kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 7517 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:idr_remove+0x28/0x60 lib/idr.c:154
Code: 40 00 55 48 89 e5 41 54 49 89 fc 53 48 89 f3 e8 4e 23 5a fa 49 8d 7c 24 48 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 1a 41 8b 44 24 48 4c 89 e7 31 d2
RSP: 0018:ffff888057a877e0 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 00000000000fe3e8 RCX: ffffc90007ffa000
RDX: 000000000000020b RSI: ffffffff87169de2 RDI: 0000000000001058
RBP: ffff888057a877f0 R08: 1ffff1100af50eed R09: ffffed100af50eee
R10: ffffed100af50eed R11: 0000000000000003 R12: 0000000000001010
R13: ffff8880a62d8380 R14: 0000000000000001 R15: ffff8880a62d8030
FS:  0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5d7ab40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f5d59db0 CR3: 00000000a0346000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kernfs_put fs/kernfs/dir.c:538 [inline]
 kernfs_put+0x2df/0x590 fs/kernfs/dir.c:505
 kernfs_create_dir_ns+0x135/0x160 fs/kernfs/dir.c:1036
 sysfs_create_dir_ns+0x131/0x2a0 fs/sysfs/dir.c:59
 create_dir lib/kobject.c:89 [inline]
 kobject_add_internal lib/kobject.c:255 [inline]
 kobject_add_internal.cold+0x116/0x662 lib/kobject.c:225
 kobject_add_varg lib/kobject.c:390 [inline]
 kobject_add+0x150/0x1c0 lib/kobject.c:442
 device_add+0x3b7/0x17a0 drivers/base/core.c:2062
 hci_register_dev+0x2e8/0x860 net/bluetooth/hci_core.c:3305
 __vhci_create_device+0x2d0/0x5a0 drivers/bluetooth/hci_vhci.c:124
 vhci_create_device drivers/bluetooth/hci_vhci.c:148 [inline]
 vhci_get_user drivers/bluetooth/hci_vhci.c:204 [inline]
 vhci_write+0x2d0/0x470 drivers/bluetooth/hci_vhci.c:284
 call_write_iter include/linux/fs.h:1872 [inline]
 new_sync_write+0x4d3/0x770 fs/read_write.c:483
 __vfs_write+0xe1/0x110 fs/read_write.c:496
 vfs_write+0x20c/0x580 fs/read_write.c:558
 ksys_write+0x14f/0x290 fs/read_write.c:611
 __do_sys_write fs/read_write.c:623 [inline]
 __se_sys_write fs/read_write.c:620 [inline]
 __ia32_sys_write+0x71/0xb0 fs/read_write.c:620
 do_syscall_32_irqs_on arch/x86/entry/common.c:337 [inline]
 do_fast_syscall_32+0x27b/0xd7d arch/x86/entry/common.c:408
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7f7e849
Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5d7a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000
RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 317693a913a6ac18 ]---
RIP: 0010:idr_remove+0x28/0x60 lib/idr.c:154
Code: 40 00 55 48 89 e5 41 54 49 89 fc 53 48 89 f3 e8 4e 23 5a fa 49 8d 7c 24 48 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 1a 41 8b 44 24 48 4c 89 e7 31 d2
RSP: 0018:ffff888057a877e0 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: 00000000000fe3e8 RCX: ffffc90007ffa000
RDX: 000000000000020b RSI: ffffffff87169de2 RDI: 0000000000001058
RBP: ffff888057a877f0 R08: 1ffff1100af50eed R09: ffffed100af50eee
R10: ffffed100af50eed R11: 0000000000000003 R12: 0000000000001010
R13: ffff8880a62d8380 R14: 0000000000000001 R15: ffff8880a62d8030
FS:  0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5d7ab40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f5d59db0 CR3: 00000000a0346000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400