Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [+] Starting iteration 1 [+] open /dev/vhci successful. [+] pthread_create reader_th successful. [+] write create_pkt successful. [+] Got hci_id: 0 [+] HCIDEVUP successful. [ 104.645248][ T5655] Bluetooth: hci0: unexpected cc 0x0c03 length: 252 > 1 [ 104.654981][ T5655] Bluetooth: hci0: unexpected cc 0x0c23 length: 252 > 4 [ 104.662936][ T5655] Bluetooth: hci0: unexpected cc 0x0c14 length: 252 > 249 [ 104.675619][ T5655] Bluetooth: hci0: unexpected cc 0x0c38 length: 252 > 2 [+] fcntl O_NONBLOCK successful. [+] connect L2CAP initiated. [+] write conn_pkt successful. [+] socket BTPROTO_RFCOMM successful. [+] RFCOMMCREATEDEV successful, dev_id=0. [+] pthread_create thread_release successful. [+] pthread_create thread_disconnect successful. [ 104.863665][ T4943] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 104.875589][ T4943] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 104.884006][ T4943] CPU: 1 UID: 0 PID: 4943 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 104.893450][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.903534][ T4943] Workqueue: hci0 hci_rx_work [ 104.908331][ T4943] RIP: 0010:klist_remove+0x156/0x340 [ 104.913650][ T4943] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 1d 54 84 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 fe 53 84 f6 49 8b 44 24 58 48 89 44 24 08 [ 104.933340][ T4943] RSP: 0018:ffffc900103c7700 EFLAGS: 00010202 [ 104.939428][ T4943] RAX: 000000000000000b RBX: ffff888034813e00 RCX: 0000000000000000 [ 104.947484][ T4943] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 104.955552][ T4943] RBP: ffffc900103c77e8 R08: ffffffff90199be3 R09: 1ffffffff203337c [ 104.963523][ T4943] R10: dffffc0000000000 R11: fffffbfff203337d R12: 0000000000000000 [ 104.971524][ T4943] R13: 1ffff1100feb108c R14: ffff88807f588460 R15: dffffc0000000000 [ 104.979694][ T4943] FS: 0000000000000000(0000) GS:ffff888125306000(0000) knlGS:0000000000000000 [ 104.988617][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.995188][ T4943] CR2: 00007fab44d46ff8 CR3: 000000007ef58000 CR4: 00000000003526f0 [ 105.003203][ T4943] Call Trace: [ 105.006478][ T4943] [ 105.009398][ T4943] ? __pfx_klist_remove+0x10/0x10 [ 105.014421][ T4943] ? kobject_move+0x5e2/0x720 [ 105.019092][ T4943] ? __pfx_kobject_move+0x10/0x10 [ 105.024122][ T4943] ? get_device_parent+0x366/0x3a0 [ 105.029222][ T4943] device_move+0x18e/0x720 [ 105.033629][ T4943] hci_conn_del_sysfs+0xb8/0x1a0 [ 105.038577][ T4943] hci_conn_del+0xc3d/0x1200 [ 105.043675][ T4943] hci_disconn_complete_evt+0x5ac/0x890 [ 105.049218][ T4943] hci_event_packet+0x6cd/0xf10 [ 105.054145][ T4943] ? __pfx_hci_disconn_complete_evt+0x10/0x10 [ 105.060226][ T4943] ? __pfx_hci_event_packet+0x10/0x10 [ 105.065602][ T4943] ? alloc_tree+0x230/0x2b0 [ 105.070100][ T4943] ? hci_send_to_monitor+0xe2/0x590 [ 105.075286][ T4943] hci_rx_work+0x3ee/0x1020 [ 105.079785][ T4943] ? process_scheduled_works+0xa20/0x14e0 [ 105.085493][ T4943] process_scheduled_works+0xa8e/0x14e0 [ 105.091042][ T4943] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.097103][ T4943] ? assign_work+0x3cf/0x5d0 [ 105.101684][ T4943] worker_thread+0xa47/0xfb0 [ 105.106484][ T4943] ? __kthread_parkme+0x71/0x1f0 [ 105.111432][ T4943] kthread+0x388/0x470 [ 105.115581][ T4943] ? __pfx_worker_thread+0x10/0x10 [ 105.120714][ T4943] ? __pfx_kthread+0x10/0x10 [ 105.125300][ T4943] ret_from_fork+0x514/0xb70 [ 105.129882][ T4943] ? __pfx_ret_from_fork+0x10/0x10 [ 105.134980][ T4943] ? __switch_to+0xc89/0x1420 [ 105.139653][ T4943] ? __pfx_kthread+0x10/0x10 [ 105.144240][ T4943] ret_from_fork_asm+0x1a/0x30 [ 105.148999][ T4943] [ 105.152008][ T4943] Modules linked in: [ 105.156287][ T4943] ---[ end trace 0000000000000000 ]--- [ 105.161974][ T4943] RIP: 0010:klist_remove+0x156/0x340 [ 105.167318][ T4943] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 1d 54 84 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 fe 53 84 f6 49 8b 44 24 58 48 89 44 24 08 [ 105.187439][ T4943] RSP: 0018:ffffc900103c7700 EFLAGS: 00010202 [ 105.193856][ T4943] RAX: 000000000000000b RBX: ffff888034813e00 RCX: 0000000000000000 [ 105.201896][ T4943] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 105.209893][ T4943] RBP: ffffc900103c77e8 R08: ffffffff90199be3 R09: 1ffffffff203337c [ 105.217884][ T4943] R10: dffffc0000000000 R11: fffffbfff203337d R12: 0000000000000000 [ 105.225859][ T4943] R13: 1ffff1100feb108c R14: ffff88807f588460 R15: dffffc0000000000 [ 105.233882][ T4943] FS: 0000000000000000(0000) GS:ffff888125306000(0000) knlGS:0000000000000000 [ 105.243213][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.249867][ T4943] CR2: 00007fab44d46ff8 CR3: 000000007fffc000 CR4: 00000000003526f0 [ 105.257872][ T4943] Kernel panic - not syncing: Fatal exception [ 105.264730][ T4943] Kernel Offset: disabled [ 105.269116][ T4943] Rebooting in 86400 seconds..