Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2024/11/16 01:21:52 ignoring optional flag "sandboxArg"="0" 2024/11/16 01:21:52 ignoring optional flag "type"="gce" 2024/11/16 01:21:53 parsed 1 programs [ 97.385523][ T5696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.611733][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.620287][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.629516][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.637645][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.646642][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.654271][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.234100][ T3058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.248069][ T3058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.264559][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.273570][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.813921][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 101.859273][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.866504][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.876384][ T5766] bridge_slave_0: entered allmulticast mode [ 101.883454][ T5766] bridge_slave_0: entered promiscuous mode [ 101.891059][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.898621][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.905845][ T5766] bridge_slave_1: entered allmulticast mode [ 101.912702][ T5766] bridge_slave_1: entered promiscuous mode [ 101.936897][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.948583][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.974243][ T5766] team0: Port device team_slave_0 added [ 101.982483][ T5766] team0: Port device team_slave_1 added [ 102.000515][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.007502][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.033744][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.045668][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.052683][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.078726][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.126985][ T5766] hsr_slave_0: entered promiscuous mode [ 102.133483][ T5766] hsr_slave_1: entered promiscuous mode [ 102.589871][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.599499][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.612871][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.628824][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.704189][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.725638][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.741098][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.748292][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.779643][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.786803][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.813680][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.824898][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.998677][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.043005][ T5766] veth0_vlan: entered promiscuous mode [ 103.056667][ T5766] veth1_vlan: entered promiscuous mode [ 103.091572][ T5766] veth0_macvtap: entered promiscuous mode [ 103.103597][ T5766] veth1_macvtap: entered promiscuous mode [ 103.126772][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.142447][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.155251][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.167358][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.179921][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.188963][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/11/16 01:22:02 executed programs: 0 [ 103.339917][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.349942][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.359975][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.377431][ T3058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.390161][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.399506][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.406905][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.480619][ T3058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.519384][ T3058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.574998][ T3058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.672907][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 103.760418][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.767638][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.775497][ T5827] bridge_slave_0: entered allmulticast mode [ 103.782957][ T5827] bridge_slave_0: entered promiscuous mode [ 103.791852][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.799464][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.806671][ T5827] bridge_slave_1: entered allmulticast mode [ 103.814485][ T5827] bridge_slave_1: entered promiscuous mode [ 103.841752][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.853788][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.899203][ T5827] team0: Port device team_slave_0 added [ 103.907031][ T5827] team0: Port device team_slave_1 added [ 103.941212][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.948391][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.976377][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.991605][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.998794][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.025152][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.077009][ T5827] hsr_slave_0: entered promiscuous mode [ 104.086568][ T5827] hsr_slave_1: entered promiscuous mode [ 104.093043][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.105386][ T5827] Cannot create hsr debugfs directory [ 105.487898][ T4627] Bluetooth: hci0: command tx timeout [ 105.902193][ T3058] bridge_slave_1: left allmulticast mode [ 105.910543][ T3058] bridge_slave_1: left promiscuous mode [ 105.918680][ T3058] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.949248][ T3058] bridge_slave_0: left allmulticast mode [ 105.954956][ T3058] bridge_slave_0: left promiscuous mode [ 105.961154][ T3058] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.289748][ T3058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.301260][ T3058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.312305][ T3058] bond0 (unregistering): Released all slaves [ 106.417800][ T3058] hsr_slave_0: left promiscuous mode [ 106.430186][ T3058] hsr_slave_1: left promiscuous mode [ 106.440986][ T3058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.448715][ T3058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.457581][ T3058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.465169][ T3058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.484014][ T3058] veth1_macvtap: left promiscuous mode [ 106.489717][ T3058] veth0_macvtap: left promiscuous mode [ 106.495329][ T3058] veth1_vlan: left promiscuous mode [ 106.500943][ T3058] veth0_vlan: left promiscuous mode [ 106.840506][ T3058] team0 (unregistering): Port device team_slave_1 removed [ 106.872647][ T3058] team0 (unregistering): Port device team_slave_0 removed [ 107.403181][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.414331][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.425321][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.436404][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.541220][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.562772][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.571210][ T4627] Bluetooth: hci0: command tx timeout [ 107.584090][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.591315][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.612608][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.619891][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.800056][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.841844][ T5827] veth0_vlan: entered promiscuous mode [ 107.854083][ T5827] veth1_vlan: entered promiscuous mode [ 107.882680][ T5827] veth0_macvtap: entered promiscuous mode [ 107.892443][ T5827] veth1_macvtap: entered promiscuous mode [ 107.911183][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.924502][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.935593][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.945960][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.956438][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.965905][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.031888][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.043084][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.067315][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.076729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.240960][ T6066] Bluetooth: MGMT ver 1.23 [ 108.248127][ T6056] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 108.257392][ T4627] ================================================================== [ 108.265486][ T4627] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 108.273161][ T4627] Read of size 8 at addr ffff888031242b98 by task kworker/u9:1/4627 [ 108.281157][ T4627] [ 108.283512][ T4627] CPU: 1 UID: 0 PID: 4627 Comm: kworker/u9:1 Not tainted 6.12.0-rc7-syzkaller-dirty #0 [ 108.293161][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 108.303240][ T4627] Workqueue: hci0 hci_cmd_sync_work [ 108.308532][ T4627] Call Trace: [ 108.311834][ T4627] [ 108.315045][ T4627] dump_stack_lvl+0x241/0x360 [ 108.319754][ T4627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.324995][ T4627] ? __pfx__printk+0x10/0x10 [ 108.329579][ T4627] ? _printk+0xd5/0x120 [ 108.333718][ T4627] ? __virt_addr_valid+0x183/0x530 [ 108.338811][ T4627] ? __virt_addr_valid+0x183/0x530 [ 108.343935][ T4627] print_report+0x169/0x550 [ 108.348486][ T4627] ? __virt_addr_valid+0x183/0x530 [ 108.353639][ T4627] ? __virt_addr_valid+0x183/0x530 [ 108.358774][ T4627] ? __virt_addr_valid+0x45f/0x530 [ 108.363911][ T4627] ? __phys_addr+0xba/0x170 [ 108.368442][ T4627] ? set_powered_sync+0x3a/0xc0 [ 108.373330][ T4627] kasan_report+0x143/0x180 [ 108.377861][ T4627] ? set_powered_sync+0x3a/0xc0 [ 108.382759][ T4627] set_powered_sync+0x3a/0xc0 [ 108.387468][ T4627] ? __pfx_set_powered_sync+0x10/0x10 [ 108.392884][ T4627] hci_cmd_sync_work+0x1e3/0x380 [ 108.397851][ T4627] ? process_scheduled_works+0x976/0x1850 [ 108.403599][ T4627] process_scheduled_works+0xa63/0x1850 [ 108.409182][ T4627] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.415197][ T4627] ? assign_work+0x364/0x3d0 [ 108.419820][ T4627] worker_thread+0x870/0xd30 [ 108.424439][ T4627] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 108.430353][ T4627] ? __kthread_parkme+0x169/0x1d0 [ 108.435405][ T4627] ? __pfx_worker_thread+0x10/0x10 [ 108.440562][ T4627] kthread+0x2f0/0x390 [ 108.444656][ T4627] ? __pfx_worker_thread+0x10/0x10 [ 108.449802][ T4627] ? __pfx_kthread+0x10/0x10 [ 108.454413][ T4627] ret_from_fork+0x4b/0x80 [ 108.458863][ T4627] ? __pfx_kthread+0x10/0x10 [ 108.463483][ T4627] ret_from_fork_asm+0x1a/0x30 [ 108.468291][ T4627] [ 108.471360][ T4627] [ 108.473709][ T4627] Allocated by task 6066: [ 108.478060][ T4627] kasan_save_track+0x3f/0x80 [ 108.482762][ T4627] __kasan_kmalloc+0x98/0xb0 [ 108.487387][ T4627] __kmalloc_cache_noprof+0x19c/0x2c0 [ 108.492788][ T4627] mgmt_pending_new+0x65/0x250 [ 108.497576][ T4627] mgmt_pending_add+0x36/0x120 [ 108.502364][ T4627] set_powered+0x3cd/0x5e0 [ 108.506890][ T4627] hci_mgmt_cmd+0xc47/0x11d0 [ 108.511506][ T4627] hci_sock_sendmsg+0x7b8/0x11c0 [ 108.516565][ T4627] __sock_sendmsg+0x221/0x270 [ 108.521274][ T4627] sock_write_iter+0x2d7/0x3f0 [ 108.526067][ T4627] vfs_write+0xaeb/0xd30 [ 108.530331][ T4627] ksys_write+0x183/0x2b0 [ 108.534683][ T4627] do_syscall_64+0xf3/0x230 [ 108.539445][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.545370][ T4627] [ 108.547705][ T4627] Freed by task 6061: [ 108.551707][ T4627] kasan_save_track+0x3f/0x80 [ 108.556402][ T4627] kasan_save_free_info+0x40/0x50 [ 108.561512][ T4627] __kasan_slab_free+0x59/0x70 [ 108.566277][ T4627] kfree+0x1a0/0x440 [ 108.570170][ T4627] settings_rsp+0x2bc/0x390 [ 108.574669][ T4627] mgmt_pending_foreach+0xd1/0x130 [ 108.579950][ T4627] __mgmt_power_off+0x106/0x430 [ 108.584804][ T4627] hci_dev_close_sync+0x6c4/0x11c0 [ 108.589923][ T4627] hci_dev_close+0x112/0x210 [ 108.594514][ T4627] sock_do_ioctl+0x158/0x460 [ 108.599116][ T4627] sock_ioctl+0x626/0x8e0 [ 108.603546][ T4627] __se_sys_ioctl+0xf9/0x170 [ 108.608233][ T4627] do_syscall_64+0xf3/0x230 [ 108.612744][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.619082][ T4627] [ 108.621400][ T4627] The buggy address belongs to the object at ffff888031242b80 [ 108.621400][ T4627] which belongs to the cache kmalloc-96 of size 96 [ 108.635297][ T4627] The buggy address is located 24 bytes inside of [ 108.635297][ T4627] freed 96-byte region [ffff888031242b80, ffff888031242be0) [ 108.648918][ T4627] [ 108.651234][ T4627] The buggy address belongs to the physical page: [ 108.657747][ T4627] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31242 [ 108.666501][ T4627] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 108.673628][ T4627] page_type: f5(slab) [ 108.677620][ T4627] raw: 00fff00000000000 ffff88801ac41280 ffffea0000a16dc0 dead000000000004 [ 108.686549][ T4627] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 108.695132][ T4627] page dumped because: kasan: bad access detected [ 108.701552][ T4627] page_owner tracks the page as allocated [ 108.707344][ T4627] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 4690, tgid 4690 (udevd), ts 66568318764, free_ts 63546710221 [ 108.726264][ T4627] post_alloc_hook+0x1f3/0x230 [ 108.731046][ T4627] get_page_from_freelist+0x3649/0x3790 [ 108.736615][ T4627] __alloc_pages_noprof+0x292/0x710 [ 108.741907][ T4627] alloc_slab_page+0x59/0x140 [ 108.746591][ T4627] allocate_slab+0x5a/0x2f0 [ 108.751263][ T4627] ___slab_alloc+0xcd1/0x14b0 [ 108.755940][ T4627] __slab_alloc+0x58/0xa0 [ 108.760278][ T4627] __kmalloc_node_noprof+0x286/0x440 [ 108.765558][ T4627] allocate_slab+0xb6/0x2f0 [ 108.770051][ T4627] ___slab_alloc+0xcd1/0x14b0 [ 108.774723][ T4627] __slab_alloc+0x58/0xa0 [ 108.779050][ T4627] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 108.784853][ T4627] alloc_inode+0x87/0x1a0 [ 108.789174][ T4627] iget_locked+0xf1/0x5a0 [ 108.793499][ T4627] kernfs_get_inode+0x51/0x7b0 [ 108.798257][ T4627] kernfs_iop_lookup+0x266/0x390 [ 108.803184][ T4627] page last free pid 5303 tgid 5303 stack trace: [ 108.809669][ T4627] free_unref_page+0xcfb/0xf20 [ 108.814466][ T4627] vfree+0x186/0x2e0 [ 108.818361][ T4627] kcov_close+0x28/0x50 [ 108.822509][ T4627] __fput+0x23f/0x880 [ 108.826482][ T4627] task_work_run+0x24f/0x310 [ 108.831151][ T4627] do_exit+0xa2f/0x28e0 [ 108.835295][ T4627] do_group_exit+0x207/0x2c0 [ 108.839873][ T4627] get_signal+0x16a3/0x1740 [ 108.844374][ T4627] arch_do_signal_or_restart+0x96/0x860 [ 108.849985][ T4627] syscall_exit_to_user_mode+0xc9/0x370 [ 108.855528][ T4627] do_syscall_64+0x100/0x230 [ 108.860114][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.866001][ T4627] [ 108.868313][ T4627] Memory state around the buggy address: [ 108.873927][ T4627] ffff888031242a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.881972][ T4627] ffff888031242b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.890022][ T4627] >ffff888031242b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 108.898074][ T4627] ^ [ 108.902914][ T4627] ffff888031242c00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 108.910961][ T4627] ffff888031242c80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 108.919004][ T4627] ================================================================== [ 108.932257][ T4627] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.939515][ T4627] CPU: 1 UID: 0 PID: 4627 Comm: kworker/u9:1 Not tainted 6.12.0-rc7-syzkaller-dirty #0 [ 108.949272][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 108.959338][ T4627] Workqueue: hci0 hci_cmd_sync_work [ 108.964545][ T4627] Call Trace: [ 108.967812][ T4627] [ 108.970733][ T4627] dump_stack_lvl+0x241/0x360 [ 108.975406][ T4627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.980603][ T4627] ? __pfx__printk+0x10/0x10 [ 108.985201][ T4627] ? preempt_schedule+0xe1/0xf0 [ 108.990052][ T4627] ? vscnprintf+0x5d/0x90 [ 108.994373][ T4627] panic+0x349/0x880 [ 108.998259][ T4627] ? check_panic_on_warn+0x21/0xb0 [ 109.003378][ T4627] ? __pfx_panic+0x10/0x10 [ 109.007899][ T4627] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 109.013875][ T4627] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.020194][ T4627] ? print_report+0x502/0x550 [ 109.024884][ T4627] check_panic_on_warn+0x86/0xb0 [ 109.029816][ T4627] ? set_powered_sync+0x3a/0xc0 [ 109.034669][ T4627] end_report+0x77/0x160 [ 109.038910][ T4627] kasan_report+0x154/0x180 [ 109.043494][ T4627] ? set_powered_sync+0x3a/0xc0 [ 109.048341][ T4627] set_powered_sync+0x3a/0xc0 [ 109.053123][ T4627] ? __pfx_set_powered_sync+0x10/0x10 [ 109.058493][ T4627] hci_cmd_sync_work+0x1e3/0x380 [ 109.063436][ T4627] ? process_scheduled_works+0x976/0x1850 [ 109.069152][ T4627] process_scheduled_works+0xa63/0x1850 [ 109.074698][ T4627] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.080673][ T4627] ? assign_work+0x364/0x3d0 [ 109.085278][ T4627] worker_thread+0x870/0xd30 [ 109.089863][ T4627] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 109.095750][ T4627] ? __kthread_parkme+0x169/0x1d0 [ 109.100946][ T4627] ? __pfx_worker_thread+0x10/0x10 [ 109.106138][ T4627] kthread+0x2f0/0x390 [ 109.110196][ T4627] ? __pfx_worker_thread+0x10/0x10 [ 109.115316][ T4627] ? __pfx_kthread+0x10/0x10 [ 109.119901][ T4627] ret_from_fork+0x4b/0x80 [ 109.124313][ T4627] ? __pfx_kthread+0x10/0x10 [ 109.128894][ T4627] ret_from_fork_asm+0x1a/0x30 [ 109.133694][ T4627] [ 109.137008][ T4627] Kernel Offset: disabled [ 109.141494][ T4627] Rebooting in 86400 seconds..