Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [+] Starting iteration 1 [+] open /dev/vhci successful. [+] pthread_create reader_th successful. [+] write create_pkt successful. [+] Got hci_id: 0 [+] HCIDEVUP successful. [ 109.824132][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 252 > 1 [ 109.837069][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 252 > 4 [ 109.845271][ T4943] Bluetooth: hci0: unexpected cc 0x0c14 length: 252 > 249 [ 109.855250][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 252 > 2 [+] fcntl O_NONBLOCK successful. [+] connect L2CAP initiated. [+] write conn_pkt successful. [+] socket BTPROTO_RFCOMM successful. [+] RFCOMMCREATEDEV successful, dev_id=0. [+] pthread_create thread_release successful. [+] pthread_create thread_disconnect successful. [ 110.094123][ T4943] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 110.106600][ T4943] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 110.115225][ T4943] CPU: 1 UID: 0 PID: 4943 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 110.124856][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.135196][ T4943] Workqueue: hci0 hci_rx_work [ 110.139994][ T4943] RIP: 0010:klist_remove+0x156/0x340 [ 110.145312][ T4943] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 8d 64 84 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6e 64 84 f6 49 8b 44 24 58 48 89 44 24 08 [ 110.165189][ T4943] RSP: 0018:ffffc9000fc87700 EFLAGS: 00010202 [ 110.171254][ T4943] RAX: 000000000000000b RBX: ffff888035a90000 RCX: 0000000000000000 [ 110.179212][ T4943] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 110.187374][ T4943] RBP: ffffc9000fc877e8 R08: ffffffff90199ae3 R09: 1ffffffff203335c [ 110.195359][ T4943] R10: dffffc0000000000 R11: fffffbfff203335d R12: 0000000000000000 [ 110.203457][ T4943] R13: 1ffff1100e64e20c R14: ffff888073271060 R15: dffffc0000000000 [ 110.211425][ T4943] FS: 0000000000000000(0000) GS:ffff888125306000(0000) knlGS:0000000000000000 [ 110.220341][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.227138][ T4943] CR2: 00007f4691400c30 CR3: 00000000750f0000 CR4: 00000000003526f0 [ 110.235133][ T4943] Call Trace: [ 110.238410][ T4943] [ 110.241419][ T4943] ? __pfx_klist_remove+0x10/0x10 [ 110.246474][ T4943] ? kobject_move+0x5e2/0x720 [ 110.251138][ T4943] ? __pfx_kobject_move+0x10/0x10 [ 110.256180][ T4943] ? get_device_parent+0x366/0x3a0 [ 110.261478][ T4943] device_move+0x18e/0x720 [ 110.265945][ T4943] hci_conn_del_sysfs+0xb8/0x1a0 [ 110.271151][ T4943] hci_conn_del+0xc3d/0x1200 [ 110.275763][ T4943] hci_disconn_complete_evt+0x5ac/0x890 [ 110.281308][ T4943] hci_event_packet+0x6cd/0xf10 [ 110.286165][ T4943] ? __pfx_hci_disconn_complete_evt+0x10/0x10 [ 110.292406][ T4943] ? __pfx_hci_event_packet+0x10/0x10 [ 110.297984][ T4943] ? alloc_tree+0x100/0x2b0 [ 110.302488][ T4943] ? hci_send_to_monitor+0xe2/0x590 [ 110.307792][ T4943] hci_rx_work+0x3ee/0x1020 [ 110.312298][ T4943] ? process_scheduled_works+0xa20/0x14e0 [ 110.318100][ T4943] process_scheduled_works+0xa8e/0x14e0 [ 110.323659][ T4943] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.329762][ T4943] ? assign_work+0x3cf/0x5d0 [ 110.334476][ T4943] worker_thread+0xa47/0xfb0 [ 110.339102][ T4943] ? __kthread_parkme+0x71/0x1f0 [ 110.344038][ T4943] kthread+0x388/0x470 [ 110.348362][ T4943] ? __pfx_worker_thread+0x10/0x10 [ 110.353553][ T4943] ? __pfx_kthread+0x10/0x10 [ 110.358219][ T4943] ret_from_fork+0x514/0xb70 [ 110.362825][ T4943] ? __pfx_ret_from_fork+0x10/0x10 [ 110.367925][ T4943] ? __switch_to+0xc89/0x1420 [ 110.372680][ T4943] ? __pfx_kthread+0x10/0x10 [ 110.377258][ T4943] ret_from_fork_asm+0x1a/0x30 [ 110.382017][ T4943] [ 110.385210][ T4943] Modules linked in: [ 110.389347][ T4943] ---[ end trace 0000000000000000 ]--- [ 110.397012][ T4943] RIP: 0010:klist_remove+0x156/0x340 [ 110.402604][ T4943] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 8d 64 84 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6e 64 84 f6 49 8b 44 24 58 48 89 44 24 08 [ 110.423434][ T4943] RSP: 0018:ffffc9000fc87700 EFLAGS: 00010202 [ 110.429662][ T4943] RAX: 000000000000000b RBX: ffff888035a90000 RCX: 0000000000000000 [ 110.438213][ T4943] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 110.446399][ T4943] RBP: ffffc9000fc877e8 R08: ffffffff90199ae3 R09: 1ffffffff203335c [ 110.454595][ T4943] R10: dffffc0000000000 R11: fffffbfff203335d R12: 0000000000000000 [ 110.462722][ T4943] R13: 1ffff1100e64e20c R14: ffff888073271060 R15: dffffc0000000000 [ 110.470762][ T4943] FS: 0000000000000000(0000) GS:ffff888125306000(0000) knlGS:0000000000000000 [ 110.479707][ T4943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.486396][ T4943] CR2: 00007f4691400c30 CR3: 000000007e68e000 CR4: 00000000003526f0 [ 110.494477][ T4943] Kernel panic - not syncing: Fatal exception [ 110.500993][ T4943] Kernel Offset: disabled [ 110.505313][ T4943] Rebooting in 86400 seconds..