kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
Bluetooth: hci0: failed to register connection device
==================================================================
BUG: KASAN: wild-memory-access in instrument_atomic_read include/linux/instrumented.h:82 [inline]
BUG: KASAN: wild-memory-access in atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline]
BUG: KASAN: wild-memory-access in l2cap_chan_lock include/net/bluetooth/l2cap.h:829 [inline]
BUG: KASAN: wild-memory-access in l2cap_conn_ready net/bluetooth/l2cap_core.c:1641 [inline]
BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x7c0/0xf80 net/bluetooth/l2cap_core.c:7419
Read of size 4 at addr deacfffffffffc8c by task kworker/u9:3/5633
CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: hci0 hci_rx_work
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
kasan_report+0xdf/0x1d0 mm/kasan/report.c:595
check_region_inline mm/kasan/generic.c:186 [inline]
kasan_check_range+0x10f/0x1e0 mm/kasan/generic.c:200
instrument_atomic_read include/linux/instrumented.h:82 [inline]
atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline]
l2cap_chan_lock include/net/bluetooth/l2cap.h:829 [inline]
l2cap_conn_ready net/bluetooth/l2cap_core.c:1641 [inline]
l2cap_connect_cfm+0x7c0/0xf80 net/bluetooth/l2cap_core.c:7419
hci_connect_cfm include/net/bluetooth/hci_core.h:2139 [inline]
le_conn_complete_evt+0x197c/0x1f60 net/bluetooth/hci_event.c:5865
hci_le_conn_complete_evt+0x23c/0x3a0 net/bluetooth/hci_event.c:5891
hci_le_meta_evt+0x34a/0x5f0 net/bluetooth/hci_event.c:7529
hci_event_func net/bluetooth/hci_event.c:7793 [inline]
hci_event_packet+0x51c/0xcd0 net/bluetooth/hci_event.c:7847
hci_rx_work+0x451/0xfc0 net/bluetooth/hci_core.c:4077
process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302
process_scheduled_works kernel/workqueue.c:3385 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
==================================================================
Oops: general protection fault, probably for non-canonical address 0xfbd59bffffffff91: 0000 [#1] SMP KASAN NOPTI
KASAN: maybe wild-memory-access in range [0xdeacfffffffffc88-0xdeacfffffffffc8f]
CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:3 Tainted: G B L syzkaller #0 PREEMPT(full)
Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: hci0 hci_rx_work
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline]
RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline]
RIP: 0010:atomic_read include/linux/atomic/atomic-instrumented.h:33 [inline]
RIP: 0010:l2cap_chan_lock include/net/bluetooth/l2cap.h:829 [inline]
RIP: 0010:l2cap_conn_ready net/bluetooth/l2cap_core.c:1641 [inline]
RIP: 0010:l2cap_connect_cfm+0x7c7/0xf80 net/bluetooth/l2cap_core.c:7419
Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 b1 65 7b f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 50 36 e8 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5
RSP: 0018:ffffc90002e9f830 EFLAGS: 00010213
RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001e780000
RDX: 0000000000000000 RSI: ffffffff81c64dfd RDI: ffff88803596dc40
RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 6e696c6261736944 R12: ffff88806c50403d
R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff88807c8f4288
FS: 0000000000000000(0000) GS:ffff888124471000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c369705 CR3: 000000005a5bb000 CR4: 0000000000350ef0
Call Trace:
hci_connect_cfm include/net/bluetooth/hci_core.h:2139 [inline]
le_conn_complete_evt+0x197c/0x1f60 net/bluetooth/hci_event.c:5865
hci_le_conn_complete_evt+0x23c/0x3a0 net/bluetooth/hci_event.c:5891
hci_le_meta_evt+0x34a/0x5f0 net/bluetooth/hci_event.c:7529
hci_event_func net/bluetooth/hci_event.c:7793 [inline]
hci_event_packet+0x51c/0xcd0 net/bluetooth/hci_event.c:7847
hci_rx_work+0x451/0xfc0 net/bluetooth/hci_core.c:4077
process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302
process_scheduled_works kernel/workqueue.c:3385 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline]
RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline]
RIP: 0010:atomic_read include/linux/atomic/atomic-instrumented.h:33 [inline]
RIP: 0010:l2cap_chan_lock include/net/bluetooth/l2cap.h:829 [inline]
RIP: 0010:l2cap_conn_ready net/bluetooth/l2cap_core.c:1641 [inline]
RIP: 0010:l2cap_connect_cfm+0x7c7/0xf80 net/bluetooth/l2cap_core.c:7419
Code: 80 fb ff ff 49 39 c7 0f 84 29 01 00 00 e8 b1 65 7b f7 49 8d 6e 0c be 04 00 00 00 48 89 ef e8 50 36 e8 f7 48 89 e8 48 c1 e8 03 <0f> b6 14 18 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5
RSP: 0018:ffffc90002e9f830 EFLAGS: 00010213
RAX: 1bd59fffffffff91 RBX: dffffc0000000000 RCX: ffffc9001e780000
RDX: 0000000000000000 RSI: ffffffff81c64dfd RDI: ffff88803596dc40
RBP: deacfffffffffc8c R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 6e696c6261736944 R12: ffff88806c50403d
R13: 0000000000000080 R14: deacfffffffffc80 R15: ffff88807c8f4288
FS: 0000000000000000(0000) GS:ffff888124471000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3041eff8 CR3: 0000000055115000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess), 4 bytes skipped:
0: 49 39 c7 cmp %rax,%r15
3: 0f 84 29 01 00 00 je 0x132
9: e8 b1 65 7b f7 call 0xf77b65bf
e: 49 8d 6e 0c lea 0xc(%r14),%rbp
12: be 04 00 00 00 mov $0x4,%esi
17: 48 89 ef mov %rbp,%rdi
1a: e8 50 36 e8 f7 call 0xf7e8366f
1f: 48 89 e8 mov %rbp,%rax
22: 48 c1 e8 03 shr $0x3,%rax
* 26: 0f b6 14 18 movzbl (%rax,%rbx,1),%edx <-- trapping instruction
2a: 48 89 e8 mov %rbp,%rax
2d: 83 e0 07 and $0x7,%eax
30: 83 c0 03 add $0x3,%eax
33: 38 d0 cmp %dl,%al
35: 7c 08 jl 0x3f
37: 84 d2 test %dl,%dl
39: 0f .byte 0xf
3a: 85 f5 test %esi,%ebp