ret_from_fork+0x10/0x20 kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. Bluetooth: hci5: failed to register connection device Unable to handle kernel NULL pointer dereference at virtual address 0000000000000058 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000014219c000 [0000000000000058] pgd=0800000201c80003, p4d=0800000201c80003, pud=0800000216ff1003, pmd=0000000000000000 Internal error: Oops: 96000006 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 3080 Comm: kworker/u5:4 Not tainted 6.0.0-rc4-syzkaller-17255-ga6b443748715 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 Workqueue: hci5 hci_rx_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : klist_next+0x28/0x18c lib/klist.c:377 lr : klist_next+0x24/0x18c lib/klist.c:376 sp : ffff800012893ad0 x29: ffff800012893ad0 x28: ffff80000c538058 x27: ffff0000caa23100 x26: ffff80000b95a974 x25: 000000000000001c x24: 0000000000000000 x23: ffff80000d861de0 x22: ffff0000fd61e000 x21: ffff0000fd6d6538 x20: 0000000000000000 x19: ffff800012893b28 x18: 000000000000021d x17: ffff80000c00d6bc x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000002 x13: 0000000000000002 x12: 0000000000040000 x11: 000000000000243d x10: ffff80001eef9000 x9 : ffff8000096b34d8 x8 : 000000000000243e x7 : ffff8000095d8964 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff80000b97fac8 x1 : ffff800012893b28 x0 : 0000000000000000 Call trace: klist_next+0x28/0x18c lib/klist.c:377 next_device drivers/base/core.c:3756 [inline] device_find_child+0x50/0x114 drivers/base/core.c:3899 hci_conn_del_sysfs+0x54/0xfc net/bluetooth/hci_sysfs.c:71 hci_conn_cleanup+0x2d4/0x380 net/bluetooth/hci_conn.c:147 hci_conn_del+0x144/0x2a8 net/bluetooth/hci_conn.c:1022 hci_le_cis_estabilished_evt+0x1c4/0x21c net/bluetooth/hci_event.c:6805 hci_le_meta_evt+0x1e4/0x230 net/bluetooth/hci_event.c:7110 hci_event_func net/bluetooth/hci_event.c:7440 [inline] hci_event_packet+0x4e0/0x60c net/bluetooth/hci_event.c:7495 hci_rx_work+0x1a4/0x2f4 net/bluetooth/hci_core.c:4007 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 Code: 910003fd aa0003f3 97afb71e a9405260 (f9402c18) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 910003fd mov x29, sp 4: aa0003f3 mov x19, x0 8: 97afb71e bl 0xfffffffffebedc80 c: a9405260 ldp x0, x20, [x19] * 10: f9402c18 ldr x24, [x0, #88] <-- trapping instruction