x740 [ 495.774140] ? __pfx_kthread+0x10/0x10 [ 495.774154] ? ret_from_fork+0x79/0x7a0 [ 495.774171] ? __pfx_kthread+0x10/0x10 [ 495.774188] ret_from_fork+0x67a/0x7a0 [ 495.774202] ? __pfx_ret_from_fork+0x10/0x10 [ 495.774218] ? __switch_to+0x759/0x1030 [ 495.774238] ? __pfx_kthread+0x10/0x10 [ 495.774254] ret_from_fork_asm+0x1a/0x30 [ 495.774283] [ 495.793510] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.794773] Bluetooth: hci4: failed to register connection device [ 495.803934] EXT4-fs warning (device sda): __ext4_ioctl:1554: Setting inode version is not supported with metadata_csum enabled. 18:27:09 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000040)="213d901d041b32beec2991fcdcd13d0abdb269ff69e3884f9a98c151eeca744511a18b2e343e8631cfe4b79aa4a8776c720faaa39194d99ed15ebdb305ff", 0x3e}], 0x2, 0xf5ec0000, 0x6, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x22) [ 495.816598] debugfs: '0' already exists in 'hci1' [ 495.817250] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 495.818065] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 495.818106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 495.818128] Workqueue: hci1 hci_rx_work [ 495.818162] Call Trace: [ 495.818173] [ 495.818185] dump_stack_lvl+0xfa/0x120 [ 495.818225] sysfs_warn_dup+0x80/0xa0 [ 495.818265] sysfs_create_dir_ns+0x23b/0x2a0 [ 495.818304] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.818341] ? find_held_lock+0x2b/0x80 [ 495.818400] ? lock_release+0xc8/0x270 [ 495.818442] ? do_raw_spin_unlock+0x53/0x220 [ 495.818488] kobject_add_internal+0x24c/0x9a0 [ 495.818542] kobject_add+0x157/0x240 [ 495.818589] ? __pfx_kobject_add+0x10/0x10 [ 495.818635] ? lock_release+0xc8/0x270 [ 495.818672] ? do_raw_spin_unlock+0x53/0x220 [ 495.818715] ? kobject_put+0xaa/0x260 [ 495.818771] device_add+0x32d/0x1830 [ 495.818811] ? __pfx_device_add+0x10/0x10 [ 495.818858] ? hci_debugfs_create_conn+0x10f/0x240 [ 495.818897] ? mgmt_send_event_skb+0x2f3/0x460 [ 495.818929] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 495.818976] hci_conn_add_sysfs+0x117/0x1c0 [ 495.819018] le_conn_complete_evt+0x1246/0x1e40 [ 495.819081] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.819146] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 495.819180] ? __asan_memcpy+0x3d/0x60 [ 495.819234] hci_le_meta_evt+0x34b/0x530 [ 495.819263] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 495.819301] hci_event_packet+0x66c/0x10e0 [ 495.819335] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.819367] ? __pfx_hci_event_packet+0x10/0x10 [ 495.819408] ? mark_held_locks+0x49/0x80 [ 495.819446] ? kcov_remote_start+0x2ce/0x5a0 [ 495.819498] hci_rx_work+0x65b/0x8b0 [ 495.819532] process_one_work+0x8e1/0x1960 [ 495.819583] ? __pfx_process_one_work+0x10/0x10 [ 495.819620] ? move_linked_works+0x172/0x270 [ 495.819672] ? assign_work+0x196/0x240 [ 495.819712] worker_thread+0x67e/0xe90 [ 495.819751] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 495.819813] ? __pfx_worker_thread+0x10/0x10 [ 495.819853] kthread+0x3c8/0x740 [ 495.819888] ? __pfx_kthread+0x10/0x10 [ 495.819920] ? ret_from_fork+0x79/0x7a0 [ 495.819949] ? lock_release+0xc8/0x270 [ 495.819987] ? __pfx_kthread+0x10/0x10 [ 495.820022] ret_from_fork+0x67a/0x7a0 [ 495.820054] ? __pfx_ret_from_fork+0x10/0x10 [ 495.820089] ? __switch_to+0x759/0x1030 [ 495.820133] ? __pfx_kthread+0x10/0x10 [ 495.820170] ret_from_fork_asm+0x1a/0x30 [ 495.820228] [ 495.838217] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.840282] Bluetooth: hci1: failed to register connection device 18:27:09 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcc}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d19976"}}, 0xcf) 18:27:09 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="2423ff17d6e60d1d26f7fa28c7229950484ea9be4dcbf0b56d20073968c76613012119e31a77bf043700"/65], 0x22) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x3, 0x7f}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "9d815b", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x4, 0x67d, 0x3f}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x3, 0x200}}, @l2cap_cmd_rej_unk={{0x1, 0xa0, 0x2}, {0x20}}]}}, 0x20) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9d}, "155185ea1df80cc656b81aab44e64c7efbaea67091f56c53e85c21d7957f787dcfbcf1b5338a0f413dbe0540dbb4d593f4b616b7ce3ade40d39cbfc2493222e81dae6e5e5a7faa60ec45861000dd7b7a9845ab8716aa06b478a7c0d66e147979963837333d2d87c9080dbde9bfcf70bc231d5b61b2e2b9d56ec105492d32359617380bee776860cc56a717b61510b232b47e5a94263c965bfb900e0106"}, 0xa1) [ 495.900703] debugfs: '0' already exists in 'hci5' [ 495.901335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 495.902164] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 495.902181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 495.902190] Workqueue: hci5 hci_rx_work [ 495.902210] Call Trace: [ 495.902215] [ 495.902220] dump_stack_lvl+0xfa/0x120 [ 495.902238] sysfs_warn_dup+0x80/0xa0 [ 495.902255] sysfs_create_dir_ns+0x23b/0x2a0 [ 495.902270] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.902284] ? find_held_lock+0x2b/0x80 [ 495.902306] ? lock_release+0xc8/0x270 [ 495.902320] ? do_raw_spin_unlock+0x53/0x220 [ 495.902340] kobject_add_internal+0x24c/0x9a0 [ 495.902361] kobject_add+0x157/0x240 [ 495.902380] ? __pfx_kobject_add+0x10/0x10 [ 495.902397] ? lock_release+0xc8/0x270 [ 495.902411] ? do_raw_spin_unlock+0x53/0x220 [ 495.902428] ? kobject_put+0xaa/0x260 [ 495.902451] device_add+0x32d/0x1830 [ 495.902469] ? __pfx_device_add+0x10/0x10 [ 495.902483] ? hci_debugfs_create_conn+0x10f/0x240 [ 495.902501] ? mgmt_send_event_skb+0x2f3/0x460 [ 495.902514] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 495.902535] hci_conn_add_sysfs+0x117/0x1c0 [ 495.902553] le_conn_complete_evt+0x1246/0x1e40 [ 495.902579] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 495.902605] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 495.902618] ? __asan_memcpy+0x3d/0x60 [ 495.902641] hci_le_meta_evt+0x34b/0x530 [ 495.902652] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 495.902667] hci_event_packet+0x66c/0x10e0 [ 495.902680] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 495.902692] ? __pfx_hci_event_packet+0x10/0x10 [ 495.902705] ? mark_held_locks+0x49/0x80 [ 495.902719] ? kcov_remote_start+0x2ce/0x5a0 [ 495.902742] hci_rx_work+0x65b/0x8b0 [ 495.902757] process_one_work+0x8e1/0x1960 [ 495.902779] ? __pfx_process_one_work+0x10/0x10 [ 495.902794] ? move_linked_works+0x172/0x270 [ 495.902816] ? assign_work+0x196/0x240 [ 495.902836] worker_thread+0x67e/0xe90 [ 495.902851] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 495.902876] ? __pfx_worker_thread+0x10/0x10 [ 495.902892] kthread+0x3c8/0x740 [ 495.902906] ? __pfx_kthread+0x10/0x10 [ 495.902918] ? ret_from_fork+0x79/0x7a0 [ 495.902931] ? lock_release+0xc8/0x270 [ 495.902945] ? __pfx_kthread+0x10/0x10 [ 495.902959] ret_from_fork+0x67a/0x7a0 [ 495.902971] ? __pfx_ret_from_fork+0x10/0x10 [ 495.902985] ? __switch_to+0x759/0x1030 [ 495.903002] ? __pfx_kthread+0x10/0x10 [ 495.903016] ret_from_fork_asm+0x1a/0x30 [ 495.903041] [ 495.921598] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.922777] Bluetooth: hci5: failed to register connection device [ 495.935124] Bluetooth: hci6: unexpected event 0x01 length: 4 > 1 [ 495.935554] Bluetooth: hci6: connection err: -111 [ 495.937381] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 495.950893] Bluetooth: hci3: command 0x2016 tx timeout [ 496.079952] Bluetooth: hci0: command 0x2016 tx timeout [ 496.847026] Bluetooth: hci5: command 0x0406 tx timeout [ 497.678976] Bluetooth: hci4: command 0x0406 tx timeout [ 497.679029] Bluetooth: hci7: command 0x2016 tx timeout [ 497.807125] Bluetooth: hci1: command 0x2016 tx timeout [ 497.999116] Bluetooth: hci3: command 0x2016 tx timeout [ 498.126967] Bluetooth: hci0: command 0x2016 tx timeout [ 498.895127] Bluetooth: hci5: command 0x0406 tx timeout [ 499.727141] Bluetooth: hci4: command 0x0406 tx timeout [ 499.729967] Bluetooth: hci7: command 0x2016 tx timeout [ 499.854926] Bluetooth: hci1: command 0x2016 tx timeout [ 500.046912] Bluetooth: hci3: command 0x2016 tx timeout [ 500.174963] Bluetooth: hci0: command 0x2016 tx timeout [ 500.943031] Bluetooth: hci5: command 0x0406 tx timeout [ 501.775044] Bluetooth: hci4: command 0x0406 tx timeout [ 501.902969] Bluetooth: hci1: command 0x2016 tx timeout [ 502.095950] Bluetooth: hci3: command 0x2016 tx timeout [ 502.222976] Bluetooth: hci0: command 0x2016 tx timeout [ 502.991002] Bluetooth: hci5: command 0x0406 tx timeout [ 503.822965] Bluetooth: hci4: command 0x0406 tx timeout [ 503.950929] Bluetooth: hci1: command 0x2016 tx timeout [ 504.142910] Bluetooth: hci3: command 0x2016 tx timeout 18:27:17 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="52104df4a9f71b5b091b4bb9df0b2752ac469d249d1b52eb"], 0x22) fdatasync(r2) 18:27:17 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x78}, "8796579903b854d9e78204209099c8167a30651118f8a1d68691a595fa9ad5826b1af389313aa7c7ef020284b7e480d3d1080bc7efedfdf98dc6e51436c301d8419f770e9d3f5ea9609b57851ce5cad88ef00c78c1e4f013acf802f199d8bebdcb627d42e17ff0d5dba3ae13ff782eee95681381957f6eea"}, 0x7c) syz_emit_vhci(0x0, 0x0) 18:27:17 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) syz_emit_vhci(0x0, 0x0) 18:27:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048010}, 0x24000055) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x2, 0x6}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x2, 0x6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r10, 0x2, 0x6}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xfe, 0x1, 0xec278f57ccc50f54, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x64}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280a000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1ec, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x4855) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 18:27:17 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x101000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:27:17 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaa"], 0x22) 18:27:17 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="04be1f0a885fb2cc0e5951e64ce4caf16325f683a89654633953fb7399e161babfedd5e8b949df14a7f9c90567c4e405bb4de9e3ee9aab06d821b9bf42b76062983e23ba8e7a4c188c4f9c32deede9988bb77b618d52cb77eabbc3a08ea56a6e66af103f02df009b81824df9f76a4a911c178cd8a3a3ccef9b6e27b5b3ba6fa5ce46b3fe84a5fcfb6af1f8bc43598469efbb9733b05333960310ae16d0cdcedaa1f259d2b1ae10930581226c1755a83fb1dcf20e7f3918a4479a13127225ecf59fe05877ed266c45e0a4bbd4b55065a529953f18333fe4b345da10a1bb7023c9ccbe2c7e7137775396ee"], 0x22) r0 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f00000007c0)=0x10) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000800), &(0x7f0000000840)=0x8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x15, @mcast2, 0x3ff}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="f5d7abebeb716b6520f725004049e2a6a7f26b8a692cd49a201c44f00fb89818ae77191f4152f797ed92fc05983adf3d1167bcc61123cffa540fa3b4af0e5daeb25f2bf9dca53851bb78aeb7e13cde6117d453abd0f1518246265dc471e9553ea8a833e42ae051d1d90979aad078ecafe9f534f22959d257a5f371b3d9a16a32c49a66e4c54ff642bece01e553eed6897bee89dd3032c9f15a524c7651309ea598dd03cffb40769260b6aa3aab63b500e73f679918a2264db9341e02b6da353606d88c75c7fc822b83d4babf4d2b9d4a1bea15193cbce7289255ceead759", 0xde}, {&(0x7f0000000200)="0382bca19368361f07803cdb4a355bc18986aa992e51d0ccca47490651ef3d359d0154eaaee10fd880781ad389dc62fed37468bdb95f72420cf09b924539a21874465a0596a4ccfb154e4b2f52f25bf70738c9dff87fa5db951f28d28950cc3f295c0dd9f89bfc0e76e37841fddc38a317dd95aeff17ac9d40728800f050274eb0550396a05e01467d4f2a75c2476a0d7a180ee0ce24944c68019622b35031ce23f2e5701a9d0bb20f4332f4cd59afebf82eaf449475607a0a92764a85f5d3bcabd99a7e68665e440b236e619df1fb2c306ec2958aa92ecfde9b674f792b7ff3b250", 0xe2}, {&(0x7f0000000300)="7ae49a3ff49d1e64653e077eadfd6ffacca2c2cbac548d4e3e630524e25f7ebd090e1faf18f706a832bb5224415def1364c07f722aafebd213762879d06c0682accbc1097cb802d99494cae6b252c11832c405277b8bdfa34854d747143b8bf6defb0b96de262ea7530b079f2fd2c9ad94c45281e8f5b7b619a280e8", 0x7c}, {&(0x7f0000000380)="2c178de86d68f9909fdd79b151c1045ea64ceddff423d9d59edbd1104e03c9071a6437a4c340b3d2e297f819ba3abe2f6b3a7e1e8a6d5fe30ddbf6e127995a61d8661226496e99d102f162988bea04094014f21a55c3f241527c0b0e17f10a557de531d829c274b329e70da80f56a98bd0eaac84a2d09558b7dc9aa45f1599a3e65c823748886bdf3b28147528a479ae8bd420d80cf2ce3e899629d96d", 0x9d}, {&(0x7f0000000440)="663c8a70c3b1ff4264d7b9518f01129247ae63606c256a27a54eca9956f43d9d66a6c4762aacd513a1d2fbb68f12e80e2dd06500e00b339237109b6c565b794f4443b599c0e7c9b67dee643fec", 0x4d}, {&(0x7f00000004c0)="731f7051da81b68010bb350f895cd06531e3b3cbd3bdc340ed11da2b06925eb5effde45830b66f4a80dc1217b3a6acb240b5256d570ef663b200daa484b6c082668ca744945fd3f90c85af6c60153f54d43836936cd59cb2d569d3fd19f07952e07d42a74672402222cf308bf499c4fda43c2269fece05f01d8b2023ecac9f0a6d2a83724bb1c365035136bdfd13ed49ead13029d4cc4557a022e914bc6ef568c77aa8eb39dfab1f306df638670e15934c96862f1c3ee79b98388221071da707c3c6b795033afc85383894642b29807af8a5f26f83da870819a17afa081889c7479475a31291fb4e3e20c6ad06e5cb6489116aa5f47d2a", 0xf7}], 0x6, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x20000000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}, 0x4000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000880)="f82ead7c66644e8e84b28b8f688dd2cb964a684f19c966e482c6b1c7ba9ff9087bf0597b81fe544354ab089a9e7b34b2996c881045c5820bb6b6d7d1b372c0d93a9f36822815ac6c9810d09c645e753fa17a64a6a3f14d22567da34ec69665808a83bc13b33428f9ab38206fff7325833b56a4a6931f25e7381a4616e963a686f7912aac68cb0637111791bafd5b9033e686bd06941d012768b14b1081e8649af5d37d411efa1be76abb92caa8b0aaf7ff9dc438c83447b21cdf506f67ea921bdcf177a203deb7a91da02296cefe628570d361ce", 0xd4) 18:27:17 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcc}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d19976"}}, 0xcf) [ 504.476100] debugfs: '0' already exists in 'hci1' [ 504.476698] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 504.477421] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.477438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.477446] Workqueue: hci1 hci_rx_work [ 504.477465] Call Trace: [ 504.477470] [ 504.477475] dump_stack_lvl+0xfa/0x120 [ 504.477493] sysfs_warn_dup+0x80/0xa0 [ 504.477510] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.477525] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.477539] ? find_held_lock+0x2b/0x80 [ 504.477560] ? lock_release+0xc8/0x270 [ 504.477574] ? do_raw_spin_unlock+0x53/0x220 [ 504.477592] kobject_add_internal+0x24c/0x9a0 [ 504.477614] kobject_add+0x157/0x240 [ 504.477633] ? __pfx_kobject_add+0x10/0x10 [ 504.477651] ? lock_release+0xc8/0x270 [ 504.477665] ? do_raw_spin_unlock+0x53/0x220 [ 504.477682] ? kobject_put+0xaa/0x260 [ 504.477704] device_add+0x32d/0x1830 [ 504.477722] ? __pfx_device_add+0x10/0x10 [ 504.477737] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.477754] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.477767] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.477787] hci_conn_add_sysfs+0x117/0x1c0 [ 504.477804] le_conn_complete_evt+0x1246/0x1e40 [ 504.477835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.477861] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.477874] ? __asan_memcpy+0x3d/0x60 [ 504.477896] hci_le_meta_evt+0x34b/0x530 [ 504.477907] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.477922] hci_event_packet+0x66c/0x10e0 [ 504.477935] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.477947] ? __pfx_hci_event_packet+0x10/0x10 [ 504.477960] ? mark_held_locks+0x49/0x80 [ 504.477974] ? kcov_remote_start+0x2ce/0x5a0 [ 504.477997] hci_rx_work+0x65b/0x8b0 [ 504.478012] process_one_work+0x8e1/0x1960 [ 504.478034] ? __pfx_process_one_work+0x10/0x10 [ 504.478049] ? move_linked_works+0x172/0x270 [ 504.478071] ? assign_work+0x196/0x240 [ 504.478086] worker_thread+0x67e/0xe90 [ 504.478101] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.478126] ? __pfx_worker_thread+0x10/0x10 [ 504.478142] kthread+0x3c8/0x740 [ 504.478155] ? __pfx_kthread+0x10/0x10 [ 504.478167] ? ret_from_fork+0x79/0x7a0 [ 504.478180] ? lock_release+0xc8/0x270 [ 504.478195] ? __pfx_kthread+0x10/0x10 [ 504.478208] ret_from_fork+0x67a/0x7a0 [ 504.478220] ? __pfx_ret_from_fork+0x10/0x10 [ 504.478234] ? __switch_to+0x759/0x1030 [ 504.478252] ? __pfx_kthread+0x10/0x10 [ 504.478265] ret_from_fork_asm+0x1a/0x30 [ 504.478291] [ 504.496306] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.497343] Bluetooth: hci1: failed to register connection device 18:27:17 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfd}, "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"}, 0x101) syz_emit_vhci(0x0, 0x0) [ 504.522230] debugfs: '0' already exists in 'hci1' [ 504.522873] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 504.523538] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.523554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.523563] Workqueue: hci1 hci_rx_work [ 504.523582] Call Trace: [ 504.523587] [ 504.523592] dump_stack_lvl+0xfa/0x120 [ 504.523610] sysfs_warn_dup+0x80/0xa0 [ 504.523627] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.523641] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.523656] ? find_held_lock+0x2b/0x80 [ 504.523677] ? lock_release+0xc8/0x270 [ 504.523692] ? do_raw_spin_unlock+0x53/0x220 [ 504.523709] kobject_add_internal+0x24c/0x9a0 [ 504.523731] kobject_add+0x157/0x240 [ 504.523749] ? __pfx_kobject_add+0x10/0x10 [ 504.523767] ? lock_release+0xc8/0x270 [ 504.523781] ? do_raw_spin_unlock+0x53/0x220 [ 504.523798] ? kobject_put+0xaa/0x260 [ 504.523825] device_add+0x32d/0x1830 [ 504.523842] ? __pfx_device_add+0x10/0x10 [ 504.523857] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.523875] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.523888] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.523907] hci_conn_add_sysfs+0x117/0x1c0 [ 504.523925] le_conn_complete_evt+0x1246/0x1e40 [ 504.523951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.523977] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.523991] ? __asan_memcpy+0x3d/0x60 [ 504.524013] hci_le_meta_evt+0x34b/0x530 [ 504.524024] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.524039] hci_event_packet+0x66c/0x10e0 [ 504.524052] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.524064] ? __pfx_hci_event_packet+0x10/0x10 [ 504.524077] ? mark_held_locks+0x49/0x80 [ 504.524091] ? kcov_remote_start+0x2ce/0x5a0 [ 504.524113] hci_rx_work+0x65b/0x8b0 [ 504.524128] process_one_work+0x8e1/0x1960 [ 504.524150] ? __pfx_process_one_work+0x10/0x10 [ 504.524165] ? move_linked_works+0x172/0x270 [ 504.524187] ? assign_work+0x196/0x240 [ 504.524202] worker_thread+0x67e/0xe90 [ 504.524217] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.524242] ? __pfx_worker_thread+0x10/0x10 [ 504.524258] kthread+0x3c8/0x740 [ 504.524271] ? __pfx_kthread+0x10/0x10 [ 504.524284] ? ret_from_fork+0x79/0x7a0 [ 504.524297] ? lock_release+0xc8/0x270 [ 504.524311] ? __pfx_kthread+0x10/0x10 [ 504.524324] ret_from_fork+0x67a/0x7a0 [ 504.524336] ? __pfx_ret_from_fork+0x10/0x10 [ 504.524350] ? __switch_to+0x759/0x1030 [ 504.524368] ? __pfx_kthread+0x10/0x10 [ 504.524382] ret_from_fork_asm+0x1a/0x30 [ 504.524407] [ 504.543219] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.544925] Bluetooth: hci1: failed to register connection device [ 504.547617] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 504.548012] debugfs: '0' already exists in 'hci1' [ 504.549564] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 504.550265] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.550281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.550289] Workqueue: hci1 hci_rx_work [ 504.550307] Call Trace: [ 504.550311] [ 504.550316] dump_stack_lvl+0xfa/0x120 [ 504.550333] sysfs_warn_dup+0x80/0xa0 [ 504.550349] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.550364] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.550378] ? find_held_lock+0x2b/0x80 [ 504.550398] ? lock_release+0xc8/0x270 [ 504.550412] ? do_raw_spin_unlock+0x53/0x220 [ 504.550430] kobject_add_internal+0x24c/0x9a0 [ 504.550452] kobject_add+0x157/0x240 [ 504.550470] ? __pfx_kobject_add+0x10/0x10 [ 504.550488] ? lock_release+0xc8/0x270 [ 504.550502] ? do_raw_spin_unlock+0x53/0x220 [ 504.550519] ? kobject_put+0xaa/0x260 [ 504.550541] device_add+0x32d/0x1830 [ 504.550558] ? __pfx_device_add+0x10/0x10 [ 504.550573] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.550590] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.550603] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.550622] hci_conn_add_sysfs+0x117/0x1c0 [ 504.550639] le_conn_complete_evt+0x1246/0x1e40 [ 504.550664] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.550690] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.550704] ? __asan_memcpy+0x3d/0x60 [ 504.550725] hci_le_meta_evt+0x34b/0x530 [ 504.550736] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.550751] hci_event_packet+0x66c/0x10e0 [ 504.550764] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.550776] ? __pfx_hci_event_packet+0x10/0x10 [ 504.550789] ? mark_held_locks+0x49/0x80 [ 504.550803] ? kcov_remote_start+0x2ce/0x5a0 [ 504.550829] hci_rx_work+0x65b/0x8b0 [ 504.550843] process_one_work+0x8e1/0x1960 [ 504.550865] ? __pfx_process_one_work+0x10/0x10 [ 504.550879] ? move_linked_works+0x172/0x270 [ 504.550902] ? assign_work+0x196/0x240 [ 504.550917] worker_thread+0x67e/0xe90 [ 504.550932] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.550961] ? __pfx_worker_thread+0x10/0x10 [ 504.550976] kthread+0x3c8/0x740 [ 504.550990] ? __pfx_kthread+0x10/0x10 [ 504.551002] ? ret_from_fork+0x79/0x7a0 [ 504.551015] ? lock_release+0xc8/0x270 [ 504.551029] ? __pfx_kthread+0x10/0x10 [ 504.551043] ret_from_fork+0x67a/0x7a0 [ 504.551055] ? __pfx_ret_from_fork+0x10/0x10 [ 504.551069] ? __switch_to+0x759/0x1030 [ 504.551086] ? __pfx_kthread+0x10/0x10 [ 504.551100] ret_from_fork_asm+0x1a/0x30 [ 504.551124] [ 504.569038] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.570059] Bluetooth: hci1: failed to register connection device 18:27:17 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcc}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d19976"}}, 0xcf) [ 504.570770] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 504.675683] debugfs: '0' already exists in 'hci3' [ 504.679034] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 504.680592] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.680625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.680640] Workqueue: hci3 hci_rx_work [ 504.680670] Call Trace: [ 504.680678] 18:27:17 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf7}, "e746470a3d0422416ad1c41d35b7b1e3fd880c07c35652d0ed41e330073f825c0bb3acf37ff94e3d518faf264c4b49235fc54216438168dafa190a4503d912866126d434ef5ec4a8327697cac7feb9a6de77b775ca72352a3414bbcba1032b21fa1014b59c4001c5b45e3da29f6f54fe3c5d01a662ad3866f90a67c14538717bb63e7599f425c65430f4f8e8d2126167669b3ae2c4ac146269e6c3cbd4de74a8f55ae5ec7e96afd4c6455cb47f11364886a16c85ca12a3b8db072324ca896062d46533859494ecf64f00631baed1f2e29c01da7e4e4542717e2ee4d64e339ba008a30c54a5b2afbb321cd49fbc3c51f716c57aa16de4da"}, 0xfb) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc}, "057c376d25080c71b3d44f32"}, 0x10) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x41, 0x0, 0x200d}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x6}}}, 0x4) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4f}, "1ea57c42d510639fc3d1c6db2d07f59aa7e676941ea0b78f1b7f74dabe96241337889cca5d4f1f263a3f8208e5c4c91537a676e51b0b6b40c1dd95910ca64e89f3940f38a282cc5f6e604cc1caba73"}, 0x53) [ 504.680688] dump_stack_lvl+0xfa/0x120 [ 504.680718] sysfs_warn_dup+0x80/0xa0 18:27:17 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 504.680747] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.680775] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.680801] ? find_held_lock+0x2b/0x80 [ 504.680846] ? lock_release+0xc8/0x270 [ 504.680872] ? do_raw_spin_unlock+0x53/0x220 [ 504.680905] kobject_add_internal+0x24c/0x9a0 [ 504.680945] kobject_add+0x157/0x240 [ 504.680979] ? __pfx_kobject_add+0x10/0x10 [ 504.681012] ? lock_release+0xc8/0x270 [ 504.681038] ? do_raw_spin_unlock+0x53/0x220 [ 504.681069] ? kobject_put+0xaa/0x260 [ 504.681111] device_add+0x32d/0x1830 [ 504.681142] ? __pfx_device_add+0x10/0x10 [ 504.681169] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.681200] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.681223] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.681264] hci_conn_add_sysfs+0x117/0x1c0 [ 504.681295] le_conn_complete_evt+0x1246/0x1e40 [ 504.681342] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.681390] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.681415] ? __asan_memcpy+0x3d/0x60 [ 504.681454] hci_le_meta_evt+0x34b/0x530 [ 504.681475] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.681502] hci_event_packet+0x66c/0x10e0 [ 504.681526] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.681548] ? __pfx_hci_event_packet+0x10/0x10 [ 504.681572] ? mark_held_locks+0x49/0x80 [ 504.681599] ? kcov_remote_start+0x2ce/0x5a0 [ 504.681639] hci_rx_work+0x65b/0x8b0 [ 504.681665] process_one_work+0x8e1/0x1960 [ 504.681705] ? __pfx_process_one_work+0x10/0x10 [ 504.681732] ? move_linked_works+0x172/0x270 [ 504.681771] ? assign_work+0x196/0x240 [ 504.681800] worker_thread+0x67e/0xe90 [ 504.681828] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.681873] ? __pfx_worker_thread+0x10/0x10 [ 504.681902] kthread+0x3c8/0x740 [ 504.681926] ? __pfx_kthread+0x10/0x10 [ 504.681949] ? ret_from_fork+0x79/0x7a0 [ 504.681976] ? __pfx_kthread+0x10/0x10 [ 504.682001] ret_from_fork+0x67a/0x7a0 [ 504.682024] ? __pfx_ret_from_fork+0x10/0x10 [ 504.682049] ? __switch_to+0x759/0x1030 [ 504.682081] ? __pfx_kthread+0x10/0x10 [ 504.682106] ret_from_fork_asm+0x1a/0x30 [ 504.682152] [ 504.684661] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 504.685058] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.721584] Bluetooth: hci3: failed to register connection device 18:27:18 executing program 1: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0200000055ebb14456a2249566f8683c5a032fcb8f1183135dad0bafd7cbb0d36586cddd11cf28776e7cd756cb4601337a1fce2efc20ae31490cd81c6caf1d23a0736671959c5220b770910d1be48fa9ca8e4c7c9867126219b73716f11d444838ec6b44dc79fbf851630133c25ae11ed6f6dd9dfa9f64e704b838633c9b7f1fc96998630c7d3a90be903ddbbde857141ee75c7dc84dde689f997ddf550c1d340144a9b6fb04fee525faaf1d7279bd1e85b1fea8c157be90cdd31fb1bfb128677af66ffec36cf3"], 0x57) [ 504.754525] mac80211_hwsim hwsim17 wlan1: left allmulticast mode 18:27:18 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:27:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4048010}, 0x24000055) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x2, 0x6}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x2, 0x6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r10, 0x2, 0x6}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xc, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xfe, 0x1, 0xec278f57ccc50f54, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x64}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280a000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1ec, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x4855) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 18:27:18 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xda}, "2880e60a2bef831b00fd979d7bf32eb3895aa84de83a96543f26876110662f18bb7a5aeb69b9b56af6129ffc94486e777a6c7abe2973cdac815f23bfae94e78dba4ca9775a5bef94f14ada7ace26ebcbad8a7bf0fddc73f1d29177d77fd3ea71c216f32d504424921134b56091375ea1e61ef7a85de757554b5dde241b919095dee9a707588e68d7980fb48c182c3c025f74872a6e7fe8207fcdcfbf091a7b9faec2e6c939d2fda907a893b8afcb7440b97434a464c1aea3a32eea183b269c35237925ea7cd297cc3dab06b00886315641190778c306ef5b70e3"}, 0xde) [ 504.785215] debugfs: '0' already exists in 'hci5' [ 504.785984] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 504.786656] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.786676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.786688] Workqueue: hci5 hci_rx_work [ 504.786714] Call Trace: [ 504.786720] [ 504.786728] dump_stack_lvl+0xfa/0x120 [ 504.786753] sysfs_warn_dup+0x80/0xa0 [ 504.786779] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.786800] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.786825] ? find_held_lock+0x2b/0x80 [ 504.786850] ? lock_release+0xc8/0x270 [ 504.786875] ? do_raw_spin_unlock+0x53/0x220 [ 504.786896] kobject_add_internal+0x24c/0x9a0 [ 504.786926] kobject_add+0x157/0x240 [ 504.786958] ? __pfx_kobject_add+0x10/0x10 [ 504.786990] ? lock_release+0xc8/0x270 [ 504.787010] ? do_raw_spin_unlock+0x53/0x220 [ 504.787036] ? kobject_put+0xaa/0x260 [ 504.787067] device_add+0x32d/0x1830 [ 504.787090] ? __pfx_device_add+0x10/0x10 [ 504.787114] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.787136] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.787156] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.787179] hci_conn_add_sysfs+0x117/0x1c0 [ 504.787204] le_conn_complete_evt+0x1246/0x1e40 [ 504.787254] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.787300] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.787320] ? __asan_memcpy+0x3d/0x60 [ 504.787358] hci_le_meta_evt+0x34b/0x530 [ 504.787376] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.787397] hci_event_packet+0x66c/0x10e0 [ 504.787419] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.787440] ? __pfx_hci_event_packet+0x10/0x10 [ 504.787459] ? mark_held_locks+0x49/0x80 [ 504.787489] ? kcov_remote_start+0x2ce/0x5a0 [ 504.787526] hci_rx_work+0x65b/0x8b0 [ 504.787548] process_one_work+0x8e1/0x1960 [ 504.787582] ? __pfx_process_one_work+0x10/0x10 [ 504.787614] ? move_linked_works+0x172/0x270 [ 504.787644] ? assign_work+0x196/0x240 [ 504.787674] worker_thread+0x67e/0xe90 [ 504.787702] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.787752] ? __pfx_worker_thread+0x10/0x10 [ 504.787786] kthread+0x3c8/0x740 [ 504.787817] ? __pfx_kthread+0x10/0x10 [ 504.787844] ? ret_from_fork+0x79/0x7a0 [ 504.787869] ? lock_release+0xc8/0x270 [ 504.787896] ? __pfx_kthread+0x10/0x10 [ 504.787923] ret_from_fork+0x67a/0x7a0 [ 504.787955] ? __pfx_ret_from_fork+0x10/0x10 [ 504.787981] ? __switch_to+0x759/0x1030 [ 504.788007] ? __pfx_kthread+0x10/0x10 [ 504.788027] ret_from_fork_asm+0x1a/0x30 [ 504.788063] [ 504.806075] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.807211] Bluetooth: hci5: failed to register connection device [ 504.819496] debugfs: '0' already exists in 'hci4' [ 504.821177] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 504.821866] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.821883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.821892] Workqueue: hci4 hci_rx_work [ 504.821912] Call Trace: [ 504.821917] [ 504.821923] dump_stack_lvl+0xfa/0x120 [ 504.821942] sysfs_warn_dup+0x80/0xa0 [ 504.821959] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.821974] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.821989] ? find_held_lock+0x2b/0x80 [ 504.822011] ? lock_release+0xc8/0x270 [ 504.822025] ? do_raw_spin_unlock+0x53/0x220 [ 504.822044] kobject_add_internal+0x24c/0x9a0 [ 504.822065] kobject_add+0x157/0x240 [ 504.822084] ? __pfx_kobject_add+0x10/0x10 [ 504.822103] ? lock_release+0xc8/0x270 [ 504.822117] ? do_raw_spin_unlock+0x53/0x220 [ 504.822134] ? kobject_put+0xaa/0x260 [ 504.822157] device_add+0x32d/0x1830 [ 504.822174] ? __pfx_device_add+0x10/0x10 [ 504.822189] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.822207] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.822220] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.822240] hci_conn_add_sysfs+0x117/0x1c0 [ 504.822257] le_conn_complete_evt+0x1246/0x1e40 [ 504.822283] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.822309] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.822323] ? __asan_memcpy+0x3d/0x60 [ 504.822345] hci_le_meta_evt+0x34b/0x530 [ 504.822357] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.822371] hci_event_packet+0x66c/0x10e0 [ 504.822385] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.822396] ? __pfx_hci_event_packet+0x10/0x10 [ 504.822409] ? mark_held_locks+0x49/0x80 [ 504.822423] ? kcov_remote_start+0x2ce/0x5a0 [ 504.822446] hci_rx_work+0x65b/0x8b0 [ 504.822461] process_one_work+0x8e1/0x1960 [ 504.822484] ? __pfx_process_one_work+0x10/0x10 [ 504.822498] ? move_linked_works+0x172/0x270 [ 504.822520] ? assign_work+0x196/0x240 [ 504.822536] worker_thread+0x67e/0xe90 [ 504.822551] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.822576] ? __pfx_worker_thread+0x10/0x10 [ 504.822592] kthread+0x3c8/0x740 [ 504.822605] ? __pfx_kthread+0x10/0x10 [ 504.822618] ? ret_from_fork+0x79/0x7a0 [ 504.822631] ? lock_release+0xc8/0x270 [ 504.822645] ? __pfx_kthread+0x10/0x10 [ 504.822659] ret_from_fork+0x67a/0x7a0 [ 504.822671] ? __pfx_ret_from_fork+0x10/0x10 [ 504.822685] ? __switch_to+0x759/0x1030 [ 504.822702] ? __pfx_kthread+0x10/0x10 [ 504.822716] ret_from_fork_asm+0x1a/0x30 [ 504.822741] [ 504.822761] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.828402] debugfs: '0' already exists in 'hci1' [ 504.828493] Bluetooth: hci4: failed to register connection device [ 504.829461] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 504.861058] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.861096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.861113] Workqueue: hci1 hci_rx_work [ 504.861144] Call Trace: [ 504.861153] [ 504.861163] dump_stack_lvl+0xfa/0x120 [ 504.861194] sysfs_warn_dup+0x80/0xa0 [ 504.861223] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.861251] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.861277] ? find_held_lock+0x2b/0x80 [ 504.861315] ? lock_release+0xc8/0x270 [ 504.861341] ? do_raw_spin_unlock+0x53/0x220 [ 504.861375] kobject_add_internal+0x24c/0x9a0 [ 504.861414] kobject_add+0x157/0x240 [ 504.861448] ? __pfx_kobject_add+0x10/0x10 [ 504.861481] ? lock_release+0xc8/0x270 [ 504.861507] ? do_raw_spin_unlock+0x53/0x220 [ 504.861539] ? kobject_put+0xaa/0x260 [ 504.861582] device_add+0x32d/0x1830 [ 504.861618] ? __pfx_device_add+0x10/0x10 [ 504.861645] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.861676] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.861700] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.861736] hci_conn_add_sysfs+0x117/0x1c0 [ 504.861767] le_conn_complete_evt+0x1246/0x1e40 [ 504.861814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.861870] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.861896] ? __asan_memcpy+0x3d/0x60 [ 504.861935] hci_le_meta_evt+0x34b/0x530 [ 504.861956] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.861983] hci_event_packet+0x66c/0x10e0 [ 504.862007] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.862030] ? __pfx_hci_event_packet+0x10/0x10 [ 504.862053] ? mark_held_locks+0x49/0x80 [ 504.862082] ? kcov_remote_start+0x2ce/0x5a0 [ 504.862122] hci_rx_work+0x65b/0x8b0 [ 504.862149] process_one_work+0x8e1/0x1960 [ 504.862190] ? __pfx_process_one_work+0x10/0x10 [ 504.862217] ? move_linked_works+0x172/0x270 [ 504.862256] ? assign_work+0x196/0x240 [ 504.862285] worker_thread+0x67e/0xe90 [ 504.862313] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.862359] ? __pfx_worker_thread+0x10/0x10 [ 504.862388] kthread+0x3c8/0x740 [ 504.862412] ? __pfx_kthread+0x10/0x10 [ 504.862435] ? ret_from_fork+0x79/0x7a0 [ 504.862461] ? __pfx_kthread+0x10/0x10 [ 504.862487] ret_from_fork+0x67a/0x7a0 [ 504.862509] ? __pfx_ret_from_fork+0x10/0x10 [ 504.862535] ? __switch_to+0x759/0x1030 [ 504.862567] ? __pfx_kthread+0x10/0x10 [ 504.862597] ret_from_fork_asm+0x1a/0x30 [ 504.862644] [ 504.895900] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.897932] Bluetooth: hci1: failed to register connection device [ 504.901323] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 504.901499] Bluetooth: hci1: unexpected event for opcode 0x200d [ 504.904908] debugfs: '0' already exists in 'hci1' [ 504.905889] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 504.907160] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.907189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.907204] Workqueue: hci1 hci_rx_work [ 504.907227] Call Trace: [ 504.907235] [ 504.907244] dump_stack_lvl+0xfa/0x120 [ 504.907272] sysfs_warn_dup+0x80/0xa0 [ 504.907299] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.907327] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.907353] ? find_held_lock+0x2b/0x80 [ 504.907390] ? lock_release+0xc8/0x270 [ 504.907416] ? do_raw_spin_unlock+0x53/0x220 [ 504.907449] kobject_add_internal+0x24c/0x9a0 [ 504.907489] kobject_add+0x157/0x240 [ 504.907524] ? __pfx_kobject_add+0x10/0x10 [ 504.907557] ? lock_release+0xc8/0x270 [ 504.907583] ? do_raw_spin_unlock+0x53/0x220 [ 504.907615] ? kobject_put+0xaa/0x260 [ 504.907657] device_add+0x32d/0x1830 [ 504.907687] ? __pfx_device_add+0x10/0x10 [ 504.907715] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.907744] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.907767] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.907804] hci_conn_add_sysfs+0x117/0x1c0 [ 504.907842] le_conn_complete_evt+0x1246/0x1e40 [ 504.907889] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.907938] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.907964] ? __asan_memcpy+0x3d/0x60 [ 504.908003] hci_le_meta_evt+0x34b/0x530 [ 504.908023] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.908051] hci_event_packet+0x66c/0x10e0 [ 504.908075] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.908097] ? __pfx_hci_event_packet+0x10/0x10 [ 504.908121] ? mark_held_locks+0x49/0x80 [ 504.908147] ? kcov_remote_start+0x2ce/0x5a0 [ 504.908187] hci_rx_work+0x65b/0x8b0 [ 504.908214] process_one_work+0x8e1/0x1960 [ 504.908253] ? __pfx_process_one_work+0x10/0x10 [ 504.908281] ? move_linked_works+0x172/0x270 [ 504.908321] ? assign_work+0x196/0x240 [ 504.908350] worker_thread+0x67e/0xe90 [ 504.908378] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.908423] ? __pfx_worker_thread+0x10/0x10 [ 504.908452] kthread+0x3c8/0x740 [ 504.908477] ? __pfx_kthread+0x10/0x10 [ 504.908510] ? ret_from_fork+0x79/0x7a0 [ 504.908536] ? __pfx_kthread+0x10/0x10 [ 504.908562] ret_from_fork+0x67a/0x7a0 [ 504.908584] ? __pfx_ret_from_fork+0x10/0x10 [ 504.908610] ? __switch_to+0x759/0x1030 [ 504.908641] ? __pfx_kthread+0x10/0x10 [ 504.908667] ret_from_fork_asm+0x1a/0x30 [ 504.908713] [ 504.941905] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 504.943947] Bluetooth: hci1: failed to register connection device [ 504.945181] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 504.945296] Bluetooth: hci1: unexpected event for opcode 0x200d [ 504.950376] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 504.966319] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 504.970283] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 504.972589] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 504.982011] debugfs: '0' already exists in 'hci7' [ 504.988118] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 504.989654] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 504.989703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 504.989729] Workqueue: hci7 hci_rx_work [ 504.989771] Call Trace: [ 504.989784] [ 504.989799] dump_stack_lvl+0xfa/0x120 [ 504.989855] sysfs_warn_dup+0x80/0xa0 [ 504.989904] sysfs_create_dir_ns+0x23b/0x2a0 [ 504.989947] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 504.989990] ? find_held_lock+0x2b/0x80 [ 504.990052] ? lock_release+0xc8/0x270 [ 504.990096] ? do_raw_spin_unlock+0x53/0x220 [ 504.990150] kobject_add_internal+0x24c/0x9a0 [ 504.990214] kobject_add+0x157/0x240 [ 504.990271] ? __pfx_kobject_add+0x10/0x10 [ 504.990327] ? lock_release+0xc8/0x270 [ 504.990370] ? do_raw_spin_unlock+0x53/0x220 [ 504.990424] ? kobject_put+0xaa/0x260 [ 504.990493] device_add+0x32d/0x1830 [ 504.990545] ? __pfx_device_add+0x10/0x10 [ 504.990591] ? hci_debugfs_create_conn+0x10f/0x240 [ 504.990641] ? mgmt_send_event_skb+0x2f3/0x460 [ 504.990680] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 504.990735] hci_conn_add_sysfs+0x117/0x1c0 [ 504.990788] le_conn_complete_evt+0x1246/0x1e40 [ 504.990866] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 504.990941] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 504.990981] ? __asan_memcpy+0x3d/0x60 [ 504.991045] hci_le_meta_evt+0x34b/0x530 [ 504.991080] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 504.991122] hci_event_packet+0x66c/0x10e0 [ 504.991160] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 504.991196] ? __pfx_hci_event_packet+0x10/0x10 [ 504.991232] ? mark_held_locks+0x49/0x80 [ 504.991274] ? kcov_remote_start+0x2ce/0x5a0 [ 504.991336] hci_rx_work+0x65b/0x8b0 [ 504.991381] process_one_work+0x8e1/0x1960 [ 504.991446] ? __pfx_process_one_work+0x10/0x10 [ 504.991494] ? move_linked_works+0x172/0x270 [ 504.991556] ? assign_work+0x196/0x240 [ 504.991605] worker_thread+0x67e/0xe90 [ 504.991653] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 504.991728] ? __pfx_worker_thread+0x10/0x10 [ 504.991775] kthread+0x3c8/0x740 [ 504.991818] ? __pfx_kthread+0x10/0x10 [ 504.991855] ? ret_from_fork+0x79/0x7a0 [ 504.991895] ? lock_release+0xc8/0x270 [ 504.991940] ? __pfx_kthread+0x10/0x10 [ 504.991984] ret_from_fork+0x67a/0x7a0 [ 504.992024] ? __pfx_ret_from_fork+0x10/0x10 [ 504.992065] ? __switch_to+0x759/0x1030 [ 504.992118] ? __pfx_kthread+0x10/0x10 [ 504.992163] ret_from_fork_asm+0x1a/0x30 [ 504.992237] [ 505.025433] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 505.027349] Bluetooth: hci7: failed to register connection device [ 505.039919] Bluetooth: hci5: command 0x0406 tx timeout [ 505.044277] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 506.190932] Bluetooth: hci3: command 0x2016 tx timeout [ 506.638951] Bluetooth: hci4: command 0x0406 tx timeout [ 506.638973] Bluetooth: hci7: command 0x2016 tx timeout [ 506.766971] Bluetooth: hci6: command 0x2016 tx timeout [ 507.087189] Bluetooth: hci5: command 0x0406 tx timeout [ 508.239081] Bluetooth: hci3: command 0x2016 tx timeout [ 508.687112] Bluetooth: hci4: command 0x0406 tx timeout [ 508.687148] Bluetooth: hci7: command 0x2016 tx timeout [ 508.814931] Bluetooth: hci6: command 0x2016 tx timeout [ 508.943735] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 508.948190] Bluetooth: hci1: Injecting HCI hardware error event [ 509.134912] Bluetooth: hci5: command 0x0406 tx timeout [ 510.287940] Bluetooth: hci3: command 0x2016 tx timeout [ 510.735047] Bluetooth: hci4: command 0x0406 tx timeout [ 510.735065] Bluetooth: hci7: command 0x2016 tx timeout [ 511.182984] Bluetooth: hci5: command 0x0406 tx timeout [ 512.334995] Bluetooth: hci3: command 0x2016 tx timeout [ 512.782917] Bluetooth: hci7: command 0x2016 tx timeout [ 512.783949] Bluetooth: hci4: command 0x0406 tx timeout [ 513.231005] Bluetooth: hci5: command 0x0406 tx timeout [ 514.383899] Bluetooth: hci3: command 0x2016 tx timeout [ 515.279014] Bluetooth: hci5: command 0x0406 tx timeout 18:27:29 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x3b}, @l2cap_cid_signaling={{0x37}, [@l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0xab, 0x4, 0x200, 0x1}}, @l2cap_disconn_req={{0x6, 0x90, 0x4}, {0xb418, 0x2}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x0, 0x95e7}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x3, 0x100}}, @l2cap_move_chan_req={{0xe, 0x97, 0x3}, {0xfb8, 0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x2}}]}}, 0x40) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:27:29 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcf}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8cc"}}, 0xd2) 18:27:29 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1a}, "2e47dd07e4ad26e6ea4bfd5c1984319432e7936a1a246176ecdb"}}, 0x1d) 18:27:29 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x92, 0x4}, {0xfff, 0x7fff}}}}, 0x11) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x1f, 0x2}, {0x6}}}}, 0xf) 18:27:29 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:27:29 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44800) lseek(r0, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/sockstat6\x00') io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x22) syz_emit_vhci(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4c00) r4 = accept4$inet(r2, 0x0, &(0x7f0000000180), 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000200), 0x80, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000000000000000000000000000f78a57d597188e416c734fbb02", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000f23ff33d8d5b0ef973bbcd02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}, 0x1a000) io_submit(r1, 0x4, &(0x7f0000001980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x9, r4, &(0x7f0000000280)="0ba8ef1bd54fe98d95b549d484ec6d2b1c2d9e358b21bf51588b1f847d18e41be65b223745e36ef79c8510b4ff661028afdf8ccc371166469bfd414e32f7cc22bdf2a4fa1d6f49a031fabdd0cc29359f31f8cae98a75999c267d0357907716f12aecfa680e289a1ede4eb16ba5d1fab0c948f4021a5666d475cd7e5080784d7d08468a23f9c0e4a574cacd5c1db46882c3751a05351e2c0471bfc0f9", 0x9c, 0x1000}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f0000000400)="a9f8803eb6c2e939bd8fb09084cdb35b2ef8427592446c999cf1edf0e90a770ac313010f5dce29ff5a394cc0d760fb9e0f9da60d2bc73f48788d8293ba12fc560a63187e06c440dea132349a9638834d21ac88dabeb5c07503d51dbc137266f48b6f3c3bc6a14f60d12327a8f97761eadaf556cedc586dee7305ea9780072b7a7b53e8f8f979f33fa1947debd29e82c5530e889c2c02e651f57fa5c0e839b43b349d10b5ada70ad429aeff8979dc9d27b31defed733a9a5acb46aa61dd9d66026b5a290ef5f640daa7fa85a5d0c359c3b1142027ebd8eb84", 0xd8, 0xfffffffffffffff8, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r6, &(0x7f0000000500)="45654ff8ed7bb6fb0a56e8f724662359099302b1227e615b81ee8c455f8eec1b9c68f1337a1f34997be57379947359d1ce6040ea146f7d5f9e27fa64eaa88bccf863557113eafdf570cb59e242586b5ac04e661503d93fe448ec3499f9180202a1f7714913d83d2ddae698679076499c53f1e4e73b8bd3c25713", 0x7a, 0x8, 0x0, 0x0, r2}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x101, r2, &(0x7f0000000580)="4e1f457ad75dc0dbac3d6c06a8ed6b53e9c4d170b0ef537c11ad43f6735b738d8d282f3a2ac0eeef100921c0bfbf0b1e4fa200a172a0ab82", 0x38, 0x0, 0x0, 0x1, r7}]) 18:27:29 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xda}, "2880e60a2bef831b00fd979d7bf32eb3895aa84de83a96543f26876110662f18bb7a5aeb69b9b56af6129ffc94486e777a6c7abe2973cdac815f23bfae94e78dba4ca9775a5bef94f14ada7ace26ebcbad8a7bf0fddc73f1d29177d77fd3ea71c216f32d504424921134b56091375ea1e61ef7a85de757554b5dde241b919095dee9a707588e68d7980fb48c182c3c025f74872a6e7fe8207fcdcfbf091a7b9faec2e6c939d2fda907a893b8afcb7440b97434a464c1aea3a32eea183b269c35237925ea7cd297cc3dab06b00886315641190778c306ef5b70e3"}, 0xde) 18:27:29 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 516.007183] debugfs: '0' already exists in 'hci2' [ 516.008301] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 516.009587] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.009617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.009632] Workqueue: hci2 hci_rx_work [ 516.009669] Call Trace: [ 516.009677] [ 516.009686] dump_stack_lvl+0xfa/0x120 [ 516.009717] sysfs_warn_dup+0x80/0xa0 [ 516.009746] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.009774] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.009801] ? find_held_lock+0x2b/0x80 [ 516.009839] ? lock_release+0xc8/0x270 [ 516.009865] ? do_raw_spin_unlock+0x53/0x220 [ 516.009899] kobject_add_internal+0x24c/0x9a0 [ 516.009939] kobject_add+0x157/0x240 [ 516.009973] ? __pfx_kobject_add+0x10/0x10 [ 516.010006] ? lock_release+0xc8/0x270 [ 516.010032] ? do_raw_spin_unlock+0x53/0x220 [ 516.010064] ? kobject_put+0xaa/0x260 [ 516.010105] device_add+0x32d/0x1830 [ 516.010137] ? __pfx_device_add+0x10/0x10 [ 516.010164] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.010195] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.010218] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.010255] hci_conn_add_sysfs+0x117/0x1c0 [ 516.010286] le_conn_complete_evt+0x1246/0x1e40 [ 516.010333] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.010381] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.010407] ? __asan_memcpy+0x3d/0x60 [ 516.010446] hci_le_meta_evt+0x34b/0x530 [ 516.010466] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.010494] hci_event_packet+0x66c/0x10e0 [ 516.010517] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.010539] ? __pfx_hci_event_packet+0x10/0x10 [ 516.010563] ? mark_held_locks+0x49/0x80 [ 516.010589] ? kcov_remote_start+0x2ce/0x5a0 [ 516.010630] hci_rx_work+0x65b/0x8b0 [ 516.010657] process_one_work+0x8e1/0x1960 [ 516.010697] ? __pfx_process_one_work+0x10/0x10 [ 516.010724] ? move_linked_works+0x172/0x270 [ 516.010763] ? assign_work+0x196/0x240 [ 516.010792] worker_thread+0x67e/0xe90 [ 516.010819] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.010865] ? __pfx_worker_thread+0x10/0x10 [ 516.010895] kthread+0x3c8/0x740 [ 516.010919] ? __pfx_kthread+0x10/0x10 [ 516.010942] ? ret_from_fork+0x79/0x7a0 [ 516.010968] ? __pfx_kthread+0x10/0x10 [ 516.010994] ret_from_fork+0x67a/0x7a0 [ 516.011017] ? __pfx_ret_from_fork+0x10/0x10 [ 516.011042] ? __switch_to+0x759/0x1030 [ 516.011074] ? __pfx_kthread+0x10/0x10 [ 516.011099] ret_from_fork_asm+0x1a/0x30 [ 516.011145] [ 516.027975] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 516.030789] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.037172] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 516.037349] Bluetooth: hci2: failed to register connection device [ 516.040006] Bluetooth: Unexpected continuation frame (len 10) [ 516.055250] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 516.057063] Bluetooth: Unexpected continuation frame (len 10) [ 516.060667] debugfs: '0' already exists in 'hci3' [ 516.062596] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 516.063646] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.063670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.063682] Workqueue: hci3 hci_rx_work [ 516.063709] Call Trace: [ 516.063715] [ 516.063723] dump_stack_lvl+0xfa/0x120 [ 516.063747] sysfs_warn_dup+0x80/0xa0 [ 516.063771] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.063792] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.063813] ? find_held_lock+0x2b/0x80 [ 516.063848] ? lock_release+0xc8/0x270 [ 516.063868] ? do_raw_spin_unlock+0x53/0x220 [ 516.063894] kobject_add_internal+0x24c/0x9a0 [ 516.063924] kobject_add+0x157/0x240 [ 516.063951] ? __pfx_kobject_add+0x10/0x10 [ 516.063976] ? lock_release+0xc8/0x270 [ 516.063995] ? do_raw_spin_unlock+0x53/0x220 [ 516.064019] ? kobject_put+0xaa/0x260 [ 516.064051] device_add+0x32d/0x1830 [ 516.064075] ? __pfx_device_add+0x10/0x10 [ 516.064096] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.064120] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.064138] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.064165] hci_conn_add_sysfs+0x117/0x1c0 [ 516.064190] le_conn_complete_evt+0x1246/0x1e40 [ 516.064226] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.064262] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.064282] ? __asan_memcpy+0x3d/0x60 [ 516.064312] hci_le_meta_evt+0x34b/0x530 [ 516.064328] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.064349] hci_event_packet+0x66c/0x10e0 [ 516.064367] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.064383] ? __pfx_hci_event_packet+0x10/0x10 [ 516.064401] ? mark_held_locks+0x49/0x80 [ 516.064421] ? kcov_remote_start+0x2ce/0x5a0 [ 516.064453] hci_rx_work+0x65b/0x8b0 [ 516.064474] process_one_work+0x8e1/0x1960 [ 516.064517] ? __pfx_process_one_work+0x10/0x10 [ 516.064538] ? move_linked_works+0x172/0x270 [ 516.064569] ? assign_work+0x196/0x240 [ 516.064591] worker_thread+0x67e/0xe90 [ 516.064612] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.064647] ? __pfx_worker_thread+0x10/0x10 [ 516.064669] kthread+0x3c8/0x740 [ 516.064688] ? __pfx_kthread+0x10/0x10 [ 516.064705] ? ret_from_fork+0x79/0x7a0 [ 516.064723] ? lock_release+0xc8/0x270 [ 516.064743] ? __pfx_kthread+0x10/0x10 [ 516.064762] ret_from_fork+0x67a/0x7a0 [ 516.064779] ? __pfx_ret_from_fork+0x10/0x10 [ 516.064799] ? __switch_to+0x759/0x1030 [ 516.064824] ? __pfx_kthread+0x10/0x10 [ 516.064844] ret_from_fork_asm+0x1a/0x30 [ 516.064878] [ 516.090071] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.091528] Bluetooth: hci3: failed to register connection device 18:27:29 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3f01007fd13472638b0a8b66099cffd926c135f80c1edf79a7b762e3bf9f702136e4071650a872513a3bb4c402ab10b302a3e5fe74a71b950a4f"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x1, 0x401}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:27:29 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="84003c4728f6cd3175ae8140b7e21ae715cb000000bf045af1adbd4568661f0e0f8a60444acd03fe031090145c1167505de8427d81957c121169d274d48a90b8591b4ea98666ef13fa301303458b8cdfa9d3df15b6aa94ebcd1d20bc4d23b3a64636496970509240d7d504ae1125cd53484b9f"], 0x22) [ 516.134770] Bluetooth: hci2: unexpected subevent 0x01 length: 30 > 18 [ 516.135724] Bluetooth: hci2: Invalid handle: 0xd17f > 0x0eff [ 516.137630] Bluetooth: hci2: unexpected subevent 0x01 length: 30 > 18 [ 516.139180] Bluetooth: hci2: Invalid handle: 0xd17f > 0x0eff 18:27:29 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcf}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8cc"}}, 0xd2) 18:27:29 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:27:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX=0x0], 0x22) 18:27:29 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xda}, "2880e60a2bef831b00fd979d7bf32eb3895aa84de83a96543f26876110662f18bb7a5aeb69b9b56af6129ffc94486e777a6c7abe2973cdac815f23bfae94e78dba4ca9775a5bef94f14ada7ace26ebcbad8a7bf0fddc73f1d29177d77fd3ea71c216f32d504424921134b56091375ea1e61ef7a85de757554b5dde241b919095dee9a707588e68d7980fb48c182c3c025f74872a6e7fe8207fcdcfbf091a7b9faec2e6c939d2fda907a893b8afcb7440b97434a464c1aea3a32eea183b269c35237925ea7cd297cc3dab06b00886315641190778c306ef5b70e3"}, 0xde) 18:27:29 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x8}, {0x0, "6b8fca63059a0c70"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x4}}, @l2cap_move_chan_cfm={{0x10, 0x20, 0x4}, {0x3f, 0x2}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x3, 0x1ff}}}, 0x7) 18:27:29 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xf8}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x88}, {0x9, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59, 0x40, 0x3, "9f9072", 0x1ff}, {@any, 0x2, 0x3f, 0x0, "1cfb6c", 0x5, 0x9}, {@any, 0x3, 0xff, 0x3, "0f558f", 0xcf, 0x1}, {@none, 0x0, 0x1, 0x1, "a3f494", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20, 0xff, 0x9, "6e4aa3", 0x7f, 0x80}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x70, 0x40, 0x97, "daf288", 0xff}, {@any, 0x6, 0x9, 0x40, "666fbc", 0x200, 0x3}, {@none, 0x16, 0x2, 0x4, 'M=9', 0x1, 0x1}, {@any, 0x3b, 0x8, 0x40, "8a1708", 0x8, 0x3}]}}}, 0x8b) [ 516.311727] debugfs: '0' already exists in 'hci5' [ 516.312508] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 516.313440] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.313461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.313473] Workqueue: hci5 hci_rx_work [ 516.313496] Call Trace: [ 516.313503] [ 516.313510] dump_stack_lvl+0xfa/0x120 [ 516.313533] sysfs_warn_dup+0x80/0xa0 [ 516.313554] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.313574] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.313592] ? find_held_lock+0x2b/0x80 [ 516.313619] ? lock_release+0xc8/0x270 [ 516.313638] ? do_raw_spin_unlock+0x53/0x220 [ 516.313661] kobject_add_internal+0x24c/0x9a0 [ 516.313689] kobject_add+0x157/0x240 [ 516.313714] ? __pfx_kobject_add+0x10/0x10 [ 516.313737] ? lock_release+0xc8/0x270 [ 516.313756] ? do_raw_spin_unlock+0x53/0x220 [ 516.313778] ? kobject_put+0xaa/0x260 [ 516.313807] device_add+0x32d/0x1830 [ 516.313835] ? __pfx_device_add+0x10/0x10 [ 516.313855] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.313877] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.313894] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.313920] hci_conn_add_sysfs+0x117/0x1c0 [ 516.313942] le_conn_complete_evt+0x1246/0x1e40 [ 516.313975] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.314009] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.314027] ? __asan_memcpy+0x3d/0x60 [ 516.314055] hci_le_meta_evt+0x34b/0x530 [ 516.314070] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.314090] hci_event_packet+0x66c/0x10e0 [ 516.314107] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.314122] ? __pfx_hci_event_packet+0x10/0x10 [ 516.314139] ? mark_held_locks+0x49/0x80 [ 516.314160] ? kcov_remote_start+0x2ce/0x5a0 [ 516.314192] hci_rx_work+0x65b/0x8b0 [ 516.314211] process_one_work+0x8e1/0x1960 [ 516.314240] ? __pfx_process_one_work+0x10/0x10 [ 516.314259] ? move_linked_works+0x172/0x270 [ 516.314288] ? assign_work+0x196/0x240 [ 516.314308] worker_thread+0x67e/0xe90 [ 516.314328] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.314360] ? __pfx_worker_thread+0x10/0x10 [ 516.314381] kthread+0x3c8/0x740 [ 516.314398] ? __pfx_kthread+0x10/0x10 [ 516.314415] ? ret_from_fork+0x79/0x7a0 [ 516.314431] ? lock_release+0xc8/0x270 [ 516.314450] ? __pfx_kthread+0x10/0x10 [ 516.314468] ret_from_fork+0x67a/0x7a0 [ 516.314483] ? __pfx_ret_from_fork+0x10/0x10 [ 516.314502] ? __switch_to+0x759/0x1030 [ 516.314524] ? __pfx_kthread+0x10/0x10 [ 516.314542] ret_from_fork_asm+0x1a/0x30 [ 516.314575] [ 516.330155] debugfs: '0' already exists in 'hci4' [ 516.331571] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.331947] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 516.333026] Bluetooth: hci5: failed to register connection device [ 516.333387] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.333419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.333435] Workqueue: hci4 hci_rx_work [ 516.333467] Call Trace: [ 516.333476] [ 516.333485] dump_stack_lvl+0xfa/0x120 [ 516.333517] sysfs_warn_dup+0x80/0xa0 [ 516.333547] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.333575] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.333601] ? find_held_lock+0x2b/0x80 [ 516.333639] ? lock_release+0xc8/0x270 [ 516.333666] ? do_raw_spin_unlock+0x53/0x220 [ 516.333699] kobject_add_internal+0x24c/0x9a0 [ 516.333739] kobject_add+0x157/0x240 [ 516.333783] ? __pfx_kobject_add+0x10/0x10 [ 516.333815] ? lock_release+0xc8/0x270 [ 516.333848] ? do_raw_spin_unlock+0x53/0x220 [ 516.333877] ? kobject_put+0xaa/0x260 [ 516.333917] device_add+0x32d/0x1830 [ 516.333948] ? __pfx_device_add+0x10/0x10 [ 516.333975] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.334004] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.334028] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.334062] hci_conn_add_sysfs+0x117/0x1c0 [ 516.334093] le_conn_complete_evt+0x1246/0x1e40 [ 516.334138] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.334183] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.334209] ? __asan_memcpy+0x3d/0x60 [ 516.334246] hci_le_meta_evt+0x34b/0x530 [ 516.334268] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.334305] hci_event_packet+0x66c/0x10e0 [ 516.334330] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.334352] ? __pfx_hci_event_packet+0x10/0x10 [ 516.334375] ? mark_held_locks+0x49/0x80 [ 516.334401] ? kcov_remote_start+0x2ce/0x5a0 [ 516.334440] hci_rx_work+0x65b/0x8b0 [ 516.334467] process_one_work+0x8e1/0x1960 [ 516.334506] ? __pfx_process_one_work+0x10/0x10 [ 516.334533] ? move_linked_works+0x172/0x270 [ 516.334571] ? assign_work+0x196/0x240 [ 516.334598] worker_thread+0x67e/0xe90 [ 516.334625] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.334669] ? __pfx_worker_thread+0x10/0x10 [ 516.334697] kthread+0x3c8/0x740 [ 516.334721] ? __pfx_kthread+0x10/0x10 [ 516.334746] ? ret_from_fork+0x79/0x7a0 [ 516.334776] ? lock_release+0xc8/0x270 [ 516.334802] ? __pfx_kthread+0x10/0x10 [ 516.334828] ret_from_fork+0x67a/0x7a0 [ 516.334850] ? __pfx_ret_from_fork+0x10/0x10 [ 516.334875] ? __switch_to+0x759/0x1030 [ 516.334907] ? __pfx_kthread+0x10/0x10 [ 516.334933] ret_from_fork_asm+0x1a/0x30 [ 516.334978] [ 516.335044] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.341505] debugfs: '0' already exists in 'hci3' [ 516.343566] Bluetooth: hci4: failed to register connection device [ 516.344955] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 516.355723] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 516.356053] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.356077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.356089] Workqueue: hci3 hci_rx_work [ 516.356110] Call Trace: [ 516.356116] [ 516.356122] dump_stack_lvl+0xfa/0x120 [ 516.356144] sysfs_warn_dup+0x80/0xa0 [ 516.356165] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.356185] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.356203] ? find_held_lock+0x2b/0x80 [ 516.356230] ? lock_release+0xc8/0x270 [ 516.356249] ? do_raw_spin_unlock+0x53/0x220 [ 516.356273] kobject_add_internal+0x24c/0x9a0 [ 516.356301] kobject_add+0x157/0x240 [ 516.356326] ? __pfx_kobject_add+0x10/0x10 [ 516.356349] ? lock_release+0xc8/0x270 [ 516.356368] ? do_raw_spin_unlock+0x53/0x220 [ 516.356390] ? kobject_put+0xaa/0x260 [ 516.356419] device_add+0x32d/0x1830 [ 516.356442] ? __pfx_device_add+0x10/0x10 [ 516.356461] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.356484] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.356510] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.356536] hci_conn_add_sysfs+0x117/0x1c0 [ 516.356558] le_conn_complete_evt+0x1246/0x1e40 [ 516.356591] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.356624] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.356642] ? __asan_memcpy+0x3d/0x60 [ 516.356671] hci_le_meta_evt+0x34b/0x530 [ 516.356685] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.356704] hci_event_packet+0x66c/0x10e0 [ 516.356721] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.356737] ? __pfx_hci_event_packet+0x10/0x10 [ 516.356754] ? mark_held_locks+0x49/0x80 [ 516.356773] ? kcov_remote_start+0x2ce/0x5a0 [ 516.356801] hci_rx_work+0x65b/0x8b0 [ 516.356825] process_one_work+0x8e1/0x1960 [ 516.356854] ? __pfx_process_one_work+0x10/0x10 [ 516.356873] ? move_linked_works+0x172/0x270 [ 516.356901] ? assign_work+0x196/0x240 [ 516.356921] worker_thread+0x67e/0xe90 [ 516.356941] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.356972] ? __pfx_worker_thread+0x10/0x10 [ 516.356993] kthread+0x3c8/0x740 [ 516.357010] ? __pfx_kthread+0x10/0x10 [ 516.357026] ? ret_from_fork+0x79/0x7a0 [ 516.357043] ? lock_release+0xc8/0x270 [ 516.357061] ? __pfx_kthread+0x10/0x10 [ 516.357079] ret_from_fork+0x67a/0x7a0 [ 516.357094] ? __pfx_ret_from_fork+0x10/0x10 [ 516.357112] ? __switch_to+0x759/0x1030 [ 516.357135] ? __pfx_kthread+0x10/0x10 [ 516.357152] ret_from_fork_asm+0x1a/0x30 [ 516.357185] [ 516.357234] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.399667] Bluetooth: hci3: failed to register connection device [ 516.400699] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 516.401521] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 516.401715] debugfs: '0' already exists in 'hci3' [ 516.403056] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 516.403937] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.403957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.403968] Workqueue: hci3 hci_rx_work [ 516.403988] Call Trace: [ 516.403994] [ 516.404001] dump_stack_lvl+0xfa/0x120 [ 516.404021] sysfs_warn_dup+0x80/0xa0 [ 516.404042] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.404060] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.404078] ? find_held_lock+0x2b/0x80 [ 516.404103] ? lock_release+0xc8/0x270 [ 516.404121] ? do_raw_spin_unlock+0x53/0x220 [ 516.404144] kobject_add_internal+0x24c/0x9a0 [ 516.404170] kobject_add+0x157/0x240 [ 516.404193] ? __pfx_kobject_add+0x10/0x10 [ 516.404216] ? lock_release+0xc8/0x270 [ 516.404233] ? do_raw_spin_unlock+0x53/0x220 [ 516.404255] ? kobject_put+0xaa/0x260 [ 516.404283] device_add+0x32d/0x1830 [ 516.404304] ? __pfx_device_add+0x10/0x10 [ 516.404323] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.404344] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.404360] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.404385] hci_conn_add_sysfs+0x117/0x1c0 [ 516.404406] le_conn_complete_evt+0x1246/0x1e40 [ 516.404438] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.404470] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.404488] ? __asan_memcpy+0x3d/0x60 [ 516.404525] hci_le_meta_evt+0x34b/0x530 [ 516.404539] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.404557] hci_event_packet+0x66c/0x10e0 [ 516.404574] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.404589] ? __pfx_hci_event_packet+0x10/0x10 [ 516.404605] ? mark_held_locks+0x49/0x80 [ 516.404623] ? kcov_remote_start+0x2ce/0x5a0 [ 516.404651] hci_rx_work+0x65b/0x8b0 [ 516.404669] process_one_work+0x8e1/0x1960 [ 516.404696] ? __pfx_process_one_work+0x10/0x10 [ 516.404715] ? move_linked_works+0x172/0x270 [ 516.404741] ? assign_work+0x196/0x240 [ 516.404761] worker_thread+0x67e/0xe90 [ 516.404779] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.404810] ? __pfx_worker_thread+0x10/0x10 [ 516.404835] kthread+0x3c8/0x740 [ 516.404852] ? __pfx_kthread+0x10/0x10 [ 516.404867] ? ret_from_fork+0x79/0x7a0 [ 516.404882] ? lock_release+0xc8/0x270 [ 516.404900] ? __pfx_kthread+0x10/0x10 [ 516.404917] ret_from_fork+0x67a/0x7a0 [ 516.404932] ? __pfx_ret_from_fork+0x10/0x10 [ 516.404950] ? __switch_to+0x759/0x1030 [ 516.404971] ? __pfx_kthread+0x10/0x10 [ 516.404988] ret_from_fork_asm+0x1a/0x30 [ 516.405019] [ 516.428883] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.430962] Bluetooth: hci3: failed to register connection device [ 516.433468] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 516.434225] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 516.434465] debugfs: '0' already exists in 'hci2' [ 516.435762] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 516.436620] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.436639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.436649] Workqueue: hci2 hci_rx_work [ 516.436666] Call Trace: [ 516.436671] [ 516.436677] dump_stack_lvl+0xfa/0x120 [ 516.436696] sysfs_warn_dup+0x80/0xa0 [ 516.436715] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.436733] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.436751] ? find_held_lock+0x2b/0x80 [ 516.436776] ? lock_release+0xc8/0x270 [ 516.436793] ? do_raw_spin_unlock+0x53/0x220 [ 516.436816] kobject_add_internal+0x24c/0x9a0 [ 516.436847] kobject_add+0x157/0x240 [ 516.436870] ? __pfx_kobject_add+0x10/0x10 [ 516.436892] ? lock_release+0xc8/0x270 [ 516.436910] ? do_raw_spin_unlock+0x53/0x220 [ 516.436931] ? kobject_put+0xaa/0x260 [ 516.436959] device_add+0x32d/0x1830 [ 516.436980] ? __pfx_device_add+0x10/0x10 [ 516.436998] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.437019] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.437034] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.437059] hci_conn_add_sysfs+0x117/0x1c0 [ 516.437080] le_conn_complete_evt+0x1246/0x1e40 [ 516.437111] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.437144] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.437161] ? __asan_memcpy+0x3d/0x60 [ 516.437187] hci_le_meta_evt+0x34b/0x530 [ 516.437201] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.437220] hci_event_packet+0x66c/0x10e0 [ 516.437236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.437251] ? __pfx_hci_event_packet+0x10/0x10 [ 516.437266] ? mark_held_locks+0x49/0x80 [ 516.437284] ? kcov_remote_start+0x2ce/0x5a0 [ 516.437311] hci_rx_work+0x65b/0x8b0 [ 516.437329] process_one_work+0x8e1/0x1960 [ 516.437355] ? __pfx_process_one_work+0x10/0x10 [ 516.437373] ? move_linked_works+0x172/0x270 [ 516.437400] ? assign_work+0x196/0x240 [ 516.437419] worker_thread+0x67e/0xe90 [ 516.437438] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.437468] ? __pfx_worker_thread+0x10/0x10 [ 516.437488] kthread+0x3c8/0x740 [ 516.437504] ? __pfx_kthread+0x10/0x10 [ 516.437519] ? ret_from_fork+0x79/0x7a0 [ 516.437534] ? lock_release+0xc8/0x270 [ 516.437551] ? __pfx_kthread+0x10/0x10 [ 516.437568] ret_from_fork+0x67a/0x7a0 [ 516.437583] ? __pfx_ret_from_fork+0x10/0x10 [ 516.437600] ? __switch_to+0x759/0x1030 [ 516.437622] ? __pfx_kthread+0x10/0x10 [ 516.437639] ret_from_fork_asm+0x1a/0x30 [ 516.437669] [ 516.460220] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.461692] Bluetooth: hci2: failed to register connection device [ 516.463045] debugfs: '0' already exists in 'hci2' [ 516.463699] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 516.464647] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 516.464666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 516.464676] Workqueue: hci2 hci_rx_work [ 516.464690] Call Trace: [ 516.464695] [ 516.464701] dump_stack_lvl+0xfa/0x120 [ 516.464719] sysfs_warn_dup+0x80/0xa0 [ 516.464737] sysfs_create_dir_ns+0x23b/0x2a0 [ 516.464755] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.464772] ? find_held_lock+0x2b/0x80 [ 516.464796] ? lock_release+0xc8/0x270 [ 516.464813] ? do_raw_spin_unlock+0x53/0x220 [ 516.464840] kobject_add_internal+0x24c/0x9a0 [ 516.464866] kobject_add+0x157/0x240 [ 516.464889] ? __pfx_kobject_add+0x10/0x10 [ 516.464911] ? lock_release+0xc8/0x270 [ 516.464928] ? do_raw_spin_unlock+0x53/0x220 [ 516.464949] ? kobject_put+0xaa/0x260 [ 516.464976] device_add+0x32d/0x1830 [ 516.464995] ? __pfx_device_add+0x10/0x10 [ 516.465013] ? hci_debugfs_create_conn+0x10f/0x240 [ 516.465033] ? mgmt_send_event_skb+0x2f3/0x460 [ 516.465048] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 516.465072] hci_conn_add_sysfs+0x117/0x1c0 [ 516.465092] le_conn_complete_evt+0x1246/0x1e40 [ 516.465122] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.465154] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 516.465171] ? __asan_memcpy+0x3d/0x60 [ 516.465196] hci_le_meta_evt+0x34b/0x530 [ 516.465210] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 516.465228] hci_event_packet+0x66c/0x10e0 [ 516.465244] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.465259] ? __pfx_hci_event_packet+0x10/0x10 [ 516.465274] ? mark_held_locks+0x49/0x80 [ 516.465292] ? kcov_remote_start+0x2ce/0x5a0 [ 516.465318] hci_rx_work+0x65b/0x8b0 [ 516.465336] process_one_work+0x8e1/0x1960 [ 516.465361] ? __pfx_process_one_work+0x10/0x10 [ 516.465379] ? move_linked_works+0x172/0x270 [ 516.465405] ? assign_work+0x196/0x240 [ 516.465424] worker_thread+0x67e/0xe90 [ 516.465442] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 516.465472] ? __pfx_worker_thread+0x10/0x10 [ 516.465491] kthread+0x3c8/0x740 [ 516.465506] ? __pfx_kthread+0x10/0x10 [ 516.465521] ? ret_from_fork+0x79/0x7a0 [ 516.465535] ? lock_release+0xc8/0x270 [ 516.465552] ? __pfx_kthread+0x10/0x10 [ 516.465569] ret_from_fork+0x67a/0x7a0 [ 516.465584] ? __pfx_ret_from_fork+0x10/0x10 [ 516.465601] ? __switch_to+0x759/0x1030 [ 516.465621] ? __pfx_kthread+0x10/0x10 [ 516.465638] ret_from_fork_asm+0x1a/0x30 [ 516.465667] [ 516.487950] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 516.489314] Bluetooth: hci2: failed to register connection device [ 517.326902] Bluetooth: hci5: command 0x0406 tx timeout [ 518.031050] Bluetooth: hci4: command 0x0406 tx timeout [ 518.094963] Bluetooth: hci2: command 0x2016 tx timeout [ 519.375004] Bluetooth: hci5: command 0x0406 tx timeout [ 520.079119] Bluetooth: hci4: command 0x0406 tx timeout [ 520.143016] Bluetooth: hci3: command 0x2016 tx timeout [ 520.143051] Bluetooth: hci2: command 0x2016 tx timeout [ 521.422989] Bluetooth: hci5: command 0x0406 tx timeout [ 522.126983] Bluetooth: hci4: command 0x0406 tx timeout [ 522.190951] Bluetooth: hci3: command 0x2016 tx timeout [ 522.191114] Bluetooth: hci2: command 0x2016 tx timeout [ 523.470924] Bluetooth: hci5: command 0x0406 tx timeout [ 524.174934] Bluetooth: hci4: command 0x0406 tx timeout [ 524.239110] Bluetooth: hci3: command 0x2016 tx timeout [ 524.239995] Bluetooth: hci2: command 0x2016 tx timeout [ 525.518920] Bluetooth: hci5: command 0x0406 tx timeout 18:27:39 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x60a041, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) io_submit(r2, 0x0, &(0x7f0000000040)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000040)) 18:27:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64=r0], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc9, @any, 0x1, 0x0, 0x40, 0x80, 0x800, 0x6}}}, 0x14) 18:27:39 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcf}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8cc"}}, 0xd2) 18:27:39 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f3f44dfd4d04602de866b14965e2a35d0ec840e23dc56474a6981910a9cd9c4c04e38002d857b86b7f4f650cc2509bab5fef20f46d4a589f50f18dbc483863125f2299acec0b65d68e6e2c9c8efd18a8b911116b8039822a99a01751d7f580e6014b06c11a63e588f292031ff51e44f678fa1794fbfc821b387b1ec7e3be1dec9b79554d5b90a523f492a3b5adef7d3bcb8f25eca9a2364f53639db9ea3a7bb9f8f768a569878bd07daab6cb5c142a10d4119ff9f3bd355478a42eaa730673770635aad9be8bfc5104fab919df80b262fdb133bea75c686e861d9d1a0e4452a902ea7eae7f35b2c88a7ce3a8a728cc4761909b83118071a86cc013cd69ea4b1642121027a077ece4cbe8152a5b0437a2ff3434ea6a10580cfff3fe9f72d3342f5210dd94cb815c363d4630733840fb44d04bb8d5fcfa3288f49e5280c5cac703c22364cd364dca87f6b3acd238517d610d5599379b57b"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000011c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x85}, @l2cap_cid_signaling={{0x81}, [@l2cap_conf_req={{0x4, 0x5, 0x1d}, {0xf99, 0x2, [@l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0xff01, 0x30, 0x2c4, 0x400}}, @l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x0, 0xd945}}, @l2cap_conf_rsp={{0x5, 0x6, 0x44}, {0x2, 0x7, 0xda9, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0x40, 0x1, 0x7d4, 0xfffff001, 0xfffffff9, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0xfe, 0x2, 0x1, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0x25, 0x7ff, 0x3, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0xff, 0x7f, 0x6, 0x4, 0x32}}]}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x3f, 0xf9e}}, @l2cap_disconn_rsp={{0x7, 0x1b, 0x4}, {0xfff8, 0x91ed}}]}}, 0x8a) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 18:27:39 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:27:39 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f81b4000000000000000000800029f0921db2bd721e114597e8285eb5fa7126893f"], 0x22) 18:27:39 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) syz_emit_vhci(0x0, 0x0) 18:27:39 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 526.115941] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 526.129412] Bluetooth: hci0: Ignoring connect complete event for invalid link type 18:27:39 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:27:39 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT], 0x22) 18:27:39 executing program 1: sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ee111ff92476ca68435955b7240103d50fce30c42296d6c75c534c95a88b8ff93083096800fc729af66ec8acd208189b292f50b82744e0ef1d13343ec27c79459c143bd6498bd63282ae055ee6c18be884c4293614f217f37b8941f20cbf2853ab4d4a7fcc3c88252e305f508f0e5a6a3d57cb37c8c77e4f2bc0bca11607740d439d4ae8e16178d9c978cb3a3cbab9fbf6fa844fc152fec456165ca55486b80771e0966c9b25fed0d4a581694e0c0eb93144e69bd0bcb1d39552a047f68633c689320cea34ae4e4cd81ccbfdd60e7e45266c506213c1da2b104f3d3934ca", 0xde, 0x200008c1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 18:27:39 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd1}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdb"}}, 0xd4) 18:27:39 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e9f0a"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf2}, "2537044753e48b627997951e88e5c9af054f2d836f8fbe90fd90d9b23641a54d5190ffd45602390d7d7e91fe9578b5d8013662cb39fa90bcc68f76107195ccf0e0d7f6d5e073ab512dc033b873513d9582f0656d6a87b07a26a72fb31b7e33d3aa966f4048a7ddeceac40eeed54ab315cb1a4bfb9fef4355bdd04d8b06342842b722782a747845c9d64fa4c0e7eaf95513653a740b4e13fc4a72cf44534fbe4897592f0b1208496e18242cd90375af7a5980df4ff708609b57833abb568615684839856158eb2fa7fd70d77971cc044fa99b431b0fdef2cd51ae5aecdfb676f978ae40ae94d561b858e5e6eb4554dd80a6f8"}, 0xf6) [ 526.288129] Bluetooth: hci3: command 0x2016 tx timeout [ 526.289045] Bluetooth: hci2: command 0x2016 tx timeout [ 526.299184] debugfs: '0' already exists in 'hci5' [ 526.300070] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 526.301322] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 526.301349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.301362] Workqueue: hci5 hci_rx_work [ 526.301390] Call Trace: [ 526.301397] [ 526.301405] dump_stack_lvl+0xfa/0x120 [ 526.301432] sysfs_warn_dup+0x80/0xa0 [ 526.301458] sysfs_create_dir_ns+0x23b/0x2a0 [ 526.301482] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 526.301505] ? find_held_lock+0x2b/0x80 [ 526.301538] ? lock_release+0xc8/0x270 [ 526.301561] ? do_raw_spin_unlock+0x53/0x220 [ 526.301590] kobject_add_internal+0x24c/0x9a0 [ 526.301625] kobject_add+0x157/0x240 [ 526.301655] ? __pfx_kobject_add+0x10/0x10 [ 526.301684] ? lock_release+0xc8/0x270 [ 526.301707] ? do_raw_spin_unlock+0x53/0x220 [ 526.301734] ? kobject_put+0xaa/0x260 [ 526.301771] device_add+0x32d/0x1830 [ 526.301798] ? __pfx_device_add+0x10/0x10 [ 526.301829] ? hci_debugfs_create_conn+0x10f/0x240 [ 526.301856] ? mgmt_send_event_skb+0x2f3/0x460 [ 526.301877] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 526.301909] hci_conn_add_sysfs+0x117/0x1c0 [ 526.301936] le_conn_complete_evt+0x1246/0x1e40 [ 526.301978] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 526.302020] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 526.302043] ? __asan_memcpy+0x3d/0x60 [ 526.302077] hci_le_meta_evt+0x34b/0x530 [ 526.302095] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 526.302119] hci_event_packet+0x66c/0x10e0 [ 526.302141] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 526.302160] ? __pfx_hci_event_packet+0x10/0x10 [ 526.302180] ? mark_held_locks+0x49/0x80 [ 526.302203] ? kcov_remote_start+0x2ce/0x5a0 [ 526.302239] hci_rx_work+0x65b/0x8b0 [ 526.302263] process_one_work+0x8e1/0x1960 [ 526.302298] ? __pfx_process_one_work+0x10/0x10 [ 526.302322] ? move_linked_works+0x172/0x270 [ 526.302357] ? assign_work+0x196/0x240 [ 526.302383] worker_thread+0x67e/0xe90 [ 526.302407] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 526.302447] ? __pfx_worker_thread+0x10/0x10 [ 526.302472] kthread+0x3c8/0x740 [ 526.302494] ? __pfx_kthread+0x10/0x10 [ 526.302513] ? ret_from_fork+0x79/0x7a0 [ 526.302534] ? lock_release+0xc8/0x270 [ 526.302556] ? __pfx_kthread+0x10/0x10 [ 526.302579] ret_from_fork+0x67a/0x7a0 [ 526.302598] ? __pfx_ret_from_fork+0x10/0x10 [ 526.302621] ? __switch_to+0x759/0x1030 [ 526.302649] ? __pfx_kthread+0x10/0x10 [ 526.302671] ret_from_fork_asm+0x1a/0x30 [ 526.302711] [ 526.331249] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 526.332983] Bluetooth: hci5: failed to register connection device 18:27:39 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) syz_emit_vhci(0x0, 0x0) 18:27:39 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd1}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdb"}}, 0xd4) 18:27:39 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 526.441330] debugfs: '0' already exists in 'hci0' [ 526.442264] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 526.443285] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 526.443309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.443322] Workqueue: hci0 hci_rx_work [ 526.443347] Call Trace: [ 526.443354] [ 526.443361] dump_stack_lvl+0xfa/0x120 [ 526.443387] sysfs_warn_dup+0x80/0xa0 [ 526.443411] sysfs_create_dir_ns+0x23b/0x2a0 [ 526.443433] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 526.443454] ? find_held_lock+0x2b/0x80 [ 526.443484] ? lock_release+0xc8/0x270 [ 526.443505] ? do_raw_spin_unlock+0x53/0x220 [ 526.443532] kobject_add_internal+0x24c/0x9a0 [ 526.443563] kobject_add+0x157/0x240 [ 526.443591] ? __pfx_kobject_add+0x10/0x10 [ 526.443617] ? lock_release+0xc8/0x270 [ 526.443638] ? do_raw_spin_unlock+0x53/0x220 [ 526.443663] ? kobject_put+0xaa/0x260 [ 526.443696] device_add+0x32d/0x1830 [ 526.443721] ? __pfx_device_add+0x10/0x10 [ 526.443743] ? hci_debugfs_create_conn+0x10f/0x240 [ 526.443768] ? mgmt_send_event_skb+0x2f3/0x460 [ 526.443787] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 526.443816] hci_conn_add_sysfs+0x117/0x1c0 [ 526.443847] le_conn_complete_evt+0x1246/0x1e40 [ 526.443885] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 526.443923] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 526.443944] ? __asan_memcpy+0x3d/0x60 [ 526.443975] hci_le_meta_evt+0x34b/0x530 [ 526.443992] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 526.444014] hci_event_packet+0x66c/0x10e0 [ 526.444033] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 526.444051] ? __pfx_hci_event_packet+0x10/0x10 [ 526.444070] ? mark_held_locks+0x49/0x80 [ 526.444091] ? kcov_remote_start+0x2ce/0x5a0 [ 526.444124] hci_rx_work+0x65b/0x8b0 [ 526.444146] process_one_work+0x8e1/0x1960 [ 526.444178] ? __pfx_process_one_work+0x10/0x10 [ 526.444200] ? move_linked_works+0x172/0x270 [ 526.444231] ? assign_work+0x196/0x240 [ 526.444254] worker_thread+0x67e/0xe90 [ 526.444277] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 526.444313] ? __pfx_worker_thread+0x10/0x10 [ 526.444336] kthread+0x3c8/0x740 [ 526.444356] ? __pfx_kthread+0x10/0x10 [ 526.444374] ? ret_from_fork+0x79/0x7a0 [ 526.444392] ? lock_release+0xc8/0x270 [ 526.444413] ? __pfx_kthread+0x10/0x10 [ 526.444433] ret_from_fork+0x67a/0x7a0 [ 526.444451] ? __pfx_ret_from_fork+0x10/0x10 [ 526.444471] ? __switch_to+0x759/0x1030 [ 526.444497] ? __pfx_kthread+0x10/0x10 [ 526.444527] ret_from_fork_asm+0x1a/0x30 [ 526.444563] [ 526.451237] debugfs: '0' already exists in 'hci5' [ 526.451479] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 526.452404] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 526.452616] Bluetooth: hci0: failed to register connection device [ 526.453500] CPU: 0 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 526.453535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.453552] Workqueue: hci5 hci_rx_work [ 526.453579] Call Trace: [ 526.453587] [ 526.453598] dump_stack_lvl+0xfa/0x120 [ 526.453631] sysfs_warn_dup+0x80/0xa0 [ 526.453662] sysfs_create_dir_ns+0x23b/0x2a0 [ 526.453695] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 526.453726] ? find_held_lock+0x2b/0x80 [ 526.453768] ? lock_release+0xc8/0x270 [ 526.453799] ? do_raw_spin_unlock+0x53/0x220 [ 526.453846] kobject_add_internal+0x24c/0x9a0 [ 526.453893] kobject_add+0x157/0x240 [ 526.453933] ? __pfx_kobject_add+0x10/0x10 [ 526.453972] ? lock_release+0xc8/0x270 [ 526.454003] ? do_raw_spin_unlock+0x53/0x220 [ 526.454040] ? kobject_put+0xaa/0x260 [ 526.454089] device_add+0x32d/0x1830 [ 526.454124] ? __pfx_device_add+0x10/0x10 [ 526.454156] ? hci_debugfs_create_conn+0x10f/0x240 [ 526.454190] ? mgmt_send_event_skb+0x2f3/0x460 [ 526.454217] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 526.454260] hci_conn_add_sysfs+0x117/0x1c0 [ 526.454295] le_conn_complete_evt+0x1246/0x1e40 [ 526.454350] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 526.454407] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 526.454437] ? __asan_memcpy+0x3d/0x60 [ 526.454483] hci_le_meta_evt+0x34b/0x530 [ 526.454506] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 526.454539] hci_event_packet+0x66c/0x10e0 [ 526.454568] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 526.454594] ? __pfx_hci_event_packet+0x10/0x10 [ 526.454622] ? mark_held_locks+0x49/0x80 [ 526.454653] ? kcov_remote_start+0x2ce/0x5a0 [ 526.454699] hci_rx_work+0x65b/0x8b0 [ 526.454731] process_one_work+0x8e1/0x1960 [ 526.454777] ? __pfx_process_one_work+0x10/0x10 [ 526.454809] ? move_linked_works+0x172/0x270 [ 526.454855] ? assign_work+0x196/0x240 [ 526.454889] worker_thread+0x67e/0xe90 [ 526.454922] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 526.454974] ? __pfx_worker_thread+0x10/0x10 [ 526.455008] kthread+0x3c8/0x740 [ 526.455036] ? __pfx_kthread+0x10/0x10 [ 526.455063] ? ret_from_fork+0x79/0x7a0 [ 526.455093] ? __pfx_kthread+0x10/0x10 [ 526.455123] ret_from_fork+0x67a/0x7a0 [ 526.455149] ? __pfx_ret_from_fork+0x10/0x10 [ 526.455179] ? __switch_to+0x759/0x1030 [ 526.455215] ? __pfx_kthread+0x10/0x10 [ 526.455245] ret_from_fork_asm+0x1a/0x30 [ 526.455298] [ 526.457600] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 526.457653] Bluetooth: hci5: failed to register connection device [ 526.478314] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 526.510634] debugfs: '0' already exists in 'hci4' [ 526.520464] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 526.521608] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 526.521631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.521642] Workqueue: hci4 hci_rx_work [ 526.521664] Call Trace: [ 526.521670] [ 526.521677] dump_stack_lvl+0xfa/0x120 [ 526.521701] sysfs_warn_dup+0x80/0xa0 [ 526.521724] sysfs_create_dir_ns+0x23b/0x2a0 [ 526.521744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 526.521764] ? find_held_lock+0x2b/0x80 [ 526.521793] ? lock_release+0xc8/0x270 [ 526.521813] ? do_raw_spin_unlock+0x53/0x220 [ 526.521844] kobject_add_internal+0x24c/0x9a0 [ 526.521874] kobject_add+0x157/0x240 [ 526.521900] ? __pfx_kobject_add+0x10/0x10 [ 526.521925] ? lock_release+0xc8/0x270 [ 526.521945] ? do_raw_spin_unlock+0x53/0x220 [ 526.521969] ? kobject_put+0xaa/0x260 [ 526.522000] device_add+0x32d/0x1830 [ 526.522024] ? __pfx_device_add+0x10/0x10 [ 526.522045] ? hci_debugfs_create_conn+0x10f/0x240 [ 526.522068] ? mgmt_send_event_skb+0x2f3/0x460 [ 526.522087] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 526.522114] hci_conn_add_sysfs+0x117/0x1c0 [ 526.522138] le_conn_complete_evt+0x1246/0x1e40 [ 526.522173] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 526.522210] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 526.522229] ? __asan_memcpy+0x3d/0x60 [ 526.522259] hci_le_meta_evt+0x34b/0x530 [ 526.522275] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 526.522296] hci_event_packet+0x66c/0x10e0 [ 526.522315] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 526.522331] ? __pfx_hci_event_packet+0x10/0x10 [ 526.522349] ? mark_held_locks+0x49/0x80 [ 526.522369] ? kcov_remote_start+0x2ce/0x5a0 [ 526.522400] hci_rx_work+0x65b/0x8b0 [ 526.522421] process_one_work+0x8e1/0x1960 [ 526.522452] ? __pfx_process_one_work+0x10/0x10 [ 526.522473] ? move_linked_works+0x172/0x270 [ 526.522503] ? assign_work+0x196/0x240 [ 526.522525] worker_thread+0x67e/0xe90 [ 526.522546] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 526.522580] ? __pfx_worker_thread+0x10/0x10 [ 526.522602] kthread+0x3c8/0x740 [ 526.522620] ? __pfx_kthread+0x10/0x10 [ 526.522638] ? ret_from_fork+0x79/0x7a0 [ 526.522655] ? lock_release+0xc8/0x270 [ 526.522675] ? __pfx_kthread+0x10/0x10 [ 526.522694] ret_from_fork+0x67a/0x7a0 [ 526.522711] ? __pfx_ret_from_fork+0x10/0x10 [ 526.522730] ? __switch_to+0x759/0x1030 [ 526.522754] ? __pfx_kthread+0x10/0x10 [ 526.522773] ret_from_fork_asm+0x1a/0x30 [ 526.522808] [ 526.548052] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 526.550337] Bluetooth: hci4: failed to register connection device [ 526.565439] debugfs: '0' already exists in 'hci1' [ 526.566182] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 526.567124] CPU: 1 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 526.567146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 526.567157] Workqueue: hci1 hci_rx_work [ 526.567177] Call Trace: [ 526.567183] [ 526.567189] dump_stack_lvl+0xfa/0x120 [ 526.567211] sysfs_warn_dup+0x80/0xa0 [ 526.567233] sysfs_create_dir_ns+0x23b/0x2a0 [ 526.567253] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 526.567272] ? find_held_lock+0x2b/0x80 [ 526.567299] ? lock_release+0xc8/0x270 [ 526.567319] ? do_raw_spin_unlock+0x53/0x220 [ 526.567343] kobject_add_internal+0x24c/0x9a0 [ 526.567373] kobject_add+0x157/0x240 [ 526.567398] ? __pfx_kobject_add+0x10/0x10 [ 526.567422] ? lock_release+0xc8/0x270 [ 526.567441] ? do_raw_spin_unlock+0x53/0x220 [ 526.567464] ? kobject_put+0xaa/0x260 [ 526.567495] device_add+0x32d/0x1830 [ 526.567518] ? __pfx_device_add+0x10/0x10 [ 526.567538] ? hci_debugfs_create_conn+0x10f/0x240 [ 526.567561] ? mgmt_send_event_skb+0x2f3/0x460 [ 526.567578] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 526.567604] hci_conn_add_sysfs+0x117/0x1c0 [ 526.567627] le_conn_complete_evt+0x1246/0x1e40 [ 526.567662] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 526.567697] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 526.567716] ? __asan_memcpy+0x3d/0x60 [ 526.567745] hci_le_meta_evt+0x34b/0x530 [ 526.567760] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 526.567780] hci_event_packet+0x66c/0x10e0 [ 526.567798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 526.567815] ? __pfx_hci_event_packet+0x10/0x10 [ 526.567837] ? mark_held_locks+0x49/0x80 [ 526.567857] ? kcov_remote_start+0x2ce/0x5a0 [ 526.567886] hci_rx_work+0x65b/0x8b0 [ 526.567906] process_one_work+0x8e1/0x1960 [ 526.567936] ? __pfx_process_one_work+0x10/0x10 [ 526.567956] ? move_linked_works+0x172/0x270 [ 526.567985] ? assign_work+0x196/0x240 [ 526.568006] worker_thread+0x67e/0xe90 [ 526.568027] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 526.568060] ? __pfx_worker_thread+0x10/0x10 [ 526.568081] kthread+0x3c8/0x740 [ 526.568099] ? __pfx_kthread+0x10/0x10 [ 526.568116] ? ret_from_fork+0x79/0x7a0 [ 526.568133] ? lock_release+0xc8/0x270 [ 526.568152] ? __pfx_kthread+0x10/0x10 [ 526.568171] ret_from_fork+0x67a/0x7a0 [ 526.568187] ? __pfx_ret_from_fork+0x10/0x10 [ 526.568205] ? __switch_to+0x759/0x1030 [ 526.568229] ? __pfx_kthread+0x10/0x10 [ 526.568248] ret_from_fork_asm+0x1a/0x30 [ 526.568281] [ 526.592739] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 526.594123] Bluetooth: hci1: failed to register connection device [ 526.594997] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 527.566925] Bluetooth: hci5: command 0x0406 tx timeout [ 528.206874] Bluetooth: hci4: command 0x0406 tx timeout [ 528.335907] Bluetooth: hci3: command 0x2016 tx timeout [ 528.336545] Bluetooth: hci2: command 0x2016 tx timeout [ 528.462896] Bluetooth: hci0: command 0x2016 tx timeout [ 529.614902] Bluetooth: hci5: command 0x0406 tx timeout [ 530.254919] Bluetooth: hci4: command 0x0406 tx timeout [ 530.383573] Bluetooth: hci2: command 0x2016 tx timeout [ 530.383884] Bluetooth: hci3: command 0x2016 tx timeout [ 530.510997] Bluetooth: hci0: command 0x2016 tx timeout [ 531.662977] Bluetooth: hci5: command 0x0406 tx timeout [ 532.302943] Bluetooth: hci4: command 0x0406 tx timeout [ 532.430923] Bluetooth: hci3: command 0x2016 tx timeout [ 532.432266] Bluetooth: hci2: command 0x2016 tx timeout [ 532.558984] Bluetooth: hci0: command 0x2016 tx timeout [ 533.710940] Bluetooth: hci5: command 0x0406 tx timeout [ 534.351905] Bluetooth: hci4: command 0x0406 tx timeout [ 534.478933] Bluetooth: hci3: command 0x2016 tx timeout [ 534.606879] Bluetooth: hci0: command 0x2016 tx timeout 18:27:48 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x20) pwrite64(r4, &(0x7f00000000c0)="10", 0x1, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x140) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r6, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r5, &(0x7f00000000c0)="d3", 0x1}]) creat(&(0x7f0000000140)='./file0\x00', 0x69) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6f) 18:27:48 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x4e, 0x14}, {0x5, 0x8001, 0x9, 0x4, [0xfff9, 0x8, 0xfff9, 0x7ff, 0x51b2, 0x80]}}}}, 0x21) 18:27:48 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x7, 0xc8, 0x6}}}, 0x6) 18:27:48 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:27:48 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) 18:27:48 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd1}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdb"}}, 0xd4) 18:27:48 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB='\n'], 0x22) 18:27:48 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="01041f0a08c9d4e5cb45442fb511051a6dedbf7c4b62095773850800000000000051e1a247645ebe3dcfab52a131d4b4d69cb059df593256dff4d45b80aa86486e85ca1e50577318484d1c4ab42f5052e24924e6d8eaf8c6f4577db4d0023c976885014fdaa0b69a7e8c2b06bfbeac7e53f7447c1c4a40a1204d7216121c9dd9"], 0x22) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x9) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x40, 0x8}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 534.946649] debugfs: '0' already exists in 'hci1' [ 534.947327] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 534.947994] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 534.948010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.948019] Workqueue: hci1 hci_rx_work [ 534.948039] Call Trace: [ 534.948043] [ 534.948048] dump_stack_lvl+0xfa/0x120 [ 534.948066] sysfs_warn_dup+0x80/0xa0 [ 534.948083] sysfs_create_dir_ns+0x23b/0x2a0 [ 534.948098] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 534.948112] ? find_held_lock+0x2b/0x80 [ 534.948133] ? lock_release+0xc8/0x270 [ 534.948147] ? do_raw_spin_unlock+0x53/0x220 [ 534.948165] kobject_add_internal+0x24c/0x9a0 [ 534.948187] kobject_add+0x157/0x240 [ 534.948205] ? __pfx_kobject_add+0x10/0x10 [ 534.948223] ? lock_release+0xc8/0x270 [ 534.948237] ? do_raw_spin_unlock+0x53/0x220 [ 534.948254] ? kobject_put+0xaa/0x260 [ 534.948276] device_add+0x32d/0x1830 [ 534.948293] ? __pfx_device_add+0x10/0x10 [ 534.948308] ? hci_debugfs_create_conn+0x10f/0x240 [ 534.948325] ? mgmt_send_event_skb+0x2f3/0x460 [ 534.948339] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 534.948358] hci_conn_add_sysfs+0x117/0x1c0 [ 534.948375] le_conn_complete_evt+0x1246/0x1e40 [ 534.948401] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 534.948426] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 534.948440] ? __asan_memcpy+0x3d/0x60 [ 534.948462] hci_le_meta_evt+0x34b/0x530 [ 534.948472] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 534.948487] hci_event_packet+0x66c/0x10e0 [ 534.948500] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 534.948522] ? __pfx_hci_event_packet+0x10/0x10 [ 534.948535] ? mark_held_locks+0x49/0x80 [ 534.948549] ? kcov_remote_start+0x2ce/0x5a0 [ 534.948571] hci_rx_work+0x65b/0x8b0 [ 534.948586] process_one_work+0x8e1/0x1960 [ 534.948608] ? __pfx_process_one_work+0x10/0x10 [ 534.948623] ? move_linked_works+0x172/0x270 [ 534.948644] ? assign_work+0x196/0x240 [ 534.948660] worker_thread+0x67e/0xe90 [ 534.948675] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 534.948700] ? __pfx_worker_thread+0x10/0x10 [ 534.948715] kthread+0x3c8/0x740 [ 534.948729] ? __pfx_kthread+0x10/0x10 [ 534.948741] ? ret_from_fork+0x79/0x7a0 [ 534.948754] ? lock_release+0xc8/0x270 [ 534.948768] ? __pfx_kthread+0x10/0x10 [ 534.948782] ret_from_fork+0x67a/0x7a0 [ 534.948794] ? __pfx_ret_from_fork+0x10/0x10 [ 534.948808] ? __switch_to+0x759/0x1030 [ 534.948829] ? __pfx_kthread+0x10/0x10 [ 534.948842] ret_from_fork_asm+0x1a/0x30 [ 534.948868] [ 534.967568] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 534.969181] Bluetooth: hci1: failed to register connection device [ 534.972297] debugfs: '0' already exists in 'hci1' [ 534.972878] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 534.973567] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 534.973583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.973591] Workqueue: hci1 hci_rx_work [ 534.973605] Call Trace: [ 534.973609] [ 534.973614] dump_stack_lvl+0xfa/0x120 [ 534.973630] sysfs_warn_dup+0x80/0xa0 [ 534.973645] sysfs_create_dir_ns+0x23b/0x2a0 [ 534.973660] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 534.973674] ? find_held_lock+0x2b/0x80 [ 534.973694] ? lock_release+0xc8/0x270 [ 534.973708] ? do_raw_spin_unlock+0x53/0x220 [ 534.973726] kobject_add_internal+0x24c/0x9a0 [ 534.973747] kobject_add+0x157/0x240 [ 534.973766] ? __pfx_kobject_add+0x10/0x10 [ 534.973783] ? lock_release+0xc8/0x270 [ 534.973797] ? do_raw_spin_unlock+0x53/0x220 [ 534.973814] ? kobject_put+0xaa/0x260 [ 534.973841] device_add+0x32d/0x1830 [ 534.973857] ? __pfx_device_add+0x10/0x10 [ 534.973871] ? hci_debugfs_create_conn+0x10f/0x240 [ 534.973888] ? mgmt_send_event_skb+0x2f3/0x460 [ 534.973901] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 534.973920] hci_conn_add_sysfs+0x117/0x1c0 [ 534.973937] le_conn_complete_evt+0x1246/0x1e40 [ 534.973962] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 534.973988] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 534.974002] ? __asan_memcpy+0x3d/0x60 [ 534.974022] hci_le_meta_evt+0x34b/0x530 [ 534.974033] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 534.974048] hci_event_packet+0x66c/0x10e0 [ 534.974061] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 534.974073] ? __pfx_hci_event_packet+0x10/0x10 [ 534.974086] ? mark_held_locks+0x49/0x80 [ 534.974100] ? kcov_remote_start+0x2ce/0x5a0 [ 534.974121] hci_rx_work+0x65b/0x8b0 [ 534.974136] process_one_work+0x8e1/0x1960 [ 534.974157] ? __pfx_process_one_work+0x10/0x10 [ 534.974172] ? move_linked_works+0x172/0x270 [ 534.974193] ? assign_work+0x196/0x240 [ 534.974208] worker_thread+0x67e/0xe90 [ 534.974223] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 534.974247] ? __pfx_worker_thread+0x10/0x10 [ 534.974263] kthread+0x3c8/0x740 [ 534.974276] ? __pfx_kthread+0x10/0x10 [ 534.974288] ? ret_from_fork+0x79/0x7a0 [ 534.974300] ? lock_release+0xc8/0x270 [ 534.974314] ? __pfx_kthread+0x10/0x10 [ 534.974328] ret_from_fork+0x67a/0x7a0 [ 534.974340] ? __pfx_ret_from_fork+0x10/0x10 [ 534.974354] ? __switch_to+0x759/0x1030 [ 534.974371] ? __pfx_kthread+0x10/0x10 [ 534.974384] ret_from_fork_asm+0x1a/0x30 [ 534.974408] [ 534.992398] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 534.993423] Bluetooth: hci1: failed to register connection device 18:27:48 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xcf}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8cc"}}, 0xd2) [ 535.064572] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 535.076741] Bluetooth: hci2: ACL packet for unknown connection handle 200 18:27:48 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x1000, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @remote, 0x9}, 0x1c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESOCT], 0x22) 18:27:48 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) 18:27:48 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c900582c76113ec78962f46c9590354cc94ccd427a77bb773b439aad1ca392d39b7d79f7a89f364b269757f8b28a567f98eda905c158a0cc9df8de966c557b49703e11a4206e52df34518622dc31e760a9e5ec8ee1c28be65b091c24a648220c642a6e8bb4bc1b6339b366dcd0463ab7f24e1e678bf925ae1b81503de4378579c3f295f20c6550a9ac746b43ec82221f5edc38b6e62c6d4abe388efc5cf8ac6113a27b265782f6e7827a748f3d9823c64487be0df2ef439a9c"], 0x5c) 18:27:48 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x1, 0x809f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@none, "822ad5bd76758879b9a582f8d0f49026", 0x3}}}, 0x1a) 18:27:48 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:27:48 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="81000000"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 535.146252] debugfs: '0' already exists in 'hci5' [ 535.146966] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 535.147773] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 535.147789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.147798] Workqueue: hci5 hci_rx_work [ 535.147823] Call Trace: [ 535.147828] [ 535.147833] dump_stack_lvl+0xfa/0x120 [ 535.147850] sysfs_warn_dup+0x80/0xa0 [ 535.147867] sysfs_create_dir_ns+0x23b/0x2a0 [ 535.147882] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 535.147896] ? find_held_lock+0x2b/0x80 [ 535.147917] ? lock_release+0xc8/0x270 [ 535.147932] ? do_raw_spin_unlock+0x53/0x220 [ 535.147950] kobject_add_internal+0x24c/0x9a0 [ 535.147972] kobject_add+0x157/0x240 [ 535.147990] ? __pfx_kobject_add+0x10/0x10 [ 535.148008] ? lock_release+0xc8/0x270 [ 535.148022] ? do_raw_spin_unlock+0x53/0x220 [ 535.148038] ? kobject_put+0xaa/0x260 [ 535.148061] device_add+0x32d/0x1830 [ 535.148078] ? __pfx_device_add+0x10/0x10 [ 535.148093] ? hci_debugfs_create_conn+0x10f/0x240 [ 535.148111] ? mgmt_send_event_skb+0x2f3/0x460 [ 535.148124] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 535.148143] hci_conn_add_sysfs+0x117/0x1c0 [ 535.148161] le_conn_complete_evt+0x1246/0x1e40 [ 535.148187] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 535.148212] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 535.148229] hci_le_meta_evt+0x34b/0x530 [ 535.148240] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 535.148255] hci_event_packet+0x66c/0x10e0 [ 535.148268] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 535.148280] ? __pfx_hci_event_packet+0x10/0x10 [ 535.148292] ? mark_held_locks+0x49/0x80 [ 535.148307] ? kcov_remote_start+0x2ce/0x5a0 [ 535.148330] hci_rx_work+0x65b/0x8b0 [ 535.148344] process_one_work+0x8e1/0x1960 [ 535.148367] ? __pfx_process_one_work+0x10/0x10 [ 535.148382] ? move_linked_works+0x172/0x270 [ 535.148403] ? assign_work+0x196/0x240 [ 535.148419] worker_thread+0x67e/0xe90 [ 535.148434] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 535.148459] ? __pfx_worker_thread+0x10/0x10 [ 535.148475] kthread+0x3c8/0x740 [ 535.148488] ? __pfx_kthread+0x10/0x10 [ 535.148501] ? ret_from_fork+0x79/0x7a0 [ 535.148524] ? lock_release+0xc8/0x270 [ 535.148538] ? __pfx_kthread+0x10/0x10 [ 535.148552] ret_from_fork+0x67a/0x7a0 [ 535.148564] ? __pfx_ret_from_fork+0x10/0x10 [ 535.148578] ? __switch_to+0x759/0x1030 [ 535.148595] ? __pfx_kthread+0x10/0x10 [ 535.148609] ret_from_fork_asm+0x1a/0x30 [ 535.148634] [ 535.167265] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 535.169008] Bluetooth: hci5: failed to register connection device [ 535.257935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 535.259505] debugfs: '0' already exists in 'hci0' [ 535.260038] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 535.260713] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 535.260729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.260737] Workqueue: hci0 hci_rx_work [ 535.260757] Call Trace: [ 535.260761] [ 535.260767] dump_stack_lvl+0xfa/0x120 [ 535.260785] sysfs_warn_dup+0x80/0xa0 [ 535.260802] sysfs_create_dir_ns+0x23b/0x2a0 [ 535.260817] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 535.260835] ? find_held_lock+0x2b/0x80 [ 535.260856] ? lock_release+0xc8/0x270 [ 535.260870] ? do_raw_spin_unlock+0x53/0x220 [ 535.260889] kobject_add_internal+0x24c/0x9a0 [ 535.260910] kobject_add+0x157/0x240 [ 535.260929] ? __pfx_kobject_add+0x10/0x10 [ 535.260947] ? lock_release+0xc8/0x270 [ 535.260961] ? do_raw_spin_unlock+0x53/0x220 [ 535.260978] ? kobject_put+0xaa/0x260 [ 535.261000] device_add+0x32d/0x1830 [ 535.261017] ? __pfx_device_add+0x10/0x10 [ 535.261032] ? hci_debugfs_create_conn+0x10f/0x240 [ 535.261050] ? mgmt_send_event_skb+0x2f3/0x460 [ 535.261063] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 535.261082] hci_conn_add_sysfs+0x117/0x1c0 [ 535.261099] le_conn_complete_evt+0x1246/0x1e40 [ 535.261125] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 535.261151] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 535.261165] ? __asan_memcpy+0x3d/0x60 [ 535.261187] hci_le_meta_evt+0x34b/0x530 [ 535.261198] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 535.261213] hci_event_packet+0x66c/0x10e0 [ 535.261226] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 535.261238] ? __pfx_hci_event_packet+0x10/0x10 [ 535.261251] ? mark_held_locks+0x49/0x80 [ 535.261265] ? kcov_remote_start+0x2ce/0x5a0 [ 535.261288] hci_rx_work+0x65b/0x8b0 [ 535.261302] process_one_work+0x8e1/0x1960 [ 535.261325] ? __pfx_process_one_work+0x10/0x10 [ 535.261340] ? move_linked_works+0x172/0x270 [ 535.261361] ? assign_work+0x196/0x240 [ 535.261377] worker_thread+0x67e/0xe90 [ 535.261392] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 535.261417] ? __pfx_worker_thread+0x10/0x10 [ 535.261432] kthread+0x3c8/0x740 [ 535.261446] ? __pfx_kthread+0x10/0x10 [ 535.261458] ? ret_from_fork+0x79/0x7a0 [ 535.261471] ? lock_release+0xc8/0x270 [ 535.261485] ? __pfx_kthread+0x10/0x10 [ 535.261499] ret_from_fork+0x67a/0x7a0 [ 535.261511] ? __pfx_ret_from_fork+0x10/0x10 [ 535.261525] ? __switch_to+0x759/0x1030 [ 535.261542] ? __pfx_kthread+0x10/0x10 [ 535.261556] ret_from_fork_asm+0x1a/0x30 [ 535.261581] [ 535.280374] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 535.282090] Bluetooth: hci0: failed to register connection device [ 535.283069] debugfs: '0' already exists in 'hci1' [ 535.283609] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 535.284141] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 535.285809] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 535.285847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.285864] Workqueue: hci1 hci_rx_work [ 535.285889] Call Trace: [ 535.285898] [ 535.285907] dump_stack_lvl+0xfa/0x120 [ 535.285938] sysfs_warn_dup+0x80/0xa0 [ 535.285968] sysfs_create_dir_ns+0x23b/0x2a0 [ 535.285997] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 535.286025] ? find_held_lock+0x2b/0x80 [ 535.286064] ? lock_release+0xc8/0x270 [ 535.286092] ? do_raw_spin_unlock+0x53/0x220 [ 535.286127] kobject_add_internal+0x24c/0x9a0 [ 535.286169] kobject_add+0x157/0x240 [ 535.286206] ? __pfx_kobject_add+0x10/0x10 [ 535.286241] ? lock_release+0xc8/0x270 [ 535.286269] ? do_raw_spin_unlock+0x53/0x220 [ 535.286302] ? kobject_put+0xaa/0x260 [ 535.286347] device_add+0x32d/0x1830 [ 535.286379] ? __pfx_device_add+0x10/0x10 [ 535.286408] ? hci_debugfs_create_conn+0x10f/0x240 [ 535.286440] ? mgmt_send_event_skb+0x2f3/0x460 [ 535.286464] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 535.286503] hci_conn_add_sysfs+0x117/0x1c0 [ 535.286536] le_conn_complete_evt+0x1246/0x1e40 [ 535.286586] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 535.286637] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 535.286665] ? __asan_memcpy+0x3d/0x60 [ 535.286706] hci_le_meta_evt+0x34b/0x530 [ 535.286728] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 535.286757] hci_event_packet+0x66c/0x10e0 [ 535.286783] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 535.286807] ? __pfx_hci_event_packet+0x10/0x10 [ 535.286832] ? mark_held_locks+0x49/0x80 [ 535.286860] ? kcov_remote_start+0x2ce/0x5a0 [ 535.286902] hci_rx_work+0x65b/0x8b0 [ 535.286931] process_one_work+0x8e1/0x1960 [ 535.286974] ? __pfx_process_one_work+0x10/0x10 [ 535.287003] ? move_linked_works+0x172/0x270 [ 535.287045] ? assign_work+0x196/0x240 [ 535.287076] worker_thread+0x67e/0xe90 [ 535.287106] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 535.287154] ? __pfx_worker_thread+0x10/0x10 [ 535.287185] kthread+0x3c8/0x740 [ 535.287211] ? __pfx_kthread+0x10/0x10 [ 535.287235] ? ret_from_fork+0x79/0x7a0 [ 535.287263] ? __pfx_kthread+0x10/0x10 [ 535.287290] ret_from_fork+0x67a/0x7a0 [ 535.287315] ? __pfx_ret_from_fork+0x10/0x10 [ 535.287342] ? __switch_to+0x759/0x1030 [ 535.287375] ? __pfx_kthread+0x10/0x10 [ 535.287402] ret_from_fork_asm+0x1a/0x30 [ 535.287450] [ 535.322610] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 535.324776] Bluetooth: hci1: failed to register connection device [ 535.759183] Bluetooth: hci5: command 0x0406 tx timeout [ 536.527022] Bluetooth: hci3: command 0x2016 tx timeout [ 537.295041] Bluetooth: hci0: command 0x2016 tx timeout [ 537.806971] Bluetooth: hci5: command 0x0406 tx timeout [ 539.342895] Bluetooth: hci0: command 0x2016 tx timeout [ 539.854929] Bluetooth: hci5: command 0x0406 tx timeout [ 541.390916] Bluetooth: hci0: command 0x2016 tx timeout [ 541.902968] Bluetooth: hci5: command 0x0406 tx timeout [ 543.438927] Bluetooth: hci0: command 0x2016 tx timeout [ 543.950963] Bluetooth: hci5: command 0x0406 tx timeout 18:27:58 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00cc000000aaaaaaaab1a00ec000000000fff3ff"], 0x22) 18:27:58 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(0x0, 0x0) 18:27:58 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000002c0)="26f30fcda6fa38ef289bac890bfb4103727f7c6e18789ae076a542539450c3c1e37cd22b7734619de74772770b0e2a8910fe1319218247760602e70160cb10ee178c21528bb2ec5bd1aa89cd4b7938e997ea80fcc5c9f35a235999f5928c38ad3df1e49ed49550293dd77a6d28dc2e6b4dc5ae7dc3dcb2655668e7082a0314b8c673676e18be347382911c0282b92f1321537597f65728d561f1e799e2a781edbfac5a51f3e03fe10018b66c8e725774b5c669c960471ff3b2f7a16738c1af3dfc1bdba1dd62aee3ca8689ff0cebe900ba7ca3e196140c7d0cbc93059da4f586", 0xe0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xffffffffffffff9f) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:27:58 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES32], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04022b030005000000001000007975530400ffffffffffff0440ff49229b0800aaaaaaaaaa1104060c5a63060600"], 0x2e) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04450508ff00c8ffd8b1d494dbcdc30dfe2468b8d334e161666dcaecc685f336929c13aa97d52ff6ff29f30d353cf058f551231c5121443ab25776929a6969"], 0x8) 18:27:58 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:27:58 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) 18:27:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3f01007fd13472638b0a8b66099cffd926c135f80c1edf79a7b762e3bf9f702136e4071650a872513a3bb4c402ab10b302a3e5fe74a71b950a4f"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x1, 0x401}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:27:58 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="f384b00adb40f66d49d08d8619eedd4e58465efb25a85bec520eaf366fe3c87a782a5f416005acd98aa529551e30fc4a647fa87e63234c9e3a9a034f7f8ce7a021b5e9944459977a57e2ac2d2edcbf71582e432fdfbc90f41a00403ef96674022b9c3112c09df981d1e7bd7062a082959963"], 0x22) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="10", 0x1, 0x0) io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000001c0)="524753ef7e5007a1e966", 0xa, 0x2, 0x0, 0x4, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xef, r3, &(0x7f0000000280)="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", 0xfc, 0xcd4b, 0x0, 0x7}]) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) dup(0xffffffffffffffff) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x3) 18:27:58 executing program 6: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="00081f2273b86cc353544bf2a63ea540a0"], 0x22) [ 545.271138] debugfs: '0' already exists in 'hci1' [ 545.272478] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 545.274103] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 545.274140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.274157] Workqueue: hci1 hci_rx_work [ 545.274192] Call Trace: [ 545.274203] [ 545.274215] dump_stack_lvl+0xfa/0x120 [ 545.274252] sysfs_warn_dup+0x80/0xa0 [ 545.274287] sysfs_create_dir_ns+0x23b/0x2a0 [ 545.274320] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.274351] ? find_held_lock+0x2b/0x80 [ 545.274407] ? lock_release+0xc8/0x270 [ 545.274437] ? do_raw_spin_unlock+0x53/0x220 [ 545.274475] kobject_add_internal+0x24c/0x9a0 [ 545.274520] kobject_add+0x157/0x240 [ 545.274559] ? __pfx_kobject_add+0x10/0x10 [ 545.274596] ? lock_release+0xc8/0x270 [ 545.274626] ? do_raw_spin_unlock+0x53/0x220 [ 545.274662] ? kobject_put+0xaa/0x260 [ 545.274710] device_add+0x32d/0x1830 [ 545.274745] ? __pfx_device_add+0x10/0x10 [ 545.274778] ? hci_debugfs_create_conn+0x10f/0x240 [ 545.274812] ? mgmt_send_event_skb+0x2f3/0x460 [ 545.274853] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 545.274896] hci_conn_add_sysfs+0x117/0x1c0 [ 545.274932] le_conn_complete_evt+0x1246/0x1e40 [ 545.274988] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.275043] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 545.275075] ? __asan_memcpy+0x3d/0x60 [ 545.275120] hci_le_meta_evt+0x34b/0x530 [ 545.275145] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.275178] hci_event_packet+0x66c/0x10e0 [ 545.275208] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.275234] ? __pfx_hci_event_packet+0x10/0x10 [ 545.275263] ? mark_held_locks+0x49/0x80 [ 545.275294] ? kcov_remote_start+0x2ce/0x5a0 [ 545.275342] hci_rx_work+0x65b/0x8b0 [ 545.275374] process_one_work+0x8e1/0x1960 [ 545.275421] ? __pfx_process_one_work+0x10/0x10 [ 545.275461] ? move_linked_works+0x172/0x270 [ 545.275513] ? assign_work+0x196/0x240 [ 545.275547] worker_thread+0x67e/0xe90 [ 545.275581] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.275635] ? __pfx_worker_thread+0x10/0x10 [ 545.275670] kthread+0x3c8/0x740 [ 545.275699] ? __pfx_kthread+0x10/0x10 [ 545.275727] ? ret_from_fork+0x79/0x7a0 [ 545.275758] ? __pfx_kthread+0x10/0x10 [ 545.275788] ret_from_fork+0x67a/0x7a0 [ 545.275817] ? __pfx_ret_from_fork+0x10/0x10 [ 545.275850] ? __switch_to+0x759/0x1030 [ 545.275889] ? __pfx_kthread+0x10/0x10 [ 545.275920] ret_from_fork_asm+0x1a/0x30 [ 545.275975] [ 545.312503] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.316042] Bluetooth: hci1: failed to register connection device [ 545.317134] Bluetooth: hci5: unexpected subevent 0x01 length: 30 > 18 [ 545.318293] Bluetooth: hci5: Invalid handle: 0xd17f > 0x0eff [ 545.320108] debugfs: '204' already exists in 'hci7' [ 545.320738] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:204' [ 545.321668] CPU: 1 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 545.321687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.321691] debugfs: '0' already exists in 'hci1' [ 545.321697] Workqueue: hci7 hci_rx_work [ 545.321722] Call Trace: [ 545.321728] [ 545.321734] dump_stack_lvl+0xfa/0x120 [ 545.321756] sysfs_warn_dup+0x80/0xa0 [ 545.321777] sysfs_create_dir_ns+0x23b/0x2a0 [ 545.321797] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.321816] ? find_held_lock+0x2b/0x80 [ 545.321850] ? lock_release+0xc8/0x270 [ 545.321869] ? do_raw_spin_unlock+0x53/0x220 [ 545.321894] kobject_add_internal+0x24c/0x9a0 [ 545.321923] kobject_add+0x157/0x240 [ 545.321948] ? __pfx_kobject_add+0x10/0x10 [ 545.321972] ? lock_release+0xc8/0x270 [ 545.321991] ? do_raw_spin_unlock+0x53/0x220 [ 545.322014] ? kobject_put+0xaa/0x260 [ 545.322045] device_add+0x32d/0x1830 [ 545.322069] ? __pfx_device_add+0x10/0x10 [ 545.322090] ? hci_debugfs_create_conn+0x10f/0x240 [ 545.322114] ? mgmt_send_event_skb+0x2f3/0x460 [ 545.322132] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 545.322158] hci_conn_add_sysfs+0x117/0x1c0 [ 545.322183] le_conn_complete_evt+0x1246/0x1e40 [ 545.322220] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.322256] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 545.322275] ? __asan_memcpy+0x3d/0x60 [ 545.322306] hci_le_meta_evt+0x34b/0x530 [ 545.322322] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.322344] hci_event_packet+0x66c/0x10e0 [ 545.322361] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.322378] ? __pfx_hci_event_packet+0x10/0x10 [ 545.322396] ? mark_held_locks+0x49/0x80 [ 545.322416] ? kcov_remote_start+0x2ce/0x5a0 [ 545.322447] hci_rx_work+0x65b/0x8b0 [ 545.322468] process_one_work+0x8e1/0x1960 [ 545.322500] ? __pfx_process_one_work+0x10/0x10 [ 545.322520] ? move_linked_works+0x172/0x270 [ 545.322550] ? assign_work+0x196/0x240 [ 545.322570] worker_thread+0x67e/0xe90 [ 545.322591] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.322626] ? __pfx_worker_thread+0x10/0x10 [ 545.322648] kthread+0x3c8/0x740 [ 545.322667] ? __pfx_kthread+0x10/0x10 [ 545.322684] ? ret_from_fork+0x79/0x7a0 [ 545.322702] ? lock_release+0xc8/0x270 [ 545.322722] ? __pfx_kthread+0x10/0x10 [ 545.322740] ret_from_fork+0x67a/0x7a0 [ 545.322756] ? __pfx_ret_from_fork+0x10/0x10 [ 545.322777] ? __switch_to+0x759/0x1030 [ 545.322801] ? __pfx_kthread+0x10/0x10 [ 545.322820] ret_from_fork_asm+0x1a/0x30 [ 545.322856] [ 545.323002] kobject: kobject_add_internal failed for hci7:204 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.323431] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 545.324084] Bluetooth: hci7: failed to register connection device [ 545.324696] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 545.324726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.324741] Workqueue: hci1 hci_rx_work [ 545.324763] Call Trace: [ 545.324771] [ 545.324780] dump_stack_lvl+0xfa/0x120 [ 545.324807] sysfs_warn_dup+0x80/0xa0 [ 545.324842] sysfs_create_dir_ns+0x23b/0x2a0 [ 545.324870] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.324896] ? find_held_lock+0x2b/0x80 [ 545.324931] ? lock_release+0xc8/0x270 [ 545.324962] ? do_raw_spin_unlock+0x53/0x220 [ 545.324999] kobject_add_internal+0x24c/0x9a0 [ 545.325037] kobject_add+0x157/0x240 [ 545.325069] ? __pfx_kobject_add+0x10/0x10 [ 545.325099] ? lock_release+0xc8/0x270 [ 545.325125] ? do_raw_spin_unlock+0x53/0x220 [ 545.325155] ? kobject_put+0xaa/0x260 [ 545.325195] device_add+0x32d/0x1830 [ 545.325223] ? __pfx_device_add+0x10/0x10 [ 545.325250] ? hci_debugfs_create_conn+0x10f/0x240 [ 545.325278] ? mgmt_send_event_skb+0x2f3/0x460 [ 545.325302] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 545.325338] hci_conn_add_sysfs+0x117/0x1c0 [ 545.325368] le_conn_complete_evt+0x1246/0x1e40 [ 545.325414] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.325462] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 545.325488] ? __asan_memcpy+0x3d/0x60 [ 545.325526] hci_le_meta_evt+0x34b/0x530 [ 545.325546] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.325574] hci_event_packet+0x66c/0x10e0 [ 545.325597] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.325620] ? __pfx_hci_event_packet+0x10/0x10 [ 545.325644] ? mark_held_locks+0x49/0x80 [ 545.325670] ? kcov_remote_start+0x2ce/0x5a0 [ 545.325708] hci_rx_work+0x65b/0x8b0 [ 545.325735] process_one_work+0x8e1/0x1960 [ 545.325774] ? __pfx_process_one_work+0x10/0x10 [ 545.325801] ? move_linked_works+0x172/0x270 [ 545.325840] ? assign_work+0x196/0x240 [ 545.325868] worker_thread+0x67e/0xe90 [ 545.325896] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.325940] ? __pfx_worker_thread+0x10/0x10 [ 545.325971] kthread+0x3c8/0x740 18:27:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRES64=r0, @ANYRES32, @ANYRESHEX, @ANYBLOB="2258791ea0762b517d9286676cf51ef858890b7023fccd5ff87ae09bf0ebb63ec0465d7d5490ee6442f2ce070574244bcc803a59ef2e741015392069a921a2a57afed885c130f7d24e7acf5a6970ffedf45dd7cf52e83e8eb76050b5ae47b8800f949a6ed1092b961618b40c0c6d91f1c8748b535515e8e0177036821e451a9a6c34fb8581c7ff459f3f9b24ff74e65ce278816f58ccc43b9b6b31d4e56bb4b677e4b621a55b38f1ff84497f9c8811f862a111287b958323", @ANYRES16], 0x22) 18:27:58 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x10}, "0a55888d607f051d179d9e383eb5da39"}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x4, 0xc9, 0x6}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0xa, 0xc8, 0x6}}}, 0x7) 18:27:58 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x119) syz_emit_vhci(0x0, 0x0) [ 545.325995] ? __pfx_kthread+0x10/0x10 [ 545.326017] ? ret_from_fork+0x79/0x7a0 [ 545.326050] ? __pfx_kthread+0x10/0x10 [ 545.326079] ret_from_fork+0x67a/0x7a0 [ 545.326101] ? __pfx_ret_from_fork+0x10/0x10 [ 545.326126] ? __switch_to+0x759/0x1030 [ 545.326157] ? __pfx_kthread+0x10/0x10 [ 545.326183] ret_from_fork_asm+0x1a/0x30 [ 545.326229] [ 545.326295] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.400901] Bluetooth: hci1: failed to register connection device 18:27:58 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04030300"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{}, {0xff}}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="030100dd4eb4086a4a8a0cb9a7bf42291f970a65dbeaa97fe39870accfbcce89603eeaa19d83541c13d64abe68b0278cb060e4db50c78753cbd6d906a395c8838d5e1e67bf1e07d9aecaa6a0f1a1e902ceb21af54952965370d5a105771d8b753ed639c81bbf83926de795c76d0b02aa140c59475905508d6cb706ab1a8ce5d8c3b357745f350e93f82c38c4097d6c1909a161b48d8195515cb10be710e5b946a602b051d93d1d31cba3bb4be07b1b035f34eca7e1967cd57bd3c2733e5dd5d179a0cfa5db962d8cf8224050f4e7c29681ff394786e18fc9ea5edef0cd247e81af"], 0xe1) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:27:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3f01007fd13472638b0a8b66099cffd926c135f80c1edf79a7b762e3bf9f702136e4071650a872513a3bb4c402ab10b302a3e5fe74a71b950a4f"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x1, 0x401}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:27:58 executing program 3: syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:27:58 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x100}}}, 0xd) [ 545.477312] debugfs: '0' already exists in 'hci1' [ 545.478319] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 545.479870] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 545.479902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.479917] Workqueue: hci1 hci_rx_work [ 545.479942] Call Trace: [ 545.479950] [ 545.479959] dump_stack_lvl+0xfa/0x120 [ 545.479988] sysfs_warn_dup+0x80/0xa0 [ 545.480018] sysfs_create_dir_ns+0x23b/0x2a0 [ 545.480045] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.480071] ? find_held_lock+0x2b/0x80 [ 545.480108] ? lock_release+0xc8/0x270 [ 545.480134] ? do_raw_spin_unlock+0x53/0x220 [ 545.480167] kobject_add_internal+0x24c/0x9a0 [ 545.480209] kobject_add+0x157/0x240 [ 545.480248] ? __pfx_kobject_add+0x10/0x10 [ 545.480281] ? lock_release+0xc8/0x270 [ 545.480307] ? do_raw_spin_unlock+0x53/0x220 [ 545.480339] ? kobject_put+0xaa/0x260 [ 545.480380] device_add+0x32d/0x1830 [ 545.480410] ? __pfx_device_add+0x10/0x10 [ 545.480438] ? hci_debugfs_create_conn+0x10f/0x240 [ 545.480468] ? mgmt_send_event_skb+0x2f3/0x460 [ 545.480491] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 545.480545] hci_conn_add_sysfs+0x117/0x1c0 [ 545.480576] le_conn_complete_evt+0x1246/0x1e40 [ 545.480623] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.480681] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 545.480707] ? __asan_memcpy+0x3d/0x60 [ 545.480746] hci_le_meta_evt+0x34b/0x530 [ 545.480767] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.480795] hci_event_packet+0x66c/0x10e0 [ 545.480820] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.480849] ? __pfx_hci_event_packet+0x10/0x10 [ 545.480872] ? mark_held_locks+0x49/0x80 [ 545.480899] ? kcov_remote_start+0x2ce/0x5a0 [ 545.480943] hci_rx_work+0x65b/0x8b0 [ 545.480971] process_one_work+0x8e1/0x1960 [ 545.481011] ? __pfx_process_one_work+0x10/0x10 [ 545.481038] ? move_linked_works+0x172/0x270 [ 545.481080] ? assign_work+0x196/0x240 [ 545.481109] worker_thread+0x67e/0xe90 [ 545.481137] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.481186] ? __pfx_worker_thread+0x10/0x10 [ 545.481215] kthread+0x3c8/0x740 [ 545.481239] ? __pfx_kthread+0x10/0x10 [ 545.481262] ? ret_from_fork+0x79/0x7a0 [ 545.481288] ? __pfx_kthread+0x10/0x10 [ 545.481313] ret_from_fork+0x67a/0x7a0 [ 545.481336] ? __pfx_ret_from_fork+0x10/0x10 [ 545.481361] ? __switch_to+0x759/0x1030 [ 545.481395] ? __pfx_kthread+0x10/0x10 [ 545.481420] ret_from_fork_asm+0x1a/0x30 [ 545.481466] [ 545.514588] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.518312] Bluetooth: hci1: failed to register connection device [ 545.521114] debugfs: '0' already exists in 'hci1' [ 545.522078] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 545.523601] CPU: 0 UID: 0 PID: 4378 Comm: kworker/u11:10 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 545.523631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.523646] Workqueue: hci1 hci_rx_work [ 545.523668] Call Trace: [ 545.523676] [ 545.523684] dump_stack_lvl+0xfa/0x120 [ 545.523712] sysfs_warn_dup+0x80/0xa0 [ 545.523739] sysfs_create_dir_ns+0x23b/0x2a0 [ 545.523766] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.523792] ? find_held_lock+0x2b/0x80 [ 545.523835] ? lock_release+0xc8/0x270 [ 545.523861] ? do_raw_spin_unlock+0x53/0x220 [ 545.523895] kobject_add_internal+0x24c/0x9a0 [ 545.523933] kobject_add+0x157/0x240 [ 545.523977] ? __pfx_kobject_add+0x10/0x10 [ 545.524008] ? lock_release+0xc8/0x270 [ 545.524034] ? do_raw_spin_unlock+0x53/0x220 [ 545.524064] ? kobject_put+0xaa/0x260 [ 545.524104] device_add+0x32d/0x1830 [ 545.524132] ? __pfx_device_add+0x10/0x10 [ 545.524158] ? hci_debugfs_create_conn+0x10f/0x240 [ 545.524186] ? mgmt_send_event_skb+0x2f3/0x460 [ 545.524208] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 545.524243] hci_conn_add_sysfs+0x117/0x1c0 [ 545.524272] le_conn_complete_evt+0x1246/0x1e40 [ 545.524316] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.524362] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 545.524387] ? __asan_memcpy+0x3d/0x60 [ 545.524423] hci_le_meta_evt+0x34b/0x530 [ 545.524443] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.524471] hci_event_packet+0x66c/0x10e0 [ 545.524496] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.524530] ? __pfx_hci_event_packet+0x10/0x10 [ 545.524554] ? mark_held_locks+0x49/0x80 [ 545.524580] ? kcov_remote_start+0x2ce/0x5a0 [ 545.524617] hci_rx_work+0x65b/0x8b0 [ 545.524644] process_one_work+0x8e1/0x1960 [ 545.524681] ? __pfx_process_one_work+0x10/0x10 [ 545.524714] ? move_linked_works+0x172/0x270 [ 545.524757] ? assign_work+0x196/0x240 [ 545.524786] worker_thread+0x67e/0xe90 [ 545.524814] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.524859] ? __pfx_worker_thread+0x10/0x10 [ 545.524888] kthread+0x3c8/0x740 [ 545.524912] ? __pfx_kthread+0x10/0x10 [ 545.524934] ? ret_from_fork+0x79/0x7a0 [ 545.524959] ? __pfx_kthread+0x10/0x10 [ 545.524985] ret_from_fork+0x67a/0x7a0 [ 545.525007] ? __pfx_ret_from_fork+0x10/0x10 [ 545.525033] ? __switch_to+0x759/0x1030 [ 545.525064] ? __pfx_kthread+0x10/0x10 [ 545.525089] ret_from_fork_asm+0x1a/0x30 [ 545.525134] [ 545.558151] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.560154] Bluetooth: hci1: failed to register connection device [ 545.561921] Bluetooth: hci5: unexpected subevent 0x01 length: 30 > 18 [ 545.562913] Bluetooth: hci5: Invalid handle: 0xd17f > 0x0eff [ 545.570936] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 545.572056] debugfs: '0' already exists in 'hci7' [ 545.574061] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 545.575327] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 545.575356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.575371] Workqueue: hci7 hci_rx_work [ 545.575393] Call Trace: [ 545.575401] [ 545.575410] dump_stack_lvl+0xfa/0x120 [ 545.575439] sysfs_warn_dup+0x80/0xa0 [ 545.575466] sysfs_create_dir_ns+0x23b/0x2a0 [ 545.575494] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.575525] ? find_held_lock+0x2b/0x80 [ 545.575566] ? lock_release+0xc8/0x270 [ 545.575592] ? do_raw_spin_unlock+0x53/0x220 [ 545.575626] kobject_add_internal+0x24c/0x9a0 [ 545.575665] kobject_add+0x157/0x240 [ 545.575700] ? __pfx_kobject_add+0x10/0x10 [ 545.575733] ? lock_release+0xc8/0x270 [ 545.575760] ? do_raw_spin_unlock+0x53/0x220 [ 545.575794] ? kobject_put+0xaa/0x260 [ 545.575843] device_add+0x32d/0x1830 [ 545.575872] ? __pfx_device_add+0x10/0x10 [ 545.575900] ? hci_debugfs_create_conn+0x10f/0x240 [ 545.575929] ? mgmt_send_event_skb+0x2f3/0x460 [ 545.575952] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 545.575988] hci_conn_add_sysfs+0x117/0x1c0 [ 545.576019] le_conn_complete_evt+0x1246/0x1e40 [ 545.576065] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 545.576113] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 545.576139] ? __asan_memcpy+0x3d/0x60 [ 545.576178] hci_le_meta_evt+0x34b/0x530 [ 545.576198] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 545.576226] hci_event_packet+0x66c/0x10e0 [ 545.576250] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 545.576272] ? __pfx_hci_event_packet+0x10/0x10 [ 545.576296] ? mark_held_locks+0x49/0x80 [ 545.576325] ? kcov_remote_start+0x2ce/0x5a0 [ 545.576366] hci_rx_work+0x65b/0x8b0 [ 545.576392] process_one_work+0x8e1/0x1960 [ 545.576431] ? __pfx_process_one_work+0x10/0x10 [ 545.576458] ? move_linked_works+0x172/0x270 [ 545.576497] ? assign_work+0x196/0x240 [ 545.576539] worker_thread+0x67e/0xe90 [ 545.576569] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.576625] ? __pfx_worker_thread+0x10/0x10 [ 545.576660] kthread+0x3c8/0x740 [ 545.576683] ? __pfx_kthread+0x10/0x10 [ 545.576706] ? ret_from_fork+0x79/0x7a0 [ 545.576728] ? lock_release+0xc8/0x270 [ 545.576755] ? __pfx_kthread+0x10/0x10 [ 545.576783] ret_from_fork+0x67a/0x7a0 [ 545.576807] ? __pfx_ret_from_fork+0x10/0x10 [ 545.576833] ? __switch_to+0x759/0x1030 [ 545.576863] ? __pfx_kthread+0x10/0x10 [ 545.576889] ret_from_fork_asm+0x1a/0x30 [ 545.576934] [ 545.612457] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 545.615956] Bluetooth: hci7: failed to register connection device 18:27:58 executing program 6: syz_emit_vhci(0x0, 0x0) 18:27:58 executing program 5: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3f01007fd13472638b0a8b66099cffd926c135f80c1edf79a7b762e3bf9f702136e4071650a872513a3bb4c402ab10b302a3e5fe74a71b950a4f"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0x1, 0x401}}}, 0x8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:27:58 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x22) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "868d7b1f66b2fa82feb208e0ad2c4c18054895f5daf33b3234a8f1a9f6e2383672b8f6501bb69ec696b4f38e924cb6a3d583d372d073fdc58ff448c8701c492c67319f6fd73dd129279e75bd4fbd329da59144bf86d1c0db87c8beae38f4f61b9e4b4c2ef6cd462dc043832e246f48cf65050a0580ba0f0c4d56248103f5ebf6eb47f77cca789854d4d11d65b34ad0bc2ef26f5760d19a56ea48751a4e0a5c9f6a783f96e27752e353a7"}, 0xae) [ 545.624288] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 545.672815] Bluetooth: hci3: unexpected event 0x03 length: 31 > 11 [ 545.674456] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 545.676319] Bluetooth: hci3: unexpected event 0x03 length: 31 > 11 [ 545.677736] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 545.699361] Bluetooth: hci5: unexpected subevent 0x01 length: 30 > 18 [ 545.701728] Bluetooth: hci5: Invalid handle: 0xd17f > 0x0eff [ 545.702027] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 545.703137] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 545.998967] Bluetooth: hci5: command 0x0406 tx timeout [ 547.342954] Bluetooth: hci7: command 0x2016 tx timeout [ 548.047002] Bluetooth: hci5: command 0x0406 tx timeout [ 549.390930] Bluetooth: hci7: command 0x2016 tx timeout [ 551.438964] Bluetooth: hci7: command 0x2016 tx timeout [ 553.486922] Bluetooth: hci7: command 0x2016 tx timeout 18:28:08 executing program 6: syz_emit_vhci(0x0, 0x0) 18:28:08 executing program 7: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0c3e01e2e78596e880e3809720ddb8d3840147aa4515343479413ee50000c9558c82b6c2deb6c8e1881d0e0ad84b589bed359bbf446006d8897118b344e4d2457bf1809e537d93e94f86f46a9494024032ec"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:28:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="045c1f0af38a1372727a50d1825a9bbf96710100000000eaaaaa00000000fff3ff01001000000000"], 0x22) 18:28:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x22) 18:28:08 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e11b23626adeeb35db0514a0df06232ed2d09b6fb3e145405582a5a35d6000000000000000000"], 0x22) syz_emit_vhci(0x0, 0x0) 18:28:08 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:28:08 executing program 3: syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:28:08 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04030300"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{}, {0xff}}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="030100dd4eb4086a4a8a0cb9a7bf42291f970a65dbeaa97fe39870accfbcce89603eeaa19d83541c13d64abe68b0278cb060e4db50c78753cbd6d906a395c8838d5e1e67bf1e07d9aecaa6a0f1a1e902ceb21af54952965370d5a105771d8b753ed639c81bbf83926de795c76d0b02aa140c59475905508d6cb706ab1a8ce5d8c3b357745f350e93f82c38c4097d6c1909a161b48d8195515cb10be710e5b946a602b051d93d1d31cba3bb4be07b1b035f34eca7e1967cd57bd3c2733e5dd5d179a0cfa5db962d8cf8224050f4e7c29681ff394786e18fc9ea5edef0cd247e81af"], 0xe1) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 554.977767] Bluetooth: hci5: unexpected event 0x03 length: 31 > 11 [ 554.980423] Bluetooth: hci1: unexpected event for opcode 0x2636 [ 554.983915] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 554.984449] Bluetooth: hci1: unexpected event for opcode 0x2636 18:28:08 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0xb8, 0x0, &(0x7f0000000280)=[@release, @exit_looper, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101}, @fda={0x66646185, 0x1, 0x1, 0x11}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd, @fda={0x66646185, 0x9, 0x0, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/178, 0xb2, 0x0, 0x3d}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}, @enter_looper, @dead_binder_done], 0xb, 0x0, &(0x7f0000000340)="b9817c95cd4cce7a9ebc97"}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) [ 555.093488] debugfs: '0' already exists in 'hci1' [ 555.094534] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 555.095968] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 555.095998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.096014] Workqueue: hci1 hci_rx_work [ 555.096044] Call Trace: [ 555.096052] [ 555.096061] dump_stack_lvl+0xfa/0x120 [ 555.096092] sysfs_warn_dup+0x80/0xa0 [ 555.096122] sysfs_create_dir_ns+0x23b/0x2a0 [ 555.096150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 555.096176] ? find_held_lock+0x2b/0x80 [ 555.096214] ? lock_release+0xc8/0x270 [ 555.096241] ? do_raw_spin_unlock+0x53/0x220 [ 555.096274] kobject_add_internal+0x24c/0x9a0 [ 555.096315] kobject_add+0x157/0x240 [ 555.096349] ? __pfx_kobject_add+0x10/0x10 [ 555.096382] ? lock_release+0xc8/0x270 [ 555.096409] ? do_raw_spin_unlock+0x53/0x220 [ 555.096440] ? kobject_put+0xaa/0x260 [ 555.096482] device_add+0x32d/0x1830 [ 555.096512] ? __pfx_device_add+0x10/0x10 [ 555.096554] ? hci_debugfs_create_conn+0x10f/0x240 [ 555.096585] ? mgmt_send_event_skb+0x2f3/0x460 [ 555.096609] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 555.096645] hci_conn_add_sysfs+0x117/0x1c0 [ 555.096676] le_conn_complete_evt+0x1246/0x1e40 [ 555.096724] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 555.096772] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 555.096798] ? __asan_memcpy+0x3d/0x60 [ 555.096845] hci_le_meta_evt+0x34b/0x530 [ 555.096865] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 555.096893] hci_event_packet+0x66c/0x10e0 [ 555.096917] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 555.096939] ? __pfx_hci_event_packet+0x10/0x10 [ 555.096963] ? mark_held_locks+0x49/0x80 [ 555.096989] ? kcov_remote_start+0x2ce/0x5a0 [ 555.097029] hci_rx_work+0x65b/0x8b0 [ 555.097057] process_one_work+0x8e1/0x1960 [ 555.097097] ? __pfx_process_one_work+0x10/0x10 [ 555.097124] ? move_linked_works+0x172/0x270 [ 555.097164] ? assign_work+0x196/0x240 [ 555.097193] worker_thread+0x67e/0xe90 [ 555.097221] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 555.097266] ? __pfx_worker_thread+0x10/0x10 [ 555.097295] kthread+0x3c8/0x740 [ 555.097320] ? __pfx_kthread+0x10/0x10 [ 555.097342] ? ret_from_fork+0x79/0x7a0 [ 555.097365] ? lock_release+0xc8/0x270 [ 555.097391] ? __pfx_kthread+0x10/0x10 [ 555.097417] ret_from_fork+0x67a/0x7a0 [ 555.097439] ? __pfx_ret_from_fork+0x10/0x10 [ 555.097465] ? __switch_to+0x759/0x1030 [ 555.097497] ? __pfx_kthread+0x10/0x10 [ 555.097523] ret_from_fork_asm+0x1a/0x30 [ 555.097568] [ 555.132000] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 555.135089] Bluetooth: hci1: failed to register connection device [ 555.535153] Bluetooth: hci7: command 0x2016 tx timeout [ 557.582914] Bluetooth: hci7: command 0x2016 tx timeout [ 557.710920] Bluetooth: hci1: command 0x2016 tx timeout [ 559.631128] Bluetooth: hci7: command 0x2016 tx timeout [ 559.759857] Bluetooth: hci1: command 0x2016 tx timeout [ 561.678936] Bluetooth: hci7: command 0x2016 tx timeout [ 561.806934] Bluetooth: hci1: command 0x2016 tx timeout [ 563.854906] Bluetooth: hci1: command 0x2016 tx timeout 18:28:17 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40000, 0x40, 0x9}, 0x18) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4398c102}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) [ 564.164913] Bluetooth: hci5: ACL packet for unknown connection handle 2153 [ 564.170077] debugfs: '0' already exists in 'hci5' [ 564.170651] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 564.171400] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.171417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.171426] Workqueue: hci5 hci_rx_work [ 564.171448] Call Trace: [ 564.171453] [ 564.171458] dump_stack_lvl+0xfa/0x120 [ 564.171477] sysfs_warn_dup+0x80/0xa0 [ 564.171496] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.171510] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.171525] ? find_held_lock+0x2b/0x80 [ 564.171547] ? lock_release+0xc8/0x270 [ 564.171562] ? do_raw_spin_unlock+0x53/0x220 [ 564.171582] kobject_add_internal+0x24c/0x9a0 [ 564.171604] kobject_add+0x157/0x240 [ 564.171623] ? __pfx_kobject_add+0x10/0x10 [ 564.171642] ? lock_release+0xc8/0x270 [ 564.171656] ? do_raw_spin_unlock+0x53/0x220 [ 564.171673] ? kobject_put+0xaa/0x260 [ 564.171696] device_add+0x32d/0x1830 [ 564.171714] ? __pfx_device_add+0x10/0x10 [ 564.171730] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.171747] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.171761] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.171781] hci_conn_add_sysfs+0x117/0x1c0 [ 564.171799] le_conn_complete_evt+0x1246/0x1e40 [ 564.171831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.171857] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.171871] ? __asan_memcpy+0x3d/0x60 [ 564.171894] hci_le_meta_evt+0x34b/0x530 [ 564.171906] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.171921] hci_event_packet+0x66c/0x10e0 [ 564.171934] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.171946] ? __pfx_hci_event_packet+0x10/0x10 [ 564.171961] ? kcov_remote_start+0x2ce/0x5a0 [ 564.171979] ? kcov_remote_start+0x2d3/0x5a0 [ 564.171999] hci_rx_work+0x65b/0x8b0 [ 564.172014] process_one_work+0x8e1/0x1960 [ 564.172037] ? __pfx_process_one_work+0x10/0x10 [ 564.172052] ? move_linked_works+0x172/0x270 [ 564.172074] ? assign_work+0x196/0x240 [ 564.172090] worker_thread+0x67e/0xe90 [ 564.172105] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.172133] ? __pfx_worker_thread+0x10/0x10 [ 564.172148] kthread+0x3c8/0x740 [ 564.172162] ? __pfx_kthread+0x10/0x10 [ 564.172175] ? ret_from_fork+0x79/0x7a0 [ 564.172188] ? lock_release+0xc8/0x270 [ 564.172202] ? __pfx_kthread+0x10/0x10 [ 564.172216] ret_from_fork+0x67a/0x7a0 [ 564.172228] ? __pfx_ret_from_fork+0x10/0x10 [ 564.172242] ? __switch_to+0x759/0x1030 [ 564.172260] ? __pfx_kthread+0x10/0x10 [ 564.172275] ret_from_fork_asm+0x1a/0x30 [ 564.172301] [ 564.191098] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.192234] Bluetooth: hci5: failed to register connection device 18:28:17 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0x9f182005c5d87869, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x5, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x81, 0x2}, {0x2}}]}}, 0xf) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 18:28:17 executing program 3: syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:28:17 executing program 0: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000580)='veth0_to_batadv\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r1, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x374, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xfb, 0x2a, [@link_id={0x65, 0x12, {@random="e129ed404a82", @device_b, @broadcast}}, @measure_req={0x26, 0xd9, {0xa4, 0x2, 0x0, "8ba456f20e43e02258e0a9902127aa48e111a5a0632ab4b266ff512f397126993730303d21a3214473fcbac5f50d50605f2180ccbe9b29c1efae171cec5d7c04a8f3ed0296dba88d1786f1add2eafaf1d766a4e208530de8380f58b3f717f530d93c1153a6f63645beeb96d6bd6b5dcd1eb19c1627e30f27812456673869d2a736e98b503dab2dc9338c474ecb7d74304ff38bf70053c238d25550b6179e8f9efa83409458e4417d535238c43296a056139f0cd37f272ba75fc2596fd92c4c841af152cbdee6ff0a77cd949f6a838f24e5a6d9e4f615"}}, @mesh_chsw={0x76, 0x6, {0x4, 0xc6, 0x16, 0xe2}}]}, @NL80211_ATTR_IE={0x108, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x5c, 0x6}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0x40}}, @ssid={0x0, 0x1f, @random="188b4a4a09e2e5bc53b4fa847911c99d2416f4f6cd67059d4dcf49e6b9f0f9"}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x9}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x1}}, @perr={0x84, 0xc1, {0x7f, 0xb, [@ext={{}, @device_b, 0x20, @device_b}, @ext={{}, @broadcast, 0x3, @device_a, 0x1e}, @not_ext={{}, @device_b, 0x8, "", 0x34}, @not_ext={{}, @device_a, 0x1fa597e, "", 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0x3}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x33}, @ext={{}, @broadcast, 0xc5, @device_a, 0x32}, @ext={{}, @device_b, 0x0, @device_a, 0xd}, @ext={{}, @device_b, 0xc0b, @device_a, 0x16}, @ext={{}, @device_a, 0x9, @device_a, 0x14}, @ext={{}, @device_a, 0x9, @device_b, 0x2e}]}}]}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x86, "e09b418d5a0d", @short="0f4a6020c1ca5a1f"}}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @dsss={0x3, 0x1, 0x7c}, @supported_rates={0x1, 0x3, [{0xc}, {0x2, 0x1}, {0x9, 0x1}]}, @perr={0x84, 0x10f, {0x0, 0x11, [@not_ext={{}, @broadcast, 0x9, "", 0x1}, @not_ext={{}, @device_b, 0xbb7, "", 0x2f}, @ext={{}, @device_b, 0x3c, @broadcast, 0x2e}, @ext={{}, @broadcast, 0x0, @device_a, 0x15}, @ext={{}, @broadcast, 0x33d6, @device_b, 0x25}, @not_ext={{}, @device_a, 0xf3d, "", 0xa}, @ext={{}, @broadcast, 0x1939, @device_a, 0x8}, @not_ext={{}, @broadcast, 0x13, "", 0xb}, @not_ext={{}, @broadcast, 0x80000000, "", 0x3}, @ext={{}, @device_a, 0x10000, @broadcast, 0x23}, @ext={{}, @broadcast, 0x6, @broadcast, 0x3a}, @ext={{}, @device_b, 0xfa, @device_b, 0x30}, @not_ext={{}, @device_b, 0x64, "", 0x8}, @not_ext={{}, @device_a, 0x2, "", 0x2}, @not_ext={{}, @device_b, 0x1, "", 0x26}, @ext={{}, @device_a, 0x6, @device_b, 0x30}, @not_ext={{}, @device_b, 0x6, "", 0x20}]}}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x7, 0x0, {0x1ba, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x80e, 0x71dcd66d, 0xba}}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x48050}, 0x4000024) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="010000ff34a8cdf5f68bf83f7f76006d94bfec504d75354fb1b74e8c8baff296e656e38afabfcad96320334a9cc99052fef2be4fb9750257b4f74e49633b7820439ad3742414301d4dc7b0635dc91c79eab47d18817388d330bbf83dc7c64100fee8933484e50fb37e4f3cd3b4de4cb196b9bea4d416c8d6c58c36c01d877f237e94ec67bdc4867b010939cfd88384a20041"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) 18:28:17 executing program 6: syz_emit_vhci(0x0, 0x0) 18:28:17 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xb0}, "eb76ad006e53d7589384ee51509041d6d18c42747b97a2dceb5874d3665ec916ce935b87192b75dd013ca6780fe62492c4ded1a8b557de2e0c3e8c88f9c4aceff493a7865894695e0e2e518a1cce726f404ddaaeb30fcf36ab1a008c6ef233b1516f6c112a025bb4c4b9541327f58c85657aea3adb16e0c583dffce0d2a9bfb3c970e858fb8b2f88b60036cbd8a7d9224dd7303c859a1bbe105495c66daa49956609cabaa3881b47946acbfd11a5a259"}}, 0xb3) 18:28:17 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xf8, 0x2}, {0x4}}, @l2cap_info_rsp={{0xb, 0x0, 0x20}, {0x80, 0x81, "937b465bdc73e1550a71496a1619b391efa9d134238c1749a1af2c72"}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0x1c0}}]}}, 0x39) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x4, 0x2}, {0x7f}}}}, 0xf) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x116}, @l2cap_cid_signaling={{0x112}, [@l2cap_move_chan_req={{0xe, 0x9c, 0x3}, {0x6, 0x2}}, @l2cap_info_rsp={{0xb, 0xc1, 0xfb}, {0x8, 0x6, "570249dfd33878fc028a0e215bd4e00f99973928ca7c041c92ae771f77d017e3e3111366415bebba892b0fe92f6d6f93d05f60d008dd31b7b0551eb50373c052ae5fa5ecad931d1ffe3b54ae03b4cdfa24dacc2c3ac872a96cb89ec4e9e0ecf9bd079b09dfa1374ce43e37b846767fcb04730210072b3ee56fa822708320d140dc8f7c6e4d05c718ce9802b472008a654ef68864243bdbbabc2fd9ba39c36a70954fdbd47cd9fd47e5bcd57d43b334bab55176082c284223a9cb6ed97e9a79d226ca1767cea4ca4870e3d69e87e5d89e4ddb36cf381b38ae5e48285f68fe415660268880379cac117781124f29d58462f981584362a032"}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xfffc, 0x100, 0x80, 0x2380}}]}}, 0x11b) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x0, 0xc9, 0x80}}}, 0x6) 18:28:17 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES64], 0x22) [ 564.211685] Bluetooth: hci5: ACL packet for unknown connection handle 2153 [ 564.221639] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 564.230104] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 564.239063] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 564.274512] debugfs: '0' already exists in 'hci0' [ 564.275544] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 564.276261] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.276278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.276287] Workqueue: hci0 hci_rx_work [ 564.276308] Call Trace: [ 564.276313] [ 564.276319] dump_stack_lvl+0xfa/0x120 [ 564.276338] sysfs_warn_dup+0x80/0xa0 [ 564.276356] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.276371] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.276385] ? find_held_lock+0x2b/0x80 [ 564.276407] ? lock_release+0xc8/0x270 [ 564.276422] ? do_raw_spin_unlock+0x53/0x220 [ 564.276441] kobject_add_internal+0x24c/0x9a0 [ 564.276464] kobject_add+0x157/0x240 [ 564.276482] ? __pfx_kobject_add+0x10/0x10 [ 564.276500] ? lock_release+0xc8/0x270 [ 564.276515] ? do_raw_spin_unlock+0x53/0x220 [ 564.276539] ? kobject_put+0xaa/0x260 [ 564.276562] device_add+0x32d/0x1830 [ 564.276580] ? __pfx_device_add+0x10/0x10 [ 564.276596] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.276614] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.276627] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.276647] hci_conn_add_sysfs+0x117/0x1c0 [ 564.276665] le_conn_complete_evt+0x1246/0x1e40 [ 564.276692] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.276719] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.276734] ? __asan_memcpy+0x3d/0x60 [ 564.276758] hci_le_meta_evt+0x34b/0x530 [ 564.276771] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.276786] hci_event_packet+0x66c/0x10e0 [ 564.276801] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.276814] ? __pfx_hci_event_packet+0x10/0x10 [ 564.276831] ? mark_held_locks+0x49/0x80 [ 564.276847] ? kcov_remote_start+0x2ce/0x5a0 [ 564.276870] hci_rx_work+0x65b/0x8b0 [ 564.276886] process_one_work+0x8e1/0x1960 [ 564.276911] ? __pfx_process_one_work+0x10/0x10 [ 564.276927] ? move_linked_works+0x172/0x270 [ 564.276950] ? assign_work+0x196/0x240 [ 564.276967] worker_thread+0x67e/0xe90 [ 564.276984] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.277011] ? __pfx_worker_thread+0x10/0x10 [ 564.277029] kthread+0x3c8/0x740 [ 564.277043] ? __pfx_kthread+0x10/0x10 [ 564.277056] ? ret_from_fork+0x79/0x7a0 [ 564.277069] ? lock_release+0xc8/0x270 [ 564.277084] ? __pfx_kthread+0x10/0x10 [ 564.277098] ret_from_fork+0x67a/0x7a0 [ 564.277110] ? __pfx_ret_from_fork+0x10/0x10 [ 564.277124] ? __switch_to+0x759/0x1030 [ 564.277143] ? __pfx_kthread+0x10/0x10 [ 564.277156] ret_from_fork_asm+0x1a/0x30 [ 564.277183] [ 564.295717] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.296795] Bluetooth: hci0: failed to register connection device 18:28:17 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) 18:28:17 executing program 4: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000003dc0)={'syztnl0\x00', &(0x7f0000003d40)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x3f, 0x8, 0x39, @loopback, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x10, 0x3, 0x6}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003d00)='net/udplite\x00') setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006e00)={{{@in6=@private1, @in=@empty, 0x4e23, 0x1000, 0x401, 0x0, 0x2, 0xd8b17b9431f021e1, 0x0, 0x21, r0, 0xee01}, {0x4800000000000000, 0xdd, 0x0, 0x100000001, 0xfffffffffffff536, 0x6, 0x8, 0xaa8b}, {0xdbd, 0x5, 0x3, 0x1}, 0x101, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x3c}, 0xa, @in6=@loopback, 0x3501, 0x2, 0x3, 0x7, 0x3, 0x3, 0x3}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000080)="efdbf95efa6ff5614411a32dad37108bd2c00569c9fc4e4cf757021605e426bee2521ea38038f402a2da52de138f69bb1e4e7c1ea85315b4791eb294e7a08fd5bb66eb744c9d9a1c112696ccdb56c38edc8ec56c36e46e0d04ff4a6577d6d5445fcaa8b8d8e03b0874b071db5e44740bf20bb57221dce7797cb658978049556f0091fe292ba54ce657b7e92239b4e40585dd56f94045d810346d5b0d9ad8e909f5ad25d0f198bc6f73925d91", 0xac}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="0bd45557f6ad62de9599c8e9210407e8eaaf3fbfbe4f52b3b595ce72fe2285dd3e536a1ea565147c8413a614c7072f8a79af5602b2dafd595072c29c991f63de70f46e22edf2a55170e47fe1e981d291a5b6c66332888870efc2a497e5367e13e95bf68f19366e536dca57b4a7d42cacb45c5daa0aa2c34d20265fe2ef759d4d27b6d0b835eb5b919d963da00959789ccd1f26028b74517681c63fbd2424f8a0049f98e8", 0xa4}, {&(0x7f00000012c0)="9e656201939246651751d545300db102823003b3e689da96efcf468d6bc23d7074ad2bd506188b3d49370f6d2687aa87338145a3bd31e24f4621013414e4545dc11ec99c234aad199137feaff6abe9c11838187c2f66b14b780b5368eabe2cc32417432ffff73b42af793eeeabec640c73bedf083e7c471a9dc510e816c3aa3f564113c8b1aec873f859aef0f3485f9196c5a3f2ac6226f8fdaad880053aacd1cfd25d767294", 0xa6}, {&(0x7f0000000140)="0dc3cef794", 0x5}, {&(0x7f0000001380)="08e2c9bb5f44d37850055f74ce45bd2cf03db5c51d5276f1b3416d574ff72f91a7af9d4d927868f86ebb5f43b4c05c143abec5ca0e00ac95fca8a65b60bac784fdc1eab89d946ece21378d1119d7323a32a88d1168a319e411b6c0f46aaee0c97f63b39ee3bcb7e6f0eaa24fdc4cd7b7a46bce387afe744e99f4065a124801e384f2bcdd7e1fdd6b1f26506d691c27f549804ecac9411f", 0x97}, {&(0x7f0000001440)="8cccb2b665146068bf058d9cae61c3b25619621e0813bd7acbd33600c8fddd1a89f0979963bf6e2949580f1f699079739bdb85b2ddb175295199f1adf6aba83c330ee2ddc307e103e27189c6971517c42d54f708d9cd7e4a8da8490d359edec1f4c471f6fad1fd60d2e735c20b51d9621ac4a5f65c6931d0ccebc0672d", 0x7d}, {&(0x7f00000014c0)="c51ec421f972c1beb0b4e8a330b4451e5f12bd6374b3a54ec46455c103e2a8c4be121db21aac87fd5b5eea72de1c896acb934e050c38697ca3d43a6f251484e79abf9aa24721fdd63f7348e7b6023f0746d92bd9014d94d7185b730f686b434e94acf29f9af7de044dbeae174b9c056aac3c466ed99e79c192c536f7bcab8a4629dbe1bb92a9bb883e73eec2e223990b", 0x90}, {&(0x7f0000000180)="5955cb7662fc514bf2b3ff3709e264ca64a03917706054aeccf098446b854b2e070e11ea433062e34d69a0a0e79922860c", 0x31}], 0x9}}, {{&(0x7f0000001640)=@generic={0x16, "262c1fa358ce14c7bbd83eb82012e6fb7af35a948540f247abb2f1351a11142d5fc9237772858fc70e0629b1691a48390f4833db04f2cf10a688c803773a8589705e7d5c9b8a633512a7714efa3a5798fb268b4ebeadba28caf8beee82ec0afe70efc63077ebe058625f11229d141b323802190de87519e45c690557ce37"}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000016c0)="bed86a43ac5f95d15b6ba9fd3124abd4db08d627a291496d4eb4d5b5a3cf5bbe5aac4745abc60cf70df3d75f647a305aa5c5dde2185742b214f5c551499aa71607a6f3da5a00d0221222d52f2a00df0e02d9a3eada59beb0a11c45a4e6a9db52231a8a8c4ac598932feb9203a620ae81c1b889c6f054033fae022fdf45e3b0c49b3c669539a903cfc854ff499083b4c8cd041c816ae01ef747ccdd8db2ceb0f42292635a7b37434b54f4883b5e856ee98c08ebf82aa394b90662df439ad301f52986ad2f031f", 0xc6}, {&(0x7f00000017c0)="0b593d68fbfa251471b34e918909af4b1c7884e5404434c0ec9d6eaeec3ceeb9c0804cdce6a5b2d181504efa1c07566d8bcfe5e71ef86947cc1006de02218afeca8ff60f6685fff6721d88a2be1df9450e10f8c2967a6cd7bdb09be5b4aefc88fb3cd21102b9cd9d7736b1103e141203465c530339b4a07fb94ac57dd8f2e4fa35f29c91bce28ecd0ae5fb", 0x8b}, {&(0x7f0000001880)="a9245fb7ac478673ee766e1cf27e874b5e4b98fa4af1a457f29ebf1ff539870b076dcd6454966c57a53e6c", 0x2b}, {&(0x7f00000018c0)="cc36bed157bdb81eb8d272a7bfd671fcaddb5d2594cb6245e1cea67ccc3b2663ceab839880e44eed067c7de5bad7cee0c6654a5a65decc6bc169bc522ca8d3914c2aa09f6559f7291d4f42e942338a801b83c8056cdbd764951a9d7ee3867a0a6ac8c2cf5e0373fed99bd9ba00dee41a60dd7109cbd5adaba6091c245711185c0146b8c087d409f42f51d36e399b21ac67cb2402395019676ee4e19b80d6529a4a306cf37f66a8f3e821c82b8578d866de739d7e74063a4200c8e94588578e14704f36b017618e8c0653c288f5d22e22e6dd49b23195a538ee82a166374d925bb6048615ce5de8d1f35a4ff74d95be", 0xef}], 0x4, &(0x7f0000001a00)=[{0x1010, 0x10e, 0x8000, "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"}, {0x1010, 0xbb176cf95a8d7f3e, 0xce5, "653655e043a81bebfb83734eb705fff71d6caed1cbb9188ce7548308c2c8cb81a58e02ae8f17330ab1c7da55d15a9f4107ee722e6af13733d00425774a70cab1fd7d7367f27bd49a515dc5ec3ca623c5b1233e8be9f8d11dd5738fe74cacb493bd7d1172474a54aca5f75f2a8a0ed4b4160e78c3237fa55a5177c9ed018872f3019744ffffbac78c3cbd87fe2fd24a67db49550fa1fdacdb68db2aefa410124de2da118d6cd28c575487729d3bf6ecaf31b53b49f47035d174bd3f8db5d79866a412fbb52322538a16d429364ad7469784024e1462742cd214551a920342e4f37f4b47a37149e02ba742c2d1af4fa2c52f3f68e73c912fa32cbc91d0b98458c41009e324055fb4e604d619e1e03bd89df98a0440ff80aae5c0c6e73985d8823a6ed1f2181111bdd29312e1c7c825004fcf49bc3455ef902e525153ccc1d21ad3f5eb86f1bde7962df98001958882a2a1fd75baf62784ba142a07511cb6208d3f7645881cca1babf7f31dc6583681afed1e212a83b0570b730931b65ab5fe6a70a39f4fe9508f000d9e9b3872eb74ea5921d254ffcacd7b51436ddfbb1cf4bf838448631c5130e3c025fa9b943cfa80bd44d34217339a1ba83f12b8151918592a0b8a3c69897fcbfa18cccb627a85f00824477417884c384fcb35d3a03648a6bb243d3a41939ab3b72438b4d21c2cff8ccd7160f44876fb9a46e269b26b09d31d2bdb7f535aa460a60b7eae6c8bb38fee54c9a6da2164d23a6866001fae114cd8a82a19065453d8c8dcee056f0c49b116dadadda8e5209e3cee58a5b392c1b4530ebad7c3a7604119cedf9e348f629634a3055e82ea3320da154b4b9d2c1c4c08d85355fe9f436fb6989d550821b518aaab241754d5e3a7934c762589200103557c21cfb99ae361bd3be48788b5543f725e15ceb9da87c3d012c31282e2b625e7d7953a467b9e68cdae095a1c6240b971a7c3d34c14224db834b5e1e840f08e3d3a564689628846c09f9f3d4324eecc6f39834e60e92eda1c72e2bacdeaec79f2a0694674d150d9740c5333037280af8104794cdc3f3f751c934f2858e22f7ae267deffccc6d4cd4f21b880a5a857b905d3672574c48f76d5634a0b634324193401507fc9fd75eee90f919c4af6f5a8d1daf63f7b7b8126ed1ef78008b1f03c3061227d4ef1c64b467eb12955033487e49277a21354d7046ed65fb057b9e727a63e872a63e19f1a25b12f2d2cd804ba4692dd93557f4929307c7fd6dbe1a3ef867c9d3d286693b53aa62d3dedae2051d29e385525a92b12b40f8fb0495bcf28355ee4078ba170b4bd5013599a058558235d928b61cb35b392d50025103cef7f2fb62fdf9e67c01a40d6fa0d186af0ddad5f65d9f6e16efb50f255f9f3428e5e6f0f886d9eefe93c78b8aa54a541d4469ac5f56810414da11ce2ec0e50f7320334c967969d0c23009b162fe3645363ecbfb5a9f63366e17d0d62dace99bd0282c58f0fd1aef48f8a8ea12fad85e9342c3d7b7567071635c4ba1fe331d2929db1cd0e1538d2152e394b25d2c99d35b17d0aa2c216c6c5ed609228e864945fd752b2c011cbfcb7b57d0fec84cb3c0b49d67c70e4614bc7b4da838bb14edc3e24dc6271abe3e8a95712051f81eee32492baca615a46224905d0a4934be1d0af63745f8d76fbfd86ea45e093aec340acf104cc3abc66f2bfc14bca099cb085b7528d3076b3902aa43bec4b2f2b0847c6549a2a54ce84b5820f5466b7fb832e196d455ace2e1f74da422c36347addaf488201bc85dd424725b3b94f3cca2d375c66bc1d2fff3ce4afa91a50263c087190b0a3abf79db4abc059dc3451f8172354e1a12715fb3359bbada11cad9f1ef3888972bb49dd6fbaddceacfc705cfc97726227cca7c2e93857efaad10d52e7a453421fb6475bf178128b4acc9a4d2babccaf93e4e9a28edc9b933d824ba88d0cec18dc251ae5858f8c2d8ae15af8e80f60247dd8ccefae5ec1b69dea1427fb45d1e6f5b758b0265e6acf4430fca08aa0d361c31cecdfa838e9954b4e55bca1e505364706d72f8950d58a581b4044067c27d3974253641f4891dae7fcf936c888897199200d0a081074cd6b68cb0506eaeab6db17c892f7ea49384afa94f5e9324f6b3fe4922454c89fecf63cc6e5c4387e70b75fa18c69e4b8da700962956532bdb48a19b0bb60071a633bf0504b4d45600fe05adbd73c1c6cda99b22f5f108113328e008ceff114c8b6fe9472a7926081e6f88144b67c5fa31a4664a6c4023d6cb8fdecc110d32b85f90c8cbe1ca2dfd65776e81edef9fe9b122761fb7db27f0eb86e498edfd5f5bd18a19f5d19424a0f6ede6c35eb93791e16bb2c10077dd1438c62f94d34f7c4948671bcce46fa8de282b404cc91823c8ca31b6a03c63dbf52506c66de02a56e254a277436b95100bc57e80717a22b4105529a45a00b8011c5fe4f0827b5b0e7fc6c5d72ad481206ad66d40acbf1f3b16786d38beabae82b7da5803d710fb440ef19dcdd4675c59895c3cacc5a8e22dab3e4cd8aea8925702a833df11b087e29a503a579a6131b1c854ae401cd41e5054206af6b1b5992149afb3a35285f8cbe2cc04151adb28d2aef598c5d2fac63cb57f4ed320f5056dae283a27e5f86fea2135c69832fd4fc5ea429d62debfdf483d5a04a33c9c78d329079026d86d289b9587747795913a10760afe08444c23991a35f354e3e7b0ccad4812a274aa5a57148cb132c880d9fef346a5909bc376d4fb43e587e0fb5ea4dcf0139fb5fbe0995c8d670b5b82e720a6fe63555096dde400262cc721dc4c63d19987d02ec9d31b76f9034f53d881be03643d61cf7d513719e9a56719aa98de4eda31e2dbaf24f5d81acb7d02b755bbc8d41c16c1c1a479ed63b683299e75acacedcc9a1fbe4def7650b000dcff0064d44c1c691563b5010038d009fb06f9ca48e1e6af20cd5515ad3ae6f7a7121447dca761303c7204ad6f676bbd54697e5dc952e3d1f81837403b84e30b417d389d44b99e2440bc96ab67d8466cc199406b9122e4386e84b050ee610919b7e170dee4271d4dd45c3eff593f22976d86a95b439efb06c7436d70148a1f4a7f5d0db8eb1cd036eddc605488b8e2fb9f08a4b0ca831561b198f62f348c1cb169bb295c0a446ea57d958bda4a8f0376b326aad80c2de2fc334de639c59a301298c600fd5acf704b3ee801750ce2abc45fdba595e6d993d2450ef9aa8f80f5724b794367067a2a7ebbe3d2fdc019c16ba966934ad0df9a7a06fc2886ce8fdaf9febebe71722b7e4e1442725e44a0051a0194f01cc4b94caed4607224d7d60ffaee8c276490b622836e3ff86b9e1a63959355a4dc1234bb384127c603aefd353014b0b2f7b9f60fa98ada45e27e785d91a3e3c43b357888bfe4c8af210ba22fe0ddf34b18b03f73010c8ce504814967bacf5112ba7ea7da6fc3cd1811bb6d543d7296695840ec64ddf18d8022ef535d403f74babbe12544b63f5db6818a5f5125f8dede9ef357f5f41190e13389493f495dd28e5253aa6b471296312151bef69917fd4710e30a26374866d7006fb8ef140a5992ae357d61e4e5893f15f1be15645529daa8dc9c7a2fa5cbd3e4fe6508e66daa2e20671a09e07a9c7d2f7b37151cee90873a393424eb00d4d038bcfb470cc63b22800afa0bad17f75de94747ef58e283430371022b0c2c35a79c1e7d3d2995775a664ec298fe228335d0865987665ce9016da02e5b8d09f591a36755805ede9a6d6fd586802f67d8c9bc333e893a80a448988751e19e2399c9af59dbbc2ae7c7bd83fa96ee93ce5192923f68410ecce398ff61dfd806e1d87a8789171aa896e0e422bb24be6ce638ddbbb7d26eaebd68020f657f498562c6092e69c0cc12bf394a6fb1e7906478d1e1cfa48252e73acea1727970e84f9341959a607456641fc1588abfee10fd7ab5d6eb8a8ef36e6108128dcb05b45fc155ddc7dee4b9b47d09da953bf1fe2bc89beb18710b26629197062864c5cf7785f666c7ae7eadd843896893581c306828f70e95c2ed1defd2c7388d5f8b453a85196c6acbf31c3f34981929dd04e4701b15e0271d03ff88a2e8ee50e0693144e1f570f5fa47b520cce033d24d3aa85279228c6023425f7f0d8d1bdf9b53c4a471da370e5c48488acf70c11d51c3f0b5fe95ce918569d69aa70f2c4e4a2d2a5cd3b6cd20aca30dd45461bfbb341d08292ea7dc1984be573f5959d89e28bade49473c1b5c340564028281a33787ee3f2e4e01f704c089a19a15fa420aaf24e89ce16de673190c4d12385d79201a53e0bc1cbb5350f7b4a1c8fa7919997724bc028afad8c64ee7cf22d32bb3f3a30fcbf3ad87d76827301aa2834b98ddfd21e61fccb9df6451a04474452fe969c2d01cd21db727c886a517c5d58aaa5bad8e5378df0ff77e5ea1f1184965756dfab1702ab3c43f6e18e16761590f40f5c657348a3bfefade9c15ea5d32c109557aea49abe16f24fc2d0f6493b1541a7d166225b937595b396b7a5f25ba301d26d996f0dc9bcfc38e564b913b1e0284321f7cc01cfba621dd1eb2836c1201756b10d32b4cd00997538a24095acd65df6fe98f9a121ec05b437f051d25c9c6b9be14b8ea461200e85e9abd3fe4b6cb1a2a99697c52c817b140e07cb49961c38e4ca18dc8a6fe83f025eb5a1b19f5d14cdafff25ac2848732ec68125d48b9eeabc4ce3591a24b58a68098ad868c9ae52b2972fc852eb9a6b63138f342c9ebddbb4ab58d966ef1ae8973f6a4978f42f69262dabb1fa013a351883ced1927872e156a39be8bce3ea5fb820d520062205bf34073bf014170919c1e52d295e47b33947ce7b4730d2627077be9c2888be448f97e2b3a51dfa25836d36adae7a82d29e7729946da4eb045ef1e16796a21fce2bd6ca21ec175e6082a9f71628ac5c3373c5146f3fceb32dbdd4ed10e4b3654f06265d442280d42510f819b3f54d63b01381c9a81d213349b308e95ce741aa2e5965501e95d5c10491f4496e3480f6577e87bee8a1f7af886a936bac7175ba88e11c869cbea9c6dcbb49cc8e93e7f8bb59c70f8081b897a60a0b79abf41b692928cc48fac7ed8de56a4ea95fcb0090e3e2ca307b22ad330b0bb76caea9d58c43dd85a7fae2a77ccd811a27043b6dfdccc26bcb6bb673c5b66f4493ceeb613a090c78c9ef5b106b9176c4a69cc74e39de45f96403fa2bec957f9b34e6d852930040181aecdd43fc6f59b592c3e46ddabdda2bc4e380c7f96ca10bd7882a0bd32d7758500eccfb95eb7c44dc01791a3976240b82e1249854a25764370e8d3e3c5042cf2b88b8e28da3dba6964cb6b8df75e55dd402dfe097c674d2c90ffd3062a557e4e8eb04b196c8fc49c08e4e42e5ab00c6fec02b5e92be3d76580381e5601e9b9f7e8bea70b212a53c7f94e23296d2df922ab8508ba95f51f3ec0d2440bd56b157600922a2a59c5b41fbca7e51b7d4c40a17d79e290d9b6b54f97d5e166d41858b60c8404e2eae201abf38f73ff2c527a79e83855190bcd0e0cfc8b6dbcb119a726af117dfbb38e536c6b9a2760025c6595b22097fc6f6fa7f4e7e0491fd8c90dd292d56e6c557f9932b6913770f6eb5ec70f352cc5ee406991fdb3bd89d44e308d776dd81022e8525d9a91aa27eb5831bf338caafe5f5a39c19fc089b20f8ab2b4673f53ca26d633c92606dd4f17698114b72b98a44fd1a9942bed475fd6e0cc7117a1fda061a33ab80778a8003011c81795690efb6f5baddb056316d101082cae7ebd78abf"}, {0xf8, 0x10f, 0x2, "af0fbe599d9e6fe6934d644748829cf83cd74c3925b0b9586ba7e15a88f1d0d77b007e2a55eb58a5459ee30c287f11391529adac602e9e90b5c22dfd556debc8437402bfefd699428bc631aeb1c8d3e1ae445c2c4b2e4b069c6e63afaf9624d9a9f2eba9af85c6445fe2bbd40b9f29f10e53230f96653144a3df1a7e9474e056c0584bda89f1d10f6641d43f9fbaedf35ce6529bcf9ae0fe2d9d5b4838a45fafae738ee9a338727318f3c50a55ac8a2e4d0a4f4936405bb94938e14b417965f20f2f419ee2d1210897236bb200d5318eb3fd28b6b5f99db3ac5c262caf32d79ad1ab9141"}, {0xc0, 0x110, 0x9, "7b5a6c8f455126db323996df2a716ae4351b04ac0c832b2c167a9f431bbeed2f5ba30f38c7a0e64079157cdf041d26bd67f9cc3eb72dd1eb258c217ba512bd2d49b5c067042fc01ee7a265d3ec26f2d480d738d5550c3f1e6b15e8b943135e73098b47cf5e7371017cd6c11fa9634483a7660c6795e7d6ab7f3ef2aa93a46c05487b39b2148d4f4be1074029610c8ce0643309e5f24d1d32d1853e213e30ecd6f96bb7899899093811ebcf9f38"}], 0x21d8}}, {{&(0x7f0000003c00)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xcba2, 0x2}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003c80)="7a72e3896f13cf0f2d3b", 0xa}], 0x1, &(0x7f0000003d00)}}, {{&(0x7f0000003e00)=@can={0x1d, r0}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003e80)="95c92f0a475d9133eb1fd00c99052515bf49ca2e17f8f4e5b6d8", 0x1a}, {&(0x7f0000003ec0)="055a3602574abf23addfcb5486a0a26969212b3258b89b0528fb11e1e80f232667f1e6e07be43d59a1ba989003ebe6d3051b953dddc37cb7dc6a79a8f026a52336898c9d1a795db692537bbbc286476c1f939ed79f3de0ba488870a27b9db2004deadc054690d9ee0cb7d27792062f32a503ce3823e8c405493af36b1f7c8bf4a6a1db336c8037ad7faa354172dfbb2246d2e62824cb9a67180f19354a32f6083fd69caf63e7045242208ff5982ed42ed1cfa428a3c45300312b4bb6", 0xbc}, {&(0x7f0000003f80)="c5bfa3f98b417ea19eee913692d5c70734df293ff7559f90a316851a47a2277777b2b2c5e1f27b6a1738a64c8297076f7f6863acf1309ada9c8976d8db122b04b71c63d39119b65a74681ecf18f06fa47d2d6f3e6c1e5bf7cba7d90ce2cf25e4bd28565086d568f063a60e3c8bf665ee27438eae4eda4822f48672a6be1c25668be6c248dff29e2b80e79d88614a56fa9249295e0c75524fb2c2d171e7d1ab3f8b7f7d07a763e70c3e2eba8aec783dbc5b64916d846b53f86ed6e36252b584b1", 0xc0}], 0x3, &(0x7f0000004080)=[{0xe8, 0x104, 0x9, "735fa6ec0133813f67756529fa9cdd06c6b000f95233a8e094dc54330121482a2119d12f1d713b7e44f5c870f76eacf9b666242865e519e2f9bd64df6dd607695ff3b75500c91e6b6ecbeeb56dfebe716edd8f45a728f6493a71dc16cb7abfe5fcd628ad5a742150fff222ba0d4d404cb86a8f067e3157c2d1a2e263afcdbca5a812df52041d770528685bb5699f3a4de743038c42bfd3cecd81d39a13cd729c36dc2595add8ba18f2c4eae2b58af2979e4fa1a3a15d23787de58f7f86ba5ec58f29be6bb1fb8292a921b52375cd5361279d12ff"}, {0xa0, 0x104, 0x6, "26f8887315a9adaaaf5f60feed343a409b72fc9c63244c4a72e968a9ac99286f73663d9c58b6dd6c50e6da301477430c4077fa1983dd768dd19bb9c42cf87c76589f8d0e1c208cf10b481d75969dbc71c4c4c8d31a1e19fa76810f1ee4d527c9e53e00e598ca2c341d3dcbbdc2ad1a604127e6ebe75df6dbfc8aeca6796d60a33f31502affd6178d511b15d5d8f5"}, {0x98, 0x108, 0x7ff, "38044565db9c43d87a8d9960d6225afb8625a2138ffb84768a68d79ef6fda9b884c9064946a0320f15ef78e3b582b7286e5e25e91f2e1514c4ad54d84772baad935ddb2389010d8a9f0dce09074d4f5313588118f65f9570f093e0dbcf848d9b4804961d4144e543d1cc1a3f6f2bec4a114f011ed59e70f51e6c313d00fe3185c7516193"}, {0x60, 0x118, 0x1000, "318b9e330bce2d908ba3273e78264b428405b0fc14cc6e8bcdf4abcc06d59a47ed0876eec9ee5e294bcd999c9d94986e2f2ab3c457465e3d01852f7eb0867fe2d4078cbab8891c9bc2b1a76f"}, {0xb8, 0x109, 0x8, "35b4878cd8e891781b640052cf74093daa06e15123520ac06ee5f76909d9166f0fd223ea22fcdabf75697a00743cd48796fa3e9fb6fe46f00553b8ea050fe99765e36941bdd86815691884727f74470511a1eda5341f0bacccf29a4a74f064df1312eaed5bae4c69c2ba9fb617e871c94ec6f42f134d3b5e0f21f5f5bc31e6b2043d83d0e6e5f94789b503a3b900bd7c92cc87d5585dff42fabacce5e915eb483b"}, {0x60, 0x101, 0x4, "b233161e360f69e1798e6504d5731632c10b24ed6a94bdb94a0fd93afab8f5643a2825c9682e9528dff3984d328bf17c6404087cf0e7e69d607746474df3f96c1d5fee04f3b85bd964"}, {0x40, 0x112, 0x1f, "f059381a6885dc2c1b2401afddda6287182fcd0a6a4f766213d4282c4a4cea61dd3714fe71b04315088c5b"}], 0x3d8}}, {{&(0x7f0000004480)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x80, &(0x7f0000005840)=[{&(0x7f0000004500)="f7514184875ed59b06bac597dfd769e233632dd0117a981f702bbe4bcf519fb4b465a055befddfdf17873662cbec7c4bad5cc7e1c7723f9bd514ea", 0x3b}, {&(0x7f0000004540)="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", 0x1000}, {&(0x7f0000005540)="66df5cf1b3c69f05f0f9b5a04033045cbfd6d7eb034e09a5756bd02df8d69407229fc9e30c84f92f9f81ff695cd419e8605141beb16463acb94b895fd822551a14206161b762694f6f35faaf9dc2bfbc25ccf1e9f1e77608c9ae03a626f96afba6a67c7d6c788492bf8a39076d9454db30bc8e0b360b319e0c90e26e4231377edbfba3d360e18052c912cd6fbf51189560e25582512afdd21047da8e69de0b92328cdaaf73df5684a2d877bef78cc81c9b320cd8a80feec5bd8a07860a3718ef64031b2b7015d6c0f9f82b5f5929fce3", 0xd0}, {&(0x7f0000005640)="f7578095e33914e6abf5f4cf63d6cc945fa4892e37a444c1635eb836a50efff426cfe3c73f809cf96eccd694fa22bca24c17c92ddc3affa22c491e06d4a9cc7123f2b01600cd68c6d3f17107457c01a0e3bd20f19b425fd12e96dc9fb169acdba83e67074eb86a26", 0x68}, {&(0x7f00000056c0)="057158c66eff78f6986a951ec8e003b58806447a05c0832db05df9b027f9cc17d8f41163a2353a6c4f5c543be03e80dbf9148cb2d44ef7e7e6ce28f26e5b77af1b7484e1d2770d6e21cc6e8a0ecc785e46fe376a07b7dde5ed46cb5f1506a92a767599c2f72fe084c0db6a2622816e0aee2429a4e320663a0444946419601770b8bbec27df53c6d8cc28737586b57bd1b53ce1800b917a105cca457bad4f90edf9f6cc5509fda90029ffd59f4896aa8cf3ce90aba78198179d817726d0dbb4abbba89c6606cf53f7e5c45f0d077b19ce3e0eb2d721707a5a3f8345be", 0xdc}, {&(0x7f00000057c0)="58b0c371e4bed0650ebfd3cc5a773159a8fdcfaa62209d3d99772521ae5979ec52a02e30519822ae91424242e6968fc2f4a95b696bb7f6721c5e1ec044e1fa068085efe5a06cb8872233a157ae50672dd07398cbe94fa5844412c5c82568d91415e31bb45595e0d3f0168650275ccb2f90977cc6c5a084db701adb18", 0x7c}], 0x6}}, {{&(0x7f00000058c0)=@sco, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005940)="1946345c7cc50eb2c868e79c428aabe817568c8a896dcc487ad90594caa6214f99ebcdc3cece6b87f46c4be8777a32155ef876d9b855e4c9e6b24f903885546b72fa6226dc13ea6da1a88259d922d85b27a7d23947af2eb274b51f265a6a5a1b61ef9c405aefe4c7687cc856dba93eafde42bda34e669412b232bda212cd039286511a387c711eebc5793cbeb6d9db1650fbf1f8e7b2056d25290cd49b3fc2c5266bd01c6ae312b83222f7ae2e2477670676d0c3df3c55636657eecb170cb7", 0xbf}, {&(0x7f0000005a00)="f8981e63712a180c542fbb57c45e699d22000a1e8141d93415f0996bcc0dc575df55259a53ffb5b4c74dc890fdd447da3ecef0762562a73502f04235c4187a74dbb0f9e1d8ed9c77d4bdd624594fedcaa42d0da3bfdbcaa15df8ffe4c0e65567b3e1c56aac4d2473ed91479ef519377fb9f5b63d29e23610e1cfca49f1408380c4e563c7215c272cb187fb3f3c315160402d85f1199497171e1c1bd051b8dfe8", 0xa0}, {&(0x7f0000005ac0)="69309cbc62da49ca3e8ac155653330a4744ffc372038b47ebafc0587ab6a3019d51c0fe3676e9f231e5f7ea3e21b60b429c1afd9be6f0814c0d7851679fbc6982f48affa19f79c7f43c15bddc3ed48423abec764edcb931535f4cb5eec3a30", 0x5f}], 0x3, &(0x7f0000005b80)=[{0x40, 0x13b, 0x0, "6d2970ef5b824fdbead604c053ba0809a63d9b01037e133f5156e3f79e60b2ac668a1d81b58706e857"}, {0xa8, 0x10f, 0x8, "9cf4dadbdf6d2166ba5e42dde071206bfcdc5d0becab3e3928e24f8a442a682c7c062e44c062088ea1e6dc7ec8094d05091d12085972ce8ca7956acecdb09e5cdddd4eae102ba188d01fc8ff567886bdbcf394a4e2fc7eb361a6c7b9690f6b720cab2cb2ab76c2f6a4efec8e24ac232802ff0ffb44698308af2fb1d05bfdfe842385fd9e02c132f8a625778ad2790508f7749f"}, {0x1010, 0x112, 0xbebe, "76c7e2bc651a3f5206da5e224a79044838270126432c44a73c54e4d20d1b8f899664f86aa1ef46786fa7cc02824338a0b0769cc467bf87869fef8f77255e2258a160f07504f7ab9f0015802f75775905e4163745624805111c16c7b822374dfcbd0bea6c40451ca87813c7ecd72e71b1ff6605f3ecc251211123a1467e9421761a5e9fe420c12ed394af5c50ba0abd5116592dfa752a555631e4b1c6a3481cf6804375b08e75bfcfdd5a8349428c4e55beb63c4a87ff5e5ef47917ec201db4ca60b26f6f835a77b34667ad0fd1c24d38775779d71e63533d43e405c5a36618df3f28f232554a53d2f921f153dbc2e4e8eaa75ac52f72baf4e662a9db33ba338ee98e332e7a767833197ca5fae8b02513aca7649f1f3f630a91919bb4877eaaa8bc882339467be1c26139596c7e784ca85eb373dcd2108e6a97cf256fe59ea3ecca71257582d6c89b467775a6f12025ba88ea10ea8efc932ae3c1705ef363c09b40a3dd9b332edc1a4710e126a45d671ee3757a1b10a7e7bfe2f445f0ecfb6dc961fe5489bcbc88649b384c0e70ef837cf86a398abb2482828d9db9038e560bc1d02a997f505821f4b6e4901851c1cad27d862ccc001fe01bc80991b821d52843309996aa6ceeb9bda1d259890d8b1990286b9f1baebc835a02d0acd877fd3f5367bb18dcdfac043a1ac1ad0f13a96f36f148826401e2f2e93cc7efa1f2379fc23799b88566b743d9bce6b82261f07726228e7130ad2ed71ffbd2e6b4665abdd03f5f52da6115e453f71fb548d7b081a9b7b8cd8cbd4f2b11733294576b029cd2a6fdb5350ecab6b4e121a19f74ed95188b61d47cd19a1ff3886277a28ea5629b816aa77605ce4f9a0441e4bad7f7abf9c342ca21c777d5196f2ce3ef4234e6fe83dcdf1b0b57205767aef7c833249b1d3ffdc2bc48434327542bb0726d924725dde8df3e8166c483970ecd2e7ae75cf0d7086ffcc8556a3d0a7e9cb34f9ebd87dd68f26c121dc8592e90f669e7938627a9368d826cbe10cbe04219d81e2f0234eec850c0dddc9017095f2166e2354f55ad95b58d063503361ecc88515730a0ef7966f811dac0b2cf43bf10312d408d5d7973e43f85c5153852d4d3d83f15bbd7d992fef48a24e11d86a8e1b776b3933528b836703db4532738fde459aeef8fc0d2a9ea23d71121243264866f1950eb877a00c3e4a8c8bf9d168bfcd559a77b7fa6bf8f4ef349ce38702d5c5f53b4b80f42e609c6b669d8e02c9ff56b39829f6881e77c109da93a3752c99861688edd45b1f7b8b12b9ac1b7268d1ddc66d711668f6472459311de899fc9d1a292924dcf10eed36d3a1590a844076cc0923b839c93b4a3a22ba46fb14eeca44110b7bda1fd58830314f9ddaa4e7480e365545de825febf493ef422ab032d5189c7a1acfa9e28520be55f5e1eb5c262afbdeef6207f461406e52729ba1aafe4d91222031e76a533f930badc7ad9d57832075583bef70f1d512e3f83b60aac5de06458a6e34278aeacb10d7ee4ee338159b5b506fbf04095151d42ee6de9e60df8031e268109540eeb06c9fa5eec210678a7b91222203286299beba27c83cfad5ec5d0ce9e0d17ef3c7cca69c90a56e1c3ba1085f76e94c06bdb9abcd0ffe2e8cd1cba2b57204f743960c8baad69e620036404618342662cc77ce24ea2d8c82c92c9fcef9dc763e144e0b20467ec166c6047f52dce3ab764d83b8aaf95e928c244b73e3446de5dd56b1a00bddedd31dbe776f7b5407ddd748f5a34514458453cb40801729ce5e7ba088c811c77d7b49fbe1b0fc789e37d66d472a9e2f62c82f0dd9719decd28ef43dc5b50653338b7623378d0a9e08669124516f8140a0bd03e60c68d7d2df484928a0f3e0a63f923847b10668c94ac92388b8941258744109a638e050bb390a6cd9b4b21790d3971376528a30e9fe80265e8acb8993d1efc5334b835178c9605720befb023f55056a7ec7480a7a8300c0c7a615ee8f072ec0d58764d45adb0a405fe1f2fc1f5cde43b96bdab7bfe010b724b4b81eded12ef563a544f8bdb84054bd4903c80652dd59d853a457b965c56b1d58eaeeb74944875bf15ff046fb5447d1a42146adc35df94fcc657a6b62d5a6e7314543810a776924375533d6737368ea0291beb77d17621a28c1a670201582c4e196b0bbb40a856315068dfd777b7eba1e9035127fd994383181bb57282cc926e81cb02b320ddf973eb3571a7390a6c273ff4a2627f8cb4a4b52375a22bb4cdd07e32ea0e904aad4c1dbc612bbcfe9e1debe85fdb49a6c0575185258bfaa5acb3c374db93bd1e4b49872bc184451bfc96a388337313972e5a8a3cf30f9bb356a04b72672da2ae370b451a64ea21dfb8bd88e043d623f346c30e7d4936ee46ba22400e9cabdbdadc3fb4e32c84520ff7781445dfd90f1967fef36672ac0d0a2fe6c033b80434db33635509e389ad4b932e9ff778f6ca760b2fd09af7730475af59b4fee56abe1dacb0b6f2afc706a294ce3bcf01a1f6c87af648d7d67fce64fd0b8277bec440fd09eb9e7cb72e66e39c0c011dd2f7d1ac099e277e37198edc90272b99983b50c0ddfbc14d6194d05837ac6f3eaae0e4fbc46f6aa076ef84ad99c65b9038fba7bb41bca528c05b8ae6bc5a529ba9c1c23008c95ce54645a823d311c7cede8c5e3a83577030534e7a3e82080328a8134a2052c31a310c47ed5860128fb7933e4351f7f5e80769e8932d3e66df55d66051272a4772d2af117c5a6a41ffad6787e6bd57d5c81a31d9ddbbe20543b91cd61c123f05e2c2831487b8f8a431ae83fed5624d20330bf308b180161f97e328095adbc7a8e4fcb11495b9c6f48c88e7ebe3d8ce827d1648a8180973ce8876f4b24ffab3695c31f0b0d379eddf5028bc14914d02ce46d3b25b8519398d4703dcec99de8344311a12138518b82bbbec926740476c1e9d2beeec5e0cf7d23b9675ce1be5bca45268048fef3ecb4c00a74f5156763f39c2a708ad25134dc2e247080a72c95ecdd60c2ac1b3b734d6c55e56ea6a186159323bbcbefc93c4bc1519f6dc25a1bd9b7226a2d51b0dac03d305dcc8f043933df98bd84552597f9f07321912caf7f5ac185ea9959d61febc98c96366abfe744704d4fd6c101b7856295f89b12da614a95aeda52b7f8a6fa57a1f4ddaf4675cc731a446c82f834f9b2c6421969504bdd75c261a8ebc08206192ff11cab792e70dc248e7d3f34e774ed4cf5f0bdf299bddffc64c36efd22cb4dd2521cf8d2c39684d88b643bfcaf202253002cb2ef94bf635b880c065b500f9c0000710c7cd41d84d14a4bf5f1846582234e25cdd4c763cb9959ff2620d66abd1210034ebc8967396012f0a31830d061c0249451ad16d87119927d612221fd03aa10b48077bb5fd498d3b90a550c435f49855289773b688d769554b9a8dbaf056ae55469d039c7fe9d4ba722d53b91c427de6c0c4b4b3fede6f7b5df3eb20db303f2dc1ce0cb49bd4d9ba347b5abb5158418b2696b3c7d02c4a19a58fe32d3f2408ece7ecb0fe85daad3c206a019272ce223298fa462b76f83eec34219096de53c0a265e88cf9a6dfc50faebcfa6e00b7685f62f2e1da5adf7259632d5e8f77fb3c5646c836fe63f730a02af2d1d8706efafc3ee2cd311c2ad09d3efcb86e23b0a92ed72e7c197e0228c032407cd597dce90a62ec8f7525d5ff293978250dd3e00a1fc535accef452013eb7fcd5dcef22c5d4502e9e32f2a587b203831f635e2fd816db931d9fb35bc3f4adef4bb067d3168da5268abfe6185ca1c0a95d7b7f2186ff966f039254b4c556b357915ff686cc7c702c59a7efe7ed64aab1f99fb9c491cf3c3704ee75a6e61da07040ad022338499f8a2dd98ba7ff9a6eebb03081afae2cf53ff80df90ce908163954a042591ae41188aa4c71ab7d83572d17056578abeb23dc8e832402d0843e8ea1309d106dd36d5dde391204895bac0fbbb707c91bcf0a616629df2eddde6a7fa5b4b9d685ee83eddde059519d5c1fb46177538fbbd4f0a63f9462c17199cdc14b549b87d23fc3dceb5475a51cb77d3a61de6797eeb4c1f5d39c376ebcd21d87f073e2a23f15feeed189cdba9f382d8a2989b9144494617c67067f7b5bcb71cd7521898e31a445d4de13d56cdc845a62ef447067da27557267630dfbbc1b01d9efb59eb304e3dce2e5404bea53b8b9c0be3d301787006739c2cc3ef017f8962ebf00bcbb0dd7e90ea58bff0ecdbc2fc39011e7a42e80511b3f2a2318e39040beafe6241905d6c369f681e4636234a2a3f444f6f0af6181152429364566efb1abe63347e35f6bafd88f8d61947e2e772aae7c60dd3d2fa17911790eebbfbdd606cb0d0f49554166be2936562947836e4dace5d8c1c36cdb34eb63ba078ebdc62147d44576c254cf37d1b68ca1ada6ba5e572aa75b29372850d591333bb4ca7477a96195d0f651a6a3cf2e7caac820ff7b17676f1ff985de35ed3481fe5bc92bff639af7b31083772fad84314f189ac8293c98d232bd09d2c1ee5d16fd2d0ec4d63887215a713d13e4e78d380c24f59426e6c295a9d3c91889b0d9934d290bb58e9dad60f6ebd72f066bb471c6a21a7cb5911d3094d2e96a06ad58e7c3037aab7b73f7e4fe31d4a7dcda26427fbaa3399d3a2f08aa189b45c6fb4b36aaba158c3403eacbc36d208ddbbc131123a910a1aa4ba0f7d9b29ba3b4c6053347b21e9eb8d8b19f9926ddb9ce539c210d862da887374dbcbe754a805fcb23433f315dbcc3edef3ef3a6d5f485815c0e378ae5ebde26ac4df061e5305ebbf6b95d25ec345b8ef53a152e97940689e796bc9661da302fb12bb19f01b30ccdae5c598932a0a42fd03ef40d7d73bc1647861e5a7a7e8c76b62ab3880129b6c41045a3e8e55b147dd820a47280e5bd15640232b5aa4926b59f1e0f0e3332e7811ffcf5de417d849ac865d5bfd2b8e9137e9432855795de1856c2a48b4d53960dea2fcd9214e8f2d61bab613817bd481a83c5c4485ddd9bbfe45ebf2587460f3fe721fe9bbb7c2852d9e20c8df57d2b0746358a6373d64a71330253c3d45950a8fb04281c3f3e60aa075c05b09ca9483fc6140104e2e22fc9bf55ce1a78f8f9f977b5049dc6ec576d5b66c19438b476e0b087a574d401b008e4e0ee5528ea19afb7a275273c91d2116e8fac5c11bec0eb1d8a378b9c16e3d8efd27844d011a68097d356796d67a63d3efa80f206c0dc4323d8a4dcf87f4c8908920161e9b15e20d04e14dc219cc561bb2cec075738fa6d51b1f349a343b33e253349db9bd0bb4f489fb6fc2921f2874a6f1561b4d70215fdcac415debd94ec0ae75e5b9e07a61e947ceffcb056f879100ad327027d011b3e3a48675a3e248ba84e696b0bd8aba63081f2d20c341523e13ed0fc396c2e9c78f345f42fe263ebe782b6d6a67e2e059a935e95180274f7d22aed2af2dac4041ac2a74298f5d07eda9b2eee1ba257a1278a177bb05d5626adbe87a3c154d31f3cf770a8d763268675067f5cdaffafc1165b41bb0009049bd3a74d0ee203a72dc0db4b85c9e7dc720947424800c584c51f653d562a54ef957888f855fe9f6443a2a4598321f49ef3f9fc70cb72658cff86630a0299bb6d3cc8fc38d6566e33bb2e08d9fac7ffc272aeac8dd238b5f4f126aed6df7efed2a8783a62e170a259a3e6043618d75950a3b3fb0f1714c1a4b0715753f7b582ed652afff5dbce5b1eeea4b3d76a7b3dccafa3c492d451b9411260e2222dc36ebcfcab4dc0e951c9ed0fa863369c1b33"}], 0x10f8}}], 0x6, 0x80) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) [ 564.331672] debugfs: '0' already exists in 'hci7' [ 564.332282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 564.333023] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.333041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.333050] Workqueue: hci7 hci_rx_work [ 564.333072] Call Trace: [ 564.333076] [ 564.333081] dump_stack_lvl+0xfa/0x120 [ 564.333100] sysfs_warn_dup+0x80/0xa0 [ 564.333118] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.333134] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.333148] ? find_held_lock+0x2b/0x80 [ 564.333169] ? lock_release+0xc8/0x270 [ 564.333184] ? do_raw_spin_unlock+0x53/0x220 [ 564.333203] kobject_add_internal+0x24c/0x9a0 [ 564.333225] kobject_add+0x157/0x240 [ 564.333244] ? __pfx_kobject_add+0x10/0x10 [ 564.333262] ? lock_release+0xc8/0x270 [ 564.333277] ? do_raw_spin_unlock+0x53/0x220 [ 564.333294] ? kobject_put+0xaa/0x260 [ 564.333317] device_add+0x32d/0x1830 [ 564.333335] ? __pfx_device_add+0x10/0x10 [ 564.333350] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.333368] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.333381] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.333401] hci_conn_add_sysfs+0x117/0x1c0 [ 564.333418] le_conn_complete_evt+0x1246/0x1e40 [ 564.333445] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.333471] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.333485] ? __asan_memcpy+0x3d/0x60 [ 564.333507] hci_le_meta_evt+0x34b/0x530 [ 564.333519] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.333534] hci_event_packet+0x66c/0x10e0 [ 564.333547] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.333559] ? __pfx_hci_event_packet+0x10/0x10 [ 564.333572] ? mark_held_locks+0x49/0x80 [ 564.333587] ? kcov_remote_start+0x2ce/0x5a0 [ 564.333610] hci_rx_work+0x65b/0x8b0 [ 564.333625] process_one_work+0x8e1/0x1960 [ 564.333648] ? __pfx_process_one_work+0x10/0x10 [ 564.333663] ? move_linked_works+0x172/0x270 [ 564.333685] ? assign_work+0x196/0x240 [ 564.333701] worker_thread+0x67e/0xe90 [ 564.333716] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.333742] ? __pfx_worker_thread+0x10/0x10 [ 564.333758] kthread+0x3c8/0x740 [ 564.333772] ? __pfx_kthread+0x10/0x10 [ 564.333784] ? ret_from_fork+0x79/0x7a0 [ 564.333798] ? lock_release+0xc8/0x270 [ 564.333812] ? __pfx_kthread+0x10/0x10 [ 564.333830] ret_from_fork+0x67a/0x7a0 [ 564.333843] ? __pfx_ret_from_fork+0x10/0x10 [ 564.333856] ? __switch_to+0x759/0x1030 [ 564.333874] ? __pfx_kthread+0x10/0x10 [ 564.333888] ret_from_fork_asm+0x1a/0x30 [ 564.333918] [ 564.353507] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.354564] Bluetooth: hci7: failed to register connection device 18:28:17 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042ae419000000000000000000"], 0x22) 18:28:17 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='b', 0x1}, {&(0x7f0000000140)="503b4c9fd74fece809062cda0ff1f6bdc6fdeda267eab78cbe5f144b8696a739c004121cc34e5bae0b9f3d299fdca3149445ed725118a517fed8a35823358a5bd8ebba42d8ce530df1ee6199b06c151d1adbafa09a646338bbb62bde522a267f211f492fae42e8e1a43f7f", 0x6b}, {&(0x7f00000001c0)="98b663bc42d0facc0e707ade61d5f72d2114ee7ba1115d4db40ca0b06e53dcc3c40419c6ca5f053bfef6418736e47d9482c6c3457863a19592cf1131e218e1685c9f9b4d59a25a59572487960b75aa3153379b276590206b640baf", 0x5b}, {&(0x7f0000000080)}, {&(0x7f0000000280)="e14f17bec476b137fbd691ffb1982bff06276211d0bf7eb024397015fcf3512637aad7f2fc5f1e37849aefda94a5aa458489c78edf37f79e23a356e3167389b390af8e4352bb454287552f6224bdfaa783b912b2ab30a50534fc7979a28fab3d1a4499de9578bb70daefec6ccba6078feaa2982b4daac550d66b29fd3d2d520cbb59612ee3db057ffd70db59a6cd4867ea053b8473414ce10080c5e75e3a4f38f98a81322eccbc0f087caf381703d60bc3f9a02882c72f0b64f8a60abf5be0d01c342d94df21938b7f33da35946999ccbd31a82800ba203d793105a825", 0xdd}, {&(0x7f0000000400)="d5cb8e17d5762023966e91f25a92453c0e5524ab630cdec243af484673ff38e8be4fa4a050662821bb42953a7088f48305f81c670934161277c7a7fb20e357ead0b4a4ed9be2b79aaaf9e251d7238d07d015da48cb9de88ea5e8b4e448a61376243ba52c90e0e3010e21fbfc25e4d80e2a363573d909864aff623faa0ab7321eeee9637e12bd3c3701f7d775c4e5ce7a0836b22b3a20a113aee2d6051bb51b2975573fac03b1a47d8a2d8585b518a0be5df7a5010632c8ee89049db66898c3052de8f3deeb5ef8d8a06095106df4e188f9fe9d9df57d286b1ba8", 0xda}], 0x6, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f00000014c0)=ANY=[@ANYBLOB="3e1f0e00", @ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="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", @ANYRES32], 0x22) syz_emit_vhci(0x0, 0x0) 18:28:17 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x25}, "e69a09a001e93f0b041c2fdbde00f09a872b06a550d9fcf02e9f85079a7c08d2a18e90fbae"}, 0x29) 18:28:17 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0000cb"], 0x3) 18:28:17 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x1, 0x14}, {0x0, 0x8000, 0x2, 0x1, [0x8001, 0x7, 0x13da, 0x3, 0x9, 0x7]}}}}, 0x21) [ 564.435594] debugfs: '0' already exists in 'hci0' [ 564.436259] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 564.436995] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.437012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.437022] Workqueue: hci0 hci_rx_work [ 564.437042] Call Trace: [ 564.437047] [ 564.437053] dump_stack_lvl+0xfa/0x120 [ 564.437072] sysfs_warn_dup+0x80/0xa0 [ 564.437090] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.437105] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.437119] ? find_held_lock+0x2b/0x80 [ 564.437145] ? lock_release+0xc8/0x270 [ 564.437160] ? do_raw_spin_unlock+0x53/0x220 [ 564.437178] kobject_add_internal+0x24c/0x9a0 [ 564.437201] kobject_add+0x157/0x240 [ 564.437219] ? __pfx_kobject_add+0x10/0x10 [ 564.437237] ? lock_release+0xc8/0x270 [ 564.437252] ? do_raw_spin_unlock+0x53/0x220 [ 564.437269] ? kobject_put+0xaa/0x260 [ 564.437292] device_add+0x32d/0x1830 [ 564.437309] ? __pfx_device_add+0x10/0x10 [ 564.437324] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.437341] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.437355] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.437375] hci_conn_add_sysfs+0x117/0x1c0 [ 564.437393] le_conn_complete_evt+0x1246/0x1e40 [ 564.437420] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.437445] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.437459] ? __asan_memcpy+0x3d/0x60 [ 564.437482] hci_le_meta_evt+0x34b/0x530 [ 564.437494] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.437509] hci_event_packet+0x66c/0x10e0 [ 564.437522] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.437534] ? __pfx_hci_event_packet+0x10/0x10 [ 564.437547] ? mark_held_locks+0x49/0x80 [ 564.437562] ? kcov_remote_start+0x2ce/0x5a0 [ 564.437585] hci_rx_work+0x65b/0x8b0 [ 564.437600] process_one_work+0x8e1/0x1960 [ 564.437623] ? __pfx_process_one_work+0x10/0x10 [ 564.437638] ? move_linked_works+0x172/0x270 [ 564.437661] ? assign_work+0x196/0x240 [ 564.437676] worker_thread+0x67e/0xe90 [ 564.437691] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.437717] ? __pfx_worker_thread+0x10/0x10 [ 564.437733] kthread+0x3c8/0x740 [ 564.437747] ? __pfx_kthread+0x10/0x10 [ 564.437759] ? ret_from_fork+0x79/0x7a0 [ 564.437774] ? lock_release+0xc8/0x270 [ 564.437788] ? __pfx_kthread+0x10/0x10 [ 564.437801] ret_from_fork+0x67a/0x7a0 [ 564.437814] ? __pfx_ret_from_fork+0x10/0x10 [ 564.437827] ? __switch_to+0x759/0x1030 [ 564.437846] ? __pfx_kthread+0x10/0x10 [ 564.437860] ret_from_fork_asm+0x1a/0x30 [ 564.437885] [ 564.456874] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.458572] Bluetooth: hci0: failed to register connection device [ 564.460963] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 564.462472] debugfs: '0' already exists in 'hci0' [ 564.463757] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 564.464461] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.464478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.464487] Workqueue: hci0 hci_rx_work [ 564.464504] Call Trace: [ 564.464513] [ 564.464518] dump_stack_lvl+0xfa/0x120 [ 564.464548] sysfs_warn_dup+0x80/0xa0 [ 564.464566] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.464581] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.464595] ? find_held_lock+0x2b/0x80 [ 564.464616] ? lock_release+0xc8/0x270 [ 564.464630] ? do_raw_spin_unlock+0x53/0x220 [ 564.464648] kobject_add_internal+0x24c/0x9a0 [ 564.464670] kobject_add+0x157/0x240 [ 564.464689] ? __pfx_kobject_add+0x10/0x10 [ 564.464706] ? lock_release+0xc8/0x270 [ 564.464720] ? do_raw_spin_unlock+0x53/0x220 [ 564.464737] ? kobject_put+0xaa/0x260 [ 564.464759] device_add+0x32d/0x1830 [ 564.464778] ? __pfx_device_add+0x10/0x10 [ 564.464792] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.464809] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.464823] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.464842] hci_conn_add_sysfs+0x117/0x1c0 [ 564.464860] le_conn_complete_evt+0x1246/0x1e40 [ 564.464886] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.464912] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.464926] ? __asan_memcpy+0x3d/0x60 [ 564.464948] hci_le_meta_evt+0x34b/0x530 [ 564.464960] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.464975] hci_event_packet+0x66c/0x10e0 [ 564.464988] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.465000] ? __pfx_hci_event_packet+0x10/0x10 [ 564.465013] ? mark_held_locks+0x49/0x80 [ 564.465027] ? kcov_remote_start+0x2ce/0x5a0 [ 564.465050] hci_rx_work+0x65b/0x8b0 [ 564.465064] process_one_work+0x8e1/0x1960 [ 564.465087] ? __pfx_process_one_work+0x10/0x10 [ 564.465102] ? move_linked_works+0x172/0x270 [ 564.465124] ? assign_work+0x196/0x240 [ 564.465139] worker_thread+0x67e/0xe90 [ 564.465155] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.465180] ? __pfx_worker_thread+0x10/0x10 [ 564.465196] kthread+0x3c8/0x740 [ 564.465210] ? __pfx_kthread+0x10/0x10 [ 564.465222] ? ret_from_fork+0x79/0x7a0 [ 564.465236] ? lock_release+0xc8/0x270 [ 564.465250] ? __pfx_kthread+0x10/0x10 [ 564.465263] ret_from_fork+0x67a/0x7a0 [ 564.465276] ? __pfx_ret_from_fork+0x10/0x10 [ 564.465289] ? __switch_to+0x759/0x1030 [ 564.465307] ? __pfx_kthread+0x10/0x10 [ 564.465321] ret_from_fork_asm+0x1a/0x30 [ 564.465346] [ 564.483743] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.484913] Bluetooth: hci0: failed to register connection device 18:28:17 executing program 4: r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="285bba0d1835af5f605fbe0eba3425575201db3136eb185d84b04506a08713ae18e09035ae262989c9ca0c24702cd58d9eb7b880a426e87c4faffb4f15743a93a8e01e570aee5c59bedfa96e6ffd79556a1d7b186d0cae872fc20f88eb9d8320573bf3080ba08a5636d6b806434d628b525efd2b37c665d92b8f8095a86c7ffdfd138149eb2dd5f19b197c8e7fcc6d72ea64c52118d5d3694e19829600d601d9186ca82fab5c98c8e8d8e808e597f96ac43464689cdfc5a92af9fd670d1b7844a3096515bec076b9b365c8e5f64f4a73477dd3575ac496cfbfa0981e70908c0eff617a63f08b2c9317cd06e43fd5f23002b74dc0e8", 0xf5, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) 18:28:17 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:28:17 executing program 6: pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="85d712ec795363750272528e0fe38353300a3394794a11f40f1d628903632b36a6d87c3a5543b5847d1da6a2421da57964a1bea64d7c2441b1a53036150bd2060515a624d4b8c9a42b5156a7a9983ced057a9accbd3aefeb8992754bbdb81798c8fe8e7d2ce2ead87212c085f8768861cf34dfdc4e71c655439e25e916b2bdbbcc50fe65358dd88713b0400fb083952a4bb557c0bd7bbebbabdd9afbed69d261ee39a889fdfe502bd8906e60dfd7d93b9c4604b1ffab71b48945f93a2eaa290c0f32df7530476b344773a50ddd400ddc8d9f620db7e7d5d2ba6558ec5383e498416b9bbfc082ef0d6f6f20a1e65da95f", 0xf0}, {&(0x7f0000000180)="111e069f0f8055f15fd97853dcb1b90052ede94168a7cfd5ade54f04e5e6b93a3ec152599289b32036695d07d70876200bb04af8626a2ba3f1dc61b92c92ae30edfd3a17e41b986151cceaf7eb03e4a54a1b7dde1b8dfdfcae549c29f456eb25ea5dcd7ce59337bdad3cb695900d45ad4b5d1d8737470ffe3970ec0d5374615058df47ea020d1395963b289d71011fa0ffcf4aed0b57c9c611f8b26e0cd2c73c43b81e6de943ef4c6ef18bbf5e224b09fda1bf788904bf338c4f35158237f5cb0b7d39ee063334e20f7e3e410ff83de98c289d5bb4a79da003f576b2f0151c895d833583ece39d39994889d96647074a1af045880f0b", 0xf6}, {&(0x7f0000000100)="377deff74b00dcd41dfdb4c11e8e5c000c9f8851a1f090fc0260ae086a0ce1b7f3cc07b335ed1e9c2b3abde75a48d72905daa5b504818dddbd318793b16d", 0x3e}, {&(0x7f0000000280)="ddc948caabfa8be623ca780e66c74acbe3bae7e6961dfa65b1b4e80605f53180d8b071ca014da57e28e90f7b1ba46bafa38caecc69d89e3dc1437f57e6c6cd91c00ac59b41d927966e119754a999019d9b22b42bf09ba59b95cc6820b3b5d7b3e0a20113bfc6ed7bf48c9eb187ffdb1ccab8732179ec11", 0x77}], 0x4, 0x18000000, 0x2, 0x10) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) 18:28:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000400)="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", 0xffffffffffffff1d, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043ed01fc3c0849edbb479b54fee1bb4d2db3855962785ac8c8824784b17e564dabdfc4e25d9577ce996f54e667f667c0152788afa4201771c5441e6d4a3ab00000073c71303d9a2d5"], 0x22) 18:28:17 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 564.575621] debugfs: '0' already exists in 'hci7' [ 564.576329] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 564.577071] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.577087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.577096] Workqueue: hci7 hci_rx_work [ 564.577116] Call Trace: [ 564.577121] [ 564.577126] dump_stack_lvl+0xfa/0x120 [ 564.577145] sysfs_warn_dup+0x80/0xa0 [ 564.577162] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.577177] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.577192] ? find_held_lock+0x2b/0x80 [ 564.577213] ? lock_release+0xc8/0x270 [ 564.577228] ? do_raw_spin_unlock+0x53/0x220 [ 564.577246] kobject_add_internal+0x24c/0x9a0 [ 564.577272] kobject_add+0x157/0x240 [ 564.577291] ? __pfx_kobject_add+0x10/0x10 [ 564.577309] ? lock_release+0xc8/0x270 [ 564.577323] ? do_raw_spin_unlock+0x53/0x220 [ 564.577340] ? kobject_put+0xaa/0x260 [ 564.577363] device_add+0x32d/0x1830 [ 564.577381] ? __pfx_device_add+0x10/0x10 [ 564.577396] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.577414] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.577428] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.577449] hci_conn_add_sysfs+0x117/0x1c0 [ 564.577467] le_conn_complete_evt+0x1246/0x1e40 [ 564.577494] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.577519] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.577533] ? __asan_memcpy+0x3d/0x60 [ 564.577556] hci_le_meta_evt+0x34b/0x530 [ 564.577568] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.577583] hci_event_packet+0x66c/0x10e0 [ 564.577596] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.577608] ? __pfx_hci_event_packet+0x10/0x10 [ 564.577621] ? mark_held_locks+0x49/0x80 [ 564.577636] ? kcov_remote_start+0x2ce/0x5a0 [ 564.577659] hci_rx_work+0x65b/0x8b0 [ 564.577674] process_one_work+0x8e1/0x1960 [ 564.577698] ? __pfx_process_one_work+0x10/0x10 [ 564.577713] ? move_linked_works+0x172/0x270 [ 564.577735] ? assign_work+0x196/0x240 [ 564.577751] worker_thread+0x67e/0xe90 [ 564.577766] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.577792] ? __pfx_worker_thread+0x10/0x10 [ 564.577808] kthread+0x3c8/0x740 [ 564.577822] ? __pfx_kthread+0x10/0x10 [ 564.577834] ? ret_from_fork+0x79/0x7a0 [ 564.577847] ? lock_release+0xc8/0x270 [ 564.577861] ? __pfx_kthread+0x10/0x10 [ 564.577875] ret_from_fork+0x67a/0x7a0 [ 564.577887] ? __pfx_ret_from_fork+0x10/0x10 [ 564.577901] ? __switch_to+0x759/0x1030 [ 564.577919] ? __pfx_kthread+0x10/0x10 [ 564.577933] ret_from_fork_asm+0x1a/0x30 [ 564.577959] [ 564.591559] debugfs: '0' already exists in 'hci5' [ 564.591807] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.592720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 564.593132] Bluetooth: hci7: failed to register connection device [ 564.593803] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.593840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.593855] Workqueue: hci5 hci_rx_work [ 564.593884] Call Trace: [ 564.593893] [ 564.593902] dump_stack_lvl+0xfa/0x120 [ 564.593932] sysfs_warn_dup+0x80/0xa0 [ 564.593962] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.593989] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.594016] ? find_held_lock+0x2b/0x80 [ 564.594054] ? lock_release+0xc8/0x270 [ 564.594081] ? do_raw_spin_unlock+0x53/0x220 [ 564.594115] kobject_add_internal+0x24c/0x9a0 [ 564.594156] kobject_add+0x157/0x240 [ 564.594194] ? __pfx_kobject_add+0x10/0x10 [ 564.594227] ? lock_release+0xc8/0x270 [ 564.594253] ? do_raw_spin_unlock+0x53/0x220 [ 564.594285] ? kobject_put+0xaa/0x260 [ 564.594327] device_add+0x32d/0x1830 [ 564.594358] ? __pfx_device_add+0x10/0x10 [ 564.594386] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.594417] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.594441] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.594478] hci_conn_add_sysfs+0x117/0x1c0 [ 564.594509] le_conn_complete_evt+0x1246/0x1e40 [ 564.594557] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.594606] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.594632] ? __asan_memcpy+0x3d/0x60 [ 564.594673] hci_le_meta_evt+0x34b/0x530 [ 564.594693] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.594722] hci_event_packet+0x66c/0x10e0 [ 564.594746] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.594768] ? __pfx_hci_event_packet+0x10/0x10 [ 564.594792] ? mark_held_locks+0x49/0x80 [ 564.594818] ? kcov_remote_start+0x2ce/0x5a0 [ 564.594859] hci_rx_work+0x65b/0x8b0 [ 564.594886] process_one_work+0x8e1/0x1960 [ 564.594927] ? __pfx_process_one_work+0x10/0x10 [ 564.594954] ? move_linked_works+0x172/0x270 [ 564.594995] ? assign_work+0x196/0x240 [ 564.595024] worker_thread+0x67e/0xe90 [ 564.595052] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.595098] ? __pfx_worker_thread+0x10/0x10 [ 564.595127] kthread+0x3c8/0x740 [ 564.595152] ? __pfx_kthread+0x10/0x10 [ 564.595177] ? ret_from_fork+0x79/0x7a0 [ 564.595201] ? lock_release+0xc8/0x270 [ 564.595227] ? __pfx_kthread+0x10/0x10 [ 564.595253] ret_from_fork+0x67a/0x7a0 [ 564.595275] ? __pfx_ret_from_fork+0x10/0x10 [ 564.595300] ? __switch_to+0x759/0x1030 [ 564.595333] ? __pfx_kthread+0x10/0x10 [ 564.595358] ret_from_fork_asm+0x1a/0x30 [ 564.595404] [ 564.595467] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.596160] debugfs: '0' already exists in 'hci7' [ 564.596473] Bluetooth: hci5: failed to register connection device [ 564.596767] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 564.608351] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 564.608525] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.608561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.608572] Workqueue: hci7 hci_rx_work [ 564.608593] Call Trace: [ 564.608598] [ 564.608604] dump_stack_lvl+0xfa/0x120 [ 564.608623] sysfs_warn_dup+0x80/0xa0 [ 564.608642] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.608658] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.608672] ? find_held_lock+0x2b/0x80 [ 564.608695] ? lock_release+0xc8/0x270 [ 564.608710] ? do_raw_spin_unlock+0x53/0x220 [ 564.608729] kobject_add_internal+0x24c/0x9a0 [ 564.608751] kobject_add+0x157/0x240 [ 564.608770] ? __pfx_kobject_add+0x10/0x10 [ 564.608789] ? lock_release+0xc8/0x270 [ 564.608803] ? do_raw_spin_unlock+0x53/0x220 [ 564.608826] ? kobject_put+0xaa/0x260 [ 564.608849] device_add+0x32d/0x1830 [ 564.608867] ? __pfx_device_add+0x10/0x10 [ 564.608882] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.608900] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.608914] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.608934] hci_conn_add_sysfs+0x117/0x1c0 [ 564.608952] le_conn_complete_evt+0x1246/0x1e40 [ 564.608979] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.609006] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.609019] ? __asan_memcpy+0x3d/0x60 [ 564.609043] hci_le_meta_evt+0x34b/0x530 [ 564.609054] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.609069] hci_event_packet+0x66c/0x10e0 [ 564.609083] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.609095] ? __pfx_hci_event_packet+0x10/0x10 [ 564.609108] ? mark_held_locks+0x49/0x80 [ 564.609123] ? kcov_remote_start+0x2ce/0x5a0 [ 564.609146] hci_rx_work+0x65b/0x8b0 [ 564.609161] process_one_work+0x8e1/0x1960 [ 564.609184] ? __pfx_process_one_work+0x10/0x10 [ 564.609199] ? move_linked_works+0x172/0x270 [ 564.609222] ? assign_work+0x196/0x240 [ 564.609238] worker_thread+0x67e/0xe90 [ 564.609253] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.609279] ? __pfx_worker_thread+0x10/0x10 [ 564.609295] kthread+0x3c8/0x740 [ 564.609309] ? __pfx_kthread+0x10/0x10 [ 564.609321] ? ret_from_fork+0x79/0x7a0 [ 564.609335] ? lock_release+0xc8/0x270 [ 564.609349] ? __pfx_kthread+0x10/0x10 [ 564.609363] ret_from_fork+0x67a/0x7a0 [ 564.609375] ? __pfx_ret_from_fork+0x10/0x10 [ 564.609389] ? __switch_to+0x759/0x1030 [ 564.609408] ? __pfx_kthread+0x10/0x10 [ 564.609422] ret_from_fork_asm+0x1a/0x30 [ 564.609448] [ 564.609490] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.610516] debugfs: '0' already exists in 'hci5' [ 564.610957] Bluetooth: hci7: failed to register connection device [ 564.614057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 564.617180] debugfs: '0' already exists in 'hci3' [ 564.617677] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.617708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.617723] Workqueue: hci5 hci_rx_work [ 564.617746] Call Trace: [ 564.617754] [ 564.617763] dump_stack_lvl+0xfa/0x120 [ 564.617791] sysfs_warn_dup+0x80/0xa0 [ 564.617818] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.617853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.617879] ? find_held_lock+0x2b/0x80 [ 564.617915] ? lock_release+0xc8/0x270 [ 564.617942] ? do_raw_spin_unlock+0x53/0x220 [ 564.617975] kobject_add_internal+0x24c/0x9a0 [ 564.618015] kobject_add+0x157/0x240 [ 564.618049] ? __pfx_kobject_add+0x10/0x10 [ 564.618082] ? lock_release+0xc8/0x270 [ 564.618110] ? do_raw_spin_unlock+0x53/0x220 [ 564.618142] ? kobject_put+0xaa/0x260 [ 564.618184] device_add+0x32d/0x1830 [ 564.618213] ? __pfx_device_add+0x10/0x10 [ 564.618241] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.618270] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.618293] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.618330] hci_conn_add_sysfs+0x117/0x1c0 [ 564.618360] le_conn_complete_evt+0x1246/0x1e40 [ 564.618407] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.618456] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.618482] ? __asan_memcpy+0x3d/0x60 [ 564.618520] hci_le_meta_evt+0x34b/0x530 [ 564.618541] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.618569] hci_event_packet+0x66c/0x10e0 [ 564.618593] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.618616] ? __pfx_hci_event_packet+0x10/0x10 [ 564.618639] ? mark_held_locks+0x49/0x80 [ 564.618666] ? kcov_remote_start+0x2ce/0x5a0 [ 564.618705] hci_rx_work+0x65b/0x8b0 [ 564.618733] process_one_work+0x8e1/0x1960 [ 564.618772] ? __pfx_process_one_work+0x10/0x10 [ 564.618799] ? move_linked_works+0x172/0x270 [ 564.618839] ? assign_work+0x196/0x240 [ 564.618868] worker_thread+0x67e/0xe90 [ 564.618896] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.618940] ? __pfx_worker_thread+0x10/0x10 [ 564.618969] kthread+0x3c8/0x740 [ 564.618993] ? __pfx_kthread+0x10/0x10 [ 564.619016] ? ret_from_fork+0x79/0x7a0 [ 564.619037] ? lock_release+0xc8/0x270 [ 564.619063] ? __pfx_kthread+0x10/0x10 [ 564.619089] ret_from_fork+0x67a/0x7a0 [ 564.619111] ? __pfx_ret_from_fork+0x10/0x10 [ 564.619137] ? __switch_to+0x759/0x1030 [ 564.619168] ? __pfx_kthread+0x10/0x10 [ 564.619193] ret_from_fork_asm+0x1a/0x30 [ 564.619238] [ 564.619307] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.619753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 564.620175] Bluetooth: hci5: failed to register connection device [ 564.620499] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.620516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.620526] Workqueue: hci3 hci_rx_work [ 564.620548] Call Trace: [ 564.620553] [ 564.620558] dump_stack_lvl+0xfa/0x120 [ 564.620574] sysfs_warn_dup+0x80/0xa0 [ 564.620591] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.620606] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.620621] ? find_held_lock+0x2b/0x80 [ 564.620642] ? lock_release+0xc8/0x270 [ 564.620656] ? do_raw_spin_unlock+0x53/0x220 [ 564.620675] kobject_add_internal+0x24c/0x9a0 [ 564.620697] kobject_add+0x157/0x240 [ 564.620716] ? __pfx_kobject_add+0x10/0x10 [ 564.620734] ? lock_release+0xc8/0x270 [ 564.620749] ? do_raw_spin_unlock+0x53/0x220 [ 564.620767] ? kobject_put+0xaa/0x260 [ 564.620790] device_add+0x32d/0x1830 [ 564.620808] ? __pfx_device_add+0x10/0x10 [ 564.620828] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.620845] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.620858] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.620878] hci_conn_add_sysfs+0x117/0x1c0 [ 564.620896] le_conn_complete_evt+0x1246/0x1e40 [ 564.620922] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.620948] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.620962] ? __asan_memcpy+0x3d/0x60 [ 564.620984] hci_le_meta_evt+0x34b/0x530 [ 564.620996] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.621011] hci_event_packet+0x66c/0x10e0 [ 564.621024] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.621036] ? __pfx_hci_event_packet+0x10/0x10 [ 564.621049] ? mark_held_locks+0x49/0x80 [ 564.621064] ? kcov_remote_start+0x2ce/0x5a0 [ 564.621086] hci_rx_work+0x65b/0x8b0 [ 564.621101] process_one_work+0x8e1/0x1960 [ 564.621122] ? __pfx_process_one_work+0x10/0x10 [ 564.621137] ? move_linked_works+0x172/0x270 [ 564.621160] ? assign_work+0x196/0x240 [ 564.621176] worker_thread+0x67e/0xe90 [ 564.621192] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.621220] ? __pfx_worker_thread+0x10/0x10 [ 564.621238] kthread+0x3c8/0x740 [ 564.621252] ? __pfx_kthread+0x10/0x10 [ 564.621264] ? ret_from_fork+0x79/0x7a0 [ 564.621277] ? lock_release+0xc8/0x270 [ 564.621291] ? __pfx_kthread+0x10/0x10 [ 564.621305] ret_from_fork+0x67a/0x7a0 [ 564.621317] ? __pfx_ret_from_fork+0x10/0x10 [ 564.621331] ? __switch_to+0x759/0x1030 [ 564.621349] ? __pfx_kthread+0x10/0x10 [ 564.621363] ret_from_fork_asm+0x1a/0x30 [ 564.621388] [ 564.621425] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.631378] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 564.631589] Bluetooth: hci3: failed to register connection device [ 564.732027] debugfs: '0' already exists in 'hci2' [ 564.734124] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 564.735377] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 564.735411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 564.735432] Workqueue: hci2 hci_rx_work [ 564.735466] Call Trace: [ 564.735478] [ 564.735489] dump_stack_lvl+0xfa/0x120 [ 564.735524] sysfs_warn_dup+0x80/0xa0 [ 564.735562] sysfs_create_dir_ns+0x23b/0x2a0 [ 564.735596] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.735627] ? find_held_lock+0x2b/0x80 [ 564.735677] ? lock_release+0xc8/0x270 [ 564.735709] ? do_raw_spin_unlock+0x53/0x220 [ 564.735752] kobject_add_internal+0x24c/0x9a0 [ 564.735808] kobject_add+0x157/0x240 [ 564.735858] ? __pfx_kobject_add+0x10/0x10 [ 564.735903] ? lock_release+0xc8/0x270 [ 564.735938] ? do_raw_spin_unlock+0x53/0x220 [ 564.735981] ? kobject_put+0xaa/0x260 [ 564.736043] device_add+0x32d/0x1830 [ 564.736085] ? __pfx_device_add+0x10/0x10 [ 564.736120] ? hci_debugfs_create_conn+0x10f/0x240 [ 564.736157] ? mgmt_send_event_skb+0x2f3/0x460 [ 564.736192] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 564.736237] hci_conn_add_sysfs+0x117/0x1c0 [ 564.736273] le_conn_complete_evt+0x1246/0x1e40 [ 564.736335] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.736399] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 564.736434] ? __asan_memcpy+0x3d/0x60 [ 564.736493] hci_le_meta_evt+0x34b/0x530 [ 564.736524] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 564.736591] hci_event_packet+0x66c/0x10e0 [ 564.736648] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.736693] ? __pfx_hci_event_packet+0x10/0x10 [ 564.736725] ? mark_held_locks+0x49/0x80 [ 564.736765] ? kcov_remote_start+0x2ce/0x5a0 [ 564.736823] hci_rx_work+0x65b/0x8b0 [ 564.736859] process_one_work+0x8e1/0x1960 [ 564.736919] ? __pfx_process_one_work+0x10/0x10 [ 564.736956] ? move_linked_works+0x172/0x270 [ 564.737010] ? assign_work+0x196/0x240 [ 564.737053] worker_thread+0x67e/0xe90 [ 564.737097] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 564.737165] ? __pfx_worker_thread+0x10/0x10 [ 564.737207] kthread+0x3c8/0x740 [ 564.737244] ? __pfx_kthread+0x10/0x10 [ 564.737279] ? ret_from_fork+0x79/0x7a0 [ 564.737314] ? lock_release+0xc8/0x270 [ 564.737356] ? __pfx_kthread+0x10/0x10 [ 564.737396] ret_from_fork+0x67a/0x7a0 [ 564.737431] ? __pfx_ret_from_fork+0x10/0x10 [ 564.737474] ? __switch_to+0x759/0x1030 [ 564.737520] ? __pfx_kthread+0x10/0x10 [ 564.737556] ret_from_fork_asm+0x1a/0x30 [ 564.737616] [ 564.772361] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.775595] Bluetooth: hci2: failed to register connection device [ 565.902930] Bluetooth: hci1: command 0x2016 tx timeout [ 566.222970] Bluetooth: hci5: command 0x0406 tx timeout [ 566.287151] Bluetooth: hci0: command 0x2016 tx timeout [ 566.350928] Bluetooth: hci7: command 0x2016 tx timeout [ 566.606921] Bluetooth: hci3: command 0x2016 tx timeout [ 566.734942] Bluetooth: hci2: command 0x2016 tx timeout [ 567.950980] Bluetooth: hci1: command 0x2016 tx timeout [ 568.271212] Bluetooth: hci5: command 0x0406 tx timeout [ 568.335134] Bluetooth: hci0: command 0x2016 tx timeout [ 568.399025] Bluetooth: hci7: command 0x2016 tx timeout [ 568.654933] Bluetooth: hci3: command 0x2016 tx timeout [ 568.783020] Bluetooth: hci2: command 0x2016 tx timeout [ 569.998920] Bluetooth: hci1: command 0x2016 tx timeout [ 570.319041] Bluetooth: hci5: command 0x0406 tx timeout [ 570.382931] Bluetooth: hci0: command 0x2016 tx timeout [ 570.446901] Bluetooth: hci7: command 0x2016 tx timeout [ 570.702887] Bluetooth: hci3: command 0x2016 tx timeout [ 570.830985] Bluetooth: hci2: command 0x2016 tx timeout [ 572.046933] Bluetooth: hci1: command 0x2016 tx timeout [ 572.366925] Bluetooth: hci5: command 0x0406 tx timeout [ 572.430897] Bluetooth: hci0: command 0x2016 tx timeout [ 572.494893] Bluetooth: hci7: command 0x2016 tx timeout 18:28:25 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:28:25 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7f, 0x4}, {0x800, 0x200}}}}, 0x11) 18:28:25 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x1, 0xc}, {0xfffc, 0x3, 0x0, 0x401, [0x9, 0x0]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 18:28:25 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfd, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) 18:28:25 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) 18:28:25 executing program 1: r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000002680)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000040)=""/220, 0xdc}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/69, 0x45}, {&(0x7f0000001340)=""/141, 0x8d}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002480)=""/101, 0x65}, {&(0x7f0000003b80)=""/86, 0x56}, {&(0x7f00000025c0)=""/136, 0x88}], 0xb, &(0x7f0000003e00), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1f0ade51de6f10cc52f8a156d61447c394c0048ae8e4ac9a61fe4b8ba62a4d24a3555ca5663e9da4e6758f0dd68ac0e3bc34a6bc3c01", @ANYRES16=r0], 0x22) 18:28:25 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="e800000099e049c3651e58f9305ce4fb0fd151fcf515bdc5175f02c7d6edfc78b52bfc9fcb98f4a62f1a4f3c25101d3da0204dd639f0b5fd"], 0x22) syz_emit_vhci(0x0, 0x0) 18:28:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0000000010000000000100000000000000"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 572.678240] debugfs: '0' already exists in 'hci2' [ 572.679222] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 572.680471] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.680500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.680515] Workqueue: hci2 hci_rx_work [ 572.680554] Call Trace: [ 572.680562] [ 572.680571] dump_stack_lvl+0xfa/0x120 [ 572.680601] sysfs_warn_dup+0x80/0xa0 [ 572.680630] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.680657] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.680684] ? find_held_lock+0x2b/0x80 [ 572.680721] ? lock_release+0xc8/0x270 [ 572.680748] ? do_raw_spin_unlock+0x53/0x220 [ 572.680781] kobject_add_internal+0x24c/0x9a0 [ 572.680827] kobject_add+0x157/0x240 [ 572.680863] ? __pfx_kobject_add+0x10/0x10 [ 572.680896] ? lock_release+0xc8/0x270 [ 572.680922] ? do_raw_spin_unlock+0x53/0x220 [ 572.680954] ? kobject_put+0xaa/0x260 [ 572.680997] device_add+0x32d/0x1830 [ 572.681027] ? __pfx_device_add+0x10/0x10 [ 572.681055] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.681085] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.681108] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.681145] hci_conn_add_sysfs+0x117/0x1c0 [ 572.681175] le_conn_complete_evt+0x1246/0x1e40 [ 572.681223] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.681272] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.681297] ? __asan_memcpy+0x3d/0x60 [ 572.681336] hci_le_meta_evt+0x34b/0x530 [ 572.681357] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.681385] hci_event_packet+0x66c/0x10e0 [ 572.681408] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.681430] ? __pfx_hci_event_packet+0x10/0x10 [ 572.681454] ? mark_held_locks+0x49/0x80 [ 572.681481] ? kcov_remote_start+0x2ce/0x5a0 [ 572.681520] hci_rx_work+0x65b/0x8b0 [ 572.681547] process_one_work+0x8e1/0x1960 [ 572.681587] ? __pfx_process_one_work+0x10/0x10 [ 572.681614] ? move_linked_works+0x172/0x270 [ 572.681654] ? assign_work+0x196/0x240 [ 572.681682] worker_thread+0x67e/0xe90 [ 572.681710] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.681755] ? __pfx_worker_thread+0x10/0x10 [ 572.681784] kthread+0x3c8/0x740 [ 572.681809] ? __pfx_kthread+0x10/0x10 [ 572.681831] ? ret_from_fork+0x79/0x7a0 [ 572.681853] ? lock_release+0xc8/0x270 [ 572.681879] ? __pfx_kthread+0x10/0x10 [ 572.681905] ret_from_fork+0x67a/0x7a0 [ 572.681927] ? __pfx_ret_from_fork+0x10/0x10 [ 572.681952] ? __switch_to+0x759/0x1030 [ 572.681984] ? __pfx_kthread+0x10/0x10 [ 572.682009] ret_from_fork_asm+0x1a/0x30 [ 572.682054] [ 572.716368] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.718280] Bluetooth: hci2: failed to register connection device [ 572.748244] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 572.750716] debugfs: '0' already exists in 'hci5' [ 572.750928] Bluetooth: hci3: command 0x2016 tx timeout [ 572.752650] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 572.753928] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.753958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.753974] Workqueue: hci5 hci_rx_work [ 572.754003] Call Trace: [ 572.754011] 18:28:26 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x18}, "364321b448cfaa084270ee41253b06f82762a31b9fd2aee7"}, 0x1c) [ 572.754021] dump_stack_lvl+0xfa/0x120 [ 572.754053] sysfs_warn_dup+0x80/0xa0 [ 572.754083] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.754110] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.754137] ? find_held_lock+0x2b/0x80 [ 572.754175] ? lock_release+0xc8/0x270 [ 572.754201] ? do_raw_spin_unlock+0x53/0x220 [ 572.754235] kobject_add_internal+0x24c/0x9a0 [ 572.754275] kobject_add+0x157/0x240 [ 572.754309] ? __pfx_kobject_add+0x10/0x10 [ 572.754342] ? lock_release+0xc8/0x270 [ 572.754369] ? do_raw_spin_unlock+0x53/0x220 [ 572.754400] ? kobject_put+0xaa/0x260 [ 572.754442] device_add+0x32d/0x1830 [ 572.754473] ? __pfx_device_add+0x10/0x10 [ 572.754501] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.754531] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.754555] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.754591] hci_conn_add_sysfs+0x117/0x1c0 [ 572.754623] le_conn_complete_evt+0x1246/0x1e40 [ 572.754671] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.754719] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.754745] ? __asan_memcpy+0x3d/0x60 [ 572.754785] hci_le_meta_evt+0x34b/0x530 [ 572.754805] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.754841] hci_event_packet+0x66c/0x10e0 [ 572.754866] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.754887] ? __pfx_hci_event_packet+0x10/0x10 [ 572.754911] ? mark_held_locks+0x49/0x80 [ 572.754938] ? kcov_remote_start+0x2ce/0x5a0 [ 572.754978] hci_rx_work+0x65b/0x8b0 [ 572.755006] process_one_work+0x8e1/0x1960 [ 572.755046] ? __pfx_process_one_work+0x10/0x10 [ 572.755073] ? move_linked_works+0x172/0x270 [ 572.755114] ? assign_work+0x196/0x240 [ 572.755142] worker_thread+0x67e/0xe90 [ 572.755170] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.755217] ? __pfx_worker_thread+0x10/0x10 [ 572.755246] kthread+0x3c8/0x740 [ 572.755270] ? __pfx_kthread+0x10/0x10 [ 572.755293] ? ret_from_fork+0x79/0x7a0 [ 572.755315] ? lock_release+0xc8/0x270 [ 572.755341] ? __pfx_kthread+0x10/0x10 [ 572.755367] ret_from_fork+0x67a/0x7a0 [ 572.755389] ? __pfx_ret_from_fork+0x10/0x10 [ 572.755415] ? __switch_to+0x759/0x1030 [ 572.755447] ? __pfx_kthread+0x10/0x10 [ 572.755472] ret_from_fork_asm+0x1a/0x30 [ 572.755518] [ 572.789220] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.791333] Bluetooth: hci5: failed to register connection device 18:28:26 executing program 2: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffb) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x14}, {0x4, 0xfff, 0x3, 0xffff, [0x3, 0x7f, 0x4, 0x0, 0xfffe, 0x2e]}}}}, 0x21) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0bffeb"], 0x3) 18:28:26 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xeb}, "fa4a6819de7f6924be04477d583bdd58450186ea929e76dc3bd56f259c69c70d3705f321324e83bd8c15d3fcff0714c1745cc0349d6c7a19f5d2628032ca2d0328bdd4ee673b85140ced336e71e684678352a394989d3f427afe3b9f807f8a4da21046594891ef7a52c10b903a88b8c2964fc8432f134d30c6e385ffd9a99caf0d2b421eae589bb187ea4e49677f754ca7ead8b67acf6460698cf5f6e465cb782a053a517f930cf5e062be364732ae3c07dfe28a4266591d3dae4b8057434a959a7fedf6b3845a721c96a7345e880954698b354019e5f704f48b7837e5a10c23f8bf3c97c6d893b6625ac7"}, 0xef) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x1014}, @l2cap_cid_signaling={{0x1010}, [@l2cap_conn_req={{0x2, 0x2, 0x4}, {0x0, 0x8ab}}, @l2cap_info_rsp={{0xb, 0x3, 0x1004}, {0x2, 0xfffb, "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"}}]}}, 0x1019) [ 572.837267] debugfs: '0' already exists in 'hci7' 18:28:26 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 572.839627] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 572.841038] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.841067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.841083] Workqueue: hci7 hci_rx_work [ 572.841114] Call Trace: [ 572.841121] [ 572.841131] dump_stack_lvl+0xfa/0x120 [ 572.841162] sysfs_warn_dup+0x80/0xa0 [ 572.841191] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.841218] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.841244] ? find_held_lock+0x2b/0x80 [ 572.841281] ? lock_release+0xc8/0x270 [ 572.841306] ? do_raw_spin_unlock+0x53/0x220 [ 572.841339] kobject_add_internal+0x24c/0x9a0 [ 572.841378] kobject_add+0x157/0x240 [ 572.841411] ? __pfx_kobject_add+0x10/0x10 [ 572.841443] ? lock_release+0xc8/0x270 [ 572.841468] ? do_raw_spin_unlock+0x53/0x220 [ 572.841498] ? kobject_put+0xaa/0x260 [ 572.841539] device_add+0x32d/0x1830 [ 572.841569] ? __pfx_device_add+0x10/0x10 [ 572.841596] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.841626] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.841657] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.841692] hci_conn_add_sysfs+0x117/0x1c0 [ 572.841723] le_conn_complete_evt+0x1246/0x1e40 [ 572.841769] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.841815] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.841840] ? __asan_memcpy+0x3d/0x60 [ 572.841879] hci_le_meta_evt+0x34b/0x530 [ 572.841898] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.841926] hci_event_packet+0x66c/0x10e0 [ 572.841950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.841971] ? __pfx_hci_event_packet+0x10/0x10 [ 572.841994] ? mark_held_locks+0x49/0x80 [ 572.842020] ? kcov_remote_start+0x2ce/0x5a0 [ 572.842059] hci_rx_work+0x65b/0x8b0 [ 572.842085] process_one_work+0x8e1/0x1960 [ 572.842125] ? __pfx_process_one_work+0x10/0x10 [ 572.842151] ? move_linked_works+0x172/0x270 [ 572.842190] ? assign_work+0x196/0x240 [ 572.842218] worker_thread+0x67e/0xe90 [ 572.842245] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.842290] ? __pfx_worker_thread+0x10/0x10 [ 572.842318] kthread+0x3c8/0x740 [ 572.842342] ? __pfx_kthread+0x10/0x10 [ 572.842364] ? ret_from_fork+0x79/0x7a0 [ 572.842386] ? lock_release+0xc8/0x270 [ 572.842411] ? __pfx_kthread+0x10/0x10 [ 572.842436] ret_from_fork+0x67a/0x7a0 18:28:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRESDEC, @ANYRES32=r2, @ANYRES64=r0, @ANYRESHEX=r1], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x59}, @l2cap_cid_signaling={{0x55}, [@l2cap_conf_req={{0x4, 0x20, 0x28}, {0xff, 0x1000, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x81, 0xdeb, 0x4, 0x7}}, @l2cap_conf_mtu={0x1, 0x2, 0x3f}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x2, 0x1000, 0x9, 0x59d, 0x36}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_conf_rsp={{0x5, 0xfc, 0x1c}, {0x7ff, 0x0, 0x8000, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x54, 0xa6, 0x0, 0x768, 0x7}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x96}, @l2cap_conf_mtu={0x1, 0x2, 0x3f}]}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0xff, 0x5ea0, 0x5}}]}}, 0x5e) [ 572.842458] ? __pfx_ret_from_fork+0x10/0x10 [ 572.842483] ? __switch_to+0x759/0x1030 [ 572.842514] ? __pfx_kthread+0x10/0x10 [ 572.842539] ret_from_fork_asm+0x1a/0x30 [ 572.842584] [ 572.872920] debugfs: '0' already exists in 'hci2' [ 572.874773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 572.875281] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.875520] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.875538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.875548] Workqueue: hci2 hci_rx_work [ 572.875572] Call Trace: [ 572.875579] [ 572.875586] dump_stack_lvl+0xfa/0x120 [ 572.875607] sysfs_warn_dup+0x80/0xa0 [ 572.875627] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.875642] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.875657] ? find_held_lock+0x2b/0x80 [ 572.875685] ? lock_release+0xc8/0x270 [ 572.875700] ? do_raw_spin_unlock+0x53/0x220 [ 572.875720] kobject_add_internal+0x24c/0x9a0 [ 572.875743] kobject_add+0x157/0x240 [ 572.875766] ? __pfx_kobject_add+0x10/0x10 [ 572.875784] ? lock_release+0xc8/0x270 [ 572.875802] ? do_raw_spin_unlock+0x53/0x220 [ 572.875828] ? kobject_put+0xaa/0x260 [ 572.875857] device_add+0x32d/0x1830 [ 572.875877] ? __pfx_device_add+0x10/0x10 [ 572.875893] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.875911] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.875927] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.875949] hci_conn_add_sysfs+0x117/0x1c0 [ 572.875967] le_conn_complete_evt+0x1246/0x1e40 [ 572.875995] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.876024] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.876039] ? __asan_memcpy+0x3d/0x60 [ 572.876062] hci_le_meta_evt+0x34b/0x530 [ 572.876074] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.876093] hci_event_packet+0x66c/0x10e0 [ 572.876110] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.876122] ? __pfx_hci_event_packet+0x10/0x10 [ 572.876135] ? mark_held_locks+0x49/0x80 [ 572.876150] ? kcov_remote_start+0x2ce/0x5a0 [ 572.876176] hci_rx_work+0x65b/0x8b0 [ 572.876195] process_one_work+0x8e1/0x1960 [ 572.876220] ? __pfx_process_one_work+0x10/0x10 [ 572.876235] ? move_linked_works+0x172/0x270 [ 572.876258] ? assign_work+0x196/0x240 [ 572.876276] worker_thread+0x67e/0xe90 [ 572.876296] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.876324] ? __pfx_worker_thread+0x10/0x10 [ 572.876341] kthread+0x3c8/0x740 [ 572.876356] ? __pfx_kthread+0x10/0x10 [ 572.876372] ? ret_from_fork+0x79/0x7a0 [ 572.876386] ? lock_release+0xc8/0x270 [ 572.876400] ? __pfx_kthread+0x10/0x10 [ 572.876415] ret_from_fork+0x67a/0x7a0 [ 572.876427] ? __pfx_ret_from_fork+0x10/0x10 [ 572.876445] ? __switch_to+0x759/0x1030 [ 572.876466] ? __pfx_kthread+0x10/0x10 [ 572.876480] ret_from_fork_asm+0x1a/0x30 [ 572.876507] [ 572.876564] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.880198] Bluetooth: hci7: failed to register connection device [ 572.880560] Bluetooth: hci2: failed to register connection device [ 572.907950] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 572.908726] debugfs: '0' already exists in 'hci2' [ 572.910095] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 572.910771] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.910790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.910799] Workqueue: hci2 hci_rx_work [ 572.910812] Call Trace: [ 572.910821] [ 572.910827] dump_stack_lvl+0xfa/0x120 [ 572.910845] sysfs_warn_dup+0x80/0xa0 [ 572.910866] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.910882] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.910896] ? find_held_lock+0x2b/0x80 [ 572.910915] ? lock_release+0xc8/0x270 [ 572.910930] ? do_raw_spin_unlock+0x53/0x220 [ 572.910948] kobject_add_internal+0x24c/0x9a0 [ 572.910969] kobject_add+0x157/0x240 [ 572.910988] ? __pfx_kobject_add+0x10/0x10 [ 572.911006] ? lock_release+0xc8/0x270 [ 572.911020] ? do_raw_spin_unlock+0x53/0x220 [ 572.911037] ? kobject_put+0xaa/0x260 [ 572.911060] device_add+0x32d/0x1830 [ 572.911077] ? __pfx_device_add+0x10/0x10 [ 572.911092] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.911108] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.911120] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.911140] hci_conn_add_sysfs+0x117/0x1c0 [ 572.911157] le_conn_complete_evt+0x1246/0x1e40 [ 572.911182] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.911208] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.911222] ? __asan_memcpy+0x3d/0x60 [ 572.911243] hci_le_meta_evt+0x34b/0x530 [ 572.911254] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.911269] hci_event_packet+0x66c/0x10e0 [ 572.911282] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.911295] ? __pfx_hci_event_packet+0x10/0x10 [ 572.911308] ? mark_held_locks+0x49/0x80 [ 572.911322] ? kcov_remote_start+0x2ce/0x5a0 [ 572.911344] hci_rx_work+0x65b/0x8b0 [ 572.911359] process_one_work+0x8e1/0x1960 [ 572.911380] ? __pfx_process_one_work+0x10/0x10 [ 572.911395] ? move_linked_works+0x172/0x270 [ 572.911416] ? assign_work+0x196/0x240 [ 572.911432] worker_thread+0x67e/0xe90 [ 572.911447] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.911472] ? __pfx_worker_thread+0x10/0x10 [ 572.911488] kthread+0x3c8/0x740 [ 572.911501] ? __pfx_kthread+0x10/0x10 [ 572.911513] ? ret_from_fork+0x79/0x7a0 [ 572.911525] ? lock_release+0xc8/0x270 [ 572.911540] ? __pfx_kthread+0x10/0x10 [ 572.911554] ret_from_fork+0x67a/0x7a0 [ 572.911566] ? __pfx_ret_from_fork+0x10/0x10 [ 572.911580] ? __switch_to+0x759/0x1030 [ 572.911597] ? __pfx_kthread+0x10/0x10 [ 572.911611] ret_from_fork_asm+0x1a/0x30 [ 572.911635] [ 572.921675] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:28:26 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) [ 572.922077] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.924634] debugfs: '0' already exists in 'hci3' [ 572.924764] Bluetooth: hci2: failed to register connection device [ 572.925549] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 572.926976] Bluetooth: hci2: SCO packet for unknown connection handle 200 18:28:26 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9c010000c0001000d140800450000000002ff0fdbd6451e4d0dbef43aa815e0a168cc17c217bfe3cbae596dea0a03a9f4cfe5e6f0f2b4f629200e97ca72ed7e54333ba1ec8948c04a68aebb6a16e6477b48bdb750f1d179"], 0x15) [ 572.927080] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.927112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.927127] Workqueue: hci3 hci_rx_work [ 572.927152] Call Trace: [ 572.927161] [ 572.927170] dump_stack_lvl+0xfa/0x120 [ 572.927201] sysfs_warn_dup+0x80/0xa0 [ 572.927230] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.927258] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.927284] ? find_held_lock+0x2b/0x80 [ 572.927322] ? lock_release+0xc8/0x270 [ 572.927349] ? do_raw_spin_unlock+0x53/0x220 [ 572.927383] kobject_add_internal+0x24c/0x9a0 [ 572.927424] kobject_add+0x157/0x240 [ 572.927459] ? __pfx_kobject_add+0x10/0x10 [ 572.927493] ? lock_release+0xc8/0x270 [ 572.927520] ? do_raw_spin_unlock+0x53/0x220 [ 572.927552] ? kobject_put+0xaa/0x260 [ 572.927594] device_add+0x32d/0x1830 [ 572.927625] ? __pfx_device_add+0x10/0x10 [ 572.927653] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.927684] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.927708] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.927744] hci_conn_add_sysfs+0x117/0x1c0 [ 572.927775] le_conn_complete_evt+0x1246/0x1e40 [ 572.927831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.927880] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.927906] ? __asan_memcpy+0x3d/0x60 [ 572.927945] hci_le_meta_evt+0x34b/0x530 [ 572.927966] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.927994] hci_event_packet+0x66c/0x10e0 [ 572.928019] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.928041] ? __pfx_hci_event_packet+0x10/0x10 [ 572.928064] ? mark_held_locks+0x49/0x80 [ 572.928091] ? kcov_remote_start+0x2ce/0x5a0 [ 572.928131] hci_rx_work+0x65b/0x8b0 [ 572.928159] process_one_work+0x8e1/0x1960 [ 572.928199] ? __pfx_process_one_work+0x10/0x10 [ 572.928226] ? move_linked_works+0x172/0x270 [ 572.928267] ? assign_work+0x196/0x240 [ 572.928296] worker_thread+0x67e/0xe90 [ 572.928324] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.928370] ? __pfx_worker_thread+0x10/0x10 [ 572.928399] kthread+0x3c8/0x740 [ 572.928424] ? __pfx_kthread+0x10/0x10 [ 572.928447] ? ret_from_fork+0x79/0x7a0 [ 572.928470] ? lock_release+0xc8/0x270 [ 572.928497] ? __pfx_kthread+0x10/0x10 [ 572.928522] ret_from_fork+0x67a/0x7a0 [ 572.928555] ? __pfx_ret_from_fork+0x10/0x10 [ 572.928581] ? __switch_to+0x759/0x1030 [ 572.928613] ? __pfx_kthread+0x10/0x10 [ 572.928639] ret_from_fork_asm+0x1a/0x30 [ 572.928685] [ 572.928855] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.929082] Bluetooth: hci2: command 0x2016 tx timeout [ 572.929642] Bluetooth: hci3: failed to register connection device [ 572.946912] debugfs: '0' already exists in 'hci2' [ 572.947045] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 572.951069] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 572.951237] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 572.951258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.951268] Workqueue: hci2 hci_rx_work [ 572.951281] Call Trace: [ 572.951286] [ 572.951291] dump_stack_lvl+0xfa/0x120 [ 572.951307] sysfs_warn_dup+0x80/0xa0 [ 572.951323] sysfs_create_dir_ns+0x23b/0x2a0 [ 572.951342] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 572.951356] ? find_held_lock+0x2b/0x80 [ 572.951378] ? lock_release+0xc8/0x270 [ 572.951392] ? do_raw_spin_unlock+0x53/0x220 [ 572.951414] kobject_add_internal+0x24c/0x9a0 [ 572.951436] kobject_add+0x157/0x240 [ 572.951455] ? __pfx_kobject_add+0x10/0x10 [ 572.951474] ? lock_release+0xc8/0x270 [ 572.951491] ? do_raw_spin_unlock+0x53/0x220 [ 572.951508] ? kobject_put+0xaa/0x260 [ 572.951531] device_add+0x32d/0x1830 [ 572.951548] ? __pfx_device_add+0x10/0x10 [ 572.951567] ? hci_debugfs_create_conn+0x10f/0x240 [ 572.951583] ? mgmt_send_event_skb+0x2f3/0x460 [ 572.951595] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 572.951615] hci_conn_add_sysfs+0x117/0x1c0 [ 572.951634] le_conn_complete_evt+0x1246/0x1e40 [ 572.951661] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 572.951688] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 572.951702] ? __asan_memcpy+0x3d/0x60 [ 572.951723] hci_le_meta_evt+0x34b/0x530 [ 572.951735] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 572.951750] hci_event_packet+0x66c/0x10e0 [ 572.951764] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 572.951776] ? __pfx_hci_event_packet+0x10/0x10 [ 572.951789] ? mark_held_locks+0x49/0x80 [ 572.951804] ? kcov_remote_start+0x2ce/0x5a0 [ 572.951831] hci_rx_work+0x65b/0x8b0 [ 572.951846] process_one_work+0x8e1/0x1960 [ 572.951867] ? __pfx_process_one_work+0x10/0x10 [ 572.951882] ? move_linked_works+0x172/0x270 [ 572.951904] ? assign_work+0x196/0x240 [ 572.951921] worker_thread+0x67e/0xe90 [ 572.951939] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 572.951965] ? __pfx_worker_thread+0x10/0x10 [ 572.951980] kthread+0x3c8/0x740 [ 572.951994] ? __pfx_kthread+0x10/0x10 [ 572.952006] ? ret_from_fork+0x79/0x7a0 [ 572.952018] ? lock_release+0xc8/0x270 [ 572.952032] ? __pfx_kthread+0x10/0x10 [ 572.952046] ret_from_fork+0x67a/0x7a0 [ 572.952058] ? __pfx_ret_from_fork+0x10/0x10 [ 572.952072] ? __switch_to+0x759/0x1030 [ 572.952090] ? __pfx_kthread+0x10/0x10 [ 572.952104] ret_from_fork_asm+0x1a/0x30 [ 572.952129] [ 572.952168] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 572.987669] Bluetooth: hci2: failed to register connection device 18:28:26 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "fa29f279b262e868dc14ac9a3cb86533a4091c572c06022a3205350a1aede15872ea64a8713c3f6da21abd9657c797498ef4231d1d1fc4c84d6947ae91829210269b26cfd9216dcc5c9d6b6e7a8986cbc673a4064d11852ad88c1c72654ad8da458d696b3dfdc7e77122076850acd28f3eae68e52a5a0fa3009a8c27433366c826c86572443a24b9fc13f4fa8c38775da48b2f9c7905491178c8c5804215af1769318e1b197b31e3b0c4af3366d841b4c8c1dea9d8f47f08cc9e0409f04609f853ad99adb8b45a1bed30d569396876e85b6f5a3df5c82c1ecd598e2ea32a62de303a61e7a4114007e4529b1fb953f313ba5deb6b6d646e0c28d4f9cad6c07757da77d78e4e0ef0344a8b3fc6ca69751eaf501560705aa17cffb6652bd1bb2abc44dbf679aa06b2c702984bfe68f4c8125b897925d00c59b3d6e971935c52fb77aabd664db5b4a7610c5a01463391b7bef59fe8b103ca38e51d07ec3ab10c75000c33399361069ee2cddb53cccff1be759f90d3dc3a4b3cfac36e3e902fabf643c6c72e9c2af9e79c534a5c8f3cb441990f5c39d7e37ff7d86131d4b9fc77e86603d214bae9191e755b857bf9334536da08af98da48514e0f358f34c000b8d1e20b9fd6256d6cb48493b582b0a451445483fad7e7d15b09b6c1546e720e1fdd05f632fa1a21b1fcd3db095aabbd3e6021710b872b7ad25ae891371e5294904a4f970befff28dd2780b250d3631e0e4f20bdacd488cac98b30b55bd5a1db53ec1bad5273dce36bb9748992dacbce3dede79e79f4bcb08c590bb0834ce94b85aa28cb7f3ea500bdbdedf9e573512b385aa8fa95f5b79f018799cbdf72004b6f8cb1e8e7189a14ec3215f9caa129f317401a0a298a669a6331d1e703e56db9b1493060033845197ab9df1480059558c7f48538eae44bbbefc235059af9ed11cec46734352c12f8504b5375cc9f4e438242aedaa7d861cc6f44f70177f7e1440b1f7c67711bd5d81038c0323cf7846cd2470f91738400807c0fb51e1fddc5e30b196a1de86d1c22f61506cab54efbaa867c829126ce74206ac3759ba08a9cc16d56c953ff26a0a6acb50aad416a842bd645131076b4c7f3a8e5f41eb659c4a92707a3ce575a8c3c24e578608ac40e09513c488b079068a4108987cd18c17df5301c1d21ff6099cef0933e5e4ca3063c3f986485b7ebac096ec9e5c1f2af4a12a390351fd22444c58f35d1250aa53c69c08e3c02fd4888f5b56932cb5ff673e41dd485f600a2356d4d2b346932014e6281c4a5b9d9290852732d8fc8861461e8533e9f429e3799ff6351ce9006e12c7fc88dba071de62fdd3035695b6207515bb9834fe1143b3a686a5111d25544c7d30281be0c3b4e5621140afc2f71cd273062160ed7bf10affa681963007bae1a7a25a428c756c0509c19ce76389e6f4a7392ec8054a5e0b88e3fe01efa179abee1f8475e79ebda6ff2f5bcea99e1016a3cfcb850b2e79b2233a82d78aaa166fe15ed7c8a9ea63f2ce846dba7cdcffdd32ee657327a8621b119a1e3659027c47ebc56528d29a92bdb6b28d925757c9e3896878e306f75b6148930ef7c369555ce5861c44de2f45aee0e51c0eb2cfaab819056dc3b8e75da2cf3ae29f2c5a52bc4b1d20472feebbc53c1c758dcb7b61c4cd30caa8f24f87f29c60f6026753bd8409a43fb39353856d79b87fd1cae02072c9c0c7a75a21fb7fa1c0f452f33fd8bfa689cd38d786c7bd69e9a3c3915b8c2fd791c32e1c2458068d0dbf41f7d340626ee24e74ef8bb0bcc9ebc9d1ffef969bfe83e8dd95ef369b8a0e76d4443d8edb2ccb541c7282d07ad27d236e196f2f9dec90174afd095c1b2802bb6ef2790666e3d840b49c436e71b9f435d4c9887674a092f5899730bc36123fe4da65d1bcba859aa69e85949fa421cdc167f051bc385ec1220a68d504ad28720328666e000c90edc9a9fa6243caabc6f250d339059fff5600592a53c819713f3c92075f108b5d3cc9f68421ede7e3c7d35f60b862321f5cef026725f848a445405b6285bbc588c6c712f4610a4889890f521192585eae32a781b0c5a7c1c66d0592227533f71ed2a487d73eba8acb08542118f297170183d21c98d1ba1e823c9cea66b1606257f3dc1ecbbeb4ed3dbfe6bbca59195ef792dc429ed30550b2ff08b2e26df26e88875f994f6452346e9d650c8a64b29496b4f0523db6367701779e40836dbbacce04bbf81ea1eebe3c78a28e560f5b896d05492e309d5e6e283b8a65ec746a1e16fae571fef335b5f7af2748545cc663f3b462bbe8e3a028881fcfb10969fd9a57d3470999167c03dc7440bcb68684b3dc5c62d4d8642477053eae8cfae9a8e6eec71eba338e46969deef9a96f072c5369c2afe19ee64d0f81f20e2c61ecf05df77475b19cf9d3af0b21e797b33c79352e01b9ce0a5fd242eb9880c2bb66ff3de4ba7785a0f67498a6d26bb861cd3d5cfc8c965d6f34d179c5bda7807b6baee22421caf20b5496f63af7ba5855c8763d93129cce6e43a1514e23c25e0f87dd12f327566f9614307f0932c0c39312d0cc2f403eb9bb4ae403f562f0684c6324592e53edc7e8f5639050a54b2f9c0f9d833e8132d82c66b86bcbebbaaa519661ba6bbb8a38b9f15a1859f21d8a45730068a20fc88b51258ecfc47e836b85e327e33f57c0d53eb95e7295bb7de92028f7ea3a6f2e3402f531a40687e33335cced689c1d110f1846e5de7b3b036805716e4989e450a5eaefc468c672c95f7b2bc1b1ee105135863e8a6ecd5369fe8e2e155f1f197ede9691a6fc210e5a4e05c3491a22f7aba4305e1a7e19dde953fbb106ee83f503a1d9791ff5c7e374731772588a89c6732a8f5d1cb531a91d0838ddadbe3f13343217f39d4b3b7b532cde118e0ef45a35913f689c3ada4d85e3e057e67b55aab917354de606ec1ec4f338d719ef9ec3d805e865c5bf0c4984095ae37a25dd007086a9a313f5dcfd8fb1e10c61e5871aaffe96d143e62bb29784f36af5695d47fe290bcf520d1752a50fe847d198f0019917ffa369fd5d398b0dc03887cea83fa9fe9b75305ffa340c0146dbc5b5fef6673ce5f1b36e2cb906393281464a7dd54b51ac76a50e1a0590ffec7f9f75446f564fa920a5bc17fdcb2dac419fb56640cc3a192657128e9d0473688bc87d22662317f50295737061cb10d48a77156695cc740854d51facb86ad44d9497f5a5a2af4730201fadd4b19cd38a43d5c24d39a80200cc5caeb74fd57ee5292ba532b4c4c12bfb92987d131316595746bc10ae284fe101bb87c35b10315adf85db35cd205a1da9d68cd957d726c06624167c3521374ab9ef9b7ca3ca0f74f9c5ae57a7f27beb40994efd9745e58a673a050813e91e4248228219ee00a70cd08df890a3b7944d4c3e5b4fe8163812b90400d92ebb5452d3b75f504d91c770f491a612960782f40f1590f53563a800d46f044721de8393ae5d7f49d75367dfa43bb1f6080e0542f68efef0278fe662ece831751ceab77537e06a2a9b594100c434cf0d27260af36798fccdfc7624ac6065f2dc40aa360d26a6ac0b53a4f0ddb1f313328794e4caee33404ab0206055abee11da06589a26f488e620ae11180f4bf5b3d29e6f2e409b3b29f2213e639d0a884acea1836b62d2f7c3a6c76128d9a26179b3bc52589e0b8fc555bcbf1be251be19c0496ef9d32d9fae604dcafea918f0addcef5fb094677f213489bc02ed12b804b18bda1a6f788bd4ca50b423f708763e6f3db51886ee730cdfafc1f0fee35bd39349baecd223431a7a04db5f0f3ca8a2d4b13493ca2892b3a8e456fcaafb1a6ea6832ca12617f4e29e74f754a472c9e61ee7206554d7948931d16c56c2d50d8909f42119c49503a641a537682e4485d8331e24da6adf254da3a5a929798882dcfea725b17023c78320d9fdcd00721654f9438d8027b084d355118cd772240c70e88dd9415b6ffc4d45eba00cefe5212281204601bacca090d3fbcbbd59af015c04aec8785497adb9b70694a6ef5587aaa0e1c9886e0846683571e845a350b7d80f70305abd731b2c8db0910ca08a4763cc6f809f29e2db746ffd2155327edb3de784f1608cf10636611a08a13c08b7fab9865d0616021108f7ed671d8b4dc486dc977da61a32664667efd11cd084be81a0b393c886b8a02c62512b9bc5334314d805e88f5da9b41f6772e3cbf670997216a8ff07e1cf66e279e46a71cbee87d209f7f572bd8769be673288692740cd9e3cb1887e6602f0438e57dd4a1132555f06ee6287be123e859b357d1a2e0b3ea573063a29b085c4ccc894720ea16f766d86c7c7113e853fdebab8796c7bbde60278f6831c37ea5efc74c5d212f9d816964f6be7cb39ab36db3c3d3cdc818e6e0e833aa9cbefed847bb63d3b3107555863fb5b27c6af14a451cbda72b607a663ea5f94650b48e0b365ecae20e6b89eac116a24f9b783a2c90c12710530913832bddc46b331fbb81af857af7d95bbb453869c4ce1cfd90dc5c7d0690630bfecb778433ef01ba19a07cbf326fbc37e9eae8edb0fbd76f62657106a3d4fc4b4b5e12ff437b68ce6dcdaf8991375c0eeae855b0df0c36e807d9421333e08518a421ce70fbf107c513094495e3933775c732460d7f7ae6a91a91d6a4869b6ec86c9d52a004b823ca050d5e769e22228054879e5389fa76031b5785341cfe926816b459554a73d2bf8c31e71b0170f4c318936eff6aa1057b13b809091bc2df0677fa049a4644652aa6ef8da70d566b655146b6cb5b8fc29efb770b545b3fa3ba32dba41a778eb5f8733e8096358a1e4ea04175c7838e5c06b353df9519cbb10cbd9c12d41b026b48434439cf7ee2e6edfa294476ca4cf07c9a971d1feec465cfb336f046855d55fc82f75fb39b8aeb99177b4b6f88389ad8ebcc6858c9423ac5db6026aee5baed759c19ac71d9b8282339ff3c8a4e598337ded033c0291c4b1d9a6994ee16af6d96091869c1eaa5b839f5ec8f97e8d653abec776fc292f56140c1b04c5247bc0251341c58fcb63f57c1fd9eebd2ff8caefe664603d5a5dae18a8aeba908e27a7892f9897e237ac31b505093d5f8d4a19eab3627185b43870368d0f2763a17f18765aa18f1ef87ef64f32bcdeb73816ebf464e8e4841ffdef84c193b9ee62ffd2bcafb4743949c7c29b9b298b31197e9a19e4c70292b1dcb52da2d0068042fb551dbaca21b2bf23afa4e8d2600099298b606fbb0f7fca34baaffd4da127721660aee54e15280f3a1d5db253975a5f902c84746c7131d5ac7ea66ff562145b6d8ed29e4222b333bd7adc4af9c76c8fe803328a12cdbd3822cc23ba764dc00f582783fb88e55aeb703770663d2d358bd32adfe7366956f524db0b7056c71c287ea906d4b6837a1324f2d4a2aa99dfd4d1f2b65b7a623fcd0b38ba31f0f9d2e4e685a1bcb16cf950d01e8cc72e09c88141962806c3c9db20400dbbf711f04d1eadc67b1b47abcfbee7afdcb9b1600f6b4fe9ba1f680bd778bf5b8d0907e6eef2ca439c454ac05e664215f4cd4b78e28e1a5014622807b5f932ee4406e0bedfe8469a92dcf338b2b9b118f6b6d9bffd2a534306593b6ac36eed241724992c1464ef7c25cf5895805520fb1fb468ba66d07e30405655f36aec0965c07b6ca53ed33aefa3b85c65e48a779158ba7741da4d313dfa07dc3b744ffece36b60c27192cb6ac8776ddbfb59b66819bc65ebdba64ce5fe12d6d6ae43731dd32a3c531859b6122e30f5d21930f93ee7c83250dcfafb21c37c"}, 0x1004) [ 572.999156] debugfs: '0' already exists in 'hci2' [ 572.999679] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 573.000445] CPU: 1 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 573.000461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 573.000470] Workqueue: hci2 hci_rx_work [ 573.000483] Call Trace: [ 573.000487] [ 573.000492] dump_stack_lvl+0xfa/0x120 [ 573.000508] sysfs_warn_dup+0x80/0xa0 [ 573.000523] sysfs_create_dir_ns+0x23b/0x2a0 [ 573.000549] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 573.000563] ? find_held_lock+0x2b/0x80 [ 573.000583] ? lock_release+0xc8/0x270 [ 573.000597] ? do_raw_spin_unlock+0x53/0x220 [ 573.000615] kobject_add_internal+0x24c/0x9a0 [ 573.000637] kobject_add+0x157/0x240 [ 573.000655] ? __pfx_kobject_add+0x10/0x10 [ 573.000673] ? lock_release+0xc8/0x270 [ 573.000688] ? do_raw_spin_unlock+0x53/0x220 [ 573.000704] ? kobject_put+0xaa/0x260 [ 573.000727] device_add+0x32d/0x1830 [ 573.000744] ? __pfx_device_add+0x10/0x10 [ 573.000759] ? hci_debugfs_create_conn+0x10f/0x240 [ 573.000775] ? mgmt_send_event_skb+0x2f3/0x460 [ 573.000788] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 573.000807] hci_conn_add_sysfs+0x117/0x1c0 [ 573.000828] le_conn_complete_evt+0x1246/0x1e40 [ 573.000854] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 573.000880] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 573.000894] ? __asan_memcpy+0x3d/0x60 [ 573.000915] hci_le_meta_evt+0x34b/0x530 [ 573.000927] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 573.000942] hci_event_packet+0x66c/0x10e0 [ 573.000955] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 573.000967] ? __pfx_hci_event_packet+0x10/0x10 [ 573.000980] ? mark_held_locks+0x49/0x80 [ 573.000994] ? kcov_remote_start+0x2ce/0x5a0 [ 573.001016] hci_rx_work+0x65b/0x8b0 [ 573.001030] process_one_work+0x8e1/0x1960 [ 573.001051] ? __pfx_process_one_work+0x10/0x10 [ 573.001066] ? move_linked_works+0x172/0x270 [ 573.001087] ? assign_work+0x196/0x240 [ 573.001103] worker_thread+0x67e/0xe90 [ 573.001118] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 573.001142] ? __pfx_worker_thread+0x10/0x10 [ 573.001158] kthread+0x3c8/0x740 [ 573.001171] ? __pfx_kthread+0x10/0x10 [ 573.001183] ? ret_from_fork+0x79/0x7a0 [ 573.001196] ? lock_release+0xc8/0x270 [ 573.001210] ? __pfx_kthread+0x10/0x10 [ 573.001229] ret_from_fork+0x67a/0x7a0 [ 573.001242] ? __pfx_ret_from_fork+0x10/0x10 [ 573.001256] ? __switch_to+0x759/0x1030 [ 573.001273] ? __pfx_kthread+0x10/0x10 [ 573.001287] ret_from_fork_asm+0x1a/0x30 [ 573.001315] [ 573.019406] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 573.020445] Bluetooth: hci2: failed to register connection device 18:28:26 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRESDEC], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0x800, 0xffff}}}}, 0x11) 18:28:26 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a000afa59592f445c76e230356bd9b5078e257d3f928938f20b2e050376ccf3b3a7"], 0x22) [ 573.031408] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 573.053786] Bluetooth: hci2: Invalid handle: 0xfa0a > 0x0eff 18:28:26 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x47}, {0x5, [{@any, 0x0, 0x2, 0x9, "00a928", 0x8}, {@none, 0x7, 0xf5, 0xb9, '-\f('}, {@none, 0x20, 0x6, 0x81, '|\v(', 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x3, 0x1, "63985a", 0x1000}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6, 0x8, "b658c8", 0x3}]}}}, 0x4a) [ 573.057383] Bluetooth: hci2: Invalid handle: 0xfa0a > 0x0eff [ 573.070628] debugfs: '0' already exists in 'hci2' [ 573.073221] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 573.074507] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 573.074549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 573.074572] Workqueue: hci2 hci_rx_work [ 573.074607] Call Trace: [ 573.074619] [ 573.074634] dump_stack_lvl+0xfa/0x120 [ 573.074674] sysfs_warn_dup+0x80/0xa0 [ 573.074712] sysfs_create_dir_ns+0x23b/0x2a0 [ 573.074754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 573.074793] ? find_held_lock+0x2b/0x80 18:28:26 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) openat(r0, &(0x7f0000000300)='./file0\x00', 0x101000, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="a9ab6b14f523d945630c50c3fd0e8f2748988c89b4662d577b10af54d64d2101dc46f4600b30c62cd4ee2fead81997bfacce68bd78a0db75ef974e72f26c7990d3eb2ce8c6abe4cd3bc90c3edf553ebef521f2f7c3945e66605a934fd6c2d47e98966fce9e1edd07e6cce64f4b0f47ce49a023a814757d08e7d8b74a1b89", 0x7e}, {&(0x7f0000000200)="0ae5bd6501615061a30a59dd2d3e37d61672c3f274c5883befa2aeab9743fdbd2eaba9756e103628d06d7c249eee72a2f1ffc4c0aa436cee1a6dfcb1ac520a80072ecae22daae07a414d53206a79c6a1ca2a9771bfaf414f6aafcb0eb8282534a69b401763aea3b8b609a6fa50f58201464ed20228c6fa9ec0870c7924fcc9e7e0cf3b5b5c2876b0ad7b78b2b40454a84f66e2a71e6fc81448ba48eb0a653612b1a9a074aafa755fb40601dc7a36ebc7fdfb2786814e868a4ab70799", 0xbc}], 0x2, 0x101, 0xe058) r1 = socket$nl_audit(0x10, 0x3, 0x9) readahead(r1, 0x80000001, 0xf5d) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) [ 573.074851] ? lock_release+0xc8/0x270 [ 573.074895] ? do_raw_spin_unlock+0x53/0x220 [ 573.074943] kobject_add_internal+0x24c/0x9a0 [ 573.074995] kobject_add+0x157/0x240 [ 573.075042] ? __pfx_kobject_add+0x10/0x10 [ 573.075089] ? lock_release+0xc8/0x270 [ 573.075127] ? do_raw_spin_unlock+0x53/0x220 [ 573.075172] ? kobject_put+0xaa/0x260 [ 573.075236] device_add+0x32d/0x1830 [ 573.075277] ? __pfx_device_add+0x10/0x10 [ 573.075315] ? hci_debugfs_create_conn+0x10f/0x240 [ 573.075351] ? mgmt_send_event_skb+0x2f3/0x460 [ 573.075384] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 573.075429] hci_conn_add_sysfs+0x117/0x1c0 [ 573.075473] le_conn_complete_evt+0x1246/0x1e40 [ 573.075538] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 573.075606] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 573.075640] ? __asan_memcpy+0x3d/0x60 [ 573.075699] hci_le_meta_evt+0x34b/0x530 [ 573.075725] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 573.075758] hci_event_packet+0x66c/0x10e0 [ 573.075792] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 573.075825] ? __pfx_hci_event_packet+0x10/0x10 [ 573.075861] ? mark_held_locks+0x49/0x80 [ 573.075902] ? kcov_remote_start+0x2ce/0x5a0 [ 573.075963] hci_rx_work+0x65b/0x8b0 [ 573.076007] process_one_work+0x8e1/0x1960 [ 573.076070] ? __pfx_process_one_work+0x10/0x10 [ 573.076112] ? move_linked_works+0x172/0x270 [ 573.076172] ? assign_work+0x196/0x240 [ 573.076216] worker_thread+0x67e/0xe90 [ 573.076259] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 573.076329] ? __pfx_worker_thread+0x10/0x10 [ 573.076374] kthread+0x3c8/0x740 [ 573.076415] ? __pfx_kthread+0x10/0x10 [ 573.076450] ? ret_from_fork+0x79/0x7a0 [ 573.076477] ? lock_release+0xc8/0x270 [ 573.076518] ? __pfx_kthread+0x10/0x10 [ 573.076574] ret_from_fork+0x67a/0x7a0 [ 573.076612] ? __pfx_ret_from_fork+0x10/0x10 [ 573.076652] ? __switch_to+0x759/0x1030 [ 573.076699] ? __pfx_kthread+0x10/0x10 [ 573.076737] ret_from_fork_asm+0x1a/0x30 [ 573.076804] [ 573.089886] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 573.090313] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 573.097803] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 573.114849] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 573.115762] Bluetooth: hci2: failed to register connection device [ 573.118347] debugfs: '0' already exists in 'hci2' [ 573.119298] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 573.120561] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 573.120590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 573.120606] Workqueue: hci2 hci_rx_work [ 573.120628] Call Trace: [ 573.120636] [ 573.120646] dump_stack_lvl+0xfa/0x120 [ 573.120673] sysfs_warn_dup+0x80/0xa0 [ 573.120701] sysfs_create_dir_ns+0x23b/0x2a0 [ 573.120729] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 573.120755] ? find_held_lock+0x2b/0x80 [ 573.120792] ? lock_release+0xc8/0x270 [ 573.120818] ? do_raw_spin_unlock+0x53/0x220 [ 573.120857] kobject_add_internal+0x24c/0x9a0 [ 573.120897] kobject_add+0x157/0x240 [ 573.120933] ? __pfx_kobject_add+0x10/0x10 [ 573.120968] ? lock_release+0xc8/0x270 [ 573.120994] ? do_raw_spin_unlock+0x53/0x220 [ 573.121027] ? kobject_put+0xaa/0x260 [ 573.121069] device_add+0x32d/0x1830 [ 573.121100] ? __pfx_device_add+0x10/0x10 [ 573.121128] ? hci_debugfs_create_conn+0x10f/0x240 [ 573.121157] ? mgmt_send_event_skb+0x2f3/0x460 [ 573.121182] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 573.121219] hci_conn_add_sysfs+0x117/0x1c0 [ 573.121251] le_conn_complete_evt+0x1246/0x1e40 [ 573.121298] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 573.121346] hci_le_enh_conn_complete_evt+0x22f/0x2e0 18:28:26 executing program 7: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000000003cd0c8af251222ae8cd4cf00"], 0x22) [ 573.121372] ? __asan_memcpy+0x3d/0x60 [ 573.121410] hci_le_meta_evt+0x34b/0x530 [ 573.121431] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 573.121459] hci_event_packet+0x66c/0x10e0 [ 573.121483] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 573.121505] ? __pfx_hci_event_packet+0x10/0x10 [ 573.121529] ? mark_held_locks+0x49/0x80 [ 573.121556] ? kcov_remote_start+0x2ce/0x5a0 [ 573.121594] hci_rx_work+0x65b/0x8b0 [ 573.121622] process_one_work+0x8e1/0x1960 [ 573.121660] ? __pfx_process_one_work+0x10/0x10 [ 573.121688] ? move_linked_works+0x172/0x270 [ 573.121727] ? assign_work+0x196/0x240 [ 573.121756] worker_thread+0x67e/0xe90 [ 573.121784] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 573.121828] ? __pfx_worker_thread+0x10/0x10 [ 573.121857] kthread+0x3c8/0x740 [ 573.121881] ? __pfx_kthread+0x10/0x10 [ 573.121904] ? ret_from_fork+0x79/0x7a0 [ 573.121925] ? lock_release+0xc8/0x270 [ 573.121951] ? __pfx_kthread+0x10/0x10 [ 573.121977] ret_from_fork+0x67a/0x7a0 [ 573.121999] ? __pfx_ret_from_fork+0x10/0x10 [ 573.122025] ? __switch_to+0x759/0x1030 [ 573.122055] ? __pfx_kthread+0x10/0x10 [ 573.122081] ret_from_fork_asm+0x1a/0x30 [ 573.122126] [ 573.130972] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 573.131322] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 573.161782] Bluetooth: hci2: failed to register connection device [ 573.164278] debugfs: '0' already exists in 'hci2' [ 573.165244] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 573.166494] CPU: 0 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 573.166523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 573.166538] Workqueue: hci2 hci_rx_work [ 573.166561] Call Trace: [ 573.166569] [ 573.166577] dump_stack_lvl+0xfa/0x120 [ 573.166605] sysfs_warn_dup+0x80/0xa0 [ 573.166632] sysfs_create_dir_ns+0x23b/0x2a0 [ 573.166660] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 573.166686] ? find_held_lock+0x2b/0x80 [ 573.166721] ? lock_release+0xc8/0x270 [ 573.166747] ? do_raw_spin_unlock+0x53/0x220 [ 573.166780] kobject_add_internal+0x24c/0x9a0 [ 573.166826] kobject_add+0x157/0x240 [ 573.166860] ? __pfx_kobject_add+0x10/0x10 [ 573.166893] ? lock_release+0xc8/0x270 [ 573.166919] ? do_raw_spin_unlock+0x53/0x220 [ 573.166950] ? kobject_put+0xaa/0x260 [ 573.166992] device_add+0x32d/0x1830 [ 573.167021] ? __pfx_device_add+0x10/0x10 [ 573.167048] ? hci_debugfs_create_conn+0x10f/0x240 [ 573.167077] ? mgmt_send_event_skb+0x2f3/0x460 [ 573.167099] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 573.167136] hci_conn_add_sysfs+0x117/0x1c0 [ 573.167166] le_conn_complete_evt+0x1246/0x1e40 [ 573.167212] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 573.167261] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 573.167286] ? __asan_memcpy+0x3d/0x60 [ 573.167325] hci_le_meta_evt+0x34b/0x530 [ 573.167345] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 573.167372] hci_event_packet+0x66c/0x10e0 [ 573.167397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 573.167419] ? __pfx_hci_event_packet+0x10/0x10 [ 573.167442] ? mark_held_locks+0x49/0x80 [ 573.167469] ? kcov_remote_start+0x2ce/0x5a0 [ 573.167508] hci_rx_work+0x65b/0x8b0 [ 573.167535] process_one_work+0x8e1/0x1960 [ 573.167574] ? __pfx_process_one_work+0x10/0x10 [ 573.167601] ? move_linked_works+0x172/0x270 [ 573.167640] ? assign_work+0x196/0x240 [ 573.167669] worker_thread+0x67e/0xe90 [ 573.167697] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 573.167741] ? __pfx_worker_thread+0x10/0x10 [ 573.167771] kthread+0x3c8/0x740 [ 573.167794] ? __pfx_kthread+0x10/0x10 [ 573.167817] ? ret_from_fork+0x79/0x7a0 [ 573.167838] ? lock_release+0xc8/0x270 [ 573.167864] ? __pfx_kthread+0x10/0x10 [ 573.167890] ret_from_fork+0x67a/0x7a0 [ 573.167913] ? __pfx_ret_from_fork+0x10/0x10 [ 573.167938] ? __switch_to+0x759/0x1030 [ 573.167969] ? __pfx_kthread+0x10/0x10 [ 573.167994] ret_from_fork_asm+0x1a/0x30 [ 573.168039] [ 573.191953] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 573.192615] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 573.194017] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 573.205472] Bluetooth: hci2: failed to register connection device [ 574.094911] Bluetooth: hci1: command 0x2016 tx timeout [ 574.098188] Bluetooth: hci1: hardware error 0x00 [ 574.414975] Bluetooth: hci5: command 0x0406 tx timeout [ 574.478948] Bluetooth: hci0: command 0x2016 tx timeout [ 574.542969] Bluetooth: hci7: command 0x2016 tx timeout [ 574.927450] Bluetooth: hci3: command 0x2016 tx timeout [ 574.991075] Bluetooth: hci2: command 0x2016 tx timeout [ 576.142982] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 576.463059] Bluetooth: hci5: command 0x0406 tx timeout [ 576.527004] Bluetooth: hci0: command 0x2016 tx timeout [ 576.591006] Bluetooth: hci7: command 0x2016 tx timeout [ 576.974935] Bluetooth: hci3: command 0x2016 tx timeout [ 577.038973] Bluetooth: hci2: command 0x2016 tx timeout [ 578.510992] Bluetooth: hci5: command 0x0406 tx timeout [ 578.574919] Bluetooth: hci0: command 0x2016 tx timeout [ 578.638908] Bluetooth: hci7: command 0x2016 tx timeout [ 579.023145] Bluetooth: hci3: command 0x2016 tx timeout [ 579.086927] Bluetooth: hci2: command 0x2016 tx timeout [ 580.559028] Bluetooth: hci5: command 0x0406 tx timeout [ 580.622914] Bluetooth: hci0: command 0x2016 tx timeout [ 580.686911] Bluetooth: hci7: command 0x2016 tx timeout 18:28:34 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:28:34 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x150, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_CQM={0x98, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x515}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x10000, 0x1, 0x4, 0x80000000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7c9f, 0x0, 0x1, 0x645, 0x7fffffff, 0x7fff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x3, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x9, 0x0, 0x1, 0x5, 0x1787, 0x10000, 0xffffffff, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x34e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x5, 0x4, 0xfffffffa, 0x7ff, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xada}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffbff}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x404001c}, 0x200048d5) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) 18:28:34 executing program 4: sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x90, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x64}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0xe4d2d7722151d35) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) write$sndseq(r0, &(0x7f0000000580)=[{0x1, 0x20, 0x2, 0x47, @time={0x81}, {0x5, 0x40}, {}, @control={0x8, 0xff, 0x3}}, {0xff, 0x40, 0x6, 0x9, @time={0x6, 0x8}, {0x3f, 0xff}, {0x4, 0x45}, @ext={0x45, &(0x7f00000001c0)="46fd315ff8abb0251bdcb97f0917b96d91b8a4b8ae3971a74aa756350fe68a8da370a62983e292a2f4e6e498852ef34cfaaa7a0ca355444066ae2773401bf486180b992ab2"}}, {0xff, 0x80, 0xa1, 0x5, @tick=0x9, {0x81, 0x3}, {0x0, 0x92}, @quote={{0x7f, 0x7f}, 0x1, &(0x7f0000000540)={0x1, 0x9, 0x6c, 0xc0, @time={0xd0c, 0x1}, {0x3, 0x1}, {0x3, 0x8}, @quote={{0x7f, 0x6}, 0x81, &(0x7f0000000500)={0x90, 0x5, 0xaf, 0x7, @tick=0x8001, {0xff, 0xde}, {0x6, 0x81}, @control={0x20, 0x20, 0x2}}}}}}, {0x6, 0x7f, 0x0, 0x7, @time={0x7f, 0x4}, {0x3, 0xf7}, {0x7d, 0x80}, @connect={{0x6, 0x8}, {0x2, 0x8}}}, {0x80, 0x9, 0x7, 0x4a, @tick=0x7, {0x0, 0x1}, {0x6, 0x1}, @raw8={"9cb6d704905bf01ca3d6b24f"}}], 0x8c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='q\x00?E', @ANYRES16=0x0, @ANYBLOB="00012abd7000060000000e000000050030000100000005002900000000000800340008850000050037000100000008003200040000000500300001000000080032000008000008003b00060000000500330001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004844}, 0x20000000) lseek(r0, 0x6, 0x4) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="63336101822d80f6e8e81712b69d600c68fafb85a660aea2bc516e3b988c565835d11b89cb747db662cfff518d0cc2ea563706c142", @ANYBLOB="515a88ac3221a07174b71ba936e9af2b4c56f59c5047cbc0b4cb8ed26ff96b848b577de64762cb5466b57152151651452bb9eb4fb855ed3d440fbaee5cfe1139c954d1967ac02c2e77645fe90b106aa8c6a88d038cb7e59aefcb9636e3b715cef272ad8be6aff5c65725e68ed2c56943b565fd66b5cbfbd21c465f68d0"], 0x22) 18:28:34 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x68}, @l2cap_cid_signaling={{0x64}, [@l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x3e, 0x7fff, 0x200, 0x7}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x1}}, @l2cap_conn_rsp={{0x3, 0x15, 0x8}, {0x8000, 0xa2, 0x100, 0xc8}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x9, 0xbd8, 0x3f}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x3, 0x8001}}, @l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0x1225, 0xfffd, 0x8001, 0x7fff}}, @l2cap_conf_req={{0x4, 0x80, 0x25}, {0x3f, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x5, 0x7f, 0x200, 0x20, 0x3}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x5, 0x8, 0x7, 0x3f}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x4, 0x0, 0x2, 0x9514}}]}}]}}, 0x6d) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:28:34 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 18:28:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x22) clock_gettime(0x0, &(0x7f0000004300)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004240)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000001640)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/84, 0x54}], 0x5, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000003e00)=[{&(0x7f00000018c0)=""/230, 0xe6}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f00000019c0)=""/217, 0xd9}, {&(0x7f0000001ac0)=""/252, 0xfc}, {&(0x7f0000001bc0)=""/107, 0x6b}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)=""/75, 0x4b}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/235, 0xeb}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0xa, &(0x7f0000003ec0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003f00)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003f80)=""/59, 0x3b}, {&(0x7f0000003fc0)=""/13, 0xd}, {&(0x7f0000004000)=""/119, 0x77}], 0x3, &(0x7f00000040c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}], 0x3, 0x10062, &(0x7f0000004340)={r3, r4+60000000}) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000056c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005680)={&(0x7f00000043c0)={0x12b0, 0x14, 0x300, 0x70bd2b, 0x25dfdbfe, {0x11, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "fdb29fedd614e3e9583c63773bf0da29474e218c63fca1012649dba15874279badfd5e8ed2ca3dcc1bd8e8a8a24fa2d4a058b70b9c6fc3ca87bd35766e43fa56db3b0bb1ca9ddbbe19ac7a5cf485412efb6f2b517aba09252c7206101702aced04af811696e69ab71299a28c616661a559fc5befc41955b0e3ed54"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "9848aa29f90f940f8c5ea8876b3046ff61470632499d748ccb93dec45fbea94bb6e997e6bb52342f45e92d93343c39f16aa22428140e8e56b5bb49fe9a6eab55601395bb1f6fb403f07ef89ae58e962f487ad08018162c6602fbde73d73b3b239ba301"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "f464f7be783e8a92a9d9aa365853591f59e43585c934dda539834d1fa57aa780355b72fb9a8b2576329857bce49b3ade023af2cb3791b50646b059ec2a6796907b8b8792dac5012bab143576b7eb4cbe7371c07f3ff5fcf676461030f48578c54c96fd1499e2a0fb1bbde4c86408389c83504ab82756cd3215751ede6e23ac69499b54828dd2f8030a08406060e920f80539c66ba86b2d77706d4228f74b9c8c471f5bce2c2977968cdb9e40"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "e85124fe5f19b92cf8398a4aeadffbdbc575d92c54b15d7a4289c5e22817f0768ff070a6b4a851f6e6c7845aea381b821d17acf4600d8769c53d6d863c19f3f5ef815535d117ea54afe915845cd2efe564c17f8611854bb3be76ab9251034d5c023a89c117cb3faa155bd6668f6c979aa1d602a6210308fa09d7dddf0a47da1f1c4f6e5a6103420a339340adb774e9e26c97e852f30ebb052573333cbe90d8666206ecefeff7d93dd169a8c233a1cc66e46246deac00267c0db552ca9eb9"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "9540e9f2d1c7b2bc459b14bf4024e16fa4eebf7872bfe0946d880aa2107c1e3bcf5691ddd37e2d7bc108a1a789694048c4e5830cdd05f27f08d103b66356250764824756797afe4894ff0eb8432a7f1f6e8b6b34e7025fb7bcf0ef13dd7162dddcd5c8f360dd41d87ccba451ddf096c9a20f9815103b7768473fa6a3b2f8a50f8da9b7b062d5d17c129bc17b611fc75596191d1d9e4c5ea150efb1b444226aca3cfb1c316e11aadbd73a31e0903e737b2bb9f068bf24ea2c1b4ab69635108157063598c319798be0d0893f7505aae69ea3dcd4c32349c0a7b0b2525db9a7d30bee9610464431a2a6e9b3f4d025da45778198d1847329bd02e28d8502ebae972384e583749bb230fa4bd315224cdbd8b40cc8d941aeb563ec9a47d6068a77b59775ea9f18649c267724e9139234ea4120677a6bc7538b69793a347a6127c95e3d3e3a2b933dd18b6b44546800cafc39c503803f2c1fdd8336e5174f59716b804d528300891255250b20068c43966b435ae1e7de0954c0c661d081046abd855cc340137dda3d078614f48f5e0272de211ca5198456f192bc562fd759aacc851d276f50461657289749804ccb76291e4fbe7c99755fba34f4d3f3c7b1c0d000e528237cb0d630437fd46537ccd3ade105e2658e9e5e0187ffc8f9c37f2ef65be0b7b58d3083ad38ce1c799f98b61f382de4913949cebcf0c4f3a93610f60aaf9b5c43c143e6df4a8f4c6e792727d8ee54b8268de08d4b78923a4126f33172bb3539b84fd20cd4ef631b618429429e72caa9a531f0c48b97d8e407fc50769921da311741b83c31fc4d9d1b079b5ec36da70a3d65b639498f9b2925f4a5a94e5992ce06ec7210f4d199c8d1f9d78f7d52da253b11fb7249f3e993932aa89cc0b4a613b072c4b287813c886a71298dd4fdce21a9c41f5ae030868fe6f746c15998e6869fed70fed0efda50553e909dd44ca58bb2db842d18b6df533a6f5fa8e88bfb2b94458dd63cfb0c709e97198fb166ca8837bb92c012a8acc6130cdb7fcb52f0928b1c3f0133d3041264ba3fe04ebeb177d0d3abced00cda1e0c2a54ddd989026ae0ae6ab8e067cc9b2eda17a0357e2ac716332a020ac977ab96240f5c375a465bedbf50f906d75862c4819bf8dc5859d8168c13f656959613ceb3e2e2ea717eb83fb67735f62d3dc298fbcc7550de995ccae8c52c65eefe2f2aa009870c5a912cf0c1da52ec798ae6fd3a17f285260e9f96df2e21c658be340fa700610733e95010da2a5f0f6f6a0e7da7bddd8701d40d8e1b3a183df1fb76bde4d35057323a0c5bd5575c2c6b9ccbe44ff810be925de907df1a8fdb5425bf68a49701085499f70fb26597823dc1005ac6b3f5132ce6dc12724ee196035dddf1a302d6150e2a0a9bb595d0c898bda156720f4e5ded6f96ab10733093f02933e9be640c666ce520c716e902f767565a6ad7a17efb28487e04550d25ecd43abf63df9be8a11ba64d44c60a5a46899edde263f8bc3d3c3cabe98b1e528106a0522643b09154bc100f66460fc12f24b210b2666a011a18550ff289853425ba21e7f8a8f2d724ec3bdc1d0dcfa476f53a6da952c7e2756113b8b9d04e25cb7eb4cc0cf06b8aadba60c6ef69eb021029731fb938ea9ed4d2dc8f81009fb6f6e854710acd1d56fe6232ec4e47586b148a8e167e584397befe3d7872120ea0ecc895c1c08af8466a506163d67af00e60751cf7b93f341454e27ad5090a25ae8a6cd1552b036373aab93f974fd624d663d28bc74f1a31d6d4e32fd4ceba1076004f28a4999c3468e643730e841c0e441f6e407f727a5b39590cf897fc4b4401b8d7bb90caca7f890af753ddc4922b4a21f944d9567c6f4d4e6ba3de09d6871c03f350b2e9bee2c40f2ecfc8c8288c51258518040c6624fe4f0533e0e21115dfce0942be3b0743438a1d8335be5d42659bf1564fc20f4928564eb351104810da6deda0d192b8aeff3dbcbc00780aca54fd23e0784da8e947e20793765302604198a73c41d39b1bd50f528b1c46f83695e434aaec6dd7426d3498befcd51373bd5a13bab9b788df50f24f2b2d394c65fa1a77af92fbd87c7d6d79f0f742049bb6661eaa2b9fb9a03c483e328aaf3369341df57a4efce8e0ea757fc7ceb38aee62c85e4948ac226a88080ff08ba926173de29c1a0cf391adf2fa432d7bee9eabe998452ea924097b638ef204074a61e3c63f7ad715567ebf93b5f0d4654f1373c24d7fd6357d5853845c79763e949fa74fb5c094a724f80c40b17ec57bd83b5820424fb802c271728a6a3525fbf7cb140d472464ad95dc853e6bd39c878bcb822f3ad6b1b92f5ef7ea43fc9bf8181aa257640bca83358a75ec3c7a67a68c965c4b5a9d7607bbfd3a3d04f216fabd63c38f664ab7efa73d9c36ed65627da6cb2d5b50051ba29560af67597074dc0aa4b8e9b39581640b7e6b55b20508e4fd87723078ce43bc8367622a38cd40df612e07abe0d93d63648a58750f24ceb48b4fe9601c7267851b1a3fdf4ca86b16150bf603ed5775c8a0f0b928874587629eb8c60405775ddb96ebd818435ba703f5dead0c5fb43ce7e8591ed04608c70d116f0f6e3310cf0318baf26a4df587233b74e9d694d9472550af2e27688c4d45f9a415a89fde642d435860f383258d4997e780788e82cf2b7c1daacb9762cc22463ccdcce402b42e7715668f35bfb0601ab716a4287eb007369eab4656e6dba5cf9f37a64bb5bdb442184f841b0b4230cf18e882d073a1826ddffc8a4237d3f90cd3439298a809f3f7eb812753709b20dae831c84da654ddb2de8805b50dc184241b7e26d75466131cba7da8116e0580eec7dc6f54594791646cae4532cc4493e2c1709f531d1b10fe7f5f68c79a4014acc1e5ce94c65fd45c5e8874770ba4402a88c95017a7102c508041ac78b273c1ae04b2e07bb40a59b4136945913353ea089095132a09e0dca18995660e799377417aa42d63ad5fcbecf9a567e915c33aae2ad6b135de22f348ba3737375818f76b11e2f744baea57bff14a5b37b0a07be842d118bdbc2cf334f88138be9b6916832a030c46bc180bad37a91c80092400738d796423ffb42e608a2208c0cc256f4476efed66df5ce2ac4e580102e0861b6c27392ad1897563f4df6a66bf6832cbc520e08ab6fc569ed07c2aedfbf0f826ec5d186b9fff60833baac8cb025105da9fc773e332a2d79c9e92a7ba23781591164a12370cca61028f9ea9b33848c701f6a651d6ea0a0dc34e9bb64ccd2917e6e0d91d35d3af69f4350bc5e2e4ece7afe5e2727ce5980b1caabcd5f3b18096704920342bafbe708dc0163ea212d213b4190f3c76ed686c4466f9fea48adc2d1ec62bdbc1a0ca327be62bd9f10f552bd845a42dc308aaa6c3e402e3bf7dbfbab7af3215e76fa295814397098eb7deb4955a964f30cdfaa4154c53c9c84186a97a869398361d15bf30c59fa2f611072d60755d640e3e6a2504dd8fb28a950d121f14591e8fcbcb0d9f3b0d42db268f2a1e02eca0c8aca0b4f2819fab02c98b8a790792ecc48c6a2bcdb4360c60acab5112de020141ea50069722e7f11fb2ddf6d47ad66dbe98f0561ab4ed16c2c565a9e4aafecce2aaae4dcee28b28eceb0b42d3d43a38e97ff3fe04afcfc30abd6949f2cf11a26bdc288d1cd2bd117befa6700bca640849d04cab28d72864e662b700853826908885f650d5f96f5b706f5665f57689af8f9309796bc4c561c63fcbf1dadfabf96f88ff9f8fda6e9f50fdb49555610ef4446b19d6f74325ae5c71f08069bb6213909c7afc4994addc9bc10ac9bd26efa97939add7459ee2b9d741d4fdeaf52ac1fce37de1ac2a6a078b0bd542dc8b4c0f9aec605e6ebf15c6e9e3ae047d30f6506349b623cc908669798cc70b1261d3055d84d893e8eb03d8699d33a10ea40a9f3381a476d8055d528c69d1acc5a0576725409f7e672144f0b1ecd84d3a4b6ac4d39df4d203690cee19a24c81150ce4289e6c1f1241ae4df2e7541ed707f3b4c4eee6d692ce81d9bdbefab58f3550e77d426a3dacc8c69b8913cdf5800fd33e473aeba8e84abb7ee2875f774916d04b5d9d52e6f9df73a32294b936585c9bc7609a9aa0ccc8077a122fef56b2d1b4fde1cd1ff1f3d49ba050833ce4647b37d38bdadd773581b3191960dc0861ca8aef8ec24f0c07bc60d350ef6dd5bfe2cd626697e2a6f13d3e9d8744b46ef2c415d1eb61c716f8c8d7035c16e136ae8880b810184493234270a2d443a89d65b4af46dec006df3766639a142057415d65a8b004d25829ede03cb4cb19ef47ae27a13c41bd4941d53c78a7536493973221220566a59066a35cf6d3cf85bffef7629469f98f9faa940d10abe815a9cc6a8301acacd53e201294e15950bc73df98df9adf79515912a446048d3969694bc86e385228679270d4ceb0b8ba3cf1c3cafae640fcdf2a42c29d37d240a8ed085bf4159d2e074ba0b5dc6b9c8f0da0fb092c96d4b1e08d98a57b98ca84d098394982e35668bef5ac0ec592ac1b4029adf02fdf401d5b2689a00daa18ff7b17dd8d99f01a7813b9a0e2012bbc43bf45d3cb366b7df2f9a05c12b603a064c610a648d2700f40736066a5d336765459cb768c0f9674fd7b311b8a66681fff463429072016c2d77a3a0229cc144035d62a20ff8455522a3e7f2f6e8cc2f58c0ceeed31a3526238253a2bed00a77f335f3ad673bd6d329f5305eed46271bcbcb233c47b2759e4cc4245c2772593792475dcb5dfcc57070931add209fd97b9c3eeef14ed3cea3913faf6d0eaa9a3571aa33b151168c69f77690611d7f513a069a6143efe1564aa149ad4fd452ba925ebe2f46e1e67d83d3b9a275de2632a5d84e32c7703fce05bc298b61f66265455887f85286e99696099d2fba274d5601cbfe836a9bdc36d267a09030fd35b8b8ca05ff361f45de44db8cbfab37f56a54e50fdf69e2f66fecc178c9a6d24193016cf531cc277fccf52dc5f65533b407387fa913e30f2c3e3224fdbf3679c3e7f827fdb4f95f39210a485278742be899f652fa2abea02cce7bbe90ce5716dad2a493a417be0b247743ec3ff3b33f3c40403961496e85ef4767d4ae4e6283145054600645099782b6e37a5d3227c29dabfa89a7bb73a1a877c5cd9625a9bb345b263d3b3359d3c8e782bf65c3bcc0c6351f7bcae3a6d37336d2c4507d0aa6dcec9e32628a40ba0927f5d3ab344680a56d6923a95ae5ff2201484127aba39f1c3bd7a1af7c3c4579ddc5aad1caa5b666bb48ebff2cb4e96a7ec92c82c43d070248d1a58b0ac00a4a4036906a54bc5ac0b2dcb348d684f5509fa1254036baf8febf2345cf0f900cac63bb0ada42540e9bce4b5e6678d66455a533710d10b7418ceed8ec8233f2e5fd103007d7564947446567ffd97b9dc2ee3ad89b83fc76944ea46e324757576206e49d9b58a68f728704d8f0f4ae7c4b32356b5b22366e1062a3a595d618b22f8f56974f97cff718f9a65048d358d58ba8fed45b1e0d54b493d1af57ec49cb6be70daa69a5991c828763b3e70c1a166418ff0b150318728cdb3e28457f684ae2ba5650d7f4af6a40ddf8b859559ec1f33fa774ca07f75bc8d9ed0fb07174a8d2b4a271eb5c04dc337897d8068090cb00041d6ef54a3ec950509c2ce31fa08dcb75c4763fccf3d1bc684c5f6c06defaa16084f1703daa290f1563019ad29fc87b62d4736ac7c614d13ba4977188868fcfdab22fe4864c48b663d116c346c90fc00afbbed0a0c74804979eaad77fecdfcf2cc"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "efffd3f6def1f8ad3a12306554b3f247bfe93896e11b13a5dd1e3b606650f78c1158871de32c0d5ec1827532141777a2227ab135ea9c917d"}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x840}, 0x44004) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:28:34 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:28:34 executing program 7: r0 = mq_open(&(0x7f0000000000)='\x00', 0x40, 0x40, &(0x7f0000000040)={0x3, 0x400, 0x1, 0x4}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f2a00"], 0x22) [ 581.072900] Bluetooth: hci3: command 0x2016 tx timeout [ 581.103151] debugfs: '0' already exists in 'hci5' [ 581.104591] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 581.106257] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 581.106293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.106311] Workqueue: hci5 hci_rx_work [ 581.106343] Call Trace: [ 581.106353] [ 581.106364] dump_stack_lvl+0xfa/0x120 [ 581.106399] sysfs_warn_dup+0x80/0xa0 [ 581.106434] sysfs_create_dir_ns+0x23b/0x2a0 [ 581.106467] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 581.106498] ? find_held_lock+0x2b/0x80 [ 581.106544] ? lock_release+0xc8/0x270 [ 581.106576] ? do_raw_spin_unlock+0x53/0x220 [ 581.106616] kobject_add_internal+0x24c/0x9a0 [ 581.106664] kobject_add+0x157/0x240 [ 581.106705] ? __pfx_kobject_add+0x10/0x10 [ 581.106745] ? lock_release+0xc8/0x270 [ 581.106776] ? do_raw_spin_unlock+0x53/0x220 [ 581.106815] ? kobject_put+0xaa/0x260 [ 581.106875] device_add+0x32d/0x1830 [ 581.106912] ? __pfx_device_add+0x10/0x10 [ 581.106945] ? hci_debugfs_create_conn+0x10f/0x240 [ 581.106982] ? mgmt_send_event_skb+0x2f3/0x460 [ 581.107010] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 581.107055] hci_conn_add_sysfs+0x117/0x1c0 [ 581.107093] le_conn_complete_evt+0x1246/0x1e40 [ 581.107151] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 581.107210] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 581.107241] ? __asan_memcpy+0x3d/0x60 [ 581.107288] hci_le_meta_evt+0x34b/0x530 [ 581.107313] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 581.107346] hci_event_packet+0x66c/0x10e0 [ 581.107375] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 581.107402] ? __pfx_hci_event_packet+0x10/0x10 [ 581.107431] ? mark_held_locks+0x49/0x80 [ 581.107463] ? kcov_remote_start+0x2ce/0x5a0 [ 581.107511] hci_rx_work+0x65b/0x8b0 [ 581.107544] process_one_work+0x8e1/0x1960 [ 581.107592] ? __pfx_process_one_work+0x10/0x10 [ 581.107625] ? move_linked_works+0x172/0x270 [ 581.107672] ? assign_work+0x196/0x240 [ 581.107707] worker_thread+0x67e/0xe90 [ 581.107740] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 581.107795] ? __pfx_worker_thread+0x10/0x10 [ 581.107830] kthread+0x3c8/0x740 [ 581.107859] ? __pfx_kthread+0x10/0x10 [ 581.107887] ? ret_from_fork+0x79/0x7a0 [ 581.107914] ? lock_release+0xc8/0x270 [ 581.107945] ? __pfx_kthread+0x10/0x10 [ 581.107976] ret_from_fork+0x67a/0x7a0 [ 581.108002] ? __pfx_ret_from_fork+0x10/0x10 [ 581.108033] ? __switch_to+0x759/0x1030 [ 581.108071] ? __pfx_kthread+0x10/0x10 [ 581.108102] ret_from_fork_asm+0x1a/0x30 [ 581.108157] [ 581.146654] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 581.150229] Bluetooth: hci5: failed to register connection device [ 581.151385] Bluetooth: hci2: command 0x2016 tx timeout [ 581.152798] debugfs: '0' already exists in 'hci0' [ 581.154004] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 581.155488] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 581.155529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.155545] Workqueue: hci0 hci_rx_work [ 581.155573] Call Trace: [ 581.155581] [ 581.155591] dump_stack_lvl+0xfa/0x120 [ 581.155622] sysfs_warn_dup+0x80/0xa0 [ 581.155651] sysfs_create_dir_ns+0x23b/0x2a0 [ 581.155679] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 581.155705] ? find_held_lock+0x2b/0x80 [ 581.155743] ? lock_release+0xc8/0x270 [ 581.155770] ? do_raw_spin_unlock+0x53/0x220 [ 581.155804] kobject_add_internal+0x24c/0x9a0 [ 581.155852] kobject_add+0x157/0x240 [ 581.155887] ? __pfx_kobject_add+0x10/0x10 [ 581.155921] ? lock_release+0xc8/0x270 [ 581.155947] ? do_raw_spin_unlock+0x53/0x220 [ 581.155979] ? kobject_put+0xaa/0x260 [ 581.156022] device_add+0x32d/0x1830 [ 581.156053] ? __pfx_device_add+0x10/0x10 [ 581.156081] ? hci_debugfs_create_conn+0x10f/0x240 [ 581.156112] ? mgmt_send_event_skb+0x2f3/0x460 [ 581.156136] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 581.156173] hci_conn_add_sysfs+0x117/0x1c0 [ 581.156205] le_conn_complete_evt+0x1246/0x1e40 [ 581.156253] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 581.156302] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 581.156329] ? __asan_memcpy+0x3d/0x60 [ 581.156369] hci_le_meta_evt+0x34b/0x530 [ 581.156390] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 581.156419] hci_event_packet+0x66c/0x10e0 [ 581.156443] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 581.156466] ? __pfx_hci_event_packet+0x10/0x10 [ 581.156490] ? mark_held_locks+0x49/0x80 [ 581.156517] ? kcov_remote_start+0x2ce/0x5a0 [ 581.156573] hci_rx_work+0x65b/0x8b0 [ 581.156601] process_one_work+0x8e1/0x1960 [ 581.156642] ? __pfx_process_one_work+0x10/0x10 [ 581.156670] ? move_linked_works+0x172/0x270 [ 581.156710] ? assign_work+0x196/0x240 [ 581.156739] worker_thread+0x67e/0xe90 [ 581.156768] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 581.156814] ? __pfx_worker_thread+0x10/0x10 [ 581.156844] kthread+0x3c8/0x740 [ 581.156869] ? __pfx_kthread+0x10/0x10 [ 581.156893] ? ret_from_fork+0x79/0x7a0 [ 581.156919] ? __pfx_kthread+0x10/0x10 [ 581.156945] ret_from_fork+0x67a/0x7a0 [ 581.156968] ? __pfx_ret_from_fork+0x10/0x10 [ 581.156994] ? __switch_to+0x759/0x1030 [ 581.157027] ? __pfx_kthread+0x10/0x10 [ 581.157053] ret_from_fork_asm+0x1a/0x30 [ 581.157100] [ 581.190671] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 581.192727] Bluetooth: hci0: failed to register connection device 18:28:34 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x17}, "e705baad1923ba1c97f8f02ac9a44fbf65f881f1c0d079"}, 0x1b) 18:28:34 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x22) syz_emit_vhci(0x0, 0x0) [ 581.259110] debugfs: '0' already exists in 'hci7' [ 581.261459] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 581.262895] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 581.262927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.262943] Workqueue: hci7 hci_rx_work [ 581.262973] Call Trace: [ 581.262981] [ 581.262991] dump_stack_lvl+0xfa/0x120 [ 581.263024] sysfs_warn_dup+0x80/0xa0 [ 581.263054] sysfs_create_dir_ns+0x23b/0x2a0 [ 581.263084] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 581.263112] ? find_held_lock+0x2b/0x80 [ 581.263152] ? lock_release+0xc8/0x270 [ 581.263180] ? do_raw_spin_unlock+0x53/0x220 [ 581.263216] kobject_add_internal+0x24c/0x9a0 [ 581.263259] kobject_add+0x157/0x240 [ 581.263296] ? __pfx_kobject_add+0x10/0x10 [ 581.263331] ? lock_release+0xc8/0x270 [ 581.263360] ? do_raw_spin_unlock+0x53/0x220 [ 581.263394] ? kobject_put+0xaa/0x260 [ 581.263439] device_add+0x32d/0x1830 [ 581.263472] ? __pfx_device_add+0x10/0x10 [ 581.263501] ? hci_debugfs_create_conn+0x10f/0x240 [ 581.263534] ? mgmt_send_event_skb+0x2f3/0x460 [ 581.263559] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 581.263599] hci_conn_add_sysfs+0x117/0x1c0 [ 581.263632] le_conn_complete_evt+0x1246/0x1e40 [ 581.263683] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 581.263734] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 581.263762] ? __asan_memcpy+0x3d/0x60 [ 581.263805] hci_le_meta_evt+0x34b/0x530 [ 581.263835] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 581.263865] hci_event_packet+0x66c/0x10e0 [ 581.263891] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 581.263915] ? __pfx_hci_event_packet+0x10/0x10 [ 581.263940] ? mark_held_locks+0x49/0x80 [ 581.263969] ? kcov_remote_start+0x2ce/0x5a0 [ 581.264012] hci_rx_work+0x65b/0x8b0 [ 581.264041] process_one_work+0x8e1/0x1960 [ 581.264085] ? __pfx_process_one_work+0x10/0x10 [ 581.264114] ? move_linked_works+0x172/0x270 [ 581.264156] ? assign_work+0x196/0x240 [ 581.264187] worker_thread+0x67e/0xe90 [ 581.264217] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 581.264266] ? __pfx_worker_thread+0x10/0x10 [ 581.264297] kthread+0x3c8/0x740 [ 581.264323] ? __pfx_kthread+0x10/0x10 [ 581.264347] ? ret_from_fork+0x79/0x7a0 [ 581.264375] ? __pfx_kthread+0x10/0x10 [ 581.264402] ret_from_fork+0x67a/0x7a0 [ 581.264426] ? __pfx_ret_from_fork+0x10/0x10 [ 581.264454] ? __switch_to+0x759/0x1030 [ 581.264488] ? __pfx_kthread+0x10/0x10 [ 581.264515] ret_from_fork_asm+0x1a/0x30 [ 581.264579] [ 581.300361] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 581.303068] Bluetooth: hci7: failed to register connection device [ 582.606985] Bluetooth: hci5: command 0x0406 tx timeout [ 582.734939] Bluetooth: hci7: command 0x2016 tx timeout [ 583.182997] Bluetooth: hci2: command 0x2016 tx timeout [ 583.184328] Bluetooth: hci0: command 0x2016 tx timeout [ 584.654938] Bluetooth: hci5: command 0x0406 tx timeout [ 584.783230] Bluetooth: hci7: command 0x2016 tx timeout [ 585.231202] Bluetooth: hci0: command 0x2016 tx timeout [ 585.231237] Bluetooth: hci2: command 0x2016 tx timeout [ 586.702944] Bluetooth: hci5: command 0x0406 tx timeout [ 586.830928] Bluetooth: hci7: command 0x2016 tx timeout [ 587.279026] Bluetooth: hci2: command 0x2016 tx timeout [ 587.279053] Bluetooth: hci0: command 0x2016 tx timeout [ 588.750925] Bluetooth: hci5: command 0x0406 tx timeout [ 588.878985] Bluetooth: hci7: command 0x2016 tx timeout [ 589.327015] Bluetooth: hci2: command 0x2016 tx timeout [ 589.327955] Bluetooth: hci0: command 0x2016 tx timeout [ 590.803931] Bluetooth: hci5: command 0x0406 tx timeout [ 590.926940] Bluetooth: hci7: command 0x2016 tx timeout 18:28:44 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe2}, "a2a122b0f1667327ea13258ceae6f3654aa1311c1fc2fc9f964d466a76be526515a7a70080105c0009e9ec50339da6493e796ccc4c9070f9f856017f7c6b683f0f24898c6bcc79aae98f67eb1f6578903d956689cb4842ade7c8e86baf5c89efa7cab259b066b65211d034636edb4cbf99d905cf1af3bf2af71accd05fffba26a3ec4183194edce5a5d693435d23fe71a1f536fe23544631431dcb088347404eb735258568c0638232b21d9487da1bdd6c18cee8058b90e049f50e6d85709352b915ba8604208c90700f08795829caf14eeadb942db48158e2058e1a7c9ab9f96498"}, 0xe6) 18:28:44 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x42, 0x2, "b4bfa0", 0x8, 0x9}]}}}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x71}, @l2cap_cid_signaling={{0x6d}, [@l2cap_conn_req={{0x2, 0x13, 0x4}, {0x7f, 0x200}}, @l2cap_info_rsp={{0xb, 0x3, 0x22}, {0x3ff, 0x45, "2c94ee350083b1e135d6ba7509cf72ca44f6517f2a00a3a83197d04bdfbc"}}, @l2cap_conf_rsp={{0x5, 0x9, 0xd}, {0xc301, 0x8, 0x4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0x6, 0xc, 0x81}}, @l2cap_create_chan_req={{0xc, 0xf8, 0x5}, {0xfff, 0xad6, 0xfa}}, @l2cap_move_chan_rsp={{0xf, 0x3, 0x4}, {0x8, 0x1f}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x3ff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x9}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x2, 0x5}}]}}, 0x76) 18:28:44 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x25}, {0x0, "9acacd2da5740fe7beae432290e115ec7ee88ebac5337c18fbcc77e3ca7ced65613bf5"}}}, 0x28) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:28:44 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="6a44c6a537bd056813edb239b200001d40a27be2000000"], 0x22) 18:28:44 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0x6}}}, 0xd) 18:28:44 executing program 1: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, 0x4, 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ff4c76f8f8a72aec7c770844f6b1f7fc3209a152c09568fd00a6a3af3c7ce2ca02000000be6dd6a522c48c4195278e8985b6232ec23e88a9513fd2ba8b66b2e188e57f7809e7faf31314a40c9a40c2fa206ebc4b0802ff3c847d6e"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf}, "f63ac3fc87b8579f4bc46bb8eeaf39"}, 0x13) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x70, 0x10}, {0x3, 0x5, [0x8001, 0x2, 0x8, 0x8, 0x8, 0x8]}}}}, 0x1d) 18:28:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0x0, 0x0, 0x2080034, &(0x7f0000000280)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r2, &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file1\x00') syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:28:44 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 591.166953] debugfs: '0' already exists in 'hci3' [ 591.168053] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 591.169406] CPU: 0 UID: 0 PID: 296 Comm: kworker/u11:2 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.169437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.169453] Workqueue: hci3 hci_rx_work [ 591.169484] Call Trace: [ 591.169492] [ 591.169501] dump_stack_lvl+0xfa/0x120 [ 591.169534] sysfs_warn_dup+0x80/0xa0 [ 591.169564] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.169594] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.169622] ? find_held_lock+0x2b/0x80 [ 591.169662] ? lock_release+0xc8/0x270 [ 591.169690] ? do_raw_spin_unlock+0x53/0x220 [ 591.169725] kobject_add_internal+0x24c/0x9a0 [ 591.169768] kobject_add+0x157/0x240 [ 591.169805] ? __pfx_kobject_add+0x10/0x10 [ 591.169848] ? lock_release+0xc8/0x270 [ 591.169876] ? do_raw_spin_unlock+0x53/0x220 [ 591.169910] ? kobject_put+0xaa/0x260 [ 591.169954] device_add+0x32d/0x1830 [ 591.169987] ? __pfx_device_add+0x10/0x10 [ 591.170017] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.170049] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.170074] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.170113] hci_conn_add_sysfs+0x117/0x1c0 [ 591.170146] le_conn_complete_evt+0x1246/0x1e40 [ 591.170196] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.170247] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.170275] ? __asan_memcpy+0x3d/0x60 [ 591.170317] hci_le_meta_evt+0x34b/0x530 [ 591.170339] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.170369] hci_event_packet+0x66c/0x10e0 [ 591.170395] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.170419] ? __pfx_hci_event_packet+0x10/0x10 [ 591.170444] ? mark_held_locks+0x49/0x80 [ 591.170472] ? kcov_remote_start+0x2ce/0x5a0 [ 591.170515] hci_rx_work+0x65b/0x8b0 [ 591.170544] process_one_work+0x8e1/0x1960 [ 591.170587] ? __pfx_process_one_work+0x10/0x10 [ 591.170616] ? move_linked_works+0x172/0x270 [ 591.170659] ? assign_work+0x196/0x240 [ 591.170689] worker_thread+0x67e/0xe90 [ 591.170719] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.170768] ? __pfx_worker_thread+0x10/0x10 [ 591.170799] kthread+0x3c8/0x740 [ 591.170825] ? __pfx_kthread+0x10/0x10 [ 591.170850] ? ret_from_fork+0x79/0x7a0 [ 591.170874] ? lock_release+0xc8/0x270 [ 591.170902] ? __pfx_kthread+0x10/0x10 [ 591.170930] ret_from_fork+0x67a/0x7a0 [ 591.170954] ? __pfx_ret_from_fork+0x10/0x10 [ 591.170981] ? __switch_to+0x759/0x1030 [ 591.171015] ? __pfx_kthread+0x10/0x10 [ 591.171042] ret_from_fork_asm+0x1a/0x30 [ 591.171091] [ 591.208313] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.211927] Bluetooth: hci3: failed to register connection device [ 591.263698] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 591.263779] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 591.267906] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 591.269290] debugfs: '0' already exists in 'hci5' [ 591.271256] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 591.272639] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 591.277031] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.277065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.277081] Workqueue: hci5 hci_rx_work [ 591.277113] Call Trace: [ 591.277121] [ 591.277131] dump_stack_lvl+0xfa/0x120 [ 591.277164] sysfs_warn_dup+0x80/0xa0 [ 591.277197] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.277227] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.277255] ? find_held_lock+0x2b/0x80 [ 591.277297] ? lock_release+0xc8/0x270 [ 591.277326] ? do_raw_spin_unlock+0x53/0x220 [ 591.277362] kobject_add_internal+0x24c/0x9a0 [ 591.277407] kobject_add+0x157/0x240 [ 591.277445] ? __pfx_kobject_add+0x10/0x10 [ 591.277481] ? lock_release+0xc8/0x270 [ 591.277510] ? do_raw_spin_unlock+0x53/0x220 [ 591.277545] ? kobject_put+0xaa/0x260 [ 591.277593] device_add+0x32d/0x1830 [ 591.277627] ? __pfx_device_add+0x10/0x10 [ 591.277658] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.277691] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.277716] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.277757] hci_conn_add_sysfs+0x117/0x1c0 [ 591.277792] le_conn_complete_evt+0x1246/0x1e40 [ 591.277853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.277909] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.277937] ? __asan_memcpy+0x3d/0x60 [ 591.277980] hci_le_meta_evt+0x34b/0x530 [ 591.278003] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.278034] hci_event_packet+0x66c/0x10e0 [ 591.278061] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.278085] ? __pfx_hci_event_packet+0x10/0x10 [ 591.278111] ? mark_held_locks+0x49/0x80 [ 591.278141] ? kcov_remote_start+0x2ce/0x5a0 [ 591.278186] hci_rx_work+0x65b/0x8b0 [ 591.278217] process_one_work+0x8e1/0x1960 [ 591.278263] ? __pfx_process_one_work+0x10/0x10 [ 591.278292] ? move_linked_works+0x172/0x270 [ 591.278337] ? assign_work+0x196/0x240 [ 591.278369] worker_thread+0x67e/0xe90 [ 591.278399] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.278450] ? __pfx_worker_thread+0x10/0x10 [ 591.278482] kthread+0x3c8/0x740 [ 591.278509] ? __pfx_kthread+0x10/0x10 [ 591.278534] ? ret_from_fork+0x79/0x7a0 [ 591.278559] ? lock_release+0xc8/0x270 [ 591.278587] ? __pfx_kthread+0x10/0x10 [ 591.278615] ret_from_fork+0x67a/0x7a0 [ 591.278640] ? __pfx_ret_from_fork+0x10/0x10 [ 591.278669] ? __switch_to+0x759/0x1030 [ 591.278703] ? __pfx_kthread+0x10/0x10 [ 591.278732] ret_from_fork_asm+0x1a/0x30 [ 591.278785] [ 591.315764] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.317949] Bluetooth: hci5: failed to register connection device [ 591.324550] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 591.326068] debugfs: '0' already exists in 'hci7' [ 591.328056] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 591.329553] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.329588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.329604] Workqueue: hci7 hci_rx_work [ 591.329631] Call Trace: [ 591.329639] [ 591.329649] dump_stack_lvl+0xfa/0x120 [ 591.329680] sysfs_warn_dup+0x80/0xa0 [ 591.329710] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.329741] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.329768] ? find_held_lock+0x2b/0x80 [ 591.329808] ? lock_release+0xc8/0x270 [ 591.329845] ? do_raw_spin_unlock+0x53/0x220 [ 591.329881] kobject_add_internal+0x24c/0x9a0 [ 591.329925] kobject_add+0x157/0x240 [ 591.329962] ? __pfx_kobject_add+0x10/0x10 [ 591.329998] ? lock_release+0xc8/0x270 [ 591.330027] ? do_raw_spin_unlock+0x53/0x220 [ 591.330061] ? kobject_put+0xaa/0x260 [ 591.330108] device_add+0x32d/0x1830 [ 591.330142] ? __pfx_device_add+0x10/0x10 [ 591.330172] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.330204] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.330229] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.330270] hci_conn_add_sysfs+0x117/0x1c0 [ 591.330303] le_conn_complete_evt+0x1246/0x1e40 [ 591.330356] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.330410] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.330439] ? __asan_memcpy+0x3d/0x60 [ 591.330482] hci_le_meta_evt+0x34b/0x530 [ 591.330504] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.330535] hci_event_packet+0x66c/0x10e0 [ 591.330563] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.330587] ? __pfx_hci_event_packet+0x10/0x10 [ 591.330613] ? mark_held_locks+0x49/0x80 [ 591.330643] ? kcov_remote_start+0x2ce/0x5a0 [ 591.330687] hci_rx_work+0x65b/0x8b0 [ 591.330718] process_one_work+0x8e1/0x1960 [ 591.330763] ? __pfx_process_one_work+0x10/0x10 [ 591.330793] ? move_linked_works+0x172/0x270 [ 591.330838] ? assign_work+0x196/0x240 [ 591.330870] worker_thread+0x67e/0xe90 [ 591.330901] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.330951] ? __pfx_worker_thread+0x10/0x10 [ 591.330983] kthread+0x3c8/0x740 [ 591.331010] ? __pfx_kthread+0x10/0x10 [ 591.331034] ? ret_from_fork+0x79/0x7a0 [ 591.331058] ? lock_release+0xc8/0x270 [ 591.331087] ? __pfx_kthread+0x10/0x10 [ 591.331116] ret_from_fork+0x67a/0x7a0 [ 591.331140] ? __pfx_ret_from_fork+0x10/0x10 [ 591.331169] ? __switch_to+0x759/0x1030 [ 591.331203] ? __pfx_kthread+0x10/0x10 [ 591.331231] ret_from_fork_asm+0x1a/0x30 [ 591.331284] [ 591.366596] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.368752] Bluetooth: hci7: failed to register connection device 18:28:44 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65) munmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) mlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x40, 0xc8, 0x5, 0x1, 0x6f19}}}, 0xc) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x76, 0xa}, {0x1, 0x7d, 0xffff, 0x2, 0x3}}}}, 0x17) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1f, 0x2}, {0x3}}]}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 18:28:44 executing program 6: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x6, 0x81}, 0x100, './file0\x00'}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043106aaaaaa060011"], 0x9) r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x77, 0x103002) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf58}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x270}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40840}, 0x4000414) [ 591.373150] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 591.375088] Bluetooth: hci2: command 0x2016 tx timeout 18:28:44 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="7bcd8563002363d11dbb21cdfff7b2879b5c1ac0bd637c570eee36861790b80ebaea8c211387c778767226007ddb78b5f709c391774090f0fbbdd09529d29640745685493b5cd4d56382faf0c8000068c4f771056997bf4dc569326688f2bbf4a439491dcbbfbb215e7f4697106f781c63a600c14d55cf9b68753a9d77ff99710236f5e271f33ccda67012a91062a89a46f933db81bda18b957eee39ad7e983b303d204238a092cb880351e9468639b7c2ee4103fd90e8edd40714", 0xbb) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="992d", 0x2) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:28:44 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/memory_tiering', 0x28000, 0x20) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x2, 0x72f5, 0xa5}}}}, 0xd) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0xa29, 0x9}, 0x100, './file0\x00'}) 18:28:44 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x78}, "2c82f782912920a254dee742095644ffa7be9271717b29836d480c5b03cdfff7f506f2000cd26789431f6ab8939bd161fedd8c3514c0310e55ef869d51c5e40c309937e3940ce7987f71e08c7c00074d14600de179af861f50657173ef3a2d466eaffc0f41b4d4e29cda44f416084a16d7e0d1acabe620a6"}, 0x7c) [ 591.503022] debugfs: '0' already exists in 'hci3' [ 591.504422] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 591.505796] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.505834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.505850] Workqueue: hci3 hci_rx_work [ 591.505881] Call Trace: [ 591.505890] [ 591.505899] dump_stack_lvl+0xfa/0x120 [ 591.505931] sysfs_warn_dup+0x80/0xa0 [ 591.505962] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.505991] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.506019] ? find_held_lock+0x2b/0x80 [ 591.506059] ? lock_release+0xc8/0x270 [ 591.506087] ? do_raw_spin_unlock+0x53/0x220 [ 591.506123] kobject_add_internal+0x24c/0x9a0 [ 591.506165] kobject_add+0x157/0x240 [ 591.506202] ? __pfx_kobject_add+0x10/0x10 [ 591.506238] ? lock_release+0xc8/0x270 [ 591.506266] ? do_raw_spin_unlock+0x53/0x220 [ 591.506299] ? kobject_put+0xaa/0x260 [ 591.506344] device_add+0x32d/0x1830 [ 591.506377] ? __pfx_device_add+0x10/0x10 [ 591.506406] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.506439] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.506464] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.506503] hci_conn_add_sysfs+0x117/0x1c0 [ 591.506536] le_conn_complete_evt+0x1246/0x1e40 [ 591.506587] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.506638] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.506666] ? __asan_memcpy+0x3d/0x60 [ 591.506707] hci_le_meta_evt+0x34b/0x530 [ 591.506729] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.506759] hci_event_packet+0x66c/0x10e0 [ 591.506785] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.506808] ? __pfx_hci_event_packet+0x10/0x10 [ 591.506834] ? mark_held_locks+0x49/0x80 [ 591.506862] ? kcov_remote_start+0x2ce/0x5a0 [ 591.506908] hci_rx_work+0x65b/0x8b0 [ 591.506937] process_one_work+0x8e1/0x1960 [ 591.506980] ? __pfx_process_one_work+0x10/0x10 [ 591.507009] ? move_linked_works+0x172/0x270 [ 591.507052] ? assign_work+0x196/0x240 [ 591.507082] worker_thread+0x67e/0xe90 [ 591.507112] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.507161] ? __pfx_worker_thread+0x10/0x10 [ 591.507192] kthread+0x3c8/0x740 [ 591.507218] ? __pfx_kthread+0x10/0x10 [ 591.507242] ? ret_from_fork+0x79/0x7a0 [ 591.507266] ? lock_release+0xc8/0x270 [ 591.507294] ? __pfx_kthread+0x10/0x10 [ 591.507321] ret_from_fork+0x67a/0x7a0 [ 591.507345] ? __pfx_ret_from_fork+0x10/0x10 [ 591.507372] ? __switch_to+0x759/0x1030 [ 591.507406] ? __pfx_kthread+0x10/0x10 [ 591.507433] ret_from_fork_asm+0x1a/0x30 [ 591.507482] [ 591.542710] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.544843] Bluetooth: hci3: failed to register connection device [ 591.548309] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 591.549702] debugfs: '0' already exists in 'hci3' [ 591.550767] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 591.552110] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.552141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.552158] Workqueue: hci3 hci_rx_work [ 591.552187] Call Trace: [ 591.552195] [ 591.552205] dump_stack_lvl+0xfa/0x120 [ 591.552236] sysfs_warn_dup+0x80/0xa0 [ 591.552267] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.552296] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.552325] ? find_held_lock+0x2b/0x80 [ 591.552364] ? lock_release+0xc8/0x270 [ 591.552392] ? do_raw_spin_unlock+0x53/0x220 [ 591.552428] kobject_add_internal+0x24c/0x9a0 [ 591.552470] kobject_add+0x157/0x240 [ 591.552507] ? __pfx_kobject_add+0x10/0x10 [ 591.552543] ? lock_release+0xc8/0x270 [ 591.552584] ? do_raw_spin_unlock+0x53/0x220 [ 591.552618] ? kobject_put+0xaa/0x260 [ 591.552663] device_add+0x32d/0x1830 [ 591.552696] ? __pfx_device_add+0x10/0x10 [ 591.552725] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.552758] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.552783] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.552828] hci_conn_add_sysfs+0x117/0x1c0 [ 591.552862] le_conn_complete_evt+0x1246/0x1e40 [ 591.552913] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.552964] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.552991] ? __asan_memcpy+0x3d/0x60 [ 591.553033] hci_le_meta_evt+0x34b/0x530 [ 591.553055] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.553085] hci_event_packet+0x66c/0x10e0 [ 591.553111] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.553134] ? __pfx_hci_event_packet+0x10/0x10 [ 591.553160] ? mark_held_locks+0x49/0x80 [ 591.553188] ? kcov_remote_start+0x2ce/0x5a0 [ 591.553231] hci_rx_work+0x65b/0x8b0 [ 591.553260] process_one_work+0x8e1/0x1960 [ 591.553302] ? __pfx_process_one_work+0x10/0x10 [ 591.553331] ? move_linked_works+0x172/0x270 [ 591.553373] ? assign_work+0x196/0x240 [ 591.553404] worker_thread+0x67e/0xe90 [ 591.553434] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.553482] ? __pfx_worker_thread+0x10/0x10 [ 591.553513] kthread+0x3c8/0x740 [ 591.553539] ? __pfx_kthread+0x10/0x10 [ 591.553564] ? ret_from_fork+0x79/0x7a0 [ 591.553588] ? lock_release+0xc8/0x270 [ 591.553615] ? __pfx_kthread+0x10/0x10 [ 591.553643] ret_from_fork+0x67a/0x7a0 [ 591.553666] ? __pfx_ret_from_fork+0x10/0x10 [ 591.553694] ? __switch_to+0x759/0x1030 [ 591.553727] ? __pfx_kthread+0x10/0x10 [ 591.553754] ret_from_fork_asm+0x1a/0x30 [ 591.553803] [ 591.593627] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.597487] Bluetooth: hci3: failed to register connection device [ 591.600996] Bluetooth: hci3: ACL packet for unknown connection handle 200 18:28:44 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c80063cdbc52318dbefe5e30d0c90148a5b4de8802ee9999f56bcd23c4741b0b1e05dc52c30e3acb64b2bc62410b3f5817212c0420e919b0d5e313ef8e5026b42b9996d1c00ede070865e4048f586dac8662f4d6811bb33b86092f9b4157485b0251697c4e9a"], 0x67) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xeb}, "8dba265e3bca96b09c9f69986b885dcba1ed0f871911fc21d70db8d45934412b9e70e108f5e71e13857e431956418fe0d5d105ceaa53275de7ffca339ade041bcdc024871473cfdf5995a3ee1e8a1a935a6894c337745a356bc2c88812e2e8127b5c041bf60e25e2c00a857c1b73869bee6126c599434266c346e4c7d6e73b6eba7c1c9c0dd82eb917419c70428a4d04b7d33de50e3d9003e62e3803f9453f3883c0a3f2bdb4206dcc392724f6c716bf826a55970d567353db1149cebf5fc3e6fc6d6182166b9473e624b2219968d4e61bba213501232087135bc0df2f7f707e93d1b3e12af9926182a00c"}, 0xef) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@any, 0x8d, 0x0, "ea21cb", 0x0, 0xa}, {@any, 0x0, 0x4, "60e35f", 0x1000, 0x8}, {@any, 0xc0, 0x6, "6ed60e", 0x2, 0x6}]}}}, 0x2e) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:28:44 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 591.650614] debugfs: '0' already exists in 'hci5' [ 591.651737] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 591.653294] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.653325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.653342] Workqueue: hci5 hci_rx_work [ 591.653373] Call Trace: [ 591.653382] [ 591.653392] dump_stack_lvl+0xfa/0x120 [ 591.653425] sysfs_warn_dup+0x80/0xa0 [ 591.653456] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.653486] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.653514] ? find_held_lock+0x2b/0x80 [ 591.653555] ? lock_release+0xc8/0x270 [ 591.653584] ? do_raw_spin_unlock+0x53/0x220 [ 591.653621] kobject_add_internal+0x24c/0x9a0 [ 591.653665] kobject_add+0x157/0x240 [ 591.653703] ? __pfx_kobject_add+0x10/0x10 [ 591.653738] ? lock_release+0xc8/0x270 [ 591.653767] ? do_raw_spin_unlock+0x53/0x220 [ 591.653801] ? kobject_put+0xaa/0x260 [ 591.653856] device_add+0x32d/0x1830 [ 591.653890] ? __pfx_device_add+0x10/0x10 [ 591.653921] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.653954] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.653979] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.654020] hci_conn_add_sysfs+0x117/0x1c0 [ 591.654054] le_conn_complete_evt+0x1246/0x1e40 [ 591.654107] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.654161] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.654190] ? __asan_memcpy+0x3d/0x60 [ 591.654233] hci_le_meta_evt+0x34b/0x530 [ 591.654256] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.654287] hci_event_packet+0x66c/0x10e0 [ 591.654314] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.654338] ? __pfx_hci_event_packet+0x10/0x10 [ 591.654365] ? mark_held_locks+0x49/0x80 [ 591.654394] ? kcov_remote_start+0x2ce/0x5a0 [ 591.654439] hci_rx_work+0x65b/0x8b0 [ 591.654470] process_one_work+0x8e1/0x1960 [ 591.654516] ? __pfx_process_one_work+0x10/0x10 [ 591.654546] ? move_linked_works+0x172/0x270 [ 591.654591] ? assign_work+0x196/0x240 [ 591.654623] worker_thread+0x67e/0xe90 [ 591.654653] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.654704] ? __pfx_worker_thread+0x10/0x10 [ 591.654736] kthread+0x3c8/0x740 [ 591.654763] ? __pfx_kthread+0x10/0x10 [ 591.654787] ? ret_from_fork+0x79/0x7a0 [ 591.654813] ? lock_release+0xc8/0x270 [ 591.654842] ? __pfx_kthread+0x10/0x10 [ 591.654870] ret_from_fork+0x67a/0x7a0 [ 591.654894] ? __pfx_ret_from_fork+0x10/0x10 [ 591.654923] ? __switch_to+0x759/0x1030 [ 591.654957] ? __pfx_kthread+0x10/0x10 [ 591.654985] ret_from_fork_asm+0x1a/0x30 [ 591.655038] [ 591.692886] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.696732] Bluetooth: hci5: failed to register connection device [ 591.701476] debugfs: '0' already exists in 'hci5' [ 591.702814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 591.704375] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.704407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.704423] Workqueue: hci5 hci_rx_work [ 591.704448] Call Trace: [ 591.704456] [ 591.704466] dump_stack_lvl+0xfa/0x120 [ 591.704496] sysfs_warn_dup+0x80/0xa0 [ 591.704526] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.704556] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.704597] ? find_held_lock+0x2b/0x80 [ 591.704636] ? lock_release+0xc8/0x270 [ 591.704665] ? do_raw_spin_unlock+0x53/0x220 [ 591.704701] kobject_add_internal+0x24c/0x9a0 [ 591.704745] kobject_add+0x157/0x240 [ 591.704783] ? __pfx_kobject_add+0x10/0x10 [ 591.704824] ? lock_release+0xc8/0x270 [ 591.704853] ? do_raw_spin_unlock+0x53/0x220 [ 591.704887] ? kobject_put+0xaa/0x260 [ 591.704935] device_add+0x32d/0x1830 [ 591.704968] ? __pfx_device_add+0x10/0x10 [ 591.704998] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.705030] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.705054] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.705095] hci_conn_add_sysfs+0x117/0x1c0 [ 591.705128] le_conn_complete_evt+0x1246/0x1e40 [ 591.705181] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.705235] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.705264] ? __asan_memcpy+0x3d/0x60 [ 591.705306] hci_le_meta_evt+0x34b/0x530 [ 591.705328] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.705359] hci_event_packet+0x66c/0x10e0 [ 591.705387] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.705411] ? __pfx_hci_event_packet+0x10/0x10 [ 591.705437] ? mark_held_locks+0x49/0x80 [ 591.705467] ? kcov_remote_start+0x2ce/0x5a0 [ 591.705511] hci_rx_work+0x65b/0x8b0 [ 591.705541] process_one_work+0x8e1/0x1960 [ 591.705586] ? __pfx_process_one_work+0x10/0x10 [ 591.705616] ? move_linked_works+0x172/0x270 [ 591.705660] ? assign_work+0x196/0x240 [ 591.705692] worker_thread+0x67e/0xe90 [ 591.705724] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.705773] ? __pfx_worker_thread+0x10/0x10 [ 591.705805] kthread+0x3c8/0x740 [ 591.705832] ? __pfx_kthread+0x10/0x10 [ 591.705856] ? ret_from_fork+0x79/0x7a0 [ 591.705880] ? lock_release+0xc8/0x270 [ 591.705909] ? __pfx_kthread+0x10/0x10 [ 591.705937] ret_from_fork+0x67a/0x7a0 [ 591.705962] ? __pfx_ret_from_fork+0x10/0x10 [ 591.705991] ? __switch_to+0x759/0x1030 [ 591.706024] ? __pfx_kthread+0x10/0x10 [ 591.706053] ret_from_fork_asm+0x1a/0x30 [ 591.706104] [ 591.741486] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.743625] Bluetooth: hci5: failed to register connection device 18:28:45 executing program 6: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000101000000000300933e02b454"], 0xd) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff) [ 591.762236] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 591.781508] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 591.782656] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 591.784365] debugfs: '0' already exists in 'hci2' [ 591.789700] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 591.791298] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.791329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.791345] Workqueue: hci2 hci_rx_work [ 591.791377] Call Trace: [ 591.791386] [ 591.791395] dump_stack_lvl+0xfa/0x120 [ 591.791429] sysfs_warn_dup+0x80/0xa0 [ 591.791460] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.791487] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.791514] ? find_held_lock+0x2b/0x80 [ 591.791554] ? lock_release+0xc8/0x270 [ 591.791581] ? do_raw_spin_unlock+0x53/0x220 [ 591.791615] kobject_add_internal+0x24c/0x9a0 [ 591.791656] kobject_add+0x157/0x240 [ 591.791691] ? __pfx_kobject_add+0x10/0x10 [ 591.791724] ? lock_release+0xc8/0x270 [ 591.791751] ? do_raw_spin_unlock+0x53/0x220 [ 591.791788] ? kobject_put+0xaa/0x260 [ 591.791842] device_add+0x32d/0x1830 [ 591.791874] ? __pfx_device_add+0x10/0x10 [ 591.791902] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.791934] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.791958] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.791994] hci_conn_add_sysfs+0x117/0x1c0 [ 591.792026] le_conn_complete_evt+0x1246/0x1e40 [ 591.792074] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.792123] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.792149] ? __asan_memcpy+0x3d/0x60 [ 591.792190] hci_le_meta_evt+0x34b/0x530 [ 591.792211] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.792239] hci_event_packet+0x66c/0x10e0 [ 591.792264] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.792287] ? __pfx_hci_event_packet+0x10/0x10 [ 591.792312] ? mark_held_locks+0x49/0x80 [ 591.792340] ? kcov_remote_start+0x2ce/0x5a0 [ 591.792380] hci_rx_work+0x65b/0x8b0 [ 591.792407] process_one_work+0x8e1/0x1960 [ 591.792448] ? __pfx_process_one_work+0x10/0x10 [ 591.792475] ? move_linked_works+0x172/0x270 [ 591.792515] ? assign_work+0x196/0x240 [ 591.792544] worker_thread+0x67e/0xe90 [ 591.792586] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.792634] ? __pfx_worker_thread+0x10/0x10 [ 591.792665] kthread+0x3c8/0x740 [ 591.792690] ? __pfx_kthread+0x10/0x10 [ 591.792714] ? ret_from_fork+0x79/0x7a0 [ 591.792737] ? lock_release+0xc8/0x270 [ 591.792764] ? __pfx_kthread+0x10/0x10 [ 591.792792] ret_from_fork+0x67a/0x7a0 [ 591.792816] ? __pfx_ret_from_fork+0x10/0x10 [ 591.792844] ? __switch_to+0x759/0x1030 [ 591.792878] ? __pfx_kthread+0x10/0x10 [ 591.792904] ret_from_fork_asm+0x1a/0x30 [ 591.792951] [ 591.826158] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.828249] Bluetooth: hci2: failed to register connection device [ 591.831541] Bluetooth: hci2: SCO packet for unknown connection handle 200 18:28:45 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 591.831603] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 591.875162] debugfs: '0' already exists in 'hci0' [ 591.877419] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 591.878870] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 591.878900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 591.878916] Workqueue: hci0 hci_rx_work [ 591.878941] Call Trace: [ 591.878949] [ 591.878958] dump_stack_lvl+0xfa/0x120 [ 591.878987] sysfs_warn_dup+0x80/0xa0 [ 591.879016] sysfs_create_dir_ns+0x23b/0x2a0 [ 591.879044] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 591.879071] ? find_held_lock+0x2b/0x80 [ 591.879108] ? lock_release+0xc8/0x270 [ 591.879134] ? do_raw_spin_unlock+0x53/0x220 [ 591.879168] kobject_add_internal+0x24c/0x9a0 [ 591.879208] kobject_add+0x157/0x240 [ 591.879242] ? __pfx_kobject_add+0x10/0x10 [ 591.879276] ? lock_release+0xc8/0x270 [ 591.879302] ? do_raw_spin_unlock+0x53/0x220 [ 591.879333] ? kobject_put+0xaa/0x260 [ 591.879375] device_add+0x32d/0x1830 [ 591.879406] ? __pfx_device_add+0x10/0x10 [ 591.879433] ? hci_debugfs_create_conn+0x10f/0x240 [ 591.879464] ? mgmt_send_event_skb+0x2f3/0x460 [ 591.879488] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 591.879524] hci_conn_add_sysfs+0x117/0x1c0 [ 591.879555] le_conn_complete_evt+0x1246/0x1e40 [ 591.879603] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 591.879651] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 591.879677] ? __asan_memcpy+0x3d/0x60 [ 591.879716] hci_le_meta_evt+0x34b/0x530 [ 591.879737] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 591.879765] hci_event_packet+0x66c/0x10e0 [ 591.879789] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 591.879811] ? __pfx_hci_event_packet+0x10/0x10 [ 591.879842] ? mark_held_locks+0x49/0x80 [ 591.879869] ? kcov_remote_start+0x2ce/0x5a0 [ 591.879914] hci_rx_work+0x65b/0x8b0 [ 591.879941] process_one_work+0x8e1/0x1960 [ 591.879982] ? __pfx_process_one_work+0x10/0x10 [ 591.880009] ? move_linked_works+0x172/0x270 [ 591.880048] ? assign_work+0x196/0x240 [ 591.880077] worker_thread+0x67e/0xe90 [ 591.880106] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 591.880151] ? __pfx_worker_thread+0x10/0x10 [ 591.880180] kthread+0x3c8/0x740 [ 591.880205] ? __pfx_kthread+0x10/0x10 [ 591.880228] ? ret_from_fork+0x79/0x7a0 [ 591.880250] ? lock_release+0xc8/0x270 [ 591.880276] ? __pfx_kthread+0x10/0x10 [ 591.880301] ret_from_fork+0x67a/0x7a0 [ 591.880324] ? __pfx_ret_from_fork+0x10/0x10 [ 591.880350] ? __switch_to+0x759/0x1030 [ 591.880381] ? __pfx_kthread+0x10/0x10 [ 591.880407] ret_from_fork_asm+0x1a/0x30 [ 591.880452] [ 591.913294] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 591.916752] Bluetooth: hci0: failed to register connection device 18:28:45 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x51}, @l2cap_cid_signaling={{0x4d}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x1}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0xe3b}}, @l2cap_disconn_req={{0x6, 0xb8, 0x4}, {0xb2, 0x53}}, @l2cap_move_chan_rsp={{0xf, 0xc0, 0x4}, {0x1}}, @l2cap_move_chan_rsp={{0xf, 0xd4, 0x4}, {0x4, 0x6e}}, @l2cap_disconn_req={{0x6, 0x1, 0xffffffffffffff38}, {0x1, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x6}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0xa3}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x8, 0x58}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x5a8d, 0x0, 0x48, 0x2}}]}}, 0x56) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:28:45 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) [ 592.020432] debugfs: '0' already exists in 'hci3' [ 592.021484] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 592.022980] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 592.023011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 592.023026] Workqueue: hci3 hci_rx_work [ 592.023056] Call Trace: [ 592.023065] [ 592.023074] dump_stack_lvl+0xfa/0x120 [ 592.023106] sysfs_warn_dup+0x80/0xa0 [ 592.023135] sysfs_create_dir_ns+0x23b/0x2a0 [ 592.023163] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 592.023189] ? find_held_lock+0x2b/0x80 [ 592.023227] ? lock_release+0xc8/0x270 [ 592.023253] ? do_raw_spin_unlock+0x53/0x220 [ 592.023287] kobject_add_internal+0x24c/0x9a0 [ 592.023328] kobject_add+0x157/0x240 [ 592.023361] ? __pfx_kobject_add+0x10/0x10 [ 592.023394] ? lock_release+0xc8/0x270 [ 592.023420] ? do_raw_spin_unlock+0x53/0x220 [ 592.023451] ? kobject_put+0xaa/0x260 [ 592.023493] device_add+0x32d/0x1830 [ 592.023525] ? __pfx_device_add+0x10/0x10 [ 592.023553] ? hci_debugfs_create_conn+0x10f/0x240 [ 592.023583] ? mgmt_send_event_skb+0x2f3/0x460 [ 592.023607] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 592.023643] hci_conn_add_sysfs+0x117/0x1c0 [ 592.023674] le_conn_complete_evt+0x1246/0x1e40 [ 592.023722] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 592.023770] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 592.023796] ? __asan_memcpy+0x3d/0x60 [ 592.023844] hci_le_meta_evt+0x34b/0x530 [ 592.023865] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 592.023895] hci_event_packet+0x66c/0x10e0 [ 592.023921] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 592.023944] ? __pfx_hci_event_packet+0x10/0x10 [ 592.023967] ? mark_held_locks+0x49/0x80 [ 592.023994] ? kcov_remote_start+0x2ce/0x5a0 [ 592.024035] hci_rx_work+0x65b/0x8b0 [ 592.024061] process_one_work+0x8e1/0x1960 [ 592.024102] ? __pfx_process_one_work+0x10/0x10 [ 592.024130] ? move_linked_works+0x172/0x270 [ 592.024170] ? assign_work+0x196/0x240 [ 592.024199] worker_thread+0x67e/0xe90 [ 592.024227] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 592.024273] ? __pfx_worker_thread+0x10/0x10 [ 592.024302] kthread+0x3c8/0x740 [ 592.024327] ? __pfx_kthread+0x10/0x10 [ 592.024349] ? ret_from_fork+0x79/0x7a0 [ 592.024372] ? lock_release+0xc8/0x270 [ 592.024398] ? __pfx_kthread+0x10/0x10 [ 592.024424] ret_from_fork+0x67a/0x7a0 [ 592.024446] ? __pfx_ret_from_fork+0x10/0x10 [ 592.024472] ? __switch_to+0x759/0x1030 [ 592.024504] ? __pfx_kthread+0x10/0x10 [ 592.024529] ret_from_fork_asm+0x1a/0x30 [ 592.024588] [ 592.057309] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 592.059307] Bluetooth: hci3: failed to register connection device [ 592.085614] debugfs: '0' already exists in 'hci3' [ 592.086576] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 592.087815] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 592.087849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 592.087865] Workqueue: hci3 hci_rx_work [ 592.087889] Call Trace: [ 592.087896] [ 592.087905] dump_stack_lvl+0xfa/0x120 [ 592.087933] sysfs_warn_dup+0x80/0xa0 [ 592.087960] sysfs_create_dir_ns+0x23b/0x2a0 [ 592.087987] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 592.088014] ? find_held_lock+0x2b/0x80 [ 592.088049] ? lock_release+0xc8/0x270 [ 592.088075] ? do_raw_spin_unlock+0x53/0x220 [ 592.088108] kobject_add_internal+0x24c/0x9a0 [ 592.088147] kobject_add+0x157/0x240 [ 592.088182] ? __pfx_kobject_add+0x10/0x10 [ 592.088215] ? lock_release+0xc8/0x270 [ 592.088241] ? do_raw_spin_unlock+0x53/0x220 [ 592.088272] ? kobject_put+0xaa/0x260 [ 592.088314] device_add+0x32d/0x1830 [ 592.088343] ? __pfx_device_add+0x10/0x10 [ 592.088370] ? hci_debugfs_create_conn+0x10f/0x240 [ 592.088400] ? mgmt_send_event_skb+0x2f3/0x460 [ 592.088422] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 592.088459] hci_conn_add_sysfs+0x117/0x1c0 [ 592.088489] le_conn_complete_evt+0x1246/0x1e40 [ 592.088537] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 592.088598] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 592.088624] ? __asan_memcpy+0x3d/0x60 [ 592.088663] hci_le_meta_evt+0x34b/0x530 [ 592.088683] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 592.088711] hci_event_packet+0x66c/0x10e0 [ 592.088736] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 592.088758] ? __pfx_hci_event_packet+0x10/0x10 [ 592.088782] ? mark_held_locks+0x49/0x80 [ 592.088808] ? kcov_remote_start+0x2ce/0x5a0 [ 592.088847] hci_rx_work+0x65b/0x8b0 [ 592.088875] process_one_work+0x8e1/0x1960 [ 592.088913] ? __pfx_process_one_work+0x10/0x10 [ 592.088941] ? move_linked_works+0x172/0x270 [ 592.088980] ? assign_work+0x196/0x240 [ 592.089009] worker_thread+0x67e/0xe90 [ 592.089037] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 592.089081] ? __pfx_worker_thread+0x10/0x10 [ 592.089111] kthread+0x3c8/0x740 [ 592.089134] ? __pfx_kthread+0x10/0x10 [ 592.089157] ? ret_from_fork+0x79/0x7a0 [ 592.089179] ? lock_release+0xc8/0x270 [ 592.089205] ? __pfx_kthread+0x10/0x10 [ 592.089231] ret_from_fork+0x67a/0x7a0 [ 592.089253] ? __pfx_ret_from_fork+0x10/0x10 [ 592.089279] ? __switch_to+0x759/0x1030 [ 592.089310] ? __pfx_kthread+0x10/0x10 [ 592.089336] ret_from_fork_asm+0x1a/0x30 [ 592.089381] [ 592.123521] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 592.126533] Bluetooth: hci3: failed to register connection device [ 592.143227] debugfs: '0' already exists in 'hci5' [ 592.144206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 592.145614] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 592.145644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 592.145658] Workqueue: hci5 hci_rx_work [ 592.145681] Call Trace: [ 592.145689] [ 592.145698] dump_stack_lvl+0xfa/0x120 [ 592.145726] sysfs_warn_dup+0x80/0xa0 [ 592.145752] sysfs_create_dir_ns+0x23b/0x2a0 [ 592.145780] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 592.145806] ? find_held_lock+0x2b/0x80 [ 592.145850] ? lock_release+0xc8/0x270 [ 592.145876] ? do_raw_spin_unlock+0x53/0x220 [ 592.145908] kobject_add_internal+0x24c/0x9a0 [ 592.145953] kobject_add+0x157/0x240 [ 592.145988] ? __pfx_kobject_add+0x10/0x10 [ 592.146021] ? lock_release+0xc8/0x270 [ 592.146047] ? do_raw_spin_unlock+0x53/0x220 [ 592.146078] ? kobject_put+0xaa/0x260 [ 592.146119] device_add+0x32d/0x1830 [ 592.146148] ? __pfx_device_add+0x10/0x10 [ 592.146176] ? hci_debugfs_create_conn+0x10f/0x240 [ 592.146205] ? mgmt_send_event_skb+0x2f3/0x460 [ 592.146227] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 592.146264] hci_conn_add_sysfs+0x117/0x1c0 [ 592.146294] le_conn_complete_evt+0x1246/0x1e40 [ 592.146342] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 592.146389] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 592.146415] ? __asan_memcpy+0x3d/0x60 [ 592.146453] hci_le_meta_evt+0x34b/0x530 [ 592.146474] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 592.146501] hci_event_packet+0x66c/0x10e0 [ 592.146526] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 592.146548] ? __pfx_hci_event_packet+0x10/0x10 [ 592.146571] ? mark_held_locks+0x49/0x80 [ 592.146598] ? kcov_remote_start+0x2ce/0x5a0 [ 592.146636] hci_rx_work+0x65b/0x8b0 [ 592.146664] process_one_work+0x8e1/0x1960 [ 592.146702] ? __pfx_process_one_work+0x10/0x10 [ 592.146730] ? move_linked_works+0x172/0x270 [ 592.146769] ? assign_work+0x196/0x240 [ 592.146798] worker_thread+0x67e/0xe90 [ 592.146826] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 592.146871] ? __pfx_worker_thread+0x10/0x10 [ 592.146900] kthread+0x3c8/0x740 [ 592.146923] ? __pfx_kthread+0x10/0x10 [ 592.146946] ? ret_from_fork+0x79/0x7a0 [ 592.146967] ? lock_release+0xc8/0x270 [ 592.146993] ? __pfx_kthread+0x10/0x10 [ 592.147019] ret_from_fork+0x67a/0x7a0 [ 592.147042] ? __pfx_ret_from_fork+0x10/0x10 [ 592.147067] ? __switch_to+0x759/0x1030 [ 592.147099] ? __pfx_kthread+0x10/0x10 [ 592.147125] ret_from_fork_asm+0x1a/0x30 [ 592.147170] [ 592.180645] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 592.182639] Bluetooth: hci5: failed to register connection device [ 592.184355] debugfs: '0' already exists in 'hci5' [ 592.185407] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 592.186691] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 592.186721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 592.186736] Workqueue: hci5 hci_rx_work [ 592.186758] Call Trace: [ 592.186766] [ 592.186775] dump_stack_lvl+0xfa/0x120 [ 592.186803] sysfs_warn_dup+0x80/0xa0 [ 592.186836] sysfs_create_dir_ns+0x23b/0x2a0 [ 592.186863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 592.186889] ? find_held_lock+0x2b/0x80 [ 592.186925] ? lock_release+0xc8/0x270 [ 592.186951] ? do_raw_spin_unlock+0x53/0x220 [ 592.186984] kobject_add_internal+0x24c/0x9a0 [ 592.187023] kobject_add+0x157/0x240 [ 592.187057] ? __pfx_kobject_add+0x10/0x10 [ 592.187090] ? lock_release+0xc8/0x270 [ 592.187116] ? do_raw_spin_unlock+0x53/0x220 [ 592.187147] ? kobject_put+0xaa/0x260 [ 592.187188] device_add+0x32d/0x1830 [ 592.187217] ? __pfx_device_add+0x10/0x10 [ 592.187245] ? hci_debugfs_create_conn+0x10f/0x240 [ 592.187274] ? mgmt_send_event_skb+0x2f3/0x460 [ 592.187296] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 592.187333] hci_conn_add_sysfs+0x117/0x1c0 [ 592.187363] le_conn_complete_evt+0x1246/0x1e40 [ 592.187410] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 592.187458] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 592.187483] ? __asan_memcpy+0x3d/0x60 [ 592.187522] hci_le_meta_evt+0x34b/0x530 [ 592.187542] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 592.187570] hci_event_packet+0x66c/0x10e0 [ 592.187594] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 592.187616] ? __pfx_hci_event_packet+0x10/0x10 [ 592.187640] ? mark_held_locks+0x49/0x80 [ 592.187667] ? kcov_remote_start+0x2ce/0x5a0 [ 592.187706] hci_rx_work+0x65b/0x8b0 [ 592.187733] process_one_work+0x8e1/0x1960 [ 592.187772] ? __pfx_process_one_work+0x10/0x10 [ 592.187799] ? move_linked_works+0x172/0x270 [ 592.187839] ? assign_work+0x196/0x240 [ 592.187868] worker_thread+0x67e/0xe90 [ 592.187895] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 592.187940] ? __pfx_worker_thread+0x10/0x10 [ 592.187969] kthread+0x3c8/0x740 [ 592.187993] ? __pfx_kthread+0x10/0x10 [ 592.188016] ? ret_from_fork+0x79/0x7a0 [ 592.188037] ? lock_release+0xc8/0x270 [ 592.188063] ? __pfx_kthread+0x10/0x10 [ 592.188089] ret_from_fork+0x67a/0x7a0 [ 592.188111] ? __pfx_ret_from_fork+0x10/0x10 [ 592.188137] ? __switch_to+0x759/0x1030 [ 592.188168] ? __pfx_kthread+0x10/0x10 [ 592.188194] ret_from_fork_asm+0x1a/0x30 [ 592.188239] [ 592.222755] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 592.225648] Bluetooth: hci5: failed to register connection device [ 592.846905] Bluetooth: hci5: command 0x0406 tx timeout [ 592.974998] Bluetooth: hci7: command 0x2016 tx timeout [ 593.166923] Bluetooth: hci3: command 0x2016 tx timeout [ 593.422946] Bluetooth: hci2: command 0x2016 tx timeout [ 593.807626] Bluetooth: hci0: command 0x2016 tx timeout [ 594.894913] Bluetooth: hci5: command 0x0406 tx timeout [ 595.022916] Bluetooth: hci7: command 0x2016 tx timeout [ 595.214914] Bluetooth: hci3: command 0x2016 tx timeout [ 595.470947] Bluetooth: hci2: command 0x2016 tx timeout [ 595.855017] Bluetooth: hci0: command 0x2016 tx timeout [ 596.943174] Bluetooth: hci5: command 0x0406 tx timeout [ 597.071199] Bluetooth: hci7: command 0x2016 tx timeout [ 597.262973] Bluetooth: hci3: command 0x2016 tx timeout [ 597.519131] Bluetooth: hci2: command 0x2016 tx timeout [ 597.903019] Bluetooth: hci0: command 0x2016 tx timeout [ 598.990936] Bluetooth: hci5: command 0x0406 tx timeout [ 599.119010] Bluetooth: hci7: command 0x2016 tx timeout [ 599.311024] Bluetooth: hci3: command 0x2016 tx timeout [ 599.566951] Bluetooth: hci2: command 0x2016 tx timeout [ 599.951684] Bluetooth: hci0: command 0x2016 tx timeout [ 601.038991] Bluetooth: hci5: command 0x0406 tx timeout [ 601.166880] Bluetooth: hci7: command 0x2016 tx timeout [ 601.358896] Bluetooth: hci3: command 0x2016 tx timeout [ 601.614934] Bluetooth: hci2: command 0x2016 tx timeout 18:28:55 executing program 5: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231e23e84f363792496cea1477de012f975c6df5c590e12afe69ef903c9d2d77f8ddfe39200000000000000006ef891b0b90977c48effedb18022d7e46c330d4f5df4655f6b50778786a161b3869ba0a00fb735bca3992390b9800dfc76c16f046ee5fd8f7cf77ed9b0c3ce60565977667c7abf191619c1e9f550b2a2a3d629d297f1da6eb91646d6677e904791a784ae307c693acbaaaf"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x0, 0xc8, 0xc9, 0x8}}}, 0x8) 18:28:55 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x3a}, {0x7f, "2bd8c309240f00a82d8e54accd9e4a88efda85059186350000d893b314cb635fcd6b07988227ed5ad62c959ed891d66d591a1d0081f62388"}}}, 0x3d) 18:28:55 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 18:28:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x6}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x2, 0x6}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@mcast1, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x7, 0x7f, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x8, 0xc8, 0xd50}}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r9, 0x2, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x218, 0x0, 0x1a, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffcee, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0xffffffffffffff75, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x7, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r10, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r11}, @void}}}, 0x24}}, 0x0) r12 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x33f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xbe}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x801) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043eff0a002336fbf7222d83ac39d6258697cc86b40859c87485e43ffeaa78c03b510ecca0d5c621d62c59d282f4cf9963df6c532b9a6f2e15496318ef77c0daa14b434adc9ff23623ed699f41c95cb9117645eb036cb149e28c705c3028478ba220052b29"], 0x22) 18:28:55 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r4, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="8fa2cf91aaae6e469f0275cc2693ec5905000000bf49278d9064394cc6c64519a4ad2e39b343eba0960466ea4ca3cc2e5951073d73f2240d2a015c94b9aa17dc10a2fb59fef99bd880fec6096266c74ecb9c130e9eaa8e8638ff9647f1d8282893eed1b87d664c3c6a3bf567efba55cfd764ddc138f4399ea6d010e927b4991b9730ae81378d07679e5a65380487fbb98491287532eb3efa58f7ed5ab091cef6e3f860c8b1014938ec1c6de0", @ANYRESHEX=r4, @ANYRESOCT, @ANYRESDEC, @ANYRES32=r2], 0x22) 18:28:55 executing program 0: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000200)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x40}, @random="75c8c1cc4a92", @device_a, @device_b, {0x8, 0xe51}}, {0x8, 0x0, 0x0, 0x0, 0x3}}, {@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x995}, @from_mac, @broadcast, @random="e40bb7f2c32c", {0x9, 0x1}}, {0xd, 0x0, 0x0, 0x1, 0x80}}}, @ver_80211n={0x0, 0xfe1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x13, "4c31098a0db5a5e659e39c7ff7c4c66e55fbd6"}, {@device_a, @broadcast, 0xa6, "786f04ce021b9b3a4f5accded502db41d8c400757d8af3300d8315d27bf0cb175a69044eb86e28907697aaed0ef5a0e320b996390547abb551b2cde4ca2d4dd9383825f88391614dc801be3da1b7121c9f9c649e549fd91fe61c05424ab40c15f0f9cf8ae82dbae9e7a26491dbba5e61f91e4ced2106907276c452574708c7cbdab8ffa6a17234faa2011799b033885e95f9efb02c399e0cce3c4033d44f1bb7edd49c0a9f86"}, {@device_a, @device_b, 0x72, "2208c608eaadac9561b5e91034e5595bf373dcdd944753e00baca6c26df7c26a0a7267b7925aeb9673cb12a1220d6c3da1be1ac0978659aa1d67120402452cbd8f927f316e2dcbd8f4c59c7109e36f52442beae39d7aed49450221a92a53ee165c4da1a4ff08fceb0b698012890c9b2465d8"}]}, 0x190) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:28:55 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 602.100854] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 602.108981] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 602.110875] Bluetooth: hci2: Invalid handle: 0x3623 > 0x0eff [ 602.115246] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 602.125375] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 602.126632] debugfs: '0' already exists in 'hci5' [ 602.127625] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 602.129678] CPU: 1 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.129695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.129704] Workqueue: hci5 hci_rx_work [ 602.129724] Call Trace: [ 602.129729] [ 602.129734] dump_stack_lvl+0xfa/0x120 [ 602.129751] sysfs_warn_dup+0x80/0xa0 [ 602.129769] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.129783] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.129802] ? find_held_lock+0x2b/0x80 [ 602.129830] ? lock_release+0xc8/0x270 [ 602.129844] ? do_raw_spin_unlock+0x53/0x220 [ 602.129862] kobject_add_internal+0x24c/0x9a0 [ 602.129884] kobject_add+0x157/0x240 [ 602.129903] ? __pfx_kobject_add+0x10/0x10 [ 602.129920] ? lock_release+0xc8/0x270 [ 602.129934] ? do_raw_spin_unlock+0x53/0x220 [ 602.129951] ? kobject_put+0xaa/0x260 [ 602.129974] device_add+0x32d/0x1830 [ 602.129991] ? __pfx_device_add+0x10/0x10 [ 602.130006] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.130024] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.130037] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.130057] hci_conn_add_sysfs+0x117/0x1c0 [ 602.130074] le_conn_complete_evt+0x1246/0x1e40 [ 602.130100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.130125] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.130139] ? __asan_memcpy+0x3d/0x60 [ 602.130161] hci_le_meta_evt+0x34b/0x530 [ 602.130172] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.130187] hci_event_packet+0x66c/0x10e0 [ 602.130200] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.130212] ? __pfx_hci_event_packet+0x10/0x10 [ 602.130225] ? mark_held_locks+0x49/0x80 [ 602.130239] ? kcov_remote_start+0x2ce/0x5a0 [ 602.130261] hci_rx_work+0x65b/0x8b0 [ 602.130276] process_one_work+0x8e1/0x1960 [ 602.130298] ? __pfx_process_one_work+0x10/0x10 [ 602.130313] ? move_linked_works+0x172/0x270 [ 602.130334] ? assign_work+0x196/0x240 [ 602.130350] worker_thread+0x67e/0xe90 [ 602.130365] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.130389] ? __pfx_worker_thread+0x10/0x10 [ 602.130405] kthread+0x3c8/0x740 [ 602.130418] ? __pfx_kthread+0x10/0x10 [ 602.130430] ? ret_from_fork+0x79/0x7a0 [ 602.130445] ? __pfx_kthread+0x10/0x10 [ 602.130459] ret_from_fork+0x67a/0x7a0 [ 602.130471] ? __pfx_ret_from_fork+0x10/0x10 [ 602.130485] ? __switch_to+0x759/0x1030 [ 602.130502] ? __pfx_kthread+0x10/0x10 [ 602.130516] ret_from_fork_asm+0x1a/0x30 [ 602.130541] [ 602.149083] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.150206] Bluetooth: hci5: failed to register connection device 18:28:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x9, &(0x7f00000004c0)=0x0) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0xd1, 0x12, &(0x7f0000000000)="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"}) io_submit(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r5, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r4, &(0x7f00000000c0)="d3", 0x1}]) io_submit(0x0, 0x7, &(0x7f0000002b00)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000540)="4d645ae6d0881f161af248212909bb8cd57b74c0d74cd91000ec223454efb7b88338a5df5814a60b3cc5365c3e3d8af3fa564c679072ce18054e9fbc62d9d00464d146773005b861e757d7b41709e14a9bd9f04f0d7f8123f88d6a60b272ecbbe38b220f9eabe4e5e44ec7a1c6a5ccd352611691b860697c1d4fcdd1db90b2425d34761e289f1fd9484de4ae805f1ef07c62a5675ad31f4574f64880f2727803a5a107", 0xa3, 0x4, 0x0, 0x2}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="c3be9330", 0x4, 0x9}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000002680)="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", 0xfd, 0x9, 0x0, 0x2, r0}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000027c0)="c23b61a6deb7f2c85588addd086748ede4db92adae96d04919d0ad9286b0fe59115f8d1059ec78135c999af34c90ec257fbdc884349c8e9f29aecf13ee3a083168f997c7092837a220b24bcd1cef7cdbbd818cc7d832d3f03b9fd27cfb867e2852", 0x61, 0xe896}, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f0000002880)="dcb1b0ad07a132fa9edb3ba24ec136f5dacd85ee02664df9dbc40e407a31b41c4eaf08b9ff656b824e502b9e929c62ce6e3ee92f65517d0aafd4551e25d7f055d4eacc9dfb381036c0b46560ff8fc2b12a932c6bd3815514696741e98fd083dcd5e548a9cef1f3ec05328eb89a606819dbcd2df9f2daa2aa4628868a91c997af358bf96897ead2274601b32faf1221cb572c4bfa2efffc058fea2619", 0x9c, 0x400, 0x0, 0x2}, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000002980)="8a9a2deb50ecd136ec7d07491aa4ee3c1d3601bea3892bfa056d0c69af31530b483a5cffc235b9a116d2b746ffed9b227940c587022c281a8c5027a2ee", 0x3d, 0x1, 0x0, 0x2, r0}, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000002a00)="9c0b26e77819b828aba5a0aec7d3a3663838709c08b91fe1d36020d4b2c8b676ddb7f1bdc91bb52514982ada4ddb70f65473dbee970f561a61ce7192fa89e97da8793ffe1ea2c2c36c74b0c453a6fe3e643f5c0f9011009b1825c180874c20e7f0080753a8ccd40228def1c94c2b40313419eb457326ae1bd3922ac4e9f8be79a4cfca1a64caab44f6ed57274a3aa3622eac5b8658f3f9614f301a0e6afa0a", 0x9f, 0x6, 0x0, 0x1, r4}]) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x22) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r6, &(0x7f00000000c0)="10", 0x1, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000440)=0x1) [ 602.175089] Bluetooth: hci2: Invalid handle: 0x3623 > 0x0eff [ 602.175801] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 602.176280] debugfs: '0' already exists in 'hci3' [ 602.178576] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 602.179123] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 602.179152] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.179182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.179199] Workqueue: hci3 hci_rx_work [ 602.179231] Call Trace: [ 602.179239] [ 602.179248] dump_stack_lvl+0xfa/0x120 [ 602.179280] sysfs_warn_dup+0x80/0xa0 [ 602.179310] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.179339] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.179366] ? find_held_lock+0x2b/0x80 [ 602.179405] ? lock_release+0xc8/0x270 [ 602.179432] ? do_raw_spin_unlock+0x53/0x220 [ 602.179466] kobject_add_internal+0x24c/0x9a0 [ 602.179507] kobject_add+0x157/0x240 [ 602.179543] ? __pfx_kobject_add+0x10/0x10 [ 602.179576] ? lock_release+0xc8/0x270 [ 602.179603] ? do_raw_spin_unlock+0x53/0x220 [ 602.179635] ? kobject_put+0xaa/0x260 [ 602.179677] device_add+0x32d/0x1830 [ 602.179709] ? __pfx_device_add+0x10/0x10 [ 602.179737] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.179776] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.179801] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.179838] hci_conn_add_sysfs+0x117/0x1c0 [ 602.179870] le_conn_complete_evt+0x1246/0x1e40 [ 602.179918] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.179967] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.179992] ? __asan_memcpy+0x3d/0x60 [ 602.180035] hci_le_meta_evt+0x34b/0x530 [ 602.180058] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.180085] hci_event_packet+0x66c/0x10e0 [ 602.180109] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.180131] ? __pfx_hci_event_packet+0x10/0x10 [ 602.180155] ? mark_held_locks+0x49/0x80 [ 602.180182] ? kcov_remote_start+0x2ce/0x5a0 [ 602.180222] hci_rx_work+0x65b/0x8b0 [ 602.180250] process_one_work+0x8e1/0x1960 [ 602.180290] ? __pfx_process_one_work+0x10/0x10 [ 602.180317] ? move_linked_works+0x172/0x270 [ 602.180357] ? assign_work+0x196/0x240 [ 602.180386] worker_thread+0x67e/0xe90 [ 602.180414] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.180459] ? __pfx_worker_thread+0x10/0x10 [ 602.180488] kthread+0x3c8/0x740 [ 602.180513] ? __pfx_kthread+0x10/0x10 [ 602.180536] ? ret_from_fork+0x79/0x7a0 [ 602.180564] ? __pfx_kthread+0x10/0x10 [ 602.180604] ret_from_fork+0x67a/0x7a0 [ 602.180626] ? __pfx_ret_from_fork+0x10/0x10 [ 602.180652] ? __switch_to+0x759/0x1030 [ 602.180684] ? __pfx_kthread+0x10/0x10 [ 602.180709] ret_from_fork_asm+0x1a/0x30 [ 602.180755] [ 602.180962] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.181006] Bluetooth: hci3: failed to register connection device [ 602.254694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:28:55 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x78) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="c13e1f0a0000020000aaaaaaaaaa00000000e3ff00fff3ff"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:28:55 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04120809ffffffff01ff07"], 0xb) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0x1, 0x4}}}, 0x7) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042201"], 0x3) 18:28:55 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="b10784ecc4a8f2cf9ef9c819b187a194bef058356b7edcac4c4b82f80bad0d5f6afbe69b8e22132a9cd1c1684ae64806c935ffaf841fe16f", @ANYRESDEC=r1, @ANYRES32, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x14d}, "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"}}, 0x150) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x2, 0xa}, {0x20, 0x8, 0xfffa, 0x39, 0x7ff}}}}, 0x17) 18:28:55 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10010, 0xffffffffffffffff, 0x96291000) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0xfff7, 0x81}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0xffff, 0x71}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x2, 0x3}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x6, 0x1}}]}}, 0x29) 18:28:55 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:28:55 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x800, 0x121000) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x1) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x64}, @l2cap_cid_signaling={{0x60}, [@l2cap_conn_req={{0x2, 0xff, 0x4}, {0x7, 0x200}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x8a7d, 0x1}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x2, 0x1}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0xfffb, 0x5d}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x7, 0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x9}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x5, 0x4, 0x7, 0x1}}, @l2cap_conf_req={{0x4, 0x88, 0x24}, {0x200, 0x27d, [@l2cap_conf_efs={0x6, 0x10, {0x3c, 0x0, 0xbf, 0x4, 0x7, 0x4}}, @l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0xd0d0}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}]}}, 0x69) [ 602.342727] debugfs: '0' already exists in 'hci3' [ 602.343766] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 602.345046] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.345076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.345092] Workqueue: hci3 hci_rx_work [ 602.345122] Call Trace: [ 602.345130] [ 602.345140] dump_stack_lvl+0xfa/0x120 [ 602.345170] sysfs_warn_dup+0x80/0xa0 [ 602.345200] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.345227] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.345253] ? find_held_lock+0x2b/0x80 [ 602.345291] ? lock_release+0xc8/0x270 [ 602.345317] ? do_raw_spin_unlock+0x53/0x220 [ 602.345350] kobject_add_internal+0x24c/0x9a0 [ 602.345389] kobject_add+0x157/0x240 [ 602.345424] ? __pfx_kobject_add+0x10/0x10 [ 602.345457] ? lock_release+0xc8/0x270 [ 602.345483] ? do_raw_spin_unlock+0x53/0x220 [ 602.345514] ? kobject_put+0xaa/0x260 [ 602.345556] device_add+0x32d/0x1830 [ 602.345587] ? __pfx_device_add+0x10/0x10 [ 602.345614] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.345645] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.345668] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.345704] hci_conn_add_sysfs+0x117/0x1c0 [ 602.345736] le_conn_complete_evt+0x1246/0x1e40 [ 602.345782] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.345837] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.345863] ? __asan_memcpy+0x3d/0x60 [ 602.345903] hci_le_meta_evt+0x34b/0x530 [ 602.345923] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.345950] hci_event_packet+0x66c/0x10e0 [ 602.345974] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.345996] ? __pfx_hci_event_packet+0x10/0x10 [ 602.346019] ? mark_held_locks+0x49/0x80 [ 602.346045] ? kcov_remote_start+0x2ce/0x5a0 [ 602.346085] hci_rx_work+0x65b/0x8b0 [ 602.346113] process_one_work+0x8e1/0x1960 [ 602.346152] ? __pfx_process_one_work+0x10/0x10 [ 602.346180] ? move_linked_works+0x172/0x270 [ 602.346219] ? assign_work+0x196/0x240 [ 602.346248] worker_thread+0x67e/0xe90 [ 602.346275] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.346321] ? __pfx_worker_thread+0x10/0x10 [ 602.346349] kthread+0x3c8/0x740 [ 602.346373] ? __pfx_kthread+0x10/0x10 [ 602.346396] ? ret_from_fork+0x79/0x7a0 [ 602.346422] ? __pfx_kthread+0x10/0x10 [ 602.346447] ret_from_fork+0x67a/0x7a0 [ 602.346470] ? __pfx_ret_from_fork+0x10/0x10 [ 602.346495] ? __switch_to+0x759/0x1030 [ 602.346527] ? __pfx_kthread+0x10/0x10 [ 602.346553] ret_from_fork_asm+0x1a/0x30 [ 602.346598] [ 602.346938] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 602.348086] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.349535] Bluetooth: Unexpected continuation frame (len 100) [ 602.349770] Bluetooth: hci3: failed to register connection device [ 602.350499] debugfs: '0' already exists in 'hci2' [ 602.351039] Bluetooth: hci3: unexpected event 0x22 length: 0 < 1 [ 602.351404] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 602.352196] debugfs: '0' already exists in 'hci3' [ 602.352297] CPU: 1 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.352314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.352323] Workqueue: hci2 hci_rx_work [ 602.352344] Call Trace: [ 602.352350] [ 602.352355] dump_stack_lvl+0xfa/0x120 [ 602.352374] sysfs_warn_dup+0x80/0xa0 [ 602.352391] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.352408] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.352427] ? find_held_lock+0x2b/0x80 [ 602.352449] ? lock_release+0xc8/0x270 [ 602.352464] ? do_raw_spin_unlock+0x53/0x220 [ 602.352482] kobject_add_internal+0x24c/0x9a0 [ 602.352504] kobject_add+0x157/0x240 [ 602.352522] ? __pfx_kobject_add+0x10/0x10 [ 602.352541] ? lock_release+0xc8/0x270 [ 602.352556] ? do_raw_spin_unlock+0x53/0x220 [ 602.352574] ? kobject_put+0xaa/0x260 [ 602.352606] device_add+0x32d/0x1830 [ 602.352624] ? __pfx_device_add+0x10/0x10 [ 602.352639] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.352657] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.352671] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.352691] hci_conn_add_sysfs+0x117/0x1c0 [ 602.352708] le_conn_complete_evt+0x1246/0x1e40 [ 602.352735] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.352761] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.352774] ? __asan_memcpy+0x3d/0x60 [ 602.352797] hci_le_meta_evt+0x34b/0x530 [ 602.352807] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.352828] hci_event_packet+0x66c/0x10e0 [ 602.352841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.352852] ? __pfx_hci_event_packet+0x10/0x10 [ 602.352865] ? mark_held_locks+0x49/0x80 [ 602.352880] ? kcov_remote_start+0x2ce/0x5a0 [ 602.352904] hci_rx_work+0x65b/0x8b0 [ 602.352918] process_one_work+0x8e1/0x1960 [ 602.352941] ? __pfx_process_one_work+0x10/0x10 [ 602.352956] ? move_linked_works+0x172/0x270 [ 602.352978] ? assign_work+0x196/0x240 [ 602.352994] worker_thread+0x67e/0xe90 [ 602.353009] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.353035] ? __pfx_worker_thread+0x10/0x10 [ 602.353050] kthread+0x3c8/0x740 [ 602.353064] ? __pfx_kthread+0x10/0x10 [ 602.353076] ? ret_from_fork+0x79/0x7a0 [ 602.353092] ? __pfx_kthread+0x10/0x10 [ 602.353106] ret_from_fork+0x67a/0x7a0 [ 602.353118] ? __pfx_ret_from_fork+0x10/0x10 [ 602.353132] ? __switch_to+0x759/0x1030 [ 602.353149] ? __pfx_kthread+0x10/0x10 [ 602.353163] ret_from_fork_asm+0x1a/0x30 [ 602.353189] [ 602.353230] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.353757] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 602.353933] Bluetooth: hci2: failed to register connection device [ 602.354478] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.354507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.354522] Workqueue: hci3 hci_rx_work [ 602.354544] Call Trace: [ 602.354552] [ 602.354561] dump_stack_lvl+0xfa/0x120 [ 602.354588] sysfs_warn_dup+0x80/0xa0 [ 602.354615] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.354642] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.354668] ? find_held_lock+0x2b/0x80 [ 602.354704] ? lock_release+0xc8/0x270 [ 602.354730] ? do_raw_spin_unlock+0x53/0x220 [ 602.354763] kobject_add_internal+0x24c/0x9a0 [ 602.354802] kobject_add+0x157/0x240 [ 602.354845] ? __pfx_kobject_add+0x10/0x10 [ 602.354878] ? lock_release+0xc8/0x270 [ 602.354905] ? do_raw_spin_unlock+0x53/0x220 [ 602.354936] ? kobject_put+0xaa/0x260 [ 602.354978] device_add+0x32d/0x1830 [ 602.355007] ? __pfx_device_add+0x10/0x10 [ 602.355035] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.355063] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.355086] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.355122] hci_conn_add_sysfs+0x117/0x1c0 [ 602.355152] le_conn_complete_evt+0x1246/0x1e40 [ 602.355199] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.355247] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.355273] ? __asan_memcpy+0x3d/0x60 [ 602.355311] hci_le_meta_evt+0x34b/0x530 [ 602.355331] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.355359] hci_event_packet+0x66c/0x10e0 [ 602.355383] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.355405] ? __pfx_hci_event_packet+0x10/0x10 [ 602.355428] ? mark_held_locks+0x49/0x80 [ 602.355454] ? kcov_remote_start+0x2ce/0x5a0 [ 602.355493] hci_rx_work+0x65b/0x8b0 [ 602.355520] process_one_work+0x8e1/0x1960 [ 602.355559] ? __pfx_process_one_work+0x10/0x10 [ 602.355586] ? move_linked_works+0x172/0x270 [ 602.355625] ? assign_work+0x196/0x240 [ 602.355654] worker_thread+0x67e/0xe90 [ 602.355682] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.355726] ? __pfx_worker_thread+0x10/0x10 [ 602.355755] kthread+0x3c8/0x740 [ 602.355779] ? __pfx_kthread+0x10/0x10 [ 602.355802] ? ret_from_fork+0x79/0x7a0 [ 602.355827] ? __pfx_kthread+0x10/0x10 [ 602.355852] ret_from_fork+0x67a/0x7a0 [ 602.355875] ? __pfx_ret_from_fork+0x10/0x10 [ 602.355901] ? __switch_to+0x759/0x1030 [ 602.355932] ? __pfx_kthread+0x10/0x10 [ 602.355957] ret_from_fork_asm+0x1a/0x30 [ 602.356002] [ 602.356063] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.363023] Bluetooth: Unexpected continuation frame (len 100) [ 602.363847] Bluetooth: hci3: failed to register connection device [ 602.366026] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 602.474046] Bluetooth: hci5: Received unexpected HCI Event 0x00 18:28:55 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e0000"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x65, 0x1, 0x0, 0x4e}, @l2cap_cid_signaling={{0x4a}, [@l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x7, 0x1ff}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x8, 0x8, 0x7ff, 0x81}}, @l2cap_conf_req={{0x4, 0x1, 0xc}, {0x8, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}]}}, @l2cap_conf_req={{0x4, 0xfd, 0x22}, {0x3f, 0x81, [@l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x8, 0x3, 0x81, 0x3}}, @l2cap_conf_flushto={0x2, 0x2, 0x101}]}}]}}, 0x53) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:28:55 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1, 0x80}}}, 0xc) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x7, 0xc8, 0x40, 0x3, 0x0, 0x7}}}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xe1}, "4f3aa74963e99321ed33da2314d32ffc9d33228f85622d25b8385c979425dc59fa61eebab2b8788d6293cfda8e36ba38e4014ac24e0b20b6edce433d9641f7097d8ebe0e0b2addaa90cc3ff9d9d204844b8ad725527262ef95361a249e1f2138f96c8b9c64855e363cdb3c836104914eaaee357cd31e6aa5ca1cf5172cc5988129006f3db5c92f8309ecbef40f83cb4438a55a72354bbde033056ec97fff11b24c95cab2e676d058a0b923207556e28342d9cc909c7d745505cf8795dde162e67883792d1ec67e282f8e54b5a2fa12e918a6b296e72924c23d2929a6dba34fd2f3"}, 0xe5) 18:28:55 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x93dd, 0x71, 0xeb9, 0x4, 0x3}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x1, 0x26}, @l2cap_cid_signaling={{0x22}, [@l2cap_conf_req={{0x4, 0x0, 0x12}, {0x8, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x5, 0x6, 0xe3, 0x8000}}]}}, 0x2b) [ 602.480486] Bluetooth: hci5: unexpected event 0xff length: 333 > 260 [ 602.518170] Bluetooth: hci5: Received unexpected HCI Event 0x00 18:28:55 executing program 6: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x1c8, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b37219e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39aa0292}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a5ef6ad}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5812d6db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1757871d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a270612}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67c27bde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bdd0fc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4be64096}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdc425}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51fff78a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x716cc545}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d94ea8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe9bd1c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x489d28ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x667d7d4e}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeffe055}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x467df6e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2400a810}, 0x24000001) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r2, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000cc0)={&(0x7f00000008c0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbfd00}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000108e}, 0x11) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x24000844) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x54, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2318a8db}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) 18:28:55 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x62}, @l2cap_cid_signaling={{0xffffffffffffff9c}, [@l2cap_info_rsp={{0xb, 0x20, 0x5a}, {0x0, 0x7f, "8a26306aeb7037270ad2556630de03ec294bbd418e27d9a6a83a46cafe06380d1cc6350fb0eb4d4886f0007d3a5874be9ffe453ab12f898879321a99956ae4173d1b295ab51bf4a9e6f64dddad711adfe3d3c83d8005"}}]}}, 0x67) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) 18:28:55 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) [ 602.519471] Bluetooth: hci5: unexpected event 0xff length: 333 > 260 [ 602.590731] Bluetooth: hci0: ACL packet for unknown connection handle 101 [ 602.593302] Bluetooth: hci0: ACL packet for unknown connection handle 101 [ 602.620321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.643850] debugfs: '0' already exists in 'hci3' [ 602.644410] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 602.645053] debugfs: '0' already exists in 'hci2' [ 602.645136] CPU: 1 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.645155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.645164] Workqueue: hci3 hci_rx_work [ 602.645184] Call Trace: [ 602.645189] [ 602.645195] dump_stack_lvl+0xfa/0x120 [ 602.645215] sysfs_warn_dup+0x80/0xa0 [ 602.645232] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.645247] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.645261] ? find_held_lock+0x2b/0x80 [ 602.645283] ? lock_release+0xc8/0x270 [ 602.645297] ? do_raw_spin_unlock+0x53/0x220 [ 602.645315] kobject_add_internal+0x24c/0x9a0 [ 602.645337] kobject_add+0x157/0x240 [ 602.645358] ? __pfx_kobject_add+0x10/0x10 [ 602.645379] ? lock_release+0xc8/0x270 [ 602.645393] ? do_raw_spin_unlock+0x53/0x220 [ 602.645410] ? kobject_put+0xaa/0x260 [ 602.645436] device_add+0x32d/0x1830 [ 602.645454] ? __pfx_device_add+0x10/0x10 [ 602.645469] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.645487] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.645500] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.645520] hci_conn_add_sysfs+0x117/0x1c0 [ 602.645537] le_conn_complete_evt+0x1246/0x1e40 [ 602.645563] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.645590] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.645604] ? __asan_memcpy+0x3d/0x60 [ 602.645626] hci_le_meta_evt+0x34b/0x530 [ 602.645637] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.645652] hci_event_packet+0x66c/0x10e0 [ 602.645665] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.645677] ? __pfx_hci_event_packet+0x10/0x10 [ 602.645690] ? mark_held_locks+0x49/0x80 [ 602.645704] ? kcov_remote_start+0x2ce/0x5a0 [ 602.645727] hci_rx_work+0x65b/0x8b0 [ 602.645742] process_one_work+0x8e1/0x1960 [ 602.645764] ? __pfx_process_one_work+0x10/0x10 [ 602.645779] ? move_linked_works+0x172/0x270 [ 602.645802] ? assign_work+0x196/0x240 [ 602.645822] worker_thread+0x67e/0xe90 [ 602.645838] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.645863] ? __pfx_worker_thread+0x10/0x10 [ 602.645879] kthread+0x3c8/0x740 [ 602.645893] ? __pfx_kthread+0x10/0x10 [ 602.645906] ? ret_from_fork+0x79/0x7a0 [ 602.645921] ? __pfx_kthread+0x10/0x10 [ 602.645935] ret_from_fork+0x67a/0x7a0 [ 602.645947] ? __pfx_ret_from_fork+0x10/0x10 [ 602.645961] ? __switch_to+0x759/0x1030 [ 602.645979] ? __pfx_kthread+0x10/0x10 [ 602.645992] ret_from_fork_asm+0x1a/0x30 [ 602.646018] [ 602.646056] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.647584] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 602.647992] Bluetooth: hci3: failed to register connection device [ 602.648614] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.648646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.648661] Workqueue: hci2 hci_rx_work [ 602.648693] Call Trace: [ 602.648702] [ 602.648711] dump_stack_lvl+0xfa/0x120 [ 602.648741] sysfs_warn_dup+0x80/0xa0 [ 602.648771] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.648799] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.648832] ? find_held_lock+0x2b/0x80 [ 602.648871] ? lock_release+0xc8/0x270 [ 602.648897] ? do_raw_spin_unlock+0x53/0x220 [ 602.648931] kobject_add_internal+0x24c/0x9a0 [ 602.648970] kobject_add+0x157/0x240 [ 602.649005] ? __pfx_kobject_add+0x10/0x10 [ 602.649038] ? lock_release+0xc8/0x270 [ 602.649064] ? do_raw_spin_unlock+0x53/0x220 [ 602.649096] ? kobject_put+0xaa/0x260 [ 602.649137] device_add+0x32d/0x1830 [ 602.649168] ? __pfx_device_add+0x10/0x10 [ 602.649196] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.649227] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.649251] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.649287] hci_conn_add_sysfs+0x117/0x1c0 [ 602.649318] le_conn_complete_evt+0x1246/0x1e40 [ 602.649366] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.649414] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.649439] ? __asan_memcpy+0x3d/0x60 [ 602.649479] hci_le_meta_evt+0x34b/0x530 [ 602.649499] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.649527] hci_event_packet+0x66c/0x10e0 [ 602.649551] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.649573] ? __pfx_hci_event_packet+0x10/0x10 [ 602.649597] ? mark_held_locks+0x49/0x80 [ 602.649623] ? kcov_remote_start+0x2ce/0x5a0 [ 602.649664] hci_rx_work+0x65b/0x8b0 [ 602.649691] process_one_work+0x8e1/0x1960 [ 602.649731] ? __pfx_process_one_work+0x10/0x10 [ 602.649758] ? move_linked_works+0x172/0x270 [ 602.649798] ? assign_work+0x196/0x240 [ 602.649827] worker_thread+0x67e/0xe90 [ 602.649855] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.649901] ? __pfx_worker_thread+0x10/0x10 [ 602.649930] kthread+0x3c8/0x740 [ 602.649955] ? __pfx_kthread+0x10/0x10 [ 602.649978] ? ret_from_fork+0x79/0x7a0 [ 602.650005] ? __pfx_kthread+0x10/0x10 [ 602.650030] ret_from_fork+0x67a/0x7a0 [ 602.650052] ? __pfx_ret_from_fork+0x10/0x10 [ 602.650078] ? __switch_to+0x759/0x1030 [ 602.650110] ? __pfx_kthread+0x10/0x10 [ 602.650135] ret_from_fork_asm+0x1a/0x30 [ 602.650181] [ 602.650248] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.672286] debugfs: '0' already exists in 'hci3' [ 602.672450] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 602.673028] Bluetooth: hci2: failed to register connection device [ 602.673337] CPU: 1 UID: 0 PID: 4182 Comm: kworker/u11:6 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.673355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.673365] Workqueue: hci3 hci_rx_work [ 602.673384] Call Trace: [ 602.673389] [ 602.673394] dump_stack_lvl+0xfa/0x120 [ 602.673412] sysfs_warn_dup+0x80/0xa0 [ 602.673430] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.673445] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.673459] ? find_held_lock+0x2b/0x80 [ 602.673481] ? lock_release+0xc8/0x270 [ 602.673495] ? do_raw_spin_unlock+0x53/0x220 [ 602.673513] kobject_add_internal+0x24c/0x9a0 [ 602.673535] kobject_add+0x157/0x240 [ 602.673553] ? __pfx_kobject_add+0x10/0x10 [ 602.673571] ? lock_release+0xc8/0x270 [ 602.673585] ? do_raw_spin_unlock+0x53/0x220 [ 602.673602] ? kobject_put+0xaa/0x260 [ 602.673625] device_add+0x32d/0x1830 [ 602.673642] ? __pfx_device_add+0x10/0x10 [ 602.673657] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.673675] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.673689] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.673708] hci_conn_add_sysfs+0x117/0x1c0 [ 602.673726] le_conn_complete_evt+0x1246/0x1e40 [ 602.673752] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.673777] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.673791] ? __asan_memcpy+0x3d/0x60 [ 602.673814] hci_le_meta_evt+0x34b/0x530 [ 602.673829] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.673844] hci_event_packet+0x66c/0x10e0 [ 602.673857] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.673869] ? __pfx_hci_event_packet+0x10/0x10 [ 602.673882] ? mark_held_locks+0x49/0x80 [ 602.673896] ? kcov_remote_start+0x2ce/0x5a0 [ 602.673920] hci_rx_work+0x65b/0x8b0 [ 602.673935] process_one_work+0x8e1/0x1960 [ 602.673958] ? __pfx_process_one_work+0x10/0x10 [ 602.673972] ? move_linked_works+0x172/0x270 [ 602.673994] ? assign_work+0x196/0x240 [ 602.674010] worker_thread+0x67e/0xe90 [ 602.674025] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.674050] ? __pfx_worker_thread+0x10/0x10 [ 602.674066] kthread+0x3c8/0x740 [ 602.674080] ? __pfx_kthread+0x10/0x10 [ 602.674092] ? ret_from_fork+0x79/0x7a0 [ 602.674108] ? __pfx_kthread+0x10/0x10 [ 602.674121] ret_from_fork+0x67a/0x7a0 [ 602.674133] ? __pfx_ret_from_fork+0x10/0x10 [ 602.674147] ? __switch_to+0x759/0x1030 [ 602.674165] ? __pfx_kthread+0x10/0x10 [ 602.674178] ret_from_fork_asm+0x1a/0x30 [ 602.674203] [ 602.674239] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.679060] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 602.679654] Bluetooth: hci3: failed to register connection device [ 602.681894] debugfs: '0' already exists in 'hci2' [ 602.759522] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 602.760863] CPU: 0 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 602.760894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.760910] Workqueue: hci2 hci_rx_work [ 602.760938] Call Trace: [ 602.760946] [ 602.760955] dump_stack_lvl+0xfa/0x120 [ 602.760986] sysfs_warn_dup+0x80/0xa0 [ 602.761015] sysfs_create_dir_ns+0x23b/0x2a0 [ 602.761042] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.761068] ? find_held_lock+0x2b/0x80 [ 602.761105] ? lock_release+0xc8/0x270 [ 602.761132] ? do_raw_spin_unlock+0x53/0x220 [ 602.761165] kobject_add_internal+0x24c/0x9a0 [ 602.761205] kobject_add+0x157/0x240 [ 602.761239] ? __pfx_kobject_add+0x10/0x10 [ 602.761272] ? lock_release+0xc8/0x270 [ 602.761298] ? do_raw_spin_unlock+0x53/0x220 [ 602.761329] ? kobject_put+0xaa/0x260 [ 602.761371] device_add+0x32d/0x1830 [ 602.761401] ? __pfx_device_add+0x10/0x10 [ 602.761429] ? hci_debugfs_create_conn+0x10f/0x240 [ 602.761460] ? mgmt_send_event_skb+0x2f3/0x460 [ 602.761483] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 602.761519] hci_conn_add_sysfs+0x117/0x1c0 [ 602.761550] le_conn_complete_evt+0x1246/0x1e40 [ 602.761597] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.761644] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 602.761670] ? __asan_memcpy+0x3d/0x60 [ 602.761709] hci_le_meta_evt+0x34b/0x530 [ 602.761729] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 602.761757] hci_event_packet+0x66c/0x10e0 [ 602.761781] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.761803] ? __pfx_hci_event_packet+0x10/0x10 [ 602.761834] ? mark_held_locks+0x49/0x80 [ 602.761860] ? kcov_remote_start+0x2ce/0x5a0 [ 602.761900] hci_rx_work+0x65b/0x8b0 [ 602.761927] process_one_work+0x8e1/0x1960 [ 602.761967] ? __pfx_process_one_work+0x10/0x10 [ 602.761994] ? move_linked_works+0x172/0x270 [ 602.762034] ? assign_work+0x196/0x240 [ 602.762063] worker_thread+0x67e/0xe90 [ 602.762091] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 602.762136] ? __pfx_worker_thread+0x10/0x10 [ 602.762165] kthread+0x3c8/0x740 [ 602.762190] ? __pfx_kthread+0x10/0x10 [ 602.762212] ? ret_from_fork+0x79/0x7a0 [ 602.762239] ? __pfx_kthread+0x10/0x10 [ 602.762264] ret_from_fork+0x67a/0x7a0 [ 602.762287] ? __pfx_ret_from_fork+0x10/0x10 [ 602.762312] ? __switch_to+0x759/0x1030 [ 602.762343] ? __pfx_kthread+0x10/0x10 [ 602.762369] ret_from_fork_asm+0x1a/0x30 [ 602.762415] [ 602.794749] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.796670] Bluetooth: hci2: failed to register connection device [ 602.797971] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 603.087917] Bluetooth: hci5: command 0x0406 tx timeout [ 603.214933] Bluetooth: hci7: command 0x2016 tx timeout [ 603.406906] Bluetooth: hci3: command 0x2016 tx timeout [ 603.663532] Bluetooth: hci2: command 0x2016 tx timeout [ 605.134964] Bluetooth: hci5: command 0x0406 tx timeout [ 605.262926] Bluetooth: hci7: command 0x2016 tx timeout [ 605.454937] Bluetooth: hci3: command 0x2016 tx timeout [ 605.711233] Bluetooth: hci2: command 0x2016 tx timeout [ 607.182969] Bluetooth: hci5: command 0x0406 tx timeout [ 607.502969] Bluetooth: hci3: command 0x2016 tx timeout [ 607.759274] Bluetooth: hci2: command 0x2016 tx timeout [ 609.230917] Bluetooth: hci5: command 0x0406 tx timeout [ 609.550948] Bluetooth: hci3: command 0x2016 tx timeout [ 609.806948] Bluetooth: hci2: command 0x2016 tx timeout [ 611.278984] Bluetooth: hci5: command 0x0406 tx timeout [ 611.598913] Bluetooth: hci3: command 0x2016 tx timeout [ 611.854886] Bluetooth: hci2: command 0x2016 tx timeout 18:29:05 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2f}, "18752f20408ea0ffdebc98999b7719237bf780db3722057b99f20ccd0280b5bfa7f648a14292b58a8798e35b4fae81"}, 0x33) 18:29:05 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x64}, "66487eca1b88a88fb5a24689009aa8e4388e4276b4a2b259a7c36174eb056796cf4456759ebca4ed50656ba1795d1dfe3cd60ae369820157a59f3e858349c196b0d2d8a0ed6f7935db25128672072824f06cefe61caf27982eec3aa9874817beff4913b4"}, 0x68) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb7}, "76b974d5430faa46573ebac6893b01b7308ec3152400703e0be0f6e10fb90898d032d1c28d0746622a436660d80499ccd74493e1c65c6826aa0a047f6b65fe4c67495989da26bbe40ddc516088fb119e2793497d949950a1bc68de4b1e1828ded65d0bfbfdd6be032413a3bc7527e581c165297d21e28e7d18e7ce599b7e5ab87952df240a07e660fad081e3522226ce403bf4ed63145582e977e9800fd0f5e2a769b43e69fba6814cfa329b4902ee8305c341dcbfd04c"}, 0xbb) 18:29:05 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x38, 0xff, 0x3e1, 0x1f0, 0x3f, 0x330, 0x5}, "392f5387ab4c270f05f17d6496877fe13372ed3c37b6ba8668a4b9a18505e73f05eaac7b53443181c79b99821c0d50e38a25664f19e977ea3493523a474fa67678339cdbe97e113b8b9f97bdd76eb3f506572bb6d22e3a005b406b3b3c745f537a260da83ff66f5128e31faf4ed07d5724b6d3eb5ec3803bf51ea02141ee58482cc86d5f90007647f8e84547a403564aedcfaf95d33af2a75b60e3f2fbc2ba498647e0dea944c2d106db2f99c9faabce", ['\x00', '\x00', '\x00', '\x00']}, 0x4d0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c95020001c051800ff01ff008000a69f0800f9f27b5a82b8bc83579cee15f2f1"], 0x25) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:29:05 executing program 1: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="9b1894274e7a14b69fe348aa043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 18:29:05 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) 18:29:05 executing program 0: r0 = syz_io_uring_setup(0x2e21, &(0x7f0000000000)={0x0, 0x72ef, 0x4, 0x2, 0x368}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) dup2(r0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:29:05 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:29:05 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8}, "085fb7629e8a479a"}, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x3, 0x4}}]}}, 0x11) [ 612.384516] debugfs: '0' already exists in 'hci7' [ 612.385101] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 612.385756] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.385772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.385780] Workqueue: hci7 hci_rx_work [ 612.385798] Call Trace: [ 612.385803] [ 612.385808] dump_stack_lvl+0xfa/0x120 [ 612.385830] sysfs_warn_dup+0x80/0xa0 [ 612.385848] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.385863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.385877] ? find_held_lock+0x2b/0x80 [ 612.385899] ? lock_release+0xc8/0x270 [ 612.385914] ? do_raw_spin_unlock+0x53/0x220 [ 612.385932] kobject_add_internal+0x24c/0x9a0 [ 612.385954] kobject_add+0x157/0x240 [ 612.385974] ? __pfx_kobject_add+0x10/0x10 [ 612.385992] ? lock_release+0xc8/0x270 [ 612.386006] ? do_raw_spin_unlock+0x53/0x220 [ 612.386024] ? kobject_put+0xaa/0x260 [ 612.386047] device_add+0x32d/0x1830 [ 612.386064] ? __pfx_device_add+0x10/0x10 [ 612.386079] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.386097] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.386111] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.386130] hci_conn_add_sysfs+0x117/0x1c0 [ 612.386148] le_conn_complete_evt+0x1246/0x1e40 [ 612.386175] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.386201] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.386215] ? __asan_memcpy+0x3d/0x60 [ 612.386237] hci_le_meta_evt+0x34b/0x530 [ 612.386248] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.386263] hci_event_packet+0x66c/0x10e0 [ 612.386276] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.386288] ? __pfx_hci_event_packet+0x10/0x10 [ 612.386301] ? mark_held_locks+0x49/0x80 [ 612.386315] ? kcov_remote_start+0x2ce/0x5a0 [ 612.386338] hci_rx_work+0x65b/0x8b0 [ 612.386353] process_one_work+0x8e1/0x1960 [ 612.386375] ? __pfx_process_one_work+0x10/0x10 [ 612.386390] ? move_linked_works+0x172/0x270 [ 612.386412] ? assign_work+0x196/0x240 [ 612.386428] worker_thread+0x67e/0xe90 [ 612.386443] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.386468] ? __pfx_worker_thread+0x10/0x10 [ 612.386483] kthread+0x3c8/0x740 [ 612.386497] ? __pfx_kthread+0x10/0x10 [ 612.386510] ? ret_from_fork+0x79/0x7a0 [ 612.386525] ? __pfx_kthread+0x10/0x10 [ 612.386538] ret_from_fork+0x67a/0x7a0 [ 612.386550] ? __pfx_ret_from_fork+0x10/0x10 [ 612.386564] ? __switch_to+0x759/0x1030 [ 612.386582] ? __pfx_kthread+0x10/0x10 [ 612.386596] ret_from_fork_asm+0x1a/0x30 [ 612.386621] [ 612.404185] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.405255] Bluetooth: hci7: failed to register connection device 18:29:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="012100000100000018000000", @ANYRES32, @ANYBLOB="00000100000000002e2f66696c653000"]) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) dup2(0xffffffffffffffff, r4) [ 612.456477] debugfs: '0' already exists in 'hci7' [ 612.457115] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 612.457802] CPU: 1 UID: 0 PID: 4379 Comm: kworker/u11:11 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.457821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.457830] Workqueue: hci7 hci_rx_work [ 612.457847] Call Trace: [ 612.457852] [ 612.457857] dump_stack_lvl+0xfa/0x120 [ 612.457873] sysfs_warn_dup+0x80/0xa0 [ 612.457894] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.457908] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.457922] ? find_held_lock+0x2b/0x80 [ 612.457944] ? lock_release+0xc8/0x270 [ 612.457958] ? do_raw_spin_unlock+0x53/0x220 [ 612.457977] kobject_add_internal+0x24c/0x9a0 [ 612.457998] kobject_add+0x157/0x240 [ 612.458017] ? __pfx_kobject_add+0x10/0x10 [ 612.458035] ? lock_release+0xc8/0x270 [ 612.458049] ? do_raw_spin_unlock+0x53/0x220 [ 612.458065] ? kobject_put+0xaa/0x260 [ 612.458088] device_add+0x32d/0x1830 [ 612.458105] ? __pfx_device_add+0x10/0x10 [ 612.458120] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.458137] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.458151] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.458170] hci_conn_add_sysfs+0x117/0x1c0 [ 612.458187] le_conn_complete_evt+0x1246/0x1e40 [ 612.458214] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.458240] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.458254] ? __asan_memcpy+0x3d/0x60 [ 612.458276] hci_le_meta_evt+0x34b/0x530 [ 612.458288] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.458303] hci_event_packet+0x66c/0x10e0 [ 612.458316] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.458328] ? __pfx_hci_event_packet+0x10/0x10 [ 612.458341] ? mark_held_locks+0x49/0x80 [ 612.458355] ? kcov_remote_start+0x2ce/0x5a0 [ 612.458378] hci_rx_work+0x65b/0x8b0 [ 612.458392] process_one_work+0x8e1/0x1960 [ 612.458414] ? __pfx_process_one_work+0x10/0x10 [ 612.458429] ? move_linked_works+0x172/0x270 [ 612.458451] ? assign_work+0x196/0x240 [ 612.458466] worker_thread+0x67e/0xe90 [ 612.458481] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.458506] ? __pfx_worker_thread+0x10/0x10 [ 612.458522] kthread+0x3c8/0x740 [ 612.458535] ? __pfx_kthread+0x10/0x10 [ 612.458548] ? ret_from_fork+0x79/0x7a0 [ 612.458562] ? __pfx_kthread+0x10/0x10 [ 612.458576] ret_from_fork+0x67a/0x7a0 [ 612.458588] ? __pfx_ret_from_fork+0x10/0x10 [ 612.458602] ? __switch_to+0x759/0x1030 [ 612.458621] ? __pfx_kthread+0x10/0x10 [ 612.458634] ret_from_fork_asm+0x1a/0x30 [ 612.458659] [ 612.477180] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.478895] Bluetooth: hci7: failed to register connection device [ 612.479708] debugfs: '0' already exists in 'hci5' [ 612.480247] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 612.480932] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.480947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.480955] Workqueue: hci5 hci_rx_work [ 612.480968] Call Trace: [ 612.480972] [ 612.480977] dump_stack_lvl+0xfa/0x120 [ 612.480992] sysfs_warn_dup+0x80/0xa0 [ 612.481006] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.481021] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.481035] ? find_held_lock+0x2b/0x80 [ 612.481054] ? lock_release+0xc8/0x270 [ 612.481068] ? do_raw_spin_unlock+0x53/0x220 [ 612.481086] kobject_add_internal+0x24c/0x9a0 [ 612.481107] kobject_add+0x157/0x240 [ 612.481125] ? __pfx_kobject_add+0x10/0x10 [ 612.481143] ? lock_release+0xc8/0x270 [ 612.481157] ? do_raw_spin_unlock+0x53/0x220 [ 612.481174] ? kobject_put+0xaa/0x260 [ 612.481197] device_add+0x32d/0x1830 [ 612.481213] ? __pfx_device_add+0x10/0x10 [ 612.481228] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.481243] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.481255] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.481275] hci_conn_add_sysfs+0x117/0x1c0 [ 612.481291] le_conn_complete_evt+0x1246/0x1e40 [ 612.481317] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.481342] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.481356] ? __asan_memcpy+0x3d/0x60 [ 612.481377] hci_le_meta_evt+0x34b/0x530 [ 612.481388] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.481403] hci_event_packet+0x66c/0x10e0 [ 612.481417] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.481429] ? __pfx_hci_event_packet+0x10/0x10 [ 612.481442] ? mark_held_locks+0x49/0x80 [ 612.481456] ? kcov_remote_start+0x2ce/0x5a0 [ 612.481477] hci_rx_work+0x65b/0x8b0 [ 612.481491] process_one_work+0x8e1/0x1960 [ 612.481512] ? __pfx_process_one_work+0x10/0x10 [ 612.481527] ? move_linked_works+0x172/0x270 [ 612.481548] ? assign_work+0x196/0x240 [ 612.481564] worker_thread+0x67e/0xe90 [ 612.481579] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.481603] ? __pfx_worker_thread+0x10/0x10 [ 612.481618] kthread+0x3c8/0x740 [ 612.481631] ? __pfx_kthread+0x10/0x10 [ 612.481643] ? ret_from_fork+0x79/0x7a0 [ 612.481655] ? lock_release+0xc8/0x270 [ 612.481669] ? __pfx_kthread+0x10/0x10 [ 612.481683] ret_from_fork+0x67a/0x7a0 [ 612.481695] ? __pfx_ret_from_fork+0x10/0x10 [ 612.481709] ? __switch_to+0x759/0x1030 [ 612.481726] ? __pfx_kthread+0x10/0x10 [ 612.481739] ret_from_fork_asm+0x1a/0x30 [ 612.481764] [ 612.481781] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.483600] debugfs: '0' already exists in 'hci2' [ 612.483738] Bluetooth: hci5: failed to register connection device [ 612.484394] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 612.484786] debugfs: '0' already exists in 'hci5' [ 612.485043] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.485074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.485089] Workqueue: hci2 hci_rx_work [ 612.485119] Call Trace: [ 612.485128] [ 612.485137] dump_stack_lvl+0xfa/0x120 [ 612.485168] sysfs_warn_dup+0x80/0xa0 [ 612.485197] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.485224] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.485251] ? find_held_lock+0x2b/0x80 [ 612.485288] ? lock_release+0xc8/0x270 [ 612.485315] ? do_raw_spin_unlock+0x53/0x220 [ 612.485348] kobject_add_internal+0x24c/0x9a0 [ 612.485388] kobject_add+0x157/0x240 [ 612.485423] ? __pfx_kobject_add+0x10/0x10 [ 612.485456] ? lock_release+0xc8/0x270 [ 612.485482] ? do_raw_spin_unlock+0x53/0x220 [ 612.485514] ? kobject_put+0xaa/0x260 [ 612.485556] device_add+0x32d/0x1830 [ 612.485587] ? __pfx_device_add+0x10/0x10 [ 612.485615] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.485646] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.485669] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.485706] hci_conn_add_sysfs+0x117/0x1c0 [ 612.485736] le_conn_complete_evt+0x1246/0x1e40 [ 612.485784] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.485839] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.485865] ? __asan_memcpy+0x3d/0x60 [ 612.485904] hci_le_meta_evt+0x34b/0x530 [ 612.485925] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.485952] hci_event_packet+0x66c/0x10e0 [ 612.485977] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.485999] ? __pfx_hci_event_packet+0x10/0x10 [ 612.486022] ? mark_held_locks+0x49/0x80 [ 612.486049] ? kcov_remote_start+0x2ce/0x5a0 [ 612.486089] hci_rx_work+0x65b/0x8b0 [ 612.486117] process_one_work+0x8e1/0x1960 [ 612.486156] ? __pfx_process_one_work+0x10/0x10 [ 612.486183] ? move_linked_works+0x172/0x270 [ 612.486223] ? assign_work+0x196/0x240 [ 612.486251] worker_thread+0x67e/0xe90 [ 612.486280] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.486325] ? __pfx_worker_thread+0x10/0x10 [ 612.486354] kthread+0x3c8/0x740 [ 612.486379] ? __pfx_kthread+0x10/0x10 [ 612.486402] ? ret_from_fork+0x79/0x7a0 [ 612.486425] ? lock_release+0xc8/0x270 [ 612.486451] ? __pfx_kthread+0x10/0x10 [ 612.486476] ret_from_fork+0x67a/0x7a0 [ 612.486498] ? __pfx_ret_from_fork+0x10/0x10 [ 612.486524] ? __switch_to+0x759/0x1030 [ 612.486555] ? __pfx_kthread+0x10/0x10 [ 612.486581] ret_from_fork_asm+0x1a/0x30 [ 612.486626] [ 612.486687] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.487176] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 612.487627] Bluetooth: hci2: failed to register connection device [ 612.487952] CPU: 1 UID: 0 PID: 299 Comm: kworker/u11:4 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.487969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.487977] Workqueue: hci5 hci_rx_work [ 612.487989] Call Trace: [ 612.487994] [ 612.487998] dump_stack_lvl+0xfa/0x120 [ 612.488013] sysfs_warn_dup+0x80/0xa0 [ 612.488028] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.488043] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.488057] ? find_held_lock+0x2b/0x80 [ 612.488076] ? lock_release+0xc8/0x270 [ 612.488091] ? do_raw_spin_unlock+0x53/0x220 [ 612.488109] kobject_add_internal+0x24c/0x9a0 [ 612.488130] kobject_add+0x157/0x240 [ 612.488148] ? __pfx_kobject_add+0x10/0x10 [ 612.488167] ? lock_release+0xc8/0x270 [ 612.488181] ? do_raw_spin_unlock+0x53/0x220 [ 612.488197] ? kobject_put+0xaa/0x260 [ 612.488220] device_add+0x32d/0x1830 [ 612.488236] ? __pfx_device_add+0x10/0x10 [ 612.488251] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.488267] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.488279] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.488299] hci_conn_add_sysfs+0x117/0x1c0 [ 612.488315] le_conn_complete_evt+0x1246/0x1e40 [ 612.488340] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.488366] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.488380] ? __asan_memcpy+0x3d/0x60 [ 612.488401] hci_le_meta_evt+0x34b/0x530 [ 612.488412] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.488427] hci_event_packet+0x66c/0x10e0 [ 612.488440] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.488452] ? __pfx_hci_event_packet+0x10/0x10 [ 612.488465] ? mark_held_locks+0x49/0x80 [ 612.488479] ? kcov_remote_start+0x2ce/0x5a0 [ 612.488500] hci_rx_work+0x65b/0x8b0 [ 612.488516] process_one_work+0x8e1/0x1960 [ 612.488537] ? __pfx_process_one_work+0x10/0x10 [ 612.488552] ? move_linked_works+0x172/0x270 [ 612.488573] ? assign_work+0x196/0x240 [ 612.488588] worker_thread+0x67e/0xe90 [ 612.488611] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.488635] ? __pfx_worker_thread+0x10/0x10 [ 612.488651] kthread+0x3c8/0x740 [ 612.488664] ? __pfx_kthread+0x10/0x10 [ 612.488676] ? ret_from_fork+0x79/0x7a0 [ 612.488688] ? lock_release+0xc8/0x270 [ 612.488702] ? __pfx_kthread+0x10/0x10 [ 612.488716] ret_from_fork+0x67a/0x7a0 [ 612.488728] ? __pfx_ret_from_fork+0x10/0x10 [ 612.488742] ? __switch_to+0x759/0x1030 [ 612.488758] ? __pfx_kthread+0x10/0x10 [ 612.488772] ret_from_fork_asm+0x1a/0x30 [ 612.488796] [ 612.488833] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.489390] debugfs: '0' already exists in 'hci3' [ 612.489450] Bluetooth: hci5: failed to register connection device [ 612.490220] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 612.575239] debugfs: '0' already exists in 'hci7' [ 612.575408] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 612.575422] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.575439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.575449] Workqueue: hci7 hci_rx_work [ 612.575471] Call Trace: [ 612.575475] [ 612.575481] dump_stack_lvl+0xfa/0x120 [ 612.575502] sysfs_warn_dup+0x80/0xa0 [ 612.575521] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.575536] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.575550] ? find_held_lock+0x2b/0x80 [ 612.575574] ? lock_release+0xc8/0x270 [ 612.575588] ? do_raw_spin_unlock+0x53/0x220 [ 612.575607] kobject_add_internal+0x24c/0x9a0 [ 612.575630] kobject_add+0x157/0x240 [ 612.575649] ? __pfx_kobject_add+0x10/0x10 [ 612.575667] ? lock_release+0xc8/0x270 [ 612.575681] ? do_raw_spin_unlock+0x53/0x220 [ 612.575699] ? kobject_put+0xaa/0x260 [ 612.575722] device_add+0x32d/0x1830 [ 612.575740] ? __pfx_device_add+0x10/0x10 [ 612.575755] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.575773] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.575787] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.575807] hci_conn_add_sysfs+0x117/0x1c0 [ 612.575831] le_conn_complete_evt+0x1246/0x1e40 [ 612.575859] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.575885] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.575899] ? __asan_memcpy+0x3d/0x60 [ 612.575922] hci_le_meta_evt+0x34b/0x530 [ 612.575934] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.575949] hci_event_packet+0x66c/0x10e0 [ 612.575963] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.575975] ? __pfx_hci_event_packet+0x10/0x10 [ 612.575988] ? mark_held_locks+0x49/0x80 [ 612.576003] ? kcov_remote_start+0x2ce/0x5a0 [ 612.576027] hci_rx_work+0x65b/0x8b0 [ 612.576041] process_one_work+0x8e1/0x1960 [ 612.576065] ? __pfx_process_one_work+0x10/0x10 [ 612.576080] ? move_linked_works+0x172/0x270 [ 612.576103] ? assign_work+0x196/0x240 [ 612.576118] worker_thread+0x67e/0xe90 [ 612.576133] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.576160] ? __pfx_worker_thread+0x10/0x10 [ 612.576176] kthread+0x3c8/0x740 [ 612.576191] ? __pfx_kthread+0x10/0x10 [ 612.576203] ? ret_from_fork+0x79/0x7a0 [ 612.576216] ? lock_release+0xc8/0x270 [ 612.576231] ? __pfx_kthread+0x10/0x10 [ 612.576245] ret_from_fork+0x67a/0x7a0 [ 612.576257] ? __pfx_ret_from_fork+0x10/0x10 [ 612.576271] ? __switch_to+0x759/0x1030 [ 612.576290] ? __pfx_kthread+0x10/0x10 [ 612.576304] ret_from_fork_asm+0x1a/0x30 [ 612.576331] [ 612.576972] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.576997] Bluetooth: hci7: failed to register connection device [ 612.635726] CPU: 0 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.635759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.635775] Workqueue: hci3 hci_rx_work [ 612.635805] Call Trace: [ 612.635814] [ 612.635830] dump_stack_lvl+0xfa/0x120 [ 612.635860] sysfs_warn_dup+0x80/0xa0 [ 612.635889] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.635917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.635944] ? find_held_lock+0x2b/0x80 [ 612.635981] ? lock_release+0xc8/0x270 [ 612.636008] ? do_raw_spin_unlock+0x53/0x220 [ 612.636042] kobject_add_internal+0x24c/0x9a0 [ 612.636083] kobject_add+0x157/0x240 [ 612.636118] ? __pfx_kobject_add+0x10/0x10 [ 612.636152] ? lock_release+0xc8/0x270 [ 612.636178] ? do_raw_spin_unlock+0x53/0x220 [ 612.636210] ? kobject_put+0xaa/0x260 [ 612.636253] device_add+0x32d/0x1830 [ 612.636284] ? __pfx_device_add+0x10/0x10 [ 612.636312] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.636343] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.636367] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.636404] hci_conn_add_sysfs+0x117/0x1c0 [ 612.636436] le_conn_complete_evt+0x1246/0x1e40 [ 612.636484] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.636533] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.636560] ? __asan_memcpy+0x3d/0x60 [ 612.636615] hci_le_meta_evt+0x34b/0x530 [ 612.636636] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.636664] hci_event_packet+0x66c/0x10e0 [ 612.636688] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.636710] ? __pfx_hci_event_packet+0x10/0x10 [ 612.636734] ? mark_held_locks+0x49/0x80 [ 612.636761] ? kcov_remote_start+0x2ce/0x5a0 [ 612.636802] hci_rx_work+0x65b/0x8b0 [ 612.636829] process_one_work+0x8e1/0x1960 [ 612.636869] ? __pfx_process_one_work+0x10/0x10 [ 612.636897] ? move_linked_works+0x172/0x270 [ 612.636937] ? assign_work+0x196/0x240 [ 612.636966] worker_thread+0x67e/0xe90 [ 612.636994] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.637040] ? __pfx_worker_thread+0x10/0x10 [ 612.637069] kthread+0x3c8/0x740 [ 612.637094] ? __pfx_kthread+0x10/0x10 [ 612.637117] ? ret_from_fork+0x79/0x7a0 [ 612.637140] ? lock_release+0xc8/0x270 [ 612.637166] ? __pfx_kthread+0x10/0x10 [ 612.637192] ret_from_fork+0x67a/0x7a0 [ 612.637214] ? __pfx_ret_from_fork+0x10/0x10 [ 612.637240] ? __switch_to+0x759/0x1030 [ 612.637272] ? __pfx_kthread+0x10/0x10 [ 612.637298] ret_from_fork_asm+0x1a/0x30 [ 612.637344] [ 612.670547] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.672497] Bluetooth: hci3: failed to register connection device [ 612.682175] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 612.682942] debugfs: '0' already exists in 'hci3' [ 612.685346] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 612.686769] CPU: 0 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 612.686798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.686814] Workqueue: hci3 hci_rx_work [ 612.686847] Call Trace: [ 612.686855] [ 612.686864] dump_stack_lvl+0xfa/0x120 [ 612.686894] sysfs_warn_dup+0x80/0xa0 [ 612.686924] sysfs_create_dir_ns+0x23b/0x2a0 [ 612.686952] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 612.686978] ? find_held_lock+0x2b/0x80 [ 612.687017] ? lock_release+0xc8/0x270 [ 612.687043] ? do_raw_spin_unlock+0x53/0x220 [ 612.687077] kobject_add_internal+0x24c/0x9a0 [ 612.687118] kobject_add+0x157/0x240 [ 612.687153] ? __pfx_kobject_add+0x10/0x10 [ 612.687186] ? lock_release+0xc8/0x270 [ 612.687213] ? do_raw_spin_unlock+0x53/0x220 [ 612.687245] ? kobject_put+0xaa/0x260 [ 612.687292] device_add+0x32d/0x1830 [ 612.687323] ? __pfx_device_add+0x10/0x10 [ 612.687351] ? hci_debugfs_create_conn+0x10f/0x240 [ 612.687382] ? mgmt_send_event_skb+0x2f3/0x460 [ 612.687405] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 612.687442] hci_conn_add_sysfs+0x117/0x1c0 [ 612.687473] le_conn_complete_evt+0x1246/0x1e40 [ 612.687521] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 612.687570] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 612.687595] ? __asan_memcpy+0x3d/0x60 [ 612.687635] hci_le_meta_evt+0x34b/0x530 [ 612.687656] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 612.687683] hci_event_packet+0x66c/0x10e0 [ 612.687708] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 612.687730] ? __pfx_hci_event_packet+0x10/0x10 [ 612.687753] ? mark_held_locks+0x49/0x80 [ 612.687780] ? kcov_remote_start+0x2ce/0x5a0 [ 612.687823] hci_rx_work+0x65b/0x8b0 [ 612.687852] process_one_work+0x8e1/0x1960 [ 612.687892] ? __pfx_process_one_work+0x10/0x10 [ 612.687920] ? move_linked_works+0x172/0x270 [ 612.687960] ? assign_work+0x196/0x240 [ 612.687989] worker_thread+0x67e/0xe90 [ 612.688017] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 612.688063] ? __pfx_worker_thread+0x10/0x10 [ 612.688093] kthread+0x3c8/0x740 [ 612.688117] ? __pfx_kthread+0x10/0x10 [ 612.688140] ? ret_from_fork+0x79/0x7a0 [ 612.688163] ? lock_release+0xc8/0x270 [ 612.688189] ? __pfx_kthread+0x10/0x10 [ 612.688215] ret_from_fork+0x67a/0x7a0 [ 612.688237] ? __pfx_ret_from_fork+0x10/0x10 [ 612.688262] ? __switch_to+0x759/0x1030 [ 612.688295] ? __pfx_kthread+0x10/0x10 [ 612.688320] ret_from_fork_asm+0x1a/0x30 [ 612.688367] [ 612.721605] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 612.723686] Bluetooth: hci3: failed to register connection device [ 612.725065] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 613.327134] Bluetooth: hci5: command 0x0406 tx timeout [ 613.647164] Bluetooth: hci3: command 0x2016 tx timeout [ 613.902959] Bluetooth: hci2: command 0x2016 tx timeout [ 614.414994] Bluetooth: hci7: command 0x2016 tx timeout [ 615.374892] Bluetooth: hci5: command 0x0406 tx timeout [ 615.694974] Bluetooth: hci3: command 0x2016 tx timeout [ 615.951112] Bluetooth: hci2: command 0x2016 tx timeout [ 616.463907] Bluetooth: hci7: command 0x2016 tx timeout [ 617.423047] Bluetooth: hci5: command 0x0406 tx timeout [ 617.742916] Bluetooth: hci3: command 0x2016 tx timeout [ 617.998994] Bluetooth: hci2: command 0x2016 tx timeout [ 618.511041] Bluetooth: hci7: command 0x2016 tx timeout [ 619.470937] Bluetooth: hci5: command 0x0406 tx timeout [ 619.790907] Bluetooth: hci3: command 0x2016 tx timeout [ 620.047019] Bluetooth: hci2: command 0x2016 tx timeout [ 620.558922] Bluetooth: hci7: command 0x2016 tx timeout [ 621.519891] Bluetooth: hci5: command 0x0406 tx timeout 18:29:14 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6c}, "a14602b963e7407f65b542d930060bb8e7407df8b422168cda4fc69baf7a460b583b0ca295904f8efe8fa214fd8aa05a99d91b4770d3b6c710269c1f2688ad50f48351c462afa59ae13139f3cb84f6cf71124832045ef26e18cc579bbfac74465ced850c6a12a7a9d59a2335"}, 0x70) 18:29:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaa9800000000000000fff3ff"], 0x22) 18:29:14 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 18:29:14 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) lseek(r0, 0x1f, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04f4baaee6764b08cbc2fb6aca1a853e1f0a1161a6345b06a71b93e827420d052bc881dd2a04be60803baa9cca8804396d64dc0879b644096257b879c8b6291b311c8b03b4334a070d230f69a9b4c4e9b404bfee6605aa"], 0x22) syz_emit_vhci(0x0, 0x0) 18:29:14 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9, 0x0, 0x7}}}, 0x7) 18:29:14 executing program 5: syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x35}}, 0x4) 18:29:14 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x40, 0x2}, {0x5}}}}, 0xf) syz_emit_vhci(&(0x7f00000006c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x99}, @l2cap_cid_signaling={{0x95}, [@l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xd4c, 0x3f}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x13ea, 0x2}}, @l2cap_conf_req={{0x4, 0x81, 0x55}, {0x5, 0x4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x8, 0x1, 0x7, 0x1fe}}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_ews={0x7, 0x2, 0x817}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x7, 0x91, 0x800, 0x4fc, 0x81}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x3f, 0xe, 0x2, 0x6, 0x7ce}}, @l2cap_conf_efs={0x6, 0x10, {0xd9, 0x1, 0x20, 0x4, 0x6, 0x5}}]}}, @l2cap_move_chan_cfm={{0x10, 0xa7, 0x4}, {0x80, 0xdcd}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x0, 0x1f}}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x100, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x9}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x3, 0x20}}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x4, 0x80}}]}}, 0x9e) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{}, {0x5, 0xc9}}}, 0xfffffffffffffe46) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="03000000"], 0x4) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="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"/1355], 0x4fa) 18:29:14 executing program 7: timer_delete(0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_getoverrun(r0) timer_delete(0x0) [ 621.720485] debugfs: '0' already exists in 'hci7' [ 621.721780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 621.723691] CPU: 0 UID: 0 PID: 297 Comm: kworker/u11:3 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 621.723726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.723744] Workqueue: hci7 hci_rx_work [ 621.723778] Call Trace: [ 621.723787] [ 621.723798] dump_stack_lvl+0xfa/0x120 [ 621.723843] sysfs_warn_dup+0x80/0xa0 [ 621.723878] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.723911] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.723943] ? find_held_lock+0x2b/0x80 [ 621.723987] ? lock_release+0xc8/0x270 [ 621.724018] ? do_raw_spin_unlock+0x53/0x220 [ 621.724058] kobject_add_internal+0x24c/0x9a0 [ 621.724106] kobject_add+0x157/0x240 [ 621.724147] ? __pfx_kobject_add+0x10/0x10 [ 621.724186] ? lock_release+0xc8/0x270 [ 621.724217] ? do_raw_spin_unlock+0x53/0x220 [ 621.724255] ? kobject_put+0xaa/0x260 [ 621.724305] device_add+0x32d/0x1830 [ 621.724342] ? __pfx_device_add+0x10/0x10 [ 621.724375] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.724410] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.724438] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.724482] hci_conn_add_sysfs+0x117/0x1c0 [ 621.724518] le_conn_complete_evt+0x1246/0x1e40 [ 621.724575] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.724647] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.724678] ? __asan_memcpy+0x3d/0x60 [ 621.724725] hci_le_meta_evt+0x34b/0x530 [ 621.724750] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.724783] hci_event_packet+0x66c/0x10e0 [ 621.724813] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.724839] ? __pfx_hci_event_packet+0x10/0x10 [ 621.724868] ? mark_held_locks+0x49/0x80 [ 621.724900] ? kcov_remote_start+0x2ce/0x5a0 [ 621.724948] hci_rx_work+0x65b/0x8b0 [ 621.724982] process_one_work+0x8e1/0x1960 [ 621.725031] ? __pfx_process_one_work+0x10/0x10 [ 621.725065] ? move_linked_works+0x172/0x270 [ 621.725113] ? assign_work+0x196/0x240 [ 621.725148] worker_thread+0x67e/0xe90 [ 621.725182] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.725236] ? __pfx_worker_thread+0x10/0x10 [ 621.725271] kthread+0x3c8/0x740 [ 621.725300] ? __pfx_kthread+0x10/0x10 [ 621.725328] ? ret_from_fork+0x79/0x7a0 [ 621.725355] ? lock_release+0xc8/0x270 [ 621.725386] ? __pfx_kthread+0x10/0x10 [ 621.725416] ret_from_fork+0x67a/0x7a0 [ 621.725444] ? __pfx_ret_from_fork+0x10/0x10 [ 621.725477] ? __switch_to+0x759/0x1030 [ 621.725517] ? __pfx_kthread+0x10/0x10 [ 621.725548] ret_from_fork_asm+0x1a/0x30 [ 621.725603] [ 621.765755] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.765778] debugfs: '0' already exists in 'hci3' [ 621.767900] Bluetooth: hci7: failed to register connection device [ 621.768365] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 621.769917] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 621.769934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.769944] Workqueue: hci3 hci_rx_work [ 621.769966] Call Trace: [ 621.769971] [ 621.769976] dump_stack_lvl+0xfa/0x120 [ 621.769994] sysfs_warn_dup+0x80/0xa0 [ 621.770012] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.770027] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.770041] ? find_held_lock+0x2b/0x80 [ 621.770063] ? lock_release+0xc8/0x270 [ 621.770077] ? do_raw_spin_unlock+0x53/0x220 [ 621.770096] kobject_add_internal+0x24c/0x9a0 [ 621.770120] kobject_add+0x157/0x240 [ 621.770138] ? __pfx_kobject_add+0x10/0x10 [ 621.770156] ? lock_release+0xc8/0x270 [ 621.770170] ? do_raw_spin_unlock+0x53/0x220 [ 621.770187] ? kobject_put+0xaa/0x260 [ 621.770209] device_add+0x32d/0x1830 [ 621.770226] ? __pfx_device_add+0x10/0x10 [ 621.770241] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.770258] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.770272] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.770291] hci_conn_add_sysfs+0x117/0x1c0 [ 621.770308] le_conn_complete_evt+0x1246/0x1e40 [ 621.770335] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.770360] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.770374] ? __asan_memcpy+0x3d/0x60 [ 621.770397] hci_le_meta_evt+0x34b/0x530 [ 621.770408] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.770423] hci_event_packet+0x66c/0x10e0 [ 621.770436] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.770448] ? __pfx_hci_event_packet+0x10/0x10 [ 621.770462] ? mark_held_locks+0x49/0x80 [ 621.770476] ? kcov_remote_start+0x2ce/0x5a0 [ 621.770499] hci_rx_work+0x65b/0x8b0 [ 621.770514] process_one_work+0x8e1/0x1960 [ 621.770537] ? __pfx_process_one_work+0x10/0x10 [ 621.770552] ? move_linked_works+0x172/0x270 [ 621.770574] ? assign_work+0x196/0x240 [ 621.770589] worker_thread+0x67e/0xe90 [ 621.770604] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.770629] ? __pfx_worker_thread+0x10/0x10 [ 621.770645] kthread+0x3c8/0x740 [ 621.770659] ? __pfx_kthread+0x10/0x10 [ 621.770672] ? ret_from_fork+0x79/0x7a0 [ 621.770685] ? lock_release+0xc8/0x270 [ 621.770699] ? __pfx_kthread+0x10/0x10 [ 621.770713] ret_from_fork+0x67a/0x7a0 [ 621.770725] ? __pfx_ret_from_fork+0x10/0x10 [ 621.770739] ? __switch_to+0x759/0x1030 [ 621.770757] ? __pfx_kthread+0x10/0x10 [ 621.770771] ret_from_fork_asm+0x1a/0x30 [ 621.770797] [ 621.794109] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.797278] Bluetooth: hci3: failed to register connection device [ 621.822623] debugfs: '0' already exists in 'hci3' [ 621.826030] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 621.827644] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 621.827676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 621.827693] Workqueue: hci3 hci_rx_work [ 621.827718] Call Trace: [ 621.827727] [ 621.827736] dump_stack_lvl+0xfa/0x120 [ 621.827768] sysfs_warn_dup+0x80/0xa0 [ 621.827798] sysfs_create_dir_ns+0x23b/0x2a0 [ 621.827836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.827864] ? find_held_lock+0x2b/0x80 [ 621.827904] ? lock_release+0xc8/0x270 [ 621.827933] ? do_raw_spin_unlock+0x53/0x220 [ 621.827969] kobject_add_internal+0x24c/0x9a0 [ 621.828012] kobject_add+0x157/0x240 [ 621.828050] ? __pfx_kobject_add+0x10/0x10 [ 621.828087] ? lock_release+0xc8/0x270 [ 621.828115] ? do_raw_spin_unlock+0x53/0x220 [ 621.828149] ? kobject_put+0xaa/0x260 [ 621.828194] device_add+0x32d/0x1830 [ 621.828226] ? __pfx_device_add+0x10/0x10 [ 621.828256] ? hci_debugfs_create_conn+0x10f/0x240 [ 621.828287] ? mgmt_send_event_skb+0x2f3/0x460 [ 621.828311] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 621.828351] hci_conn_add_sysfs+0x117/0x1c0 [ 621.828383] le_conn_complete_evt+0x1246/0x1e40 [ 621.828433] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.828485] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 621.828513] ? __asan_memcpy+0x3d/0x60 [ 621.828554] hci_le_meta_evt+0x34b/0x530 [ 621.828576] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 621.828606] hci_event_packet+0x66c/0x10e0 [ 621.828644] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.828668] ? __pfx_hci_event_packet+0x10/0x10 [ 621.828694] ? mark_held_locks+0x49/0x80 [ 621.828723] ? kcov_remote_start+0x2ce/0x5a0 [ 621.828765] hci_rx_work+0x65b/0x8b0 [ 621.828794] process_one_work+0x8e1/0x1960 [ 621.828836] ? __pfx_process_one_work+0x10/0x10 [ 621.828866] ? move_linked_works+0x172/0x270 [ 621.828909] ? assign_work+0x196/0x240 [ 621.828940] worker_thread+0x67e/0xe90 [ 621.828970] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 621.829018] ? __pfx_worker_thread+0x10/0x10 [ 621.829050] kthread+0x3c8/0x740 [ 621.829079] ? __pfx_kthread+0x10/0x10 [ 621.829106] ? ret_from_fork+0x79/0x7a0 [ 621.829129] ? lock_release+0xc8/0x270 [ 621.829158] ? __pfx_kthread+0x10/0x10 [ 621.829186] ret_from_fork+0x67a/0x7a0 [ 621.829210] ? __pfx_ret_from_fork+0x10/0x10 [ 621.829238] ? __switch_to+0x759/0x1030 [ 621.829272] ? __pfx_kthread+0x10/0x10 [ 621.829300] ret_from_fork_asm+0x1a/0x30 [ 621.829350] [ 621.834542] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 621.835077] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.845099] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 621.845724] Bluetooth: hci3: failed to register connection device [ 621.847317] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 621.848161] Bluetooth: hci3: command 0x2016 tx timeout 18:29:15 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:29:15 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0200803400300001000581010107020700061005020d000200000420000000460c00000102ff0f050101050101050101000000000000000000"], 0x39) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x127}, @l2cap_cid_signaling={{0x123}, [@l2cap_info_rsp={{0xb, 0x0, 0xf4}, {0x2, 0xf866, "de3d20951339c70908cd9cad52d10483396a8a6d56d6051d4b94ea7b58f5b66c627472fe15074c0bb689c0c65ac13fea09997295e378c3fe3ba8e058debedb6610a493f30b1aa1d8dbb705ea81e2d204e229a14352e165fbbbb745192bf14424a889d11bebd511fa5242aadf00fc36dcb5b06bef25a629a023392093e35b8c703dcd64940c27782735148685c18032fae357250f9a6254a9dbd4e1928872c36fe1ab523a15a727c872a0f048dfa4410283b6ec8681c8f929fe8a80269fd13ec890f7ef7de57c6918ae8654a2f22777149c87c1e863438e4109058b9cbeb9f5a955c5c46bd905b8c702e8996e06720629"}}, @l2cap_info_req={{0xa, 0x49, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x9, 0x1, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0xbe, 0x2}, {0x800}}, @l2cap_info_req={{0xa, 0x3f, 0x2}, {0xfc00}}, @l2cap_disconn_rsp={{0x7, 0x1f, 0x4}, {0x40, 0xfe51}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x4, 0x80}}]}}, 0x12c) 18:29:15 executing program 1: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 18:29:15 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x11) 18:29:15 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0xff, 0xc8, @any, 0x2, 0x0, 0x40, 0x7, 0x3, 0x2}}}, 0x14) [ 621.853710] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 622.025575] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 622.029574] debugfs: '0' already exists in 'hci5' [ 622.030607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 622.032061] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 622.032097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.032113] Workqueue: hci5 hci_rx_work [ 622.032142] Call Trace: [ 622.032150] [ 622.032160] dump_stack_lvl+0xfa/0x120 [ 622.032191] sysfs_warn_dup+0x80/0xa0 [ 622.032220] sysfs_create_dir_ns+0x23b/0x2a0 [ 622.032247] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 622.032274] ? find_held_lock+0x2b/0x80 [ 622.032311] ? lock_release+0xc8/0x270 [ 622.032338] ? do_raw_spin_unlock+0x53/0x220 [ 622.032371] kobject_add_internal+0x24c/0x9a0 [ 622.032411] kobject_add+0x157/0x240 [ 622.032446] ? __pfx_kobject_add+0x10/0x10 [ 622.032479] ? lock_release+0xc8/0x270 [ 622.032505] ? do_raw_spin_unlock+0x53/0x220 [ 622.032536] ? kobject_put+0xaa/0x260 [ 622.032578] device_add+0x32d/0x1830 [ 622.032608] ? __pfx_device_add+0x10/0x10 [ 622.032650] ? hci_debugfs_create_conn+0x10f/0x240 [ 622.032681] ? mgmt_send_event_skb+0x2f3/0x460 [ 622.032704] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 622.032741] hci_conn_add_sysfs+0x117/0x1c0 [ 622.032772] le_conn_complete_evt+0x1246/0x1e40 [ 622.032826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 622.032874] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 622.032899] ? __asan_memcpy+0x3d/0x60 [ 622.032939] hci_le_meta_evt+0x34b/0x530 [ 622.032960] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 622.032987] hci_event_packet+0x66c/0x10e0 [ 622.033012] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 622.033034] ? __pfx_hci_event_packet+0x10/0x10 [ 622.033057] ? mark_held_locks+0x49/0x80 [ 622.033084] ? kcov_remote_start+0x2ce/0x5a0 [ 622.033124] hci_rx_work+0x65b/0x8b0 [ 622.033152] process_one_work+0x8e1/0x1960 [ 622.033191] ? __pfx_process_one_work+0x10/0x10 [ 622.033219] ? move_linked_works+0x172/0x270 [ 622.033259] ? assign_work+0x196/0x240 [ 622.033287] worker_thread+0x67e/0xe90 [ 622.033315] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 622.033360] ? __pfx_worker_thread+0x10/0x10 [ 622.033389] kthread+0x3c8/0x740 [ 622.033414] ? __pfx_kthread+0x10/0x10 [ 622.033437] ? ret_from_fork+0x79/0x7a0 [ 622.033459] ? lock_release+0xc8/0x270 [ 622.033485] ? __pfx_kthread+0x10/0x10 [ 622.033510] ret_from_fork+0x67a/0x7a0 [ 622.033533] ? __pfx_ret_from_fork+0x10/0x10 [ 622.033558] ? __switch_to+0x759/0x1030 [ 622.033590] ? __pfx_kthread+0x10/0x10 [ 622.033615] ret_from_fork_asm+0x1a/0x30 [ 622.033661] [ 622.071039] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 622.073123] Bluetooth: hci5: failed to register connection device 18:29:15 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x114, r2, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_IE={0xf0, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x80, 0x0, @device_b, 0x6, @broadcast, 0xc5, 0xffff8001, @device_b, 0xfb5}}, @ht={0x2d, 0x1a, {0x1001, 0x1, 0x4, 0x0, {0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0xc00000, 0x3}}, @ssid={0x0, 0xf, @random="8cfdfdf46891b6c97af06ada5bc2c8"}, @tim={0x5, 0x92, {0xee, 0xac, 0x6, "746ae31ec1dee460d1aeeee7556b292d367647acd980bb4d5864d305c0619778573864969ce08fe3a2af172757eae6b75783900d70794b5dea829552ec9a410f77df5a89f60cb0f480e7622a91545f4bbb038c0abad3004836d5385a3efa0c6389dac616fc4713823056d0fb75ca591c8fffffebad92b77646614f71062dc7fbe153b1db7c803c943f1e05aada09f6"}}, @ibss={0x6, 0x2, 0x3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000040}, 0x40010) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'U-', 0x310}, 0x16, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC], 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04ff00f2612edb8f7b74851bec405286189dae65e9209f32c9afdc65b5b878536f700eed0a282430523d8d1e1fbf0447f36d470e68d837c7b79ed0cd365f0b4d9297c3224af80783e3e48ea16be4d93d8e08c26f4349f78860e45c705e873c92a56f711e44bce4546d48"], 0x3) [ 622.087340] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 622.095367] Bluetooth: hci2: command 0x2016 tx timeout 18:29:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04330a0000000000000000e779a4da6383bf91f2bf0a2080ede742be00"/43], 0xd) 18:29:15 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3a, 0x4}, {0x0, 0x3}}}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:29:15 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280), 0x2, 0x0) dup(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x114) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x20) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000002c0)="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") io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r4, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r6, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r5, &(0x7f00000000c0)="d3", 0x1}]) [ 622.258494] debugfs: '0' already exists in 'hci0' [ 622.259484] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 622.260748] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 622.260778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.260799] Workqueue: hci0 hci_rx_work [ 622.260842] Call Trace: [ 622.260853] [ 622.260867] dump_stack_lvl+0xfa/0x120 [ 622.260902] sysfs_warn_dup+0x80/0xa0 [ 622.260940] sysfs_create_dir_ns+0x23b/0x2a0 [ 622.260971] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 622.261007] ? find_held_lock+0x2b/0x80 [ 622.261053] ? lock_release+0xc8/0x270 [ 622.261090] ? do_raw_spin_unlock+0x53/0x220 [ 622.261132] kobject_add_internal+0x24c/0x9a0 [ 622.261178] kobject_add+0x157/0x240 [ 622.261219] ? __pfx_kobject_add+0x10/0x10 [ 622.261263] ? lock_release+0xc8/0x270 [ 622.261296] ? do_raw_spin_unlock+0x53/0x220 [ 622.261338] ? kobject_put+0xaa/0x260 [ 622.261395] device_add+0x32d/0x1830 [ 622.261431] ? __pfx_device_add+0x10/0x10 [ 622.261467] ? hci_debugfs_create_conn+0x10f/0x240 [ 622.261503] ? mgmt_send_event_skb+0x2f3/0x460 [ 622.261531] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 622.261571] hci_conn_add_sysfs+0x117/0x1c0 [ 622.261607] le_conn_complete_evt+0x1246/0x1e40 [ 622.261666] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 622.261730] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 622.261761] ? __asan_memcpy+0x3d/0x60 [ 622.261810] hci_le_meta_evt+0x34b/0x530 [ 622.261834] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 622.261866] hci_event_packet+0x66c/0x10e0 [ 622.261897] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 622.261924] ? __pfx_hci_event_packet+0x10/0x10 [ 622.261953] ? mark_held_locks+0x49/0x80 [ 622.261985] ? kcov_remote_start+0x2ce/0x5a0 [ 622.262037] hci_rx_work+0x65b/0x8b0 [ 622.262071] process_one_work+0x8e1/0x1960 [ 622.262117] ? __pfx_process_one_work+0x10/0x10 [ 622.262149] ? move_linked_works+0x172/0x270 [ 622.262194] ? assign_work+0x196/0x240 [ 622.262232] worker_thread+0x67e/0xe90 [ 622.262270] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 622.262333] ? __pfx_worker_thread+0x10/0x10 [ 622.262373] kthread+0x3c8/0x740 [ 622.262406] ? __pfx_kthread+0x10/0x10 [ 622.262437] ? ret_from_fork+0x79/0x7a0 [ 622.262467] ? lock_release+0xc8/0x270 [ 622.262503] ? __pfx_kthread+0x10/0x10 [ 622.262541] ret_from_fork+0x67a/0x7a0 [ 622.262576] ? __pfx_ret_from_fork+0x10/0x10 [ 622.262611] ? __switch_to+0x759/0x1030 [ 622.262650] ? __pfx_kthread+0x10/0x10 [ 622.262683] ret_from_fork_asm+0x1a/0x30 [ 622.262732] [ 622.295421] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 622.297290] Bluetooth: hci0: failed to register connection device io_submit(0x0, 0x6, &(0x7f0000003880)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0xff52, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x1000, 0xdd99, 0x0, 0x1, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x7ff, 0xffffffffffffffff, &(0x7f0000001440)="9d3144667b4c8bb2872b4351254aacd4bd85f0202badda9d0604226d824a68f870c49fe2a9a464622f58cf142210ca6bbf154bb72878367e10404fcee4b38e2611b393b60f9c9b52b02fac2833686ea85c15c2b6e1e23cd271cb82ba0ea0e0ee809f96a4515db972e3ce662e3adbee6485f135fe11d30ffae89267224cc26ae399b0274d8f1a66c5604d303c8697b86c9de8058153fdf013f596e39d3b170dae7656dc284d4c", 0xa6, 0xffffffffffffff80, 0x0, 0x1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000001540)="3cf816296eae350f78d98fa73dcb24f451452853b5d2a672b87bf5b185dbcbab2120ee03d83a6a90e95c55e0c49c0eae7f033269a857eb17024462b9dbb815c6654c1888540c3577b253d747bfed83afa66f92fdf076dde8346928b829f72e69d4776fefa684e58bc27667cea9857ffc7a442456be8269e94aec821897f4463ad7396f565e6a83fb17579e1839418bb69ac58b49b5c43d09787d5ccdbb8461de2e3e19bf4276d1fa7df888d4333b815c58b28cc8049526f224b4beffe29c9cfa668aef10f55106580d894b526abb7422b78807d583e2f7fcdd0eb3", 0xdb, 0x26c, 0x0, 0x1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f00000016c0)="f99d73a2bad8918dbc42b4b4b275e17d4c70744908531fd7d96c9c6659355b1c50b31f7273d55dffa5757400faba7525fc592c176e2ea4437136610f4d20d4fd5ee9ee9221107b8e89624e5aa6148b8b2b1be9f2e57804c528571b095e9419204ef918ed930070690772514b296a28e1d867c0d4ad501d1db085bef4d05c9fbdd8414d4db68c07ea88b64d3ae1bedcb00eb8cc441de1b0f91b6376684c7316e525c1bae2e49718b737bd9073d34b9ac41430e49b2f5fc335b9e6339afee621cb10bd0a383681ab165f6a866ac9407084e9ead9f83801d04102b72f75d72094", 0xdf, 0x3c2, 0x0, 0x2}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000001800)="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", 0x1000, 0x5, 0x0, 0x3, r2}, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000002840)="fe2662663a447f0a99ce664c2ded82f117f2f9db97c1d88b98d05af33309f623a2bf4867d67df573bed21f35ac19f1761f84c6472cd4f99c66146a45b46c9884b7cbbb1ee8aea06f01d6cb6acd7accc3a1ce1766b0ef67a5eda1effb2f2af9e1378352758a6ccfa4244b7bf2fbc1fc946acc0bb9327403ed37f90244159fa4459da9734ceec2bbf3aa09985dd99a2f2cc3394594ce13fe266430e791c31ac44e8e7df16454a2b75149fcaed14018cfded66dbb7a66c7d25bf29646a3254fcd56e733023b8e8f8896d223e98339a28d480c19bc6e66833b0d30c76add57154c858846d27099f7b5f306055a4bf5c3adc5ef5482452f1e8b321bc91369a830b0143e37c4da39f648209f9ec15e4b62361e6ccff675041c214849027e240a47187e9e4edce7e30bf5fae26b441092b6d36ad61a1034fa582ee3c47acfb0d74fda83f621498e51c9f9c026a92e6bd93c23aad2db71e53b66940b5a93dda0f171368300b5d0e83753b5eafb39fa6a81e9bf6318655e849c9bf3da343e48e6ee02cda277d010da846b54292807eff8879600633f2e9a5121fabb77800732b7ff0fb4ef18d27151d45821585b10fb2f8c510e1a6a94bae638b7cd269dc4a83ab1d8dbc9c1401cf56916cdd3efa53285e74fba214c7e334ef9df3fc596be2583e9dfa780fcc864c21d70b3239104af7ccea2be3d6dd5ed9be212340cd8e420bf232658a818e40a2183571052b30a0f3ffd917c43dc4de8efbbb14f5dd858bec8319bfa1a31e875ddc11ca579ddf3ae05a014962f19f8f5e0dbfdbf2487940d67b5d15d7cdfa9be55fa0f91a004664a4f6a7332262b1c28b9de122ae9592a8d52f7bbed21d03542ac2aba712dd9c0df0a8e74634d76f99067aa0fdf4eba552d2d74770d612361cc3502920fb2ad5473f500e079ed263d183caf7d08ba3d924ca3641f1ab82efa4d8200c269bc4d4c720031ccd356bd303822413bfe0ef94b0b2a598632469dbd094553075bf17118b7a4fbad6c4596ccf94e6a6d0405cdf1ea48258c9557cabfcb2211b4d2e9cf2f1bfe1d180c6aba415d32d51c9618547995739693f14dbb5f3a423d9a637d0887b661d7f3042e16d35e71e955b202e8f9ae348ecbe76376df88777e43482181c1dcf76bbfe30634ee57dc61fd2ad64147d1061bed9a1f76ec698fd890f1c529e1e0032a62964cd162efed748541ac6917d0f3801b88705ef0f661af2733c9871a88d8b52eda5af1c7aa47c84c02ba3057e5ea52a6f2019c52e073739f0ac1bafe65bfe448e2e37c3396c68d3076d32d7d044a45da636f0e6fcc6906a83e2e636bfe26e088caed93a0df88e994cdc44f2aed6472684fd30b8e186f75f626f948f4b68d1419e94babfc42a6e146e2902fbaffa6a7c94fe316a6a77ebabe962d0cbde972de25efd4866510ec1dcc2b52f102e61b0ed208243d2b92318bf674f2284fa822c4a5ad5ce1754572f90ac00142b1c1673ab2bcc56f33c9c888b729a1a81b7f958448ec33e2aa2e8156be09dee0a644c5d61240e0cf98b0744c1420bbdaf1c4a0a9d92a07f463874ba10c9dcaaa4aa00429820baf31dc84724485d7f5b77956ce84fc5e64bd46dfb213fe850b2245e3ba74af490c4267a56c636ec5e0addf5d85ffe8d60bf99232bb7133c39256c7661b9142c5c18d3a8991d61fd07a3a77cc6fbe77018f8b3629aa7c30929759f1bef5e2cdaa9a22d64c0a435ac1a7852f357bd8d5b5c5cc9cf6c27f5544e04e75212a05217b0cad78314438f1f890e4a3afff8620b675212ee356fbc279d4bf59604e92f9dd1eced3e810af8689799f630318e7e129c654754ed36d8a056d3d337a01a8f7ec4b1aebba987a54fb311af955bc15a7f85292688133368dbcf7929364a42119a0b7f2aecc3f3628a8d90efba562dee27dfa212ccb8590e32c743570645b339b26e5672fa6c4e5058aa65161ac78f72eb122838f4d6dc7f787c0ee65aee5996b60d44445bd5df55b2006cdfe3d4e7a58b67dfa994306698d4407287ee5797399074cf762210b4c62f8ed7337ca917d278e96247c28fd1617cb3a920b6b4c8a46e7607f8298d9d2affa19b2e2c97324bc279c62cd1e15564614f2ff6a1a8722cbd65117ac106a618a16fedfb4350673e705f740433ebe74afc5250de8eef5daea90c4e5ed98e9ff3af0dc40be7f41d75ce671beae5cd2a57d4bd9a38cc8758037b535546de5c3ca93834d61f4c08f1a914298475c929cdf5de52bec19a0fc85658a0ef939e63bf1ccbac8b47c0542c911ee261c039be90c627b99dcf417b335e607ba26b45e577c05d554c4dd922800e1f8085baca19fcea606cd5712c9e62ab4f421554c58d624f19830dc6efa322d869f437e72c7141cff3a01ad12c31460ba388516aa0d901a8a491ff8ec1f8f529da1fcb07faec317ea2da337143bf41389d7c072a8ef6d82ee0c83b3e8d9ef49e9aba5a75e34abd857bb1c5f969c3e226ec86904073981831c27c2d15cf01970f9d6d0e34a68829d251c6dc645cfc64838a99332c9d415dd452aff9dd957ac6cdc791cfb0f98141a91d14acdfeb3610e82f708470bb8a02c6624d008d808a04b36fd81d14b2f64190e74d2c3831fc6b1959eef1078a1cb8dd7edc9ce9c19261c3bdbac3cdd90e2fd6aa17a2215ca973ba72fbcf905134a7096db1bfddf0dfe955eac5c2f7488cce1827213883fdf3b1fec2c12f416451cf4cad821c6accfde8d2207868ad77f8e63e0e82bc340121b4ccd3d91f14bb2fe3cc4d948fc5274a2f7deb459b2e1309e7347ff7e8f5c47522a7983082b564394c9a2907e04e48d3222c5ac5b50c016b6640aaffbe861ce725ba9bdefeb65bc2a07f85e881b9ce41796d8ebc202480da30fc8234f41b7d663b37845ce320555b5e5961290a490d64deed7cecd105bc7eb2ca980bc0b0825e2f2543cf89e93e86ac315ab842c9771d81e361e59d565200fe64159243b23602b6b2188152ee2b691ee2f0d5387f88a92adb78ddf334f36157a52fdfbb2bc91f410ad00c199d4c7901cee47e138a156a2f32118ee6b55d7b8c7bb6f7fa7c5558e354a9301c91438525f64cfd40749cff9cc6284736f86b2247ad9f5c43a66a85444183000c07112715b1da99ca7c882dc2c3af45a958d34bf60b85db53d1306a988fe98da0e1038ada3489cc45c228548332282dfb5cdf6123ad06fe791cdcab7e616e702a7a8963ba7fd3b8c69e294fbf9faed3c61b379d82a41f90b9adfb045d1cf5e026d10d8282e59e81c3c604628015474f64ee1c96da012394aa5df84ead7c5984176ffc94ada392c33a5e4f86fcb9efae357d33fc0c27e320a1bc8d59446e69f22600fe7a42b0e032a802c3cd12442f16c5f976453b60b9cd39956bfd3ca564abfa80764145ba4529ad40969fed08ac9fbd032e9e221ee3815dfec026424ea2a5ff924f5041fec8c7857b066a1c433cc654df9795161d4379358260f808f6b5295ec105140fc67a3c460548dc5901fc46dde505310dbfc98cbb17260be835cf7ed5fa9d7a5553cd35b954b129b08355bc74f96dd192f165c24043b5da535603577f5faeaeadd13f1369460ac58daed9c71d92737fa1c9028fecc7cfee1c9368cdf8814b1b69c038af65e0f81a723862910e39eaf4b702dd8777983b371a2855da04d9176931030903d2e3211a7b08321e8018db52e558a35149573575419898de54813fd46b920074da7ffdf6c6c32a9a26b6eb2f76c4f5d44e2578fef496a112472b54d49eac99b41646fa4adab99245a1b70f391bddb605da3faec5c530c83678fb99dacf7cd7364ac50c4209b4344ffc51933dc457910c79bb8dcd2c24c48fb48038a68816e27be8ce3b9bd381d4a85e42326cc93f9635581f2489e7290e05e42a5e070ff23ddd06d081454e09b4a624337629f61c4bb7b21ebd948e69b3725dc87e93c7efeeb636ed3352a07bad4a4fea81f64c4d3d72c9d3db4f0700bee5de2ec989218c52cd0c74f582b1bbe91216cbdd3126efab8c80a64b80aa6bb6137211c4b53940cf2349afecce7942564126e43a4b0638018210bf9e9f8bd9785c89198c85d2b90169ef72a6e504f06c5ef98c1ec2788b32ca12c5745b13bcb3417b34396e050546b9aa5287f9144be615f063b23ed5c23144020e95a7b7343da9b59e4bbcdcbea0f05419c69b7fa4df0da3bce795f2b29d88e2d82e40b073b66a40fadbe5eeb49a491f4d7890014b4b9a792ac5741731d41c0154bb6831382dcf38d48378171e594375feaf119283b8cb1902b87025e3838bcbc706d393f0afb4486393b818bed3c132b878c9d7bb301841f56d84a11b692448a7e54c596594fc0b450e91bcc679738802b0245103578ccad36fc748eb091de43270edb8813abf1cb4362284e41554e131d00c13f0283b0cefe367a6af031f670f7a30147c99c5a0d582d81c354b6ac81b751c3e55a085eefc892e4ee548fe21bf60b3886dbe64e034977882b12aa8ab0adff683865db18b5638f060e28cce51d589a2217a15faef17ccf341dec61427232900afe942bdc280f12105800fea57998f08340873238ee3814338033767f8e0def513db1ddd112c1a42aae488e86e884c7d36b26d92b5ddff6410b0f5fa530b9f8621d38ddf86480daf55dd24337324b464525aba31b6a2dd87ed0d29de40d8191087c830ac15eb91681fb9bb5d7cb07594feac3ae4988aabe59b938751e27443b8ce2e0df34e3da1c7c152fbc182bc9c975d6f193bb728ea6fc976c80fee6587bee77d275ef282de3c3ed09bc7639ec65e65d77276037b83bb5795554a0caa622abbc1b6e9a032dbdf1559b8154e936a7c1ced3b7eb4a885aaaaa1a245632732226f618fd520bd75be683e4dab4ee69b7a624999dfc3400b72313015d67e4ea402e487cb3cdf1952d32b4350e6c3b5c2a4da2845dbc75f16d3ea16e9ff6cfe8e93f890677cbfada609de6acd4a2d7d3bf2b1c72c89114a9a2f47f1ae233af68150b92cc86df6681cc53651f4f7f8e8a356ca5f8d337dc1f4ea5df6dd785d39c0240921586dee9e48d04a8a861cb67f18c9843e227196e1c1801ca9f2ca9af55086e04a36b40f6e0eb3277faf98a69dec74e0fbfd46c7c1a5c8d61a9671c021ce2f2b163a224e7f9910534cf293d6f5491baf87316fc2964af6eb1291ce8fec68ae09a5efc46b610024c6b0b9adf1e1e6cb8050bdc23eaec488959ecd4017fec7cb7f647a0652147fde95b3bf9687e404faa39a209c9966d00aa27d832eed1ef2bf7a8a8496bfa6b7a211444f7ce5f88ec87f7e4d6c1261e17f1876be190238c2010a8abe24d8507d55b923051baedda206f1b70547b1572638caf90378550d63cf790f78a7df4a3b0b11d4cff008c498a2dacf17a775b35b5ea40c662c2b11e953400d1d4fc47ee2fa6a5de12511ec31f43c8c54e7417fe170d371e27efd95643c94921b43ada1347c64a5925152d76297394ddcec920ed22f641d6a029446240e587ecb739ed5710ba5fa5e099674961079d557e0d51bf7861d7d2b436be005c0e3e023475b63fe6aa0a6601e8f0571675a448a784f0756abb84e029c22359ab4e99e43fbffd07685db91605ffca496152a98a0312f3c7439456db3ae0c0fa2ec77daf9232f67931edb3e44f6cda37d6886ed00981233520f47769e4c2748133a8a3657fd9eee3106c8c08c0cbc7cb4eefe45f962dd5dfb28076b786832e0f01178819c25f537158e7708a4525ef077d61902df4bf7eabc7c3b27bb3e3ebcc77d2a960be6b0d88686a204e339d1fdc6c37b85e8d49", 0x1000, 0x8, 0x0, 0x3, r5}]) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000180)="df931e5124451c7bc941424592c79a8b1d26e762a436be5db97f45d55e6fcb9fe8e8fa6d37426d3f8e47cf6e6eed77e39c996c033f6adbc01e32836f73a91b68d8c6a364bed4849a1c55f60432335f0c0318cec3204d44ffd37fac23d32b0e3993e4f0f7cc312c1fdf72cda2eaf477f1ba7f35", 0x73}], 0x1, 0x3, 0x6, 0x8) getsockname(r0, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES64], 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0xdd, 0x5}) 18:29:15 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:29:15 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32], 0x22) 18:29:15 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8d00b01070101000b07f000320b000075e55a1667a67d7dd2e7ca60daafef808a5aeaa8722e94fed0fe9104dc5d22792648e762d1ab3d1adc3e4bc992dcf2285617b648de71cc7ffc0148689b7c18155230af6129cf0200000000000000bf0671bbfadab1e1da358475c14f9e69e2175d4ef825080000002eaf56c6b6bc48e90259ed2c559002bb1b6ff6ade9bb27af8050926da50b83fff495895d37505bd949e718ea111ee9c4617799a9ebc9bfce49d27f3dcc5e7da5f85847464b87f5d263886e8a40ae7e267247f4aafcfb4ef60d5fc4090ef7e0d24c8282e232a6a8ddcbd277f53e8cd85ea184186ea16659e9864fb9495b912f2c0d5bb59301f40200ff070eff0300000281"], 0x110) [ 622.425722] debugfs: '0' already exists in 'hci5' [ 622.427291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 622.428813] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 622.428849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.428865] Workqueue: hci5 hci_rx_work [ 622.428895] Call Trace: [ 622.428902] [ 622.428912] dump_stack_lvl+0xfa/0x120 [ 622.428943] sysfs_warn_dup+0x80/0xa0 [ 622.428972] sysfs_create_dir_ns+0x23b/0x2a0 [ 622.428999] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 622.429025] ? find_held_lock+0x2b/0x80 [ 622.429063] ? lock_release+0xc8/0x270 [ 622.429089] ? do_raw_spin_unlock+0x53/0x220 [ 622.429122] kobject_add_internal+0x24c/0x9a0 [ 622.429161] kobject_add+0x157/0x240 [ 622.429195] ? __pfx_kobject_add+0x10/0x10 [ 622.429228] ? lock_release+0xc8/0x270 [ 622.429254] ? do_raw_spin_unlock+0x53/0x220 [ 622.429285] ? kobject_put+0xaa/0x260 [ 622.429327] device_add+0x32d/0x1830 [ 622.429357] ? __pfx_device_add+0x10/0x10 [ 622.429385] ? hci_debugfs_create_conn+0x10f/0x240 [ 622.429415] ? mgmt_send_event_skb+0x2f3/0x460 [ 622.429439] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 622.429475] hci_conn_add_sysfs+0x117/0x1c0 [ 622.429506] le_conn_complete_evt+0x1246/0x1e40 [ 622.429553] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 622.429600] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 622.429626] ? __asan_memcpy+0x3d/0x60 [ 622.429666] hci_le_meta_evt+0x34b/0x530 [ 622.429686] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 622.429714] hci_event_packet+0x66c/0x10e0 [ 622.429739] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 622.429761] ? __pfx_hci_event_packet+0x10/0x10 [ 622.429784] ? mark_held_locks+0x49/0x80 [ 622.429811] ? kcov_remote_start+0x2ce/0x5a0 [ 622.429852] hci_rx_work+0x65b/0x8b0 [ 622.429879] process_one_work+0x8e1/0x1960 [ 622.429919] ? __pfx_process_one_work+0x10/0x10 [ 622.429946] ? move_linked_works+0x172/0x270 [ 622.429986] ? assign_work+0x196/0x240 [ 622.430014] worker_thread+0x67e/0xe90 [ 622.430042] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 622.430088] ? __pfx_worker_thread+0x10/0x10 [ 622.430117] kthread+0x3c8/0x740 [ 622.430141] ? __pfx_kthread+0x10/0x10 [ 622.430164] ? ret_from_fork+0x79/0x7a0 [ 622.430187] ? lock_release+0xc8/0x270 [ 622.430213] ? __pfx_kthread+0x10/0x10 [ 622.430238] ret_from_fork+0x67a/0x7a0 [ 622.430261] ? __pfx_ret_from_fork+0x10/0x10 [ 622.430286] ? __switch_to+0x759/0x1030 [ 622.430318] ? __pfx_kthread+0x10/0x10 [ 622.430344] ret_from_fork_asm+0x1a/0x30 [ 622.430389] [ 622.435230] debugfs: '0' already exists in 'hci4' [ 622.435589] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 622.436281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 622.437072] Bluetooth: hci5: failed to register connection device [ 622.437539] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 622.437571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.437587] Workqueue: hci4 hci_rx_work [ 622.437620] Call Trace: [ 622.437629] [ 622.437639] dump_stack_lvl+0xfa/0x120 [ 622.437671] sysfs_warn_dup+0x80/0xa0 [ 622.437703] sysfs_create_dir_ns+0x23b/0x2a0 [ 622.437731] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 622.437757] ? find_held_lock+0x2b/0x80 [ 622.437797] ? lock_release+0xc8/0x270 [ 622.437831] ? do_raw_spin_unlock+0x53/0x220 [ 622.437866] kobject_add_internal+0x24c/0x9a0 [ 622.437907] kobject_add+0x157/0x240 [ 622.437941] ? __pfx_kobject_add+0x10/0x10 [ 622.437975] ? lock_release+0xc8/0x270 [ 622.438001] ? do_raw_spin_unlock+0x53/0x220 [ 622.438033] ? kobject_put+0xaa/0x260 [ 622.438074] device_add+0x32d/0x1830 [ 622.438106] ? __pfx_device_add+0x10/0x10 [ 622.438135] ? hci_debugfs_create_conn+0x10f/0x240 [ 622.438166] ? mgmt_send_event_skb+0x2f3/0x460 [ 622.438191] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 622.438227] hci_conn_add_sysfs+0x117/0x1c0 [ 622.438259] le_conn_complete_evt+0x1246/0x1e40 [ 622.438308] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 622.438356] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 622.438382] ? __asan_memcpy+0x3d/0x60 [ 622.438423] hci_le_meta_evt+0x34b/0x530 [ 622.438443] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 622.438472] hci_event_packet+0x66c/0x10e0 [ 622.438496] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 622.438518] ? __pfx_hci_event_packet+0x10/0x10 [ 622.438542] ? mark_held_locks+0x49/0x80 [ 622.438569] ? kcov_remote_start+0x2ce/0x5a0 [ 622.438610] hci_rx_work+0x65b/0x8b0 [ 622.438638] process_one_work+0x8e1/0x1960 [ 622.438679] ? __pfx_process_one_work+0x10/0x10 [ 622.438706] ? move_linked_works+0x172/0x270 [ 622.438748] ? assign_work+0x196/0x240 [ 622.438777] worker_thread+0x67e/0xe90 [ 622.438805] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 622.438851] ? __pfx_worker_thread+0x10/0x10 [ 622.438880] kthread+0x3c8/0x740 [ 622.438905] ? __pfx_kthread+0x10/0x10 [ 622.438928] ? ret_from_fork+0x79/0x7a0 [ 622.438955] ? __pfx_kthread+0x10/0x10 [ 622.438980] ret_from_fork+0x67a/0x7a0 [ 622.439003] ? __pfx_ret_from_fork+0x10/0x10 [ 622.439028] ? __switch_to+0x759/0x1030 [ 622.439060] ? __pfx_kthread+0x10/0x10 [ 622.439086] ret_from_fork_asm+0x1a/0x30 [ 622.439133] [ 622.439201] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 622.439644] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 622.439950] Bluetooth: hci4: failed to register connection device [ 622.440871] debugfs: '0' already exists in 'hci5' [ 622.515946] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 622.517363] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:1 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 622.517392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.517407] Workqueue: hci5 hci_rx_work [ 622.517430] Call Trace: [ 622.517438] [ 622.517446] dump_stack_lvl+0xfa/0x120 [ 622.517474] sysfs_warn_dup+0x80/0xa0 [ 622.517502] sysfs_create_dir_ns+0x23b/0x2a0 [ 622.517529] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 622.517555] ? find_held_lock+0x2b/0x80 [ 622.517591] ? lock_release+0xc8/0x270 [ 622.517617] ? do_raw_spin_unlock+0x53/0x220 [ 622.517650] kobject_add_internal+0x24c/0x9a0 [ 622.517689] kobject_add+0x157/0x240 [ 622.517723] ? __pfx_kobject_add+0x10/0x10 [ 622.517756] ? lock_release+0xc8/0x270 [ 622.517782] ? do_raw_spin_unlock+0x53/0x220 [ 622.517813] ? kobject_put+0xaa/0x260 [ 622.517862] device_add+0x32d/0x1830 [ 622.517891] ? __pfx_device_add+0x10/0x10 [ 622.517919] ? hci_debugfs_create_conn+0x10f/0x240 [ 622.517948] ? mgmt_send_event_skb+0x2f3/0x460 [ 622.517971] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 622.518007] hci_conn_add_sysfs+0x117/0x1c0 [ 622.518037] le_conn_complete_evt+0x1246/0x1e40 [ 622.518084] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 622.518132] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 622.518158] ? __asan_memcpy+0x3d/0x60 [ 622.518196] hci_le_meta_evt+0x34b/0x530 [ 622.518217] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 622.518244] hci_event_packet+0x66c/0x10e0 [ 622.518269] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 622.518290] ? __pfx_hci_event_packet+0x10/0x10 [ 622.518314] ? mark_held_locks+0x49/0x80 [ 622.518341] ? kcov_remote_start+0x2ce/0x5a0 [ 622.518379] hci_rx_work+0x65b/0x8b0 [ 622.518406] process_one_work+0x8e1/0x1960 [ 622.518445] ? __pfx_process_one_work+0x10/0x10 [ 622.518472] ? move_linked_works+0x172/0x270 [ 622.518512] ? assign_work+0x196/0x240 [ 622.518540] worker_thread+0x67e/0xe90 [ 622.518568] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 622.518613] ? __pfx_worker_thread+0x10/0x10 [ 622.518642] kthread+0x3c8/0x740 [ 622.518666] ? __pfx_kthread+0x10/0x10 [ 622.518688] ? ret_from_fork+0x79/0x7a0 [ 622.518710] ? lock_release+0xc8/0x270 [ 622.518736] ? __pfx_kthread+0x10/0x10 [ 622.518761] ret_from_fork+0x67a/0x7a0 [ 622.518783] ? __pfx_ret_from_fork+0x10/0x10 [ 622.518809] ? __switch_to+0x759/0x1030 [ 622.518839] ? __pfx_kthread+0x10/0x10 [ 622.518865] ret_from_fork_asm+0x1a/0x30 [ 622.518909] [ 622.552245] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 622.554402] Bluetooth: hci5: failed to register connection device [ 622.556334] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 622.566099] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 622.567742] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 622.606974] Bluetooth: hci7: command 0x2016 tx timeout [ 623.567921] Bluetooth: hci5: command 0x0406 tx timeout [ 623.886961] Bluetooth: hci3: command 0x2016 tx timeout [ 624.079407] Bluetooth: hci4: command 0x0406 tx timeout [ 624.142911] Bluetooth: hci2: command 0x2016 tx timeout [ 624.334867] Bluetooth: hci0: command 0x2016 tx timeout [ 624.654944] Bluetooth: hci7: command 0x2016 tx timeout [ 625.614946] Bluetooth: hci5: command 0x0406 tx timeout [ 625.934912] Bluetooth: hci3: command 0x2016 tx timeout [ 626.126952] Bluetooth: hci4: command 0x0406 tx timeout [ 626.190894] Bluetooth: hci2: command 0x2016 tx timeout [ 626.382962] Bluetooth: hci0: command 0x2016 tx timeout [ 626.703020] Bluetooth: hci7: command 0x2016 tx timeout [ 627.663014] Bluetooth: hci5: command 0x0406 tx timeout [ 627.982929] Bluetooth: hci3: command 0x2016 tx timeout [ 628.175175] Bluetooth: hci4: command 0x0406 tx timeout [ 628.238942] Bluetooth: hci2: command 0x2016 tx timeout [ 628.430934] Bluetooth: hci0: command 0x2016 tx timeout [ 628.753267] Bluetooth: hci7: command 0x2016 tx timeout [ 629.710956] Bluetooth: hci5: command 0x0406 tx timeout [ 630.030970] Bluetooth: hci3: command 0x2016 tx timeout [ 630.222924] Bluetooth: hci4: command 0x0406 tx timeout [ 630.287982] Bluetooth: hci2: command 0x2016 tx timeout [ 630.478923] Bluetooth: hci0: command 0x2016 tx timeout [ 630.798989] Bluetooth: hci7: command 0x2016 tx timeout [ 631.759152] Bluetooth: hci5: command 0x0406 tx timeout [ 632.080886] Bluetooth: hci3: command 0x2016 tx timeout [ 632.334913] Bluetooth: hci2: command 0x2016 tx timeout 18:29:25 executing program 7: fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 18:29:25 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3, 0x8d}, @l2cap_cid_signaling={{0x89}, [@l2cap_cmd_rej_unk={{0x1, 0x90, 0x2}, {0x1}}, @l2cap_info_rsp={{0xb, 0x37, 0x61}, {0x1000, 0xfff8, "c3499eca46801e492bae91bf5b3896ede90eb636b3d7ef84daa55914576788df86b3977ad21f3bc1394d8ececba665c8cc553f413c4e6e29b7699bf2dacb29fda8d7d95c82b3cc6689c22c060256c8a57f540673a8eb5dc92301ee4e67"}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x200}}, @l2cap_move_chan_rsp={{0xf, 0x3, 0x4}, {0x47, 0x5}}, @l2cap_disconn_rsp={{0x7, 0x1f, 0x4}, {0xffff, 0x101}}, @l2cap_conn_req={{0x2, 0xf4, 0x4}, {0x6, 0x7}}]}}, 0x92) 18:29:25 executing program 4: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xfffc, 0x57, 0x6}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0xfff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0xef30}}, @l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x1000, 0x3, 0x7, 0xb3}}]}}, 0x2a) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe8}, "1d7a3abe8ea94893228e01cb803738a4db8b88cf9f21af521226a6f97498219da4157d5fcc660d82aa1cd425a67a9a60f129c8d4134ce6da80a51b82797ddce634786b942d6e8e167562eb9c0c98f3b5b091a8a7c35e3d833aabac5f11011a48589e6d0ba2cba732a20503fdc64185179aff6e3aa6f6e469ab2da38963a4a0e7d9a49f2125bfa7d45ed6cf7797fca82ab3c1fb5f597275a825f41f13422251c58f7dae261130f4653167dd21cbc2a54a24bdff42847c321e2d2616cfcf1ce3687ae7169e94cbac44bb516e64339588d49f8ded9b373b4e92c98ba001af802bd323d10838e70eacf8"}, 0xec) 18:29:25 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8008debaf432f5eac17da7370f4c2dd14a4ab56fa5370e77beffc4999231f72569387230e33c0f0ffa71ebe8df43bb7e1c6dd1f932ec679dbca3f692129ff559cd455fa23bc61e7ee4ae2cd069b9d6d3de54fcf917b9c722e9a74235e58438875a9d0910f120c8249c23ce278252fd73f5a3100ffe7563d27d9a8bdc6d9a89c4faeacbd0667f25622b1adfe29f0471f"], 0x91) 18:29:25 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x35}, "2f6a17d40026383f2dc848f84bb827e03e0477609ff7b55ddc7f66fab33ab9b45932a632e6cccb24edcade30aa22cc4785485bbfa8"}, 0x39) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:29:25 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x92}, "ac92c409f5c9ecac4af92b98a9365186491c77444abada30ebcdd84f393bbb19d6796980cc2e0eb5af105cb38bbb70d2f4ac91e687d524abcd7e27885e228a93e0e7fc26ae47b1e9ca06f1a4a2dfc107639dca19c05c2cd7fdeec2fb506a063a17ea90b49a8e13909d624c5410118f9c65bb8a113961eb21d6bfd2161bc4cf821e4fe2a2302cebe5e0f6d53141cf2f17cddf"}, 0x96) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) 18:29:25 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) 18:29:25 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x66fd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x88800) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04e0f8953f80a602cda23e5f0a5267864ae01704985fa45fc462a0b6be601893271bf436834ccf5446a1a8b8475089fdf64a0c9be9ca419e6f848fc3704151c901"], 0x22) [ 632.475780] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 632.478514] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 632.535407] debugfs: '0' already exists in 'hci2' [ 632.536447] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 632.537854] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 632.537884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.537899] Workqueue: hci2 hci_rx_work [ 632.537931] Call Trace: [ 632.537939] [ 632.537948] dump_stack_lvl+0xfa/0x120 [ 632.537979] sysfs_warn_dup+0x80/0xa0 [ 632.538009] sysfs_create_dir_ns+0x23b/0x2a0 [ 632.538037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 632.538063] ? find_held_lock+0x2b/0x80 [ 632.538102] ? lock_release+0xc8/0x270 [ 632.538128] ? do_raw_spin_unlock+0x53/0x220 [ 632.538161] kobject_add_internal+0x24c/0x9a0 [ 632.538201] kobject_add+0x157/0x240 [ 632.538237] ? __pfx_kobject_add+0x10/0x10 [ 632.538270] ? lock_release+0xc8/0x270 [ 632.538296] ? do_raw_spin_unlock+0x53/0x220 [ 632.538328] ? kobject_put+0xaa/0x260 [ 632.538370] device_add+0x32d/0x1830 [ 632.538403] ? __pfx_device_add+0x10/0x10 [ 632.538439] ? hci_debugfs_create_conn+0x10f/0x240 [ 632.538471] ? mgmt_send_event_skb+0x2f3/0x460 [ 632.538494] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 632.538530] hci_conn_add_sysfs+0x117/0x1c0 [ 632.538562] le_conn_complete_evt+0x1246/0x1e40 [ 632.538610] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 632.538658] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 632.538683] ? __asan_memcpy+0x3d/0x60 [ 632.538724] hci_le_meta_evt+0x34b/0x530 [ 632.538744] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 632.538772] hci_event_packet+0x66c/0x10e0 [ 632.538796] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 632.538827] ? __pfx_hci_event_packet+0x10/0x10 [ 632.538851] ? mark_held_locks+0x49/0x80 [ 632.538877] ? kcov_remote_start+0x2ce/0x5a0 [ 632.538918] hci_rx_work+0x65b/0x8b0 [ 632.538945] process_one_work+0x8e1/0x1960 [ 632.538985] ? __pfx_process_one_work+0x10/0x10 [ 632.539013] ? move_linked_works+0x172/0x270 [ 632.539053] ? assign_work+0x196/0x240 [ 632.539082] worker_thread+0x67e/0xe90 [ 632.539110] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 632.539157] ? __pfx_worker_thread+0x10/0x10 [ 632.539186] kthread+0x3c8/0x740 [ 632.539211] ? __pfx_kthread+0x10/0x10 [ 632.539233] ? ret_from_fork+0x79/0x7a0 [ 632.539256] ? lock_release+0xc8/0x270 [ 632.539282] ? __pfx_kthread+0x10/0x10 [ 632.539308] ret_from_fork+0x67a/0x7a0 [ 632.539330] ? __pfx_ret_from_fork+0x10/0x10 [ 632.539356] ? __switch_to+0x759/0x1030 [ 632.539388] ? __pfx_kthread+0x10/0x10 [ 632.539413] ret_from_fork_asm+0x1a/0x30 [ 632.539459] 18:29:25 executing program 6: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "e06a9c62802ab0857ecbbf6b73edf55143d1a010dad3859187da46e3fc47df082ea19e821c55924bc9f91b13"}, 0x30) [ 632.549122] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 632.551461] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.552608] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 632.553231] debugfs: '0' already exists in 'hci7' [ 632.553491] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 632.553513] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 632.553542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.553556] Workqueue: hci7 hci_rx_work [ 632.553581] Call Trace: [ 632.553589] [ 632.553597] dump_stack_lvl+0xfa/0x120 [ 632.553626] sysfs_warn_dup+0x80/0xa0 [ 632.553654] sysfs_create_dir_ns+0x23b/0x2a0 [ 632.553681] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 632.553708] ? find_held_lock+0x2b/0x80 [ 632.553744] ? lock_release+0xc8/0x270 [ 632.553770] ? do_raw_spin_unlock+0x53/0x220 [ 632.553805] kobject_add_internal+0x24c/0x9a0 [ 632.553854] kobject_add+0x157/0x240 [ 632.553889] ? __pfx_kobject_add+0x10/0x10 [ 632.553922] ? lock_release+0xc8/0x270 [ 632.553948] ? do_raw_spin_unlock+0x53/0x220 [ 632.553979] ? kobject_put+0xaa/0x260 [ 632.554020] device_add+0x32d/0x1830 [ 632.554050] ? __pfx_device_add+0x10/0x10 [ 632.554077] ? hci_debugfs_create_conn+0x10f/0x240 [ 632.554107] ? mgmt_send_event_skb+0x2f3/0x460 [ 632.554129] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 632.554165] hci_conn_add_sysfs+0x117/0x1c0 [ 632.554195] le_conn_complete_evt+0x1246/0x1e40 [ 632.554242] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 632.554289] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 632.554315] ? __asan_memcpy+0x3d/0x60 [ 632.554354] hci_le_meta_evt+0x34b/0x530 [ 632.554374] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 632.554414] hci_event_packet+0x66c/0x10e0 [ 632.554446] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 632.554469] ? __pfx_hci_event_packet+0x10/0x10 [ 632.554492] ? mark_held_locks+0x49/0x80 [ 632.554519] ? kcov_remote_start+0x2ce/0x5a0 [ 632.554558] hci_rx_work+0x65b/0x8b0 [ 632.554585] process_one_work+0x8e1/0x1960 [ 632.554625] ? __pfx_process_one_work+0x10/0x10 [ 632.554652] ? move_linked_works+0x172/0x270 [ 632.554691] ? assign_work+0x196/0x240 [ 632.554720] worker_thread+0x67e/0xe90 [ 632.554748] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 632.554793] ? __pfx_worker_thread+0x10/0x10 [ 632.554822] kthread+0x3c8/0x740 [ 632.554845] ? __pfx_kthread+0x10/0x10 [ 632.554868] ? ret_from_fork+0x79/0x7a0 [ 632.554894] ? __pfx_kthread+0x10/0x10 [ 632.554919] ret_from_fork+0x67a/0x7a0 [ 632.554942] ? __pfx_ret_from_fork+0x10/0x10 [ 632.554967] ? __switch_to+0x759/0x1030 [ 632.554998] ? __pfx_kthread+0x10/0x10 [ 632.555024] ret_from_fork_asm+0x1a/0x30 [ 632.555068] [ 632.555150] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.555190] Bluetooth: hci7: failed to register connection device [ 632.555978] Bluetooth: hci2: failed to register connection device [ 632.557190] Bluetooth: hci7: SCO packet for unknown connection handle 200 [ 632.623665] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 632.625616] debugfs: '0' already exists in 'hci3' [ 632.626241] debugfs: '0' already exists in 'hci5' [ 632.628995] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 632.629104] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 632.630439] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 632.630471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.630486] Workqueue: hci3 hci_rx_work [ 632.630517] Call Trace: [ 632.630525] [ 632.630535] dump_stack_lvl+0xfa/0x120 [ 632.630566] sysfs_warn_dup+0x80/0xa0 [ 632.630595] sysfs_create_dir_ns+0x23b/0x2a0 [ 632.630623] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 632.630649] ? find_held_lock+0x2b/0x80 [ 632.630687] ? lock_release+0xc8/0x270 [ 632.630713] ? do_raw_spin_unlock+0x53/0x220 [ 632.630747] kobject_add_internal+0x24c/0x9a0 [ 632.630787] kobject_add+0x157/0x240 [ 632.630830] ? __pfx_kobject_add+0x10/0x10 [ 632.630863] ? lock_release+0xc8/0x270 [ 632.630889] ? do_raw_spin_unlock+0x53/0x220 [ 632.630920] ? kobject_put+0xaa/0x260 [ 632.630962] device_add+0x32d/0x1830 [ 632.630993] ? __pfx_device_add+0x10/0x10 [ 632.631021] ? hci_debugfs_create_conn+0x10f/0x240 [ 632.631052] ? mgmt_send_event_skb+0x2f3/0x460 [ 632.631076] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 632.631112] hci_conn_add_sysfs+0x117/0x1c0 [ 632.631143] le_conn_complete_evt+0x1246/0x1e40 [ 632.631190] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 632.631238] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 632.631264] ? __asan_memcpy+0x3d/0x60 [ 632.631303] hci_le_meta_evt+0x34b/0x530 [ 632.631323] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 632.631351] hci_event_packet+0x66c/0x10e0 [ 632.631375] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 632.631407] ? __pfx_hci_event_packet+0x10/0x10 [ 632.631442] ? mark_held_locks+0x49/0x80 [ 632.631482] ? kcov_remote_start+0x2ce/0x5a0 [ 632.631526] hci_rx_work+0x65b/0x8b0 [ 632.631553] process_one_work+0x8e1/0x1960 [ 632.631592] ? __pfx_process_one_work+0x10/0x10 [ 632.631620] ? move_linked_works+0x172/0x270 [ 632.631659] ? assign_work+0x196/0x240 [ 632.631688] worker_thread+0x67e/0xe90 [ 632.631716] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 632.631761] ? __pfx_worker_thread+0x10/0x10 [ 632.631790] kthread+0x3c8/0x740 [ 632.631814] ? __pfx_kthread+0x10/0x10 [ 632.631837] ? ret_from_fork+0x79/0x7a0 [ 632.631863] ? __pfx_kthread+0x10/0x10 [ 632.631889] ret_from_fork+0x67a/0x7a0 [ 632.631911] ? __pfx_ret_from_fork+0x10/0x10 [ 632.631938] ? __switch_to+0x759/0x1030 [ 632.631970] ? __pfx_kthread+0x10/0x10 [ 632.631995] ret_from_fork_asm+0x1a/0x30 [ 632.632041] [ 632.632262] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.633873] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 632.633904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.633919] Workqueue: hci5 hci_rx_work [ 632.633942] Call Trace: [ 632.633949] [ 632.633958] dump_stack_lvl+0xfa/0x120 [ 632.633986] sysfs_warn_dup+0x80/0xa0 [ 632.634015] sysfs_create_dir_ns+0x23b/0x2a0 [ 632.634042] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 632.634069] ? find_held_lock+0x2b/0x80 [ 632.634104] ? lock_release+0xc8/0x270 [ 632.634130] ? do_raw_spin_unlock+0x53/0x220 [ 632.634163] kobject_add_internal+0x24c/0x9a0 [ 632.634203] kobject_add+0x157/0x240 [ 632.634237] ? __pfx_kobject_add+0x10/0x10 [ 632.634270] ? lock_release+0xc8/0x270 [ 632.634295] ? do_raw_spin_unlock+0x53/0x220 [ 632.634327] ? kobject_put+0xaa/0x260 [ 632.634368] device_add+0x32d/0x1830 [ 632.634407] ? __pfx_device_add+0x10/0x10 [ 632.634442] ? hci_debugfs_create_conn+0x10f/0x240 [ 632.634469] ? mgmt_send_event_skb+0x2f3/0x460 [ 632.634492] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 632.634526] hci_conn_add_sysfs+0x117/0x1c0 [ 632.634555] le_conn_complete_evt+0x1246/0x1e40 [ 632.634599] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 632.634644] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 632.634670] ? __asan_memcpy+0x3d/0x60 [ 632.634708] hci_le_meta_evt+0x34b/0x530 [ 632.634728] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 632.634755] hci_event_packet+0x66c/0x10e0 [ 632.634779] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 632.634801] ? __pfx_hci_event_packet+0x10/0x10 [ 632.634834] ? mark_held_locks+0x49/0x80 [ 632.634860] ? kcov_remote_start+0x2ce/0x5a0 [ 632.634897] hci_rx_work+0x65b/0x8b0 [ 632.634924] process_one_work+0x8e1/0x1960 [ 632.634962] ? __pfx_process_one_work+0x10/0x10 [ 632.634988] ? move_linked_works+0x172/0x270 [ 632.635025] ? assign_work+0x196/0x240 [ 632.635053] worker_thread+0x67e/0xe90 [ 632.635080] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 632.635122] ? __pfx_worker_thread+0x10/0x10 [ 632.635150] kthread+0x3c8/0x740 [ 632.635173] ? __pfx_kthread+0x10/0x10 [ 632.635195] ? ret_from_fork+0x79/0x7a0 [ 632.635216] ? lock_release+0xc8/0x270 [ 632.635241] ? __pfx_kthread+0x10/0x10 [ 632.635266] ret_from_fork+0x67a/0x7a0 [ 632.635288] ? __pfx_ret_from_fork+0x10/0x10 [ 632.635314] ? __switch_to+0x759/0x1030 [ 632.635342] ? __pfx_kthread+0x10/0x10 [ 632.635367] ret_from_fork_asm+0x1a/0x30 [ 632.635411] [ 632.635675] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 632.636132] Bluetooth: hci3: failed to register connection device [ 632.636508] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 632.734060] Bluetooth: hci5: failed to register connection device 18:29:26 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x22) 18:29:26 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8408600c}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x32}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x1004}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="c520c25cd2ebfb3f6c360dc75e05d79d10b8823b8dd2c97cf63d6aa352fb5fa47c5e3ba742c03677b6b2e23fae1c1fb3da81fcd498ec68d1c6aaec1c4267209a15dafb2486cd06b6ac61a6f478714306137b94e933f6359f87b54927f637542700836bbc48017db4a3b1d18fbba20752cb9a9fbe5608c493fed7f59bde383019f3ac6af3cda83e2f906544324cec031d88f7a16de79d452a08f93102af09b618fa7e148ec0e465d9ef49627d015f1199d17ef04183a818855f412b97fe9630241ca6aa499829488133c53c11df8d66956ce0d03030a75626b8b413923675be27e035fb0002d763f0597c94892df3ff6ece74a857d30c7c6172b9af678eaec84693cfb6a05fe82e2b1a2aa94b33cc70d7ae5cf94ac0c9567ffc71721e9e", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0], 0x22) syz_emit_vhci(0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r4, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f00000000c0)="d3", 0x1}]) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd9, 0x10001, 0x46, @private1, @remote, 0x1, 0x700, 0x22, 0x3}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004040) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 18:29:26 executing program 2: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x8e, 0x8}, {0x9, 0x7ff, 0x8000, 0x101}}}}, 0x15) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) [ 632.736957] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 632.847065] Bluetooth: hci7: command 0x2016 tx timeout 18:29:26 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x2, 0x6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x80, 0x80, 0xd66, 0x10001, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x67, 0x0, 0x2f, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x99, 0x1, 0x6, [{@private=0xa010101, 0x7}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1ff}]}, @timestamp_addr={0x44, 0x1c, 0x8e, 0x1, 0x6, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast2, 0x1}]}, @lsrr={0x83, 0xb, 0x10, [@multicast1, @broadcast]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r9, 0x2, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x154, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0xa0}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) 18:29:26 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0x0, 0x7}}}, 0x7) 18:29:26 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "eab4b0103b36b1b905dae7d46021df192069524d8cdf6686219af509db0dcd01a8ea586283ef20668f2ce1c51de012eb741a8a6517c8572b1fc67432bf5e7e2b4f93f456f21e1f0e89303557bd33ab5396112cf646fdb3f92651fa253ddfc647c0e48a4bb16525878c8f"}, 0x6e) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 18:29:26 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) close_range(r0, r0, 0x2) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x5}) [ 633.009929] debugfs: '0' already exists in 'hci3' [ 633.010985] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 633.012248] CPU: 0 UID: 0 PID: 293 Comm: kworker/u11:0 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 633.012277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.012293] Workqueue: hci3 hci_rx_work [ 633.012323] Call Trace: [ 633.012332] [ 633.012341] dump_stack_lvl+0xfa/0x120 [ 633.012372] sysfs_warn_dup+0x80/0xa0 [ 633.012401] sysfs_create_dir_ns+0x23b/0x2a0 [ 633.012429] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.012455] ? find_held_lock+0x2b/0x80 [ 633.012493] ? lock_release+0xc8/0x270 [ 633.012519] ? do_raw_spin_unlock+0x53/0x220 [ 633.012552] kobject_add_internal+0x24c/0x9a0 [ 633.012592] kobject_add+0x157/0x240 [ 633.012626] ? __pfx_kobject_add+0x10/0x10 [ 633.012670] ? lock_release+0xc8/0x270 [ 633.012697] ? do_raw_spin_unlock+0x53/0x220 [ 633.012728] ? kobject_put+0xaa/0x260 [ 633.012769] device_add+0x32d/0x1830 [ 633.012801] ? __pfx_device_add+0x10/0x10 [ 633.012835] ? hci_debugfs_create_conn+0x10f/0x240 [ 633.012865] ? mgmt_send_event_skb+0x2f3/0x460 [ 633.012889] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 633.012925] hci_conn_add_sysfs+0x117/0x1c0 [ 633.012956] le_conn_complete_evt+0x1246/0x1e40 [ 633.013002] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 633.013050] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 633.013076] ? __asan_memcpy+0x3d/0x60 [ 633.013115] hci_le_meta_evt+0x34b/0x530 [ 633.013136] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 633.013163] hci_event_packet+0x66c/0x10e0 [ 633.013188] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 633.013210] ? __pfx_hci_event_packet+0x10/0x10 [ 633.013233] ? mark_held_locks+0x49/0x80 [ 633.013260] ? kcov_remote_start+0x2ce/0x5a0 [ 633.013300] hci_rx_work+0x65b/0x8b0 [ 633.013327] process_one_work+0x8e1/0x1960 [ 633.013367] ? __pfx_process_one_work+0x10/0x10 [ 633.013395] ? move_linked_works+0x172/0x270 [ 633.013434] ? assign_work+0x196/0x240 [ 633.013464] worker_thread+0x67e/0xe90 [ 633.013491] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 633.013537] ? __pfx_worker_thread+0x10/0x10 [ 633.013566] kthread+0x3c8/0x740 [ 633.013590] ? __pfx_kthread+0x10/0x10 [ 633.013613] ? ret_from_fork+0x79/0x7a0 [ 633.013636] ? lock_release+0xc8/0x270 [ 633.013662] ? __pfx_kthread+0x10/0x10 [ 633.013688] ret_from_fork+0x67a/0x7a0 [ 633.013710] ? __pfx_ret_from_fork+0x10/0x10 [ 633.013735] ? __switch_to+0x759/0x1030 [ 633.013767] ? __pfx_kthread+0x10/0x10 [ 633.013793] ret_from_fork_asm+0x1a/0x30 [ 633.013838] [ 633.029320] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 633.029710] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 633.034424] debugfs: '0' already exists in 'hci4' [ 633.034660] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 633.035175] Bluetooth: hci3: failed to register connection device [ 633.055192] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 633.055226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.055244] Workqueue: hci4 hci_rx_work [ 633.055271] Call Trace: [ 633.055279] [ 633.055288] dump_stack_lvl+0xfa/0x120 [ 633.055318] sysfs_warn_dup+0x80/0xa0 [ 633.055347] sysfs_create_dir_ns+0x23b/0x2a0 [ 633.055375] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.055401] ? find_held_lock+0x2b/0x80 [ 633.055439] ? lock_release+0xc8/0x270 [ 633.055466] ? do_raw_spin_unlock+0x53/0x220 [ 633.055500] kobject_add_internal+0x24c/0x9a0 [ 633.055540] kobject_add+0x157/0x240 [ 633.055574] ? __pfx_kobject_add+0x10/0x10 [ 633.055607] ? lock_release+0xc8/0x270 [ 633.055633] ? do_raw_spin_unlock+0x53/0x220 [ 633.055665] ? kobject_put+0xaa/0x260 [ 633.055706] device_add+0x32d/0x1830 [ 633.055737] ? __pfx_device_add+0x10/0x10 [ 633.055764] ? hci_debugfs_create_conn+0x10f/0x240 [ 633.055795] ? mgmt_send_event_skb+0x2f3/0x460 [ 633.055825] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 633.055862] hci_conn_add_sysfs+0x117/0x1c0 [ 633.055893] le_conn_complete_evt+0x1246/0x1e40 [ 633.055940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 633.055988] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 633.056013] ? __asan_memcpy+0x3d/0x60 [ 633.056053] hci_le_meta_evt+0x34b/0x530 [ 633.056073] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 633.056101] hci_event_packet+0x66c/0x10e0 [ 633.056125] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 633.056147] ? __pfx_hci_event_packet+0x10/0x10 [ 633.056171] ? mark_held_locks+0x49/0x80 [ 633.056197] ? kcov_remote_start+0x2ce/0x5a0 [ 633.056239] hci_rx_work+0x65b/0x8b0 [ 633.056266] process_one_work+0x8e1/0x1960 [ 633.056306] ? __pfx_process_one_work+0x10/0x10 [ 633.056332] ? move_linked_works+0x172/0x270 [ 633.056372] ? assign_work+0x196/0x240 [ 633.056400] worker_thread+0x67e/0xe90 [ 633.056428] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 633.056473] ? __pfx_worker_thread+0x10/0x10 [ 633.056501] kthread+0x3c8/0x740 [ 633.056525] ? __pfx_kthread+0x10/0x10 [ 633.056548] ? ret_from_fork+0x79/0x7a0 [ 633.056574] ? __pfx_kthread+0x10/0x10 [ 633.056599] ret_from_fork+0x67a/0x7a0 [ 633.056621] ? __pfx_ret_from_fork+0x10/0x10 [ 633.056659] ? __switch_to+0x759/0x1030 [ 633.056690] ? __pfx_kthread+0x10/0x10 [ 633.056716] ret_from_fork_asm+0x1a/0x30 [ 633.056760] [ 633.089896] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 633.091939] Bluetooth: hci4: failed to register connection device [ 633.104297] debugfs: '0' already exists in 'hci7' [ 633.105310] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 633.106741] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 633.106771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.106785] Workqueue: hci7 hci_rx_work [ 633.106812] Call Trace: [ 633.106826] [ 633.106836] dump_stack_lvl+0xfa/0x120 [ 633.106865] sysfs_warn_dup+0x80/0xa0 [ 633.106893] sysfs_create_dir_ns+0x23b/0x2a0 [ 633.106920] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.106945] ? find_held_lock+0x2b/0x80 [ 633.106981] ? lock_release+0xc8/0x270 [ 633.107007] ? do_raw_spin_unlock+0x53/0x220 [ 633.107039] kobject_add_internal+0x24c/0x9a0 [ 633.107078] kobject_add+0x157/0x240 [ 633.107112] ? __pfx_kobject_add+0x10/0x10 [ 633.107144] ? lock_release+0xc8/0x270 [ 633.107169] ? do_raw_spin_unlock+0x53/0x220 [ 633.107200] ? kobject_put+0xaa/0x260 [ 633.107240] device_add+0x32d/0x1830 [ 633.107270] ? __pfx_device_add+0x10/0x10 [ 633.107297] ? hci_debugfs_create_conn+0x10f/0x240 [ 633.107327] ? mgmt_send_event_skb+0x2f3/0x460 [ 633.107349] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 633.107385] hci_conn_add_sysfs+0x117/0x1c0 [ 633.107415] le_conn_complete_evt+0x1246/0x1e40 [ 633.107461] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 633.107508] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 633.107533] ? __asan_memcpy+0x3d/0x60 [ 633.107571] hci_le_meta_evt+0x34b/0x530 [ 633.107591] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 633.107618] hci_event_packet+0x66c/0x10e0 [ 633.107642] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 633.107663] ? __pfx_hci_event_packet+0x10/0x10 [ 633.107686] ? mark_held_locks+0x49/0x80 [ 633.107712] ? kcov_remote_start+0x2ce/0x5a0 [ 633.107751] hci_rx_work+0x65b/0x8b0 [ 633.107777] process_one_work+0x8e1/0x1960 [ 633.107816] ? __pfx_process_one_work+0x10/0x10 [ 633.107843] ? move_linked_works+0x172/0x270 [ 633.107882] ? assign_work+0x196/0x240 [ 633.107910] worker_thread+0x67e/0xe90 [ 633.107937] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 633.107981] ? __pfx_worker_thread+0x10/0x10 [ 633.108009] kthread+0x3c8/0x740 [ 633.108033] ? __pfx_kthread+0x10/0x10 [ 633.108056] ? ret_from_fork+0x79/0x7a0 [ 633.108081] ? __pfx_kthread+0x10/0x10 [ 633.108106] ret_from_fork+0x67a/0x7a0 [ 633.108128] ? __pfx_ret_from_fork+0x10/0x10 [ 633.108152] ? __switch_to+0x759/0x1030 [ 633.108183] ? __pfx_kthread+0x10/0x10 [ 633.108208] ret_from_fork_asm+0x1a/0x30 [ 633.108252] [ 633.139898] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 633.141901] Bluetooth: hci7: failed to register connection device [ 633.144068] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 633.144760] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 633.147222] debugfs: '0' already exists in 'hci3' [ 633.149312] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 633.150534] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 633.150563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.150577] Workqueue: hci3 hci_rx_work [ 633.150603] Call Trace: [ 633.150610] [ 633.150620] dump_stack_lvl+0xfa/0x120 [ 633.150648] sysfs_warn_dup+0x80/0xa0 [ 633.150676] sysfs_create_dir_ns+0x23b/0x2a0 [ 633.150702] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.150728] ? find_held_lock+0x2b/0x80 [ 633.150763] ? lock_release+0xc8/0x270 [ 633.150788] ? do_raw_spin_unlock+0x53/0x220 [ 633.150827] kobject_add_internal+0x24c/0x9a0 [ 633.150865] kobject_add+0x157/0x240 [ 633.150898] ? __pfx_kobject_add+0x10/0x10 [ 633.150930] ? lock_release+0xc8/0x270 [ 633.150955] ? do_raw_spin_unlock+0x53/0x220 [ 633.150985] ? kobject_put+0xaa/0x260 [ 633.151026] device_add+0x32d/0x1830 [ 633.151055] ? __pfx_device_add+0x10/0x10 [ 633.151082] ? hci_debugfs_create_conn+0x10f/0x240 [ 633.151110] ? mgmt_send_event_skb+0x2f3/0x460 [ 633.151133] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 633.151168] hci_conn_add_sysfs+0x117/0x1c0 [ 633.151198] le_conn_complete_evt+0x1246/0x1e40 [ 633.151243] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 633.151290] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 633.151314] ? __asan_memcpy+0x3d/0x60 [ 633.151352] hci_le_meta_evt+0x34b/0x530 [ 633.151372] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 633.151399] hci_event_packet+0x66c/0x10e0 [ 633.151422] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 633.151443] ? __pfx_hci_event_packet+0x10/0x10 [ 633.151466] ? mark_held_locks+0x49/0x80 [ 633.151492] ? kcov_remote_start+0x2ce/0x5a0 [ 633.151530] hci_rx_work+0x65b/0x8b0 [ 633.151556] process_one_work+0x8e1/0x1960 [ 633.151594] ? __pfx_process_one_work+0x10/0x10 [ 633.151620] ? move_linked_works+0x172/0x270 [ 633.151658] ? assign_work+0x196/0x240 [ 633.151686] worker_thread+0x67e/0xe90 [ 633.151713] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 633.151757] ? __pfx_worker_thread+0x10/0x10 [ 633.151785] kthread+0x3c8/0x740 [ 633.151808] ? __pfx_kthread+0x10/0x10 [ 633.151830] ? ret_from_fork+0x79/0x7a0 [ 633.151855] ? __pfx_kthread+0x10/0x10 [ 633.151879] ret_from_fork+0x67a/0x7a0 [ 633.151901] ? __pfx_ret_from_fork+0x10/0x10 [ 633.151925] ? __switch_to+0x759/0x1030 [ 633.151956] ? __pfx_kthread+0x10/0x10 [ 633.151981] ret_from_fork_asm+0x1a/0x30 [ 633.152024] [ 633.160079] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 633.161904] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 633.187789] Bluetooth: hci3: failed to register connection device [ 633.247811] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode 18:29:26 executing program 7: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0600e3ff00"], 0x22) [ 633.290523] debugfs: '0' already exists in 'hci7' [ 633.291893] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 633.293415] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 633.293451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.293470] Workqueue: hci7 hci_rx_work [ 633.293503] Call Trace: [ 633.293513] [ 633.293524] dump_stack_lvl+0xfa/0x120 [ 633.293561] sysfs_warn_dup+0x80/0xa0 [ 633.293596] sysfs_create_dir_ns+0x23b/0x2a0 [ 633.293629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.293659] ? find_held_lock+0x2b/0x80 [ 633.293700] ? lock_release+0xc8/0x270 [ 633.293728] ? do_raw_spin_unlock+0x53/0x220 [ 633.293764] kobject_add_internal+0x24c/0x9a0 [ 633.293807] kobject_add+0x157/0x240 [ 633.293851] ? __pfx_kobject_add+0x10/0x10 [ 633.293886] ? lock_release+0xc8/0x270 [ 633.293915] ? do_raw_spin_unlock+0x53/0x220 [ 633.293948] ? kobject_put+0xaa/0x260 [ 633.293993] device_add+0x32d/0x1830 [ 633.294026] ? __pfx_device_add+0x10/0x10 [ 633.294056] ? hci_debugfs_create_conn+0x10f/0x240 [ 633.294088] ? mgmt_send_event_skb+0x2f3/0x460 [ 633.294114] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 633.294153] hci_conn_add_sysfs+0x117/0x1c0 [ 633.294186] le_conn_complete_evt+0x1246/0x1e40 [ 633.294237] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 633.294289] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 633.294317] ? __asan_memcpy+0x3d/0x60 [ 633.294359] hci_le_meta_evt+0x34b/0x530 [ 633.294381] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 633.294411] hci_event_packet+0x66c/0x10e0 [ 633.294437] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 633.294461] ? __pfx_hci_event_packet+0x10/0x10 [ 633.294486] ? mark_held_locks+0x49/0x80 [ 633.294515] ? kcov_remote_start+0x2ce/0x5a0 [ 633.294558] hci_rx_work+0x65b/0x8b0 [ 633.294587] process_one_work+0x8e1/0x1960 [ 633.294630] ? __pfx_process_one_work+0x10/0x10 [ 633.294659] ? move_linked_works+0x172/0x270 [ 633.294702] ? assign_work+0x196/0x240 [ 633.294733] worker_thread+0x67e/0xe90 [ 633.294763] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 633.294811] ? __pfx_worker_thread+0x10/0x10 [ 633.294842] kthread+0x3c8/0x740 [ 633.294868] ? __pfx_kthread+0x10/0x10 [ 633.294892] ? ret_from_fork+0x79/0x7a0 [ 633.294920] ? __pfx_kthread+0x10/0x10 [ 633.294947] ret_from_fork+0x67a/0x7a0 [ 633.294971] ? __pfx_ret_from_fork+0x10/0x10 [ 633.294999] ? __switch_to+0x759/0x1030 [ 633.295033] ? __pfx_kthread+0x10/0x10 [ 633.295060] ret_from_fork_asm+0x1a/0x30 [ 633.295109] [ 633.330387] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 633.332599] Bluetooth: hci7: failed to register connection device 18:29:26 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0x0, 0x7}}}, 0x7) [ 633.341325] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 633.427190] debugfs: '0' already exists in 'hci4' [ 633.428381] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 633.430002] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 633.430036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.430054] Workqueue: hci4 hci_rx_work [ 633.430085] Call Trace: [ 633.430093] [ 633.430104] dump_stack_lvl+0xfa/0x120 [ 633.430139] sysfs_warn_dup+0x80/0xa0 [ 633.430171] sysfs_create_dir_ns+0x23b/0x2a0 [ 633.430202] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 633.430232] ? find_held_lock+0x2b/0x80 [ 633.430274] ? lock_release+0xc8/0x270 [ 633.430304] ? do_raw_spin_unlock+0x53/0x220 [ 633.430342] kobject_add_internal+0x24c/0x9a0 [ 633.430387] kobject_add+0x157/0x240 [ 633.430426] ? __pfx_kobject_add+0x10/0x10 [ 633.430463] ? lock_release+0xc8/0x270 [ 633.430493] ? do_raw_spin_unlock+0x53/0x220 [ 633.430528] ? kobject_put+0xaa/0x260 [ 633.430576] device_add+0x32d/0x1830 [ 633.430610] ? __pfx_device_add+0x10/0x10 [ 633.430641] ? hci_debugfs_create_conn+0x10f/0x240 [ 633.430675] ? mgmt_send_event_skb+0x2f3/0x460 [ 633.430702] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 633.430743] hci_conn_add_sysfs+0x117/0x1c0 [ 633.430778] le_conn_complete_evt+0x1246/0x1e40 [ 633.430841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 633.430895] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 633.430925] ? __asan_memcpy+0x3d/0x60 [ 633.430969] hci_le_meta_evt+0x34b/0x530 [ 633.430992] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 633.431024] hci_event_packet+0x66c/0x10e0 [ 633.431052] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 633.431077] ? __pfx_hci_event_packet+0x10/0x10 [ 633.431104] ? mark_held_locks+0x49/0x80 [ 633.431134] ? kcov_remote_start+0x2ce/0x5a0 [ 633.431179] hci_rx_work+0x65b/0x8b0 [ 633.431210] process_one_work+0x8e1/0x1960 [ 633.431254] ? __pfx_process_one_work+0x10/0x10 [ 633.431285] ? move_linked_works+0x172/0x270 [ 633.431330] ? assign_work+0x196/0x240 [ 633.431363] worker_thread+0x67e/0xe90 [ 633.431394] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 633.431445] ? __pfx_worker_thread+0x10/0x10 [ 633.431478] kthread+0x3c8/0x740 [ 633.431505] ? __pfx_kthread+0x10/0x10 [ 633.431531] ? ret_from_fork+0x79/0x7a0 [ 633.431560] ? __pfx_kthread+0x10/0x10 [ 633.431589] ret_from_fork+0x67a/0x7a0 [ 633.431614] ? __pfx_ret_from_fork+0x10/0x10 [ 633.431643] ? __switch_to+0x759/0x1030 [ 633.431680] ? __pfx_kthread+0x10/0x10 [ 633.431709] ret_from_fork_asm+0x1a/0x30 [ 633.431760] [ 633.467074] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 633.470213] Bluetooth: hci4: failed to register connection device [ 633.806916] Bluetooth: hci5: command 0x0406 tx timeout [ 634.126920] Bluetooth: hci3: command 0x2016 tx timeout [ 634.382943] Bluetooth: hci2: command 0x2016 tx timeout [ 634.510900] Bluetooth: hci4: command 0x0406 tx timeout [ 634.894991] Bluetooth: hci7: command 0x2016 tx timeout [ 635.151477] ------------[ cut here ]------------ [ 635.152683] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x82/0x130, CPU#1: kworker/u11:7/4203 [ 635.154522] Modules linked in: [ 635.155289] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Not tainted 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 635.157155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.158697] Workqueue: hci4 hci_conn_timeout [ 635.159552] RIP: 0010:hci_conn_timeout+0x82/0x130 [ 635.160483] Code: e8 43 8b 24 fd 85 ed 78 1b e8 1a 90 24 fd 31 ff 89 ee e8 31 8b 24 fd 85 ed 74 12 5b 5d 41 5c e9 04 90 24 fd e8 ff 8f 24 fd 90 <0f> 0b 90 e8 f6 8f 24 fd 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 635.163695] RSP: 0018:ffff88800ce17be8 EFLAGS: 00010293 [ 635.164714] RAX: 0000000000000000 RBX: ffff888049a44a40 RCX: ffffffff8451249d [ 635.166044] RDX: ffff888016d21bc0 RSI: ffffffff845124c1 RDI: 0000000000000005 [ 635.173186] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffed1009348802 [ 635.174495] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88800a1d2000 [ 635.175809] R13: ffff88800ce17cb8 R14: 0000000000000001 R15: 0000000000000000 [ 635.177162] FS: 0000000000000000(0000) GS:ffff8880e545c000(0000) knlGS:0000000000000000 [ 635.178645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.179753] CR2: 00007fa0d6cddfd0 CR3: 000000000c576000 CR4: 0000000000350ef0 [ 635.181073] Call Trace: [ 635.181556] [ 635.182022] process_one_work+0x8e1/0x1960 [ 635.182823] ? __pfx_process_one_work+0x10/0x10 [ 635.183703] ? move_linked_works+0x172/0x270 [ 635.184567] ? assign_work+0x196/0x240 [ 635.185345] worker_thread+0x67e/0xe90 [ 635.186096] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 635.187090] ? __pfx_worker_thread+0x10/0x10 [ 635.187964] kthread+0x3c8/0x740 [ 635.188600] ? __pfx_kthread+0x10/0x10 [ 635.189374] ? ret_from_fork+0x79/0x7a0 [ 635.190148] ? __pfx_kthread+0x10/0x10 [ 635.190915] ret_from_fork+0x67a/0x7a0 [ 635.191630] ? __pfx_ret_from_fork+0x10/0x10 [ 635.192494] ? __switch_to+0x759/0x1030 [ 635.193280] ? __pfx_kthread+0x10/0x10 [ 635.194030] ret_from_fork_asm+0x1a/0x30 [ 635.194804] [ 635.195281] irq event stamp: 45469 [ 635.195961] hardirqs last enabled at (45479): [] __up_console_sem+0x78/0x80 [ 635.197568] hardirqs last disabled at (45488): [] __up_console_sem+0x5d/0x80 [ 635.199142] softirqs last enabled at (45276): [] __irq_exit_rcu+0xc4/0x100 [ 635.200711] softirqs last disabled at (45271): [] __irq_exit_rcu+0xc4/0x100 [ 635.202272] ---[ end trace 0000000000000000 ]--- [ 635.854975] Bluetooth: hci5: command 0x0406 tx timeout [ 636.174921] Bluetooth: hci3: command 0x2016 tx timeout [ 636.430974] Bluetooth: hci2: command 0x2016 tx timeout [ 636.558931] Bluetooth: hci4: command 0x0406 tx timeout [ 636.942995] Bluetooth: hci7: command 0x2016 tx timeout [ 637.902958] Bluetooth: hci5: command 0x0406 tx timeout [ 638.222914] Bluetooth: hci3: command 0x2016 tx timeout [ 638.478912] Bluetooth: hci2: command 0x2016 tx timeout [ 638.606933] Bluetooth: hci4: command 0x0406 tx timeout [ 638.992002] Bluetooth: hci7: command 0x2016 tx timeout [ 639.950971] Bluetooth: hci5: command 0x0406 tx timeout [ 640.271035] Bluetooth: hci3: command 0x2016 tx timeout [ 640.526992] Bluetooth: hci2: command 0x2016 tx timeout [ 640.654915] Bluetooth: hci4: command 0x0406 tx timeout [ 641.039069] Bluetooth: hci7: command 0x2016 tx timeout [ 641.999116] Bluetooth: hci5: command 0x0406 tx timeout [ 642.318929] Bluetooth: hci3: command 0x2016 tx timeout [ 642.574983] Bluetooth: hci2: command 0x2016 tx timeout [ 642.702937] Bluetooth: hci4: command 0x0406 tx timeout [ 643.087914] Bluetooth: hci7: command 0x2016 tx timeout 18:29:36 executing program 1: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ee3e1f0a"], 0x22) 18:29:36 executing program 0: syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e1f0a2b0d4af20962392884bb9cdbcf7d261c563caf99e20d3e77cf4486019e545641bd7e359089f3d37b263bbc871a6737134baa9d1f58a36864074f7ae8a68ae06fba5c7a0a8ad0ec663fa27eb8b54154497661e61efaff456e58775a1a48530702fbe47b549e40ce16d06c43f408ca2cab68ebd7b1789465b134bb173190986b3676e5065bdb768f13e3049b23ec5544cd7f6b1b7e0a5b4cb533397a2661f9aa978b91cdbbdb2dc602ba5f3bc09db705e5f182258605d324eebbfce43a035fd670a4db02a0a6b5b4217444e4a8e67faf0e5736b68eca412875fb70f50f80647b81a9f432486bb4638be34272ad96ab8c04cccbd0234d1d6a721979f502a4bcac38ec74ecaa77186705b87564"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc2}, "2fe10474fa152a546ff8af419bb85cf6e7476543da109fbe6cc5c07140330c881f3abdc39723df12b54f2700319e903fc1fdda515a6c8fbf12588e720058b07e95561e8abb623123d6c63d5b317709269632b5f3bae388d0dcb0a8d43948d7898e0aae821502da10012e82a6cdb0ccf8f6e43459871e81f60adc827c9217f36a26320e2eda7e33e63c87727ca6f539ff7bcc95fb69188dea0eaff14f560d4548ff1834359fc24719bff8f0908f46caaa04568a5d81045c5970b0eeb3c15437ea8550"}, 0xc6) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x40, 0x8}, {0x1ff, 0xffff, 0x100, 0x400}}}}, 0x15) 18:29:36 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = accept$unix(r0, 0x0, &(0x7f0000000180)) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x8) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r4, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f00000000c0)="d3", 0x1}]) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000140)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "5391e0791fbcee11470c0a41d7d2b78746db9fada827c0aca7a431ed1f982c29d6ebe2def4572d"}, 0x2b) 18:29:36 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0x0, 0x7}}}, 0x7) 18:29:36 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f4c038b1d99d84100100"], 0x22) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 18:29:36 executing program 6: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}}}, 0xd) 18:29:36 executing program 4: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ff"], 0x22) 18:29:36 executing program 5: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a0000000000aaaaaaaaaa00000000000000fff3ffffffff00000000000000e431ed42d26230e4bbc17388985b5231c9633b4d00617c68e23e84f363792496cea1477de012f975c6df5c590e12afe69ef962c9d2d77f8ddfe392"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0x9, 0x1}}}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xd2}, "f0f154ac9b5ca2e728152621eeda4a28dccbf6abb2f1e02a305c4101db9a7ecd9d567ede5f6bc8de3acf6158f9d90db80199bb7fd2632c0c4dc53b369a3a2ec114b97c7e5e03d37457dea12beaeb0d8142141b51b19482e946037efaaeba17d73af803ebc6a1ecd1823548a497537f9cad497f750d32167986a75ce85fba744f6da60ee32b83ce9242665ff9ce3f38a09bd3d5c4c5f3e32ccf387ab3f1251892329376243bd7466f958e42a02182f56ef669c468c7c222a9831b3d7cde5b6e045779b3ad9290955979d1997670f8ccbfdbbf"}}, 0xd5) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x85, 0x8}}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "d5ec2d22bc876f39e68dd057f7a440cefdca6e6085eaf1f77f8fa8685a9cc47a5747c3467adfc32f283a4fb2c37f83a47eb681602c10ff107fbf1fd115cf249ed85a2f217f0e0c57e39f965fccd39b22133cd93cc423412bd7cd0793cd69315699fd4b3582d46f317284b9ab8d9e475d52669261cb5681c03d8218ea5fa2ccaf10269d729be3fb07732a330edd998eccc1c8e72b7a6a31f1c3a53366cbc648e6592a1d5020a8"}, 0xaa) 18:29:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="10", 0x1, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="10", 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000400)={{r3}, "6378f1c63886ad2309cd94082f111c2a40d0065bc389ba9ff17038a4589951287f481e2c5803f859c5612cdb54a08c23d1a2a86e45ae4af0826bb1a70c738ee1b69e80b891eadef79fc73f2616916eb8b6989c3c0744b6200a77b9bf036c55ed1571b403976ab6ce3782622f9995bfb2f12fa66877f13719e43208a4b6fec832fa6ad09a2c012e238d8fb08b2e582dd36fbc942503904109f0f5438691f71ebd1377820869ef6c55159d9a21194dc3bc2f5656aabfc5655b3cc6e2f7aaa9b43465f8c5a14cabd9c6893ed2a465914d1dbeabf047017da1e1f978fa3875a5d638aba63d8205e4be7f727ebed8bcf31a050b1945968817e375ee1a8ac0f29804455def6f036db49011d93bd50d689d0fb469168b892343ea89cfc455a65c221b7624c0cc65cfce3950787a9912093e125b676d6c611fc61cd027ef9fcbee5d7d88d34caee7769b2414d408db340bb8eaea3c26dc6f929acba759d707c2a3913c05f736bdb4779f0b417e5a2f40c830fc4297a72521839a399cb9a1699aafd55ff6cca9ec2741f5e94cbbcfa08a126d759cbcd496aea1e7c0f0b0aa89c273777a20f037435ea4ccfbe3a1ad427cf63f2d939b096aa900ea23b0a0d85907c34ce077f598af3cfbced7b0c455af01c9a38a7aa068b614755816ed41e5ca8533ecf05f1ba27168b73c87200249061ec9fab770e607af070f9727361b59235c791fdd9077d9b8523002c4258f38769dccebc20adac29eb0a65b3608e874d397a4d063eb781ced9a6a38f48be33555eac8d5855b43f2f145d115aae0c24ec801cf5001384868571effe64f52043aec2974c9713f5c9279f4d8081cbb7a585b59fdc3e74e632dec14f53fbed574eee037d3c0bb7dd5fe91813d323ffdb1b7ff88da19597c8ab5d37e257cf3fffee57dbd3b3cf83198751832d58ce56bb76c77acfea04f2c3a3c8c279980df60b8f0d0a054e13030b88c734ba25aed055a5a6d46e84c2c4304500c0214b7b95b320307f29c82fed1a79b00272e33e7bbe3ccf9660092d685e57102e215a37ca37df271f9dd61c0601cb0c875f8f846781545d09816e7b8cae7681018f77ced3cd4b67a3da93cdb0de7cd837818955d00ec722f2047802028029f64ea5b8022c046bb193828f1ed22976963ee170c19ee04dd6ecb8f9f0d30028174f62a90941d5f802785f5ea560d528effe036e25b3e6d8ffbdfc1790ecf2fcb95e7a9691af6f75065c3f60d775165efb70f58e0c98e99ca953c59ee36e03da163614f7782b8784bca08c6ed75c0e9f717f245424c1aef9eb16b1bb8c4cb7d465c8ecefaa0ba7493a18265e98b8b5216ab1ec264273837bfb2733190e727677641ebebae9b6c5f8a9b3577e48ec3ea2a72909c4e5372fd9b9db7c7fc78cb7a94c3421c177fa38b83570cd3752f925a7b1fa4cad6942c4d07b4e4705781b097600e6c41f3dce72558c2c7d7437b53d4521111031b2c8d152dbd3e8a89b4d1a597097f46ef4522559b73f9c4d2fbc090b9b4da43716e64a611404d25185108c509d21a2a9e2c1c370afc37c5470ff438b188848e51c7b07683dda0a4d27bcde70ae130e2fa07eb76e32dc7ca8483e892cd7b3c42e071026bcbe709935af9f06d528921474c6bacc4efb45d11de4a7ad22ee73576fa574406414c9958c826be29401616d995945155dcc725348cf8215ef73b3497eab61b12cfec9e454c37efb93f2ba15e81399c2718f78534ed0ebd26f8f77e1d2aac4d235f12764fd0611979bea8970c904d51587a59d8f3c02d114092c699ce02833710023055ad23a269cfe6a3b924a9364c1c1ea708c6a1883a3d0bacb0c62ff83741929eaa1303877fa4e05525c8bc775e901d205ac0895a5b6ca5be38b32eab28ee4f02738b9a58e131939cca7ec015eb56170a1daee5786eb98d7eca137016416108a2121f7d12f75c48ca80007b8e9b67f1c086dd80df639b6b82f9c540fbf45da6047548eaad8688f7b8d7bd65a0b7be84040ffb817c905ad140a02d613a6f8933ba44fd1f0f4dfb472511c50b17b6c52dc64184afd5784c29214cf834d302e150bb899f435c27edf4dee59eb1e0ad6b7793e3abbd9d9dde704f83812710d367bc5450746bcd4b5e8a5a47f59fe22498ed67d963c5914a1090b1eed959ab3cf009e57491b88cab589c2194936fbcf7cab184953e39aef5807b05661e4ce26e0ccf92d999adc9efb07ef6975f629c58c1ddc8168fa1c772a91670f2731c2f74fa2ed4e8563954d5ef30e8db4f32d236ab455cd5e9ba2db25d513866a012ec63f20afc7a752f9610cec7fac0bef0583c9a23cf79559ad1e6496e5ace9b2d09a3c9252f4b0f915185faa5eac9e90a62518fd19fc84744ab3e403cd1fc482bc947c8fed129284c8a41992cec6b3f5a7d7279856b808c0c1347fe84ccb3638dbc8e39a2ce6b14ff7dbc832d59034700204ae50e18850d232beff4683121c50fb44b795281273da4ae0bf0689297cfecd4d5c31c1a662fbfe5a07a46bfd1414de3e866e587bfa18a83ba8b26a78a836eab0018b72f1a0189d9eba294d1b87f498acec7b74fcae276286834ac1c64e758e909860355c6c6a76aefe8a7fd13c10bb0bfb7d35318e7f0bb403052ae7d82c16e87ee5407c8a8834b9567b6c9b6ddd36ae238db9a09f88c24fc99000a5c10d65e09819a13c21cfe6ad31b7b77c1efb7279acf38cee27ddd1a75c79f94228a128c99c0ea7ff0d469edbe2ab8dd9df8943351a191442a63a025dcd1dc0650bc5e161f5ed31c7f0ea1ba43cf18f600db569cdf7a1c988afe9f037090c905cc2ff1292480fa28abecf463182706271f4443f47df0e9846070baaab4e6ad40ee8666c772d07d627ca8b93508dc3009c0f80a5c5e087e6117853e0ce1e79f5885dd5904a8162d260b6f7703cfe4ac72a0bf57708c50d440cf5d5eb1c6e080796f6a60f7f6465a9afb88801307d9832f9d8bf72b50c5da53c93194f3c97943eef2b2a43048ad1fadb7dd783bcbd1e24088d72dfe5e91d3c99880352ea332884b5c269acb3493bd71d942a781a5779e6628a9f2446bd81474ad70e5ed1a521212d7248b10e977974f5d84444fc38c3891083eb98686c895d2d52a293fddee12942dd0cbcade97fd672ee59052822e0a43a762a9c1092a5a4e92afa5b2890acad8b5f0339336034996ed25cf864ddeea97a0fa3895f249af46373d3d795dbe12d01029a694844e90b2cba41bf8eaf1b8a9891a4fad9071a1a68bc832fbcf34c89b481a767cd6e473feee2498860b66b352bb1399e73d4ae5993a0bec3387fd3eb0baa0dfa1569b68594ef2894da62f11a13f7f1eac7048c881d7a0368b036f6b1aff8a60ccee6ddf40838917346d1039143040968d972d34de4e426033c7f2786cc3f6832e1715c1edca225a20d0370341cba6b16993ece388534f6b0fb65193034e8092fbca6e2ddb3a54dad4d6c14f25d4e3d44bc8bdcbb0364e3f857f163ab613c9ac4175dbcf5d7b5975bea693b7c971013aad03ba320660ba098deb823866547dc1b243a43d1d6a901979cd04828bc76c18ce626fd12b13cb40454ded720d22b386d256dcc9a01aa12afca4169bb0c9a55cf8351693bb156cc9f8cac7f80865e7316e0c638d20b52d8376cbe72bc8779fb656f6f27cfefc8d270917d46b8081ad3cbe67387390852e6e055b8d245df4fd955d92401fc9ca099c3d33536f0027a546907cedab452a91d63e6734792c130ae6bed56dcef7c5c195f81b0c68bef189443fa3c454404ec54530177365182c1a670f7feb56904a28d3200051b073ab2b9da7afed86df10d36373e83981318f46ace3c1a5c2f70dce47a44e19b042d878141cf8e76a828dae890b566156c28d41c70ad348a467deb08719f02fdf14ef0ccc6f41c02c0b49073caf048ae9611046c22c8b5718ea8d4f7e33cbdf1759af537c0145fabe2fb0581a04d1867e7a4cdc3a0d9aebaf9eca44e007ebb7aac980946f3b8f337dc1a0a6be4b26d40b9f6b0fa83b9867b120d05adf0c8095bfe0b9ab32ed593f886a24cc1375e7026c0b7aba432e07177eabcdc3a8ccc36d5e35869b9119ab22f2eb6ee502872eecfdf91b7753d6021e94360e5c8da57330d0c1468a86bca3486bbc1b5e48a05ecf5f23d18b70828a895d8e4c3af9cc2e55241fb90cbcbdabe745a583d375794f12f3f0f2c9d80eef786f5e7f465f66e3545480bbef139b51a1e546802403b5b4872ee0826f05ab4a2dc6b9c4eee250fdcfce1ab91170df2094366f8a38d15850f470aabba075605b25487f5bb517f200988d37e2a3428c9bb932533f682355f51b05eb3d839e44bf10aaf47defdd9a1a0c3c9244f81dafe86a492af84002879ba3801ccabb4272f6c13ade7caa33aace5f3b5f1d2cc1ecdfd6841cb0e9d3ac100320874cd179945c2b6b9c35641161625a0f8ebf008c990bd1b7994cf8bf4ce25f1d27dae393c7303fde085737ddcd4f27f463e04ce6603a903f496391d3588d9ef84861fde07daf1f47684a43675f75c94fe1d10e49d8bafd19e3bdbb3f555a53b3181c4f6a4ffecbb10fae2011a9cdbf131b96395a55fc9bbd99f05585c79b5c80688ba2aee8082098ab08161d1fc11c461f69c6aea9709e6d147f0a1ff9c462e8fb352121efca772481985e59d2aa01681cd65848254de2045953be29002c81c91d7e8e8703325eb13f22870c726ea65ddd6451a0972b299338a206fb33fb71cfcad40c03f1f78dd228db8059f3b77ab77028972a833322cd83e5b8593735b7c04ca6df594d44f7c1126b2f1d9f8c285dd0dbc9d3bf8f1a5a1bf44f68e3e7e1d55b6af90e2785ba7082dd2d00ab038d289ebc4a1f22faad017eae168304a25ac6607289877fc7ecb00fa4429d53ed4d7eb1f393eb39bd388a6b355eb84f62e1d5ca9b143c51f039a8e7a6668702c2b8893ab3ae681672f0b71ff5b1a74095cbb82e92e9105c7490d1cbf67dfbf9f76b1ec7f2115e513174ddb30a50b77bee214018abda483832cd2dba4e78d74e4fe881a208f1deccd7101ca8550ed8a8e59df15ae6ae67389dbd4084a0b2250c548002840c9129d8a418a53264253cc1f99d86e04d6afcebc4f1e258278557f803ca8b89db44eb24852efc5c60add8a9e8272472119ef786a87ba22839fdab59d0c3efa3efe86cf507764b007a8f8412ba91149a53790e92d0390ed70bd1e983f02474195488a8f691cfe568c2e0b59b4e84aaf359febc16e4348b7d29e2c15163ddbae38d347567554b0861f978efae560ed4cb836d28476429d5bfd047bf1ba9717094cb27ad4822a8d3f5e066b26a62e0e0631e4775985550f90f57d37ef6678a2e997b78494aedb3da355cc9d58897f0b37fc5d28f0e7178dc27f672b02d453e021126f4b303364cb1eb758ece31a103019ef17241dd988820cac866b7a568f8b88794400463d35b5730da2579c068d4e98d26bb7932f93dc4ad488144fedd40bcf0a7fb146c8932066263477e1b5becc6c0aafc33b69baaaf95bab98083ab5044fbcb59c34569add4f5e662fdd7db99e06e3177ec9e54b8b66d888701f3b8186f78ebf41139bb6372b1de0605e5f4c0ee48255879a08363f7c1e81cd46c1606f4d28a8482ef39b1b87136831af709242a60c2e682b95f165d739016177cd6b4deaf94562db761bf44c90f392aa7fd7ecdda8dd94f3303922ab122e011b5f88a7f9dae3d69704656cfa826dad720512eeba02203f710379dc37e78fa1dc3d515a2a712b00c4c47fbe41285afc1120e1b089d266346a43d"}) io_submit(r2, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES16, @ANYRESOCT=r2], 0x22) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 18:29:36 executing program 0: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x3d}, "811adf8c112e4f4bac66c9c8bd4f63418ad9c9e9e5f9422daf111a6ecebdd400ffbc845ee6d65701c1bde59a6fabd20562eff9e8c540057b110c0d84c5"}, 0x41) syz_emit_vhci(0x0, 0x0) [ 643.635160] debugfs: '0' already exists in 'hci7' [ 643.635735] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:0' [ 643.636505] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Tainted: G W 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 643.636526] Tainted: [W]=WARN [ 643.636530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 643.636540] Workqueue: hci7 hci_rx_work [ 643.636560] Call Trace: [ 643.636564] [ 643.636570] dump_stack_lvl+0xfa/0x120 [ 643.636589] sysfs_warn_dup+0x80/0xa0 [ 643.636606] sysfs_create_dir_ns+0x23b/0x2a0 [ 643.636621] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 643.636636] ? find_held_lock+0x2b/0x80 [ 643.636657] ? lock_release+0xc8/0x270 [ 643.636681] ? do_raw_spin_unlock+0x53/0x220 [ 643.636700] kobject_add_internal+0x24c/0x9a0 [ 643.636722] kobject_add+0x157/0x240 [ 643.636740] ? __pfx_kobject_add+0x10/0x10 [ 643.636759] ? lock_release+0xc8/0x270 [ 643.636773] ? do_raw_spin_unlock+0x53/0x220 [ 643.636790] ? kobject_put+0xaa/0x260 [ 643.636813] device_add+0x32d/0x1830 [ 643.636835] ? __pfx_device_add+0x10/0x10 [ 643.636850] ? hci_debugfs_create_conn+0x10f/0x240 [ 643.636871] ? mgmt_send_event_skb+0x2f3/0x460 [ 643.636885] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 643.636905] hci_conn_add_sysfs+0x117/0x1c0 [ 643.636922] le_conn_complete_evt+0x1246/0x1e40 [ 643.636949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 643.636975] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 643.636989] ? __asan_memcpy+0x3d/0x60 [ 643.637011] hci_le_meta_evt+0x34b/0x530 [ 643.637022] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 643.637037] hci_event_packet+0x66c/0x10e0 [ 643.637050] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 643.637062] ? __pfx_hci_event_packet+0x10/0x10 [ 643.637075] ? mark_held_locks+0x49/0x80 [ 643.637090] ? kcov_remote_start+0x2ce/0x5a0 [ 643.637112] hci_rx_work+0x65b/0x8b0 [ 643.637127] process_one_work+0x8e1/0x1960 [ 643.637150] ? __pfx_process_one_work+0x10/0x10 [ 643.637165] ? move_linked_works+0x172/0x270 [ 643.637187] ? assign_work+0x196/0x240 [ 643.637202] worker_thread+0x67e/0xe90 [ 643.637218] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 643.637243] ? __pfx_worker_thread+0x10/0x10 [ 643.637258] kthread+0x3c8/0x740 [ 643.637272] ? __pfx_kthread+0x10/0x10 [ 643.637284] ? ret_from_fork+0x79/0x7a0 [ 643.637299] ? __pfx_kthread+0x10/0x10 [ 643.637313] ret_from_fork+0x67a/0x7a0 [ 643.637325] ? __pfx_ret_from_fork+0x10/0x10 [ 643.637339] ? __switch_to+0x759/0x1030 [ 643.637356] ? __pfx_kthread+0x10/0x10 [ 643.637370] ret_from_fork_asm+0x1a/0x30 [ 643.637395] [ 643.655132] kobject: kobject_add_internal failed for hci7:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 643.656169] Bluetooth: hci7: failed to register connection device 18:29:36 executing program 3: syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x9}}}, 0x7) 18:29:36 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe4d) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x0) [ 643.698120] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 643.699766] debugfs: '0' already exists in 'hci5' [ 643.700315] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 643.701010] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Tainted: G W 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 643.701030] Tainted: [W]=WARN [ 643.701035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 643.701044] Workqueue: hci5 hci_rx_work [ 643.701060] Call Trace: [ 643.701065] [ 643.701071] dump_stack_lvl+0xfa/0x120 [ 643.701090] sysfs_warn_dup+0x80/0xa0 [ 643.701107] sysfs_create_dir_ns+0x23b/0x2a0 [ 643.701122] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 643.701136] ? find_held_lock+0x2b/0x80 [ 643.701157] ? lock_release+0xc8/0x270 [ 643.701172] ? do_raw_spin_unlock+0x53/0x220 [ 643.701190] kobject_add_internal+0x24c/0x9a0 [ 643.701213] kobject_add+0x157/0x240 [ 643.701231] ? __pfx_kobject_add+0x10/0x10 [ 643.701250] ? lock_release+0xc8/0x270 [ 643.701264] ? do_raw_spin_unlock+0x53/0x220 [ 643.701281] ? kobject_put+0xaa/0x260 [ 643.701303] device_add+0x32d/0x1830 [ 643.701320] ? __pfx_device_add+0x10/0x10 [ 643.701335] ? hci_debugfs_create_conn+0x10f/0x240 [ 643.701353] ? mgmt_send_event_skb+0x2f3/0x460 [ 643.701366] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 643.701386] hci_conn_add_sysfs+0x117/0x1c0 [ 643.701404] le_conn_complete_evt+0x1246/0x1e40 [ 643.701430] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 643.701456] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 643.701470] ? __asan_memcpy+0x3d/0x60 [ 643.701492] hci_le_meta_evt+0x34b/0x530 [ 643.701504] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 643.701519] hci_event_packet+0x66c/0x10e0 [ 643.701533] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 643.701544] ? __pfx_hci_event_packet+0x10/0x10 [ 643.701557] ? mark_held_locks+0x49/0x80 [ 643.701572] ? kcov_remote_start+0x2ce/0x5a0 [ 643.701594] hci_rx_work+0x65b/0x8b0 [ 643.701609] process_one_work+0x8e1/0x1960 [ 643.701631] ? __pfx_process_one_work+0x10/0x10 [ 643.701646] ? move_linked_works+0x172/0x270 [ 643.701668] ? assign_work+0x196/0x240 [ 643.701684] worker_thread+0x67e/0xe90 [ 643.701699] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 643.701724] ? __pfx_worker_thread+0x10/0x10 [ 643.701740] kthread+0x3c8/0x740 [ 643.701753] ? __pfx_kthread+0x10/0x10 [ 643.701766] ? ret_from_fork+0x79/0x7a0 [ 643.701781] ? __pfx_kthread+0x10/0x10 [ 643.701795] ret_from_fork+0x67a/0x7a0 [ 643.701807] ? __pfx_ret_from_fork+0x10/0x10 [ 643.701825] ? __switch_to+0x759/0x1030 [ 643.701842] ? __pfx_kthread+0x10/0x10 [ 643.701856] ret_from_fork_asm+0x1a/0x30 [ 643.701881] [ 643.720491] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 643.722155] Bluetooth: hci5: failed to register connection device [ 643.723635] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 643.762166] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 643.784596] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 643.839315] debugfs: '0' already exists in 'hci4' [ 643.840536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 643.841361] CPU: 1 UID: 0 PID: 4203 Comm: kworker/u11:7 Tainted: G W 6.18.0-next-20251205 #1 PREEMPT(voluntary) [ 643.841382] Tainted: [W]=WARN [ 643.841386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 643.841395] Workqueue: hci4 hci_rx_work [ 643.841414] Call Trace: [ 643.841419] [ 643.841424] dump_stack_lvl+0xfa/0x120 [ 643.841443] sysfs_warn_dup+0x80/0xa0 [ 643.841461] sysfs_create_dir_ns+0x23b/0x2a0 [ 643.841476] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 643.841490] ? find_held_lock+0x2b/0x80 [ 643.841512] ? lock_release+0xc8/0x270 [ 643.841526] ? do_raw_spin_unlock+0x53/0x220 [ 643.841545] kobject_add_internal+0x24c/0x9a0 [ 643.841567] kobject_add+0x157/0x240 [ 643.841586] ? __pfx_kobject_add+0x10/0x10 [ 643.841604] ? lock_release+0xc8/0x270 [ 643.841618] ? do_raw_spin_unlock+0x53/0x220 [ 643.841636] ? kobject_put+0xaa/0x260 [ 643.841658] device_add+0x32d/0x1830 [ 643.841676] ? __pfx_device_add+0x10/0x10 [ 643.841691] ? hci_debugfs_create_conn+0x10f/0x240 [ 643.841708] ? mgmt_send_event_skb+0x2f3/0x460 [ 643.841721] ? __pfx_hci_debugfs_create_conn+0x10/0x10 [ 643.841741] hci_conn_add_sysfs+0x117/0x1c0 [ 643.841758] le_conn_complete_evt+0x1246/0x1e40 [ 643.841785] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 643.841811] hci_le_enh_conn_complete_evt+0x22f/0x2e0 [ 643.841830] ? __asan_memcpy+0x3d/0x60 [ 643.841852] hci_le_meta_evt+0x34b/0x530 [ 643.841863] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 643.841878] hci_event_packet+0x66c/0x10e0 [ 643.841891] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 643.841903] ? __pfx_hci_event_packet+0x10/0x10 [ 643.841916] ? mark_held_locks+0x49/0x80 [ 643.841930] ? kcov_remote_start+0x2ce/0x5a0 [ 643.841952] hci_rx_work+0x65b/0x8b0 [ 643.841967] process_one_work+0x8e1/0x1960 [ 643.841989] ? __pfx_process_one_work+0x10/0x10 [ 643.842004] ? move_linked_works+0x172/0x270 [ 643.842026] ? assign_work+0x196/0x240 [ 643.842041] worker_thread+0x67e/0xe90 [ 643.842056] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 643.842082] ? __pfx_worker_thread+0x10/0x10 [ 643.842098] kthread+0x3c8/0x740 [ 643.842111] ? __pfx_kthread+0x10/0x10 [ 643.842123] ? ret_from_fork+0x79/0x7a0 [ 643.842138] ? __pfx_kthread+0x10/0x10 [ 643.842152] ret_from_fork+0x67a/0x7a0 [ 643.842164] ? __pfx_ret_from_fork+0x10/0x10 [ 643.842178] ? __switch_to+0x759/0x1030 [ 643.842196] ? __pfx_kthread+0x10/0x10 [ 643.842210] ret_from_fork_asm+0x1a/0x30 [ 643.842236] [ 643.860088] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 643.861218] Bluetooth: hci4: failed to register connection device [ 644.046936] Bluetooth: hci5: command 0x0406 tx timeout [ 644.366904] Bluetooth: hci3: command 0x2016 tx timeout [ 644.622921] Bluetooth: hci2: command 0x2016 tx timeout [ 644.750902] Bluetooth: hci4: command 0x0406 tx timeout [ 645.135282] Bluetooth: hci7: command 0x2016 tx timeout VM DIAGNOSIS: 18:29:28 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88807fefb010 RCX=0000000000000000 RDX=ffff88804a630000 RSI=0000000000000004 RDI=ffff888049877b48 RBP=0000000000000000 RSP=ffff888049877bd0 R8 =0000000000000001 R9 =ffffed100930ef69 R10=0000000000000003 R11=0000000000000000 R12=ffff88807fefbff9 R13=ffffffff88960930 R14=ffff88804a630000 R15=0000000000000086 RIP=ffffffff81b724d0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555725dd400 00000000 00000000 GS =0000 ffff8880e535c000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005610dcef8ab0 CR3=0000000048789000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2038323a39323a383120352020636544 XMM01=5d3431373436312e35333620205b203a XMM02=66203a58435220303461343461393430 XMM03=30303030303030303030303030203a58 XMM04=38622038342066662066662035662064 XMM05=20663820366620386520303920623020 XMM06=20666620386520646620343220303920 XMM07=35203231203437206465203538206466 XMM08=353d6f6e692022736665706970223d76 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82965035 RDI=ffffffff889a7b40 RBP=ffffffff889a7b00 RSP=ffff88800ce17418 R8 =0000000000000000 R9 =ffffed10016b7046 R10=0000000000000032 R11=0000000000000000 R12=0000000000000032 R13=0000000000000010 R14=ffffffff889a7b00 R15=ffffffff82965020 RIP=ffffffff8296508d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e545c000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa0d6cddfd0 CR3=000000000c576000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=492743b35435f29d5c4a0e121e564342 XMM02=6b1e99b806172e3b00000000000aea28 XMM03=375afdebbf381c810000000000127750 XMM04=6e4ff830f4d83f8c00000000001526a8 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=29aa7128ea0775a400000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000