debugfs: Directory '200' with parent 'hci3' already present! list_add double add: new=ffff8880a351a3c8, prev=ffff8880a351a3c8, next=ffff8880a9a88500. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:31! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 8635 Comm: kworker/u5:7 Not tainted 5.5.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: hci3 hci_rx_work RIP: 0010:__list_add_valid+0xa3/0xb0 lib/list_debug.c:29 Code: 24 eb ab 48 89 f7 48 89 34 24 e8 68 25 58 fe 48 8b 34 24 eb bd 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 20 6a ad 87 e8 f1 dc 10 fe <0f> 0b 90 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc900017b7668 EFLAGS: 00010286 RAX: 0000000000000058 RBX: ffff8880a9a88500 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8b61f460 RBP: ffff8880a351a3c8 R08: ffffed1015d06629 R09: ffffed1015d06629 R10: ffffed1015d06628 R11: ffff8880ae833147 R12: ffff8880939c1160 R13: ffff8880a9a88500 R14: ffff8880a351a3c0 R15: ffff8880a351a3c8 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000480 CR3: 00000000a4bde000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_add include/linux/list.h:60 [inline] list_add_tail include/linux/list.h:93 [inline] kobj_kset_join lib/kobject.c:196 [inline] kobject_add_internal+0x15f/0x820 lib/kobject.c:246 kobject_add_varg lib/kobject.c:390 [inline] kobject_add+0x10f/0x170 lib/kobject.c:442 device_add+0x304/0x1900 drivers/base/core.c:2412 hci_conn_add_sysfs+0x7f/0xc0 net/bluetooth/hci_sysfs.c:53 hci_conn_complete_evt net/bluetooth/hci_event.c:2558 [inline] hci_event_packet+0x527/0x999f net/bluetooth/hci_event.c:5968 hci_rx_work+0x1a2/0x910 net/bluetooth/hci_core.c:4685 process_one_work+0x8d1/0x15b0 kernel/workqueue.c:2264 worker_thread+0x82/0xb50 kernel/workqueue.c:2410 kthread+0x31d/0x3e0 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace aa3b2c12c1538d4f ]--- RIP: 0010:__list_add_valid+0xa3/0xb0 lib/list_debug.c:29 Code: 24 eb ab 48 89 f7 48 89 34 24 e8 68 25 58 fe 48 8b 34 24 eb bd 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 20 6a ad 87 e8 f1 dc 10 fe <0f> 0b 90 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc900017b7668 EFLAGS: 00010286 RAX: 0000000000000058 RBX: ffff8880a9a88500 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8b61f460 RBP: ffff8880a351a3c8 R08: ffffed1015d06629 R09: ffffed1015d06629 R10: ffffed1015d06628 R11: ffff8880ae833147 R12: ffff8880939c1160 R13: ffff8880a9a88500 R14: ffff8880a351a3c0 R15: ffff8880a351a3c8 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000480 CR3: 00000000a4bde000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400