Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts.
[ 132.200604][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.207241][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
2026/03/18 14:24:04 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 141.433086][ T6134] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 144.872804][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 144.888860][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 144.901326][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 144.910227][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 144.918571][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 145.875259][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.883114][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 145.941212][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.949725][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 147.400736][ T6200] chnl_net:caif_netlink_parms(): no params data found
[ 147.493488][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.500854][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.508172][ T6200] bridge_slave_0: entered allmulticast mode
[ 147.515841][ T6200] bridge_slave_0: entered promiscuous mode
[ 147.524297][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.531546][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.538773][ T6200] bridge_slave_1: entered allmulticast mode
[ 147.546524][ T6200] bridge_slave_1: entered promiscuous mode
[ 147.583579][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 147.596027][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 147.632898][ T6200] team0: Port device team_slave_0 added
[ 147.641801][ T6200] team0: Port device team_slave_1 added
[ 147.673758][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 147.680829][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 147.708127][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 147.720575][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 147.727597][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 147.753662][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 147.807041][ T6200] hsr_slave_0: entered promiscuous mode
[ 147.813488][ T6200] hsr_slave_1: entered promiscuous mode
[ 148.376553][ T6200] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 148.388430][ T6200] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 148.402469][ T6200] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 148.414736][ T6200] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 148.593302][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0
[ 148.659082][ T6200] 8021q: adding VLAN 0 to HW filter on device team0
[ 148.687281][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[ 148.694442][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 148.731345][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[ 148.738540][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 149.146182][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 149.199870][ T6200] veth0_vlan: entered promiscuous mode
[ 149.222504][ T6200] veth1_vlan: entered promiscuous mode
[ 149.264820][ T6200] veth0_macvtap: entered promiscuous mode
[ 149.276463][ T6200] veth1_macvtap: entered promiscuous mode
[ 149.301954][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 149.321657][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 149.342967][ T1137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.362785][ T1137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.393818][ T1137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.419426][ T1137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.623561][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 149.751303][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 149.851393][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 149.934391][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/03/18 14:24:21 executed programs: 0
[ 151.283027][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 151.291618][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 151.300059][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 151.315787][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 151.328713][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 151.704832][ T50] bridge_slave_1: left allmulticast mode
[ 151.710823][ T50] bridge_slave_1: left promiscuous mode
[ 151.716746][ T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.728518][ T50] bridge_slave_0: left allmulticast mode
[ 151.734213][ T50] bridge_slave_0: left promiscuous mode
[ 151.740666][ T50] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.968831][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 151.980704][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 151.991657][ T50] bond0 (unregistering): Released all slaves
[ 152.010531][ T6295] chnl_net:caif_netlink_parms(): no params data found
[ 152.129742][ T50] hsr_slave_0: left promiscuous mode
[ 152.136933][ T50] hsr_slave_1: left promiscuous mode
[ 152.143004][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 152.151514][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 152.159774][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 152.167404][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 152.181042][ T50] veth1_macvtap: left promiscuous mode
[ 152.188955][ T50] veth0_macvtap: left promiscuous mode
[ 152.194519][ T50] veth1_vlan: left promiscuous mode
[ 152.200487][ T50] veth0_vlan: left promiscuous mode
[ 152.499481][ T50] team0 (unregistering): Port device team_slave_1 removed
[ 152.532348][ T50] team0 (unregistering): Port device team_slave_0 removed
[ 152.730173][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.737436][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 152.744620][ T6295] bridge_slave_0: entered allmulticast mode
[ 152.752361][ T6295] bridge_slave_0: entered promiscuous mode
[ 152.762682][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.775190][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 152.782504][ T6295] bridge_slave_1: entered allmulticast mode
[ 152.792496][ T6295] bridge_slave_1: entered promiscuous mode
[ 152.867093][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 152.893330][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 152.968928][ T6295] team0: Port device team_slave_0 added
[ 152.989148][ T6295] team0: Port device team_slave_1 added
[ 153.032626][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 153.040155][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 153.066457][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 153.080322][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 153.087448][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 153.114387][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 153.322334][ T6295] hsr_slave_0: entered promiscuous mode
[ 153.329737][ T6295] hsr_slave_1: entered promiscuous mode
[ 153.395026][ T5139] Bluetooth: hci0: command tx timeout
[ 153.929494][ T6295] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 153.941456][ T6295] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 153.952605][ T6295] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 153.964402][ T6295] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 154.081128][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0
[ 154.110333][ T6295] 8021q: adding VLAN 0 to HW filter on device team0
[ 154.131479][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.138678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.149338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.156494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.474770][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 154.548567][ T6295] veth0_vlan: entered promiscuous mode
[ 154.562923][ T6295] veth1_vlan: entered promiscuous mode
[ 154.606746][ T6295] veth0_macvtap: entered promiscuous mode
[ 154.619971][ T6295] veth1_macvtap: entered promiscuous mode
[ 154.646630][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 154.667055][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 154.688651][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.706534][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.716321][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.743853][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.810417][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 154.830997][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 154.869120][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 154.878295][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 155.475325][ T5850] Bluetooth: hci0: command tx timeout
2026/03/18 14:24:26 executed programs: 28
[ 156.995195][ T5139] ==================================================================
[ 157.003302][ T5139] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x56/0x380
[ 157.011863][ T5139] Write of size 4 at addr ffff888079e1c010 by task kworker/u9:1/5139
[ 157.020112][ T5139]
[ 157.022436][ T5139] CPU: 0 UID: 0 PID: 5139 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full)
[ 157.022480][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 157.022504][ T5139] Workqueue: hci0 hci_cmd_sync_work
[ 157.022562][ T5139] Call Trace:
[ 157.022574][ T5139]
[ 157.022586][ T5139] dump_stack_lvl+0x100/0x190
[ 157.022641][ T5139] print_report+0x156/0x4c9
[ 157.022693][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.022738][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.022782][ T5139] ? __phys_addr+0xe8/0x180
[ 157.022834][ T5139] ? le_read_features_complete+0x56/0x380
[ 157.022891][ T5139] kasan_report+0xdf/0x1e0
[ 157.022942][ T5139] ? le_read_features_complete+0x56/0x380
[ 157.023005][ T5139] kasan_check_range+0x10f/0x1e0
[ 157.023062][ T5139] le_read_features_complete+0x56/0x380
[ 157.023121][ T5139] hci_cmd_sync_work+0x214/0x470
[ 157.023177][ T5139] ? __pfx_le_read_features_complete+0x10/0x10
[ 157.023247][ T5139] process_one_work+0xa23/0x19a0
[ 157.023291][ T5139] ? __pfx_process_one_work+0x10/0x10
[ 157.023324][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.023376][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.023424][ T5139] worker_thread+0x5ef/0xe50
[ 157.023464][ T5139] ? __pfx_worker_thread+0x10/0x10
[ 157.023498][ T5139] ? kthread+0x13a/0x450
[ 157.023552][ T5139] ? __pfx_worker_thread+0x10/0x10
[ 157.023585][ T5139] kthread+0x370/0x450
[ 157.023639][ T5139] ? __pfx_kthread+0x10/0x10
[ 157.023696][ T5139] ret_from_fork+0x754/0xd80
[ 157.023755][ T5139] ? __pfx_ret_from_fork+0x10/0x10
[ 157.023814][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.023858][ T5139] ? __switch_to+0x7b4/0x1120
[ 157.023899][ T5139] ? __pfx_kthread+0x10/0x10
[ 157.023956][ T5139] ret_from_fork_asm+0x1a/0x30
[ 157.024006][ T5139]
[ 157.024018][ T5139]
[ 157.201089][ T5139] Allocated by task 5139:
[ 157.205414][ T5139] kasan_save_stack+0x30/0x50
[ 157.210105][ T5139] kasan_save_track+0x14/0x30
[ 157.214794][ T5139] __kasan_kmalloc+0xaa/0xb0
[ 157.219397][ T5139] __hci_conn_add+0x1f4/0x1da0
[ 157.224265][ T5139] hci_conn_add_unset+0x76/0x120
[ 157.229222][ T5139] le_conn_complete_evt+0x633/0x1f40
[ 157.234529][ T5139] hci_le_enh_conn_complete_evt+0x23d/0x3b0
[ 157.240432][ T5139] hci_le_meta_evt+0x34a/0x5f0
[ 157.245219][ T5139] hci_event_packet+0x682/0x11c0
[ 157.250163][ T5139] hci_rx_work+0x451/0xfc0
[ 157.254592][ T5139] process_one_work+0xa23/0x19a0
[ 157.259533][ T5139] worker_thread+0x5ef/0xe50
[ 157.264125][ T5139] kthread+0x370/0x450
[ 157.268220][ T5139] ret_from_fork+0x754/0xd80
[ 157.272838][ T5139] ret_from_fork_asm+0x1a/0x30
[ 157.277604][ T5139]
[ 157.279918][ T5139] Freed by task 5850:
[ 157.283887][ T5139] kasan_save_stack+0x30/0x50
[ 157.288572][ T5139] kasan_save_track+0x14/0x30
[ 157.293257][ T5139] kasan_save_free_info+0x3b/0x70
[ 157.298306][ T5139] __kasan_slab_free+0x5f/0x80
[ 157.303087][ T5139] kfree+0x1f6/0x6b0
[ 157.306988][ T5139] device_release+0xa4/0x240
[ 157.311592][ T5139] kobject_put+0x1f7/0x640
[ 157.316045][ T5139] device_unregister+0x2f/0xe0
[ 157.320830][ T5139] hci_conn_del_sysfs+0xb9/0x1a0
[ 157.325779][ T5139] hci_conn_del+0x506/0x1180
[ 157.330383][ T5139] hci_disconn_complete_evt+0x410/0xa20
[ 157.336037][ T5139] hci_event_packet+0xa86/0x11c0
[ 157.341002][ T5139] hci_rx_work+0x451/0xfc0
[ 157.345425][ T5139] process_one_work+0xa23/0x19a0
[ 157.350361][ T5139] worker_thread+0x5ef/0xe50
[ 157.354946][ T5139] kthread+0x370/0x450
[ 157.359038][ T5139] ret_from_fork+0x754/0xd80
[ 157.363647][ T5139] ret_from_fork_asm+0x1a/0x30
[ 157.368423][ T5139]
[ 157.370738][ T5139] The buggy address belongs to the object at ffff888079e1c000
[ 157.370738][ T5139] which belongs to the cache kmalloc-8k of size 8192
[ 157.384785][ T5139] The buggy address is located 16 bytes inside of
[ 157.384785][ T5139] freed 8192-byte region [ffff888079e1c000, ffff888079e1e000)
[ 157.398673][ T5139]
[ 157.401006][ T5139] The buggy address belongs to the physical page:
[ 157.407403][ T5139] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79e18
[ 157.416248][ T5139] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 157.424740][ T5139] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 157.432278][ T5139] page_type: f5(slab)
[ 157.436255][ T5139] raw: 00fff00000000040 ffff88813fe3a280 dead000000000122 0000000000000000
[ 157.444837][ T5139] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 157.453417][ T5139] head: 00fff00000000040 ffff88813fe3a280 dead000000000122 0000000000000000
[ 157.462087][ T5139] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[ 157.470844][ T5139] head: 00fff00000000003 ffffea0001e78601 00000000ffffffff 00000000ffffffff
[ 157.479523][ T5139] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 157.488188][ T5139] page dumped because: kasan: bad access detected
[ 157.494598][ T5139] page_owner tracks the page as allocated
[ 157.500301][ T5139] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5139, tgid 5139 (kworker/u9:1), ts 154965701854, free_ts 154936229254
[ 157.521860][ T5139] post_alloc_hook+0x153/0x170
[ 157.526629][ T5139] get_page_from_freelist+0x111d/0x3140
[ 157.532179][ T5139] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 157.538085][ T5139] new_slab+0xa6/0x6b0
[ 157.542199][ T5139] refill_objects+0x26b/0x400
[ 157.546887][ T5139] __pcs_replace_empty_main+0x1ab/0x660
[ 157.552434][ T5139] __kmalloc_cache_noprof+0x493/0x6f0
[ 157.557917][ T5139] __hci_conn_add+0x1f4/0x1da0
[ 157.562695][ T5139] hci_conn_add_unset+0x76/0x120
[ 157.567648][ T5139] le_conn_complete_evt+0x633/0x1f40
[ 157.573052][ T5139] hci_le_enh_conn_complete_evt+0x23d/0x3b0
[ 157.578961][ T5139] hci_le_meta_evt+0x34a/0x5f0
[ 157.583739][ T5139] hci_event_packet+0x682/0x11c0
[ 157.588684][ T5139] hci_rx_work+0x451/0xfc0
[ 157.593107][ T5139] process_one_work+0xa23/0x19a0
[ 157.598044][ T5139] worker_thread+0x5ef/0xe50
[ 157.602632][ T5139] page last free pid 6295 tgid 6295 stack trace:
[ 157.608946][ T5139] __free_frozen_pages+0x7e1/0x10d0
[ 157.614166][ T5139] qlist_free_all+0x47/0xe0
[ 157.618682][ T5139] kasan_quarantine_reduce+0x1a0/0x1f0
[ 157.624244][ T5139] __kasan_slab_alloc+0x69/0x90
[ 157.629103][ T5139] __kmalloc_cache_noprof+0x243/0x6f0
[ 157.634496][ T5139] alloc_fdtable+0xbd/0x2d0
[ 157.639014][ T5139] dup_fd+0x995/0xd10
[ 157.643014][ T5139] copy_process+0x268f/0x7a40
[ 157.647695][ T5139] kernel_clone+0xfc/0x9a0
[ 157.652206][ T5139] __do_sys_clone+0xd9/0x120
[ 157.656816][ T5139] do_syscall_64+0x106/0xf80
[ 157.661426][ T5139] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 157.667327][ T5139]
[ 157.669636][ T5139] Memory state around the buggy address:
[ 157.675252][ T5139] ffff888079e1bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 157.683313][ T5139] ffff888079e1bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 157.691371][ T5139] >ffff888079e1c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 157.699419][ T5139] ^
[ 157.703994][ T5139] ffff888079e1c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 157.712049][ T5139] ffff888079e1c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 157.720100][ T5139] ==================================================================
[ 157.736085][ T5139] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[ 157.743821][ T5139] CPU: 0 UID: 0 PID: 5139 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full)
[ 157.753295][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 157.763361][ T5139] Workqueue: hci0 hci_cmd_sync_work
[ 157.768608][ T5139] Call Trace:
[ 157.771893][ T5139]
[ 157.774822][ T5139] dump_stack_lvl+0x100/0x190
[ 157.779534][ T5139] vpanic+0x552/0x970
[ 157.783532][ T5139] ? __pfx_vpanic+0x10/0x10
[ 157.788047][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.793800][ T5139] ? __pfx___schedule+0x10/0x10
[ 157.798680][ T5139] ? le_read_features_complete+0x56/0x380
[ 157.804444][ T5139] panic+0xd1/0xe0
[ 157.808183][ T5139] ? __pfx_panic+0x10/0x10
[ 157.812620][ T5139] ? preempt_schedule_common+0x42/0xc0
[ 157.818114][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.823774][ T5139] ? preempt_schedule_thunk+0x16/0x30
[ 157.829199][ T5139] end_report.part.0+0x68/0x90
[ 157.834008][ T5139] kasan_report.cold+0xe/0x18
[ 157.838721][ T5139] ? le_read_features_complete+0x56/0x380
[ 157.844487][ T5139] kasan_check_range+0x10f/0x1e0
[ 157.849463][ T5139] le_read_features_complete+0x56/0x380
[ 157.855050][ T5139] hci_cmd_sync_work+0x214/0x470
[ 157.860023][ T5139] ? __pfx_le_read_features_complete+0x10/0x10
[ 157.866229][ T5139] process_one_work+0xa23/0x19a0
[ 157.871196][ T5139] ? __pfx_process_one_work+0x10/0x10
[ 157.876589][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.882251][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.887917][ T5139] worker_thread+0x5ef/0xe50
[ 157.892540][ T5139] ? __pfx_worker_thread+0x10/0x10
[ 157.897670][ T5139] ? kthread+0x13a/0x450
[ 157.901950][ T5139] ? __pfx_worker_thread+0x10/0x10
[ 157.907430][ T5139] kthread+0x370/0x450
[ 157.911535][ T5139] ? __pfx_kthread+0x10/0x10
[ 157.916165][ T5139] ret_from_fork+0x754/0xd80
[ 157.920800][ T5139] ? __pfx_ret_from_fork+0x10/0x10
[ 157.925950][ T5139] ? srso_alias_return_thunk+0x5/0xfbef5
[ 157.931695][ T5139] ? __switch_to+0x7b4/0x1120
[ 157.936399][ T5139] ? __pfx_kthread+0x10/0x10
[ 157.941115][ T5139] ret_from_fork_asm+0x1a/0x30
[ 157.945927][ T5139]
[ 157.949372][ T5139] Kernel Offset: disabled
[ 157.953691][ T5139] Rebooting in 86400 seconds..