Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. 2024/11/15 23:30:41 ignoring optional flag "sandboxArg"="0" 2024/11/15 23:30:41 ignoring optional flag "type"="gce" 2024/11/15 23:30:42 parsed 1 programs [ 97.938527][ T5693] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.938070][ T5286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.947536][ T5286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.957333][ T5286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.966414][ T5286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.974183][ T5286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.982269][ T5286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.449877][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.457884][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.486871][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.494793][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.315226][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 102.364299][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.371664][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.378885][ T5759] bridge_slave_0: entered allmulticast mode [ 102.385930][ T5759] bridge_slave_0: entered promiscuous mode [ 102.394079][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.401333][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.408487][ T5759] bridge_slave_1: entered allmulticast mode [ 102.415561][ T5759] bridge_slave_1: entered promiscuous mode [ 102.437105][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.450768][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.494193][ T5759] team0: Port device team_slave_0 added [ 102.502737][ T5759] team0: Port device team_slave_1 added [ 102.526290][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.533721][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.560562][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.574109][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.582533][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.609957][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.642491][ T5759] hsr_slave_0: entered promiscuous mode [ 102.648761][ T5759] hsr_slave_1: entered promiscuous mode [ 103.148975][ T5759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.161840][ T5759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.173689][ T5759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.183445][ T5759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.258494][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.276502][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.294271][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.301463][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.313930][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.321105][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.513813][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.567937][ T5759] veth0_vlan: entered promiscuous mode [ 103.582207][ T5759] veth1_vlan: entered promiscuous mode [ 103.615854][ T5759] veth0_macvtap: entered promiscuous mode [ 103.627661][ T5759] veth1_macvtap: entered promiscuous mode [ 103.648634][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.671910][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.684839][ T5759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.694541][ T5759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.704170][ T5759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717113][ T5759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.844212][ T1069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.905977][ T1069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.996054][ T1069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.089031][ T1069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/11/15 23:30:52 executed programs: 0 [ 104.468961][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.480633][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.489218][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.497181][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.505439][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.514358][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.694500][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 104.790452][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.798385][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.809026][ T5844] bridge_slave_0: entered allmulticast mode [ 104.818205][ T5844] bridge_slave_0: entered promiscuous mode [ 104.830770][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.838026][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.848040][ T5844] bridge_slave_1: entered allmulticast mode [ 104.855621][ T5844] bridge_slave_1: entered promiscuous mode [ 104.892381][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.906564][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.946786][ T5844] team0: Port device team_slave_0 added [ 104.957788][ T5844] team0: Port device team_slave_1 added [ 104.985957][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.995458][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.024958][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.047939][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.055010][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.084082][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.137486][ T5844] hsr_slave_0: entered promiscuous mode [ 105.147227][ T5844] hsr_slave_1: entered promiscuous mode [ 105.154881][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.165352][ T5844] Cannot create hsr debugfs directory [ 106.599731][ T54] Bluetooth: hci0: command tx timeout [ 107.018486][ T1069] bridge_slave_1: left allmulticast mode [ 107.027056][ T1069] bridge_slave_1: left promiscuous mode [ 107.037882][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.048396][ T1069] bridge_slave_0: left allmulticast mode [ 107.054481][ T1069] bridge_slave_0: left promiscuous mode [ 107.061414][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.360364][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.372219][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.382091][ T1069] bond0 (unregistering): Released all slaves [ 107.455343][ T1069] hsr_slave_0: left promiscuous mode [ 107.467528][ T1069] hsr_slave_1: left promiscuous mode [ 107.474893][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.485209][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.494746][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.504870][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.525621][ T1069] veth1_macvtap: left promiscuous mode [ 107.531339][ T1069] veth0_macvtap: left promiscuous mode [ 107.536965][ T1069] veth1_vlan: left promiscuous mode [ 107.545258][ T1069] veth0_vlan: left promiscuous mode [ 107.975973][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 108.018692][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 108.604934][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.617742][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.641111][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.655785][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.679585][ T54] Bluetooth: hci0: command tx timeout [ 108.754833][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.776061][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.788981][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.796215][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.815414][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.822616][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.158096][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.201948][ T5844] veth0_vlan: entered promiscuous mode [ 109.216602][ T5844] veth1_vlan: entered promiscuous mode [ 109.251310][ T5844] veth0_macvtap: entered promiscuous mode [ 109.261565][ T5844] veth1_macvtap: entered promiscuous mode [ 109.280582][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.301822][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.321119][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.333845][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.344191][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.353479][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.420559][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.428407][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/11/15 23:30:57 executed programs: 2 [ 109.468652][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.478713][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.635466][ T6105] Bluetooth: MGMT ver 1.23 [ 109.651837][ T6097] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 109.664100][ T54] ================================================================== [ 109.672304][ T54] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 109.680421][ T54] Read of size 8 at addr ffff8880791bd518 by task kworker/u9:0/54 [ 109.688253][ T54] [ 109.690598][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc7-syzkaller-01627-g6bbdb903db08 #0 [ 109.701274][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.711337][ T54] Workqueue: hci0 hci_cmd_sync_work [ 109.716557][ T54] Call Trace: [ 109.719830][ T54] [ 109.722844][ T54] dump_stack_lvl+0x241/0x360 [ 109.727519][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.732730][ T54] ? __pfx__printk+0x10/0x10 [ 109.737379][ T54] ? _printk+0xd5/0x120 [ 109.741594][ T54] ? __virt_addr_valid+0x183/0x530 [ 109.746739][ T54] ? __virt_addr_valid+0x183/0x530 [ 109.751871][ T54] print_report+0x169/0x550 [ 109.756410][ T54] ? __virt_addr_valid+0x183/0x530 [ 109.761548][ T54] ? __virt_addr_valid+0x183/0x530 [ 109.766696][ T54] ? __virt_addr_valid+0x45f/0x530 [ 109.771814][ T54] ? __phys_addr+0xba/0x170 [ 109.776327][ T54] ? set_powered_sync+0x3a/0xc0 [ 109.781300][ T54] kasan_report+0x143/0x180 [ 109.785888][ T54] ? set_powered_sync+0x3a/0xc0 [ 109.790832][ T54] set_powered_sync+0x3a/0xc0 [ 109.795514][ T54] ? __pfx_set_powered_sync+0x10/0x10 [ 109.800888][ T54] hci_cmd_sync_work+0x22b/0x400 [ 109.805851][ T54] ? process_scheduled_works+0x976/0x1850 [ 109.811573][ T54] process_scheduled_works+0xa63/0x1850 [ 109.817389][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.823461][ T54] ? assign_work+0x364/0x3d0 [ 109.828195][ T54] worker_thread+0x870/0xd30 [ 109.832799][ T54] ? __kthread_parkme+0x169/0x1d0 [ 109.837824][ T54] ? __pfx_worker_thread+0x10/0x10 [ 109.843033][ T54] kthread+0x2f0/0x390 [ 109.847103][ T54] ? __pfx_worker_thread+0x10/0x10 [ 109.852241][ T54] ? __pfx_kthread+0x10/0x10 [ 109.856868][ T54] ret_from_fork+0x4b/0x80 [ 109.861382][ T54] ? __pfx_kthread+0x10/0x10 [ 109.865968][ T54] ret_from_fork_asm+0x1a/0x30 [ 109.870736][ T54] [ 109.873754][ T54] [ 109.876068][ T54] Allocated by task 6105: [ 109.880380][ T54] kasan_save_track+0x3f/0x80 [ 109.885069][ T54] __kasan_kmalloc+0x98/0xb0 [ 109.890084][ T54] __kmalloc_cache_noprof+0x19c/0x2c0 [ 109.895464][ T54] mgmt_pending_new+0x65/0x250 [ 109.900250][ T54] mgmt_pending_add+0x36/0x120 [ 109.905031][ T54] set_powered+0x3cd/0x5e0 [ 109.909469][ T54] hci_mgmt_cmd+0xc47/0x11d0 [ 109.914425][ T54] hci_sock_sendmsg+0x7b8/0x11c0 [ 109.919382][ T54] __sock_sendmsg+0x221/0x270 [ 109.924066][ T54] sock_write_iter+0x2d7/0x3f0 [ 109.928927][ T54] vfs_write+0xaeb/0xd30 [ 109.933173][ T54] ksys_write+0x183/0x2b0 [ 109.937493][ T54] do_syscall_64+0xf3/0x230 [ 109.942016][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.947907][ T54] [ 109.950222][ T54] Freed by task 6099: [ 109.954212][ T54] kasan_save_track+0x3f/0x80 [ 109.958916][ T54] kasan_save_free_info+0x40/0x50 [ 109.964092][ T54] __kasan_slab_free+0x59/0x70 [ 109.968859][ T54] kfree+0x1a0/0x440 [ 109.972758][ T54] settings_rsp+0x2bc/0x390 [ 109.977371][ T54] mgmt_pending_foreach+0xd1/0x130 [ 109.982494][ T54] __mgmt_power_off+0x106/0x430 [ 109.987345][ T54] hci_dev_close_sync+0x6c4/0x11c0 [ 109.992475][ T54] hci_dev_close+0x112/0x210 [ 109.997058][ T54] sock_do_ioctl+0x158/0x460 [ 110.001667][ T54] sock_ioctl+0x626/0x8e0 [ 110.006016][ T54] __se_sys_ioctl+0xf9/0x170 [ 110.010687][ T54] do_syscall_64+0xf3/0x230 [ 110.015186][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.021079][ T54] [ 110.023416][ T54] The buggy address belongs to the object at ffff8880791bd500 [ 110.023416][ T54] which belongs to the cache kmalloc-96 of size 96 [ 110.037641][ T54] The buggy address is located 24 bytes inside of [ 110.037641][ T54] freed 96-byte region [ffff8880791bd500, ffff8880791bd560) [ 110.051260][ T54] [ 110.053578][ T54] The buggy address belongs to the physical page: [ 110.059987][ T54] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x791bd [ 110.068750][ T54] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 110.076215][ T54] page_type: f5(slab) [ 110.080207][ T54] raw: 00fff00000000000 ffff88801ac41280 ffffea0001eb13c0 dead000000000003 [ 110.088892][ T54] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 110.097484][ T54] page dumped because: kasan: bad access detected [ 110.103899][ T54] page_owner tracks the page as allocated [ 110.109606][ T54] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5386, tgid 5386 (kworker/0:5), ts 68941935893, free_ts 68939759623 [ 110.128969][ T54] post_alloc_hook+0x1f3/0x230 [ 110.133738][ T54] get_page_from_freelist+0x3649/0x3790 [ 110.139283][ T54] __alloc_pages_noprof+0x292/0x710 [ 110.144563][ T54] alloc_pages_mpol_noprof+0x3e8/0x680 [ 110.150016][ T54] alloc_slab_page+0x6a/0x140 [ 110.154690][ T54] allocate_slab+0x5a/0x2f0 [ 110.159359][ T54] ___slab_alloc+0xcd1/0x14b0 [ 110.164051][ T54] __slab_alloc+0x58/0xa0 [ 110.168377][ T54] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 110.173748][ T54] dst_cow_metrics_generic+0x56/0x1c0 [ 110.179131][ T54] icmp6_dst_alloc+0x270/0x420 [ 110.183889][ T54] mld_sendpack+0x6a3/0xdb0 [ 110.188390][ T54] mld_ifc_work+0x7d9/0xd90 [ 110.192976][ T54] process_scheduled_works+0xa63/0x1850 [ 110.198518][ T54] worker_thread+0x870/0xd30 [ 110.203194][ T54] kthread+0x2f0/0x390 [ 110.207262][ T54] page last free pid 5386 tgid 5386 stack trace: [ 110.213595][ T54] free_unref_page+0xdf9/0x1140 [ 110.218547][ T54] rcu_core+0xaaa/0x17a0 [ 110.223049][ T54] handle_softirqs+0x2c5/0x980 [ 110.227819][ T54] do_softirq+0x11b/0x1e0 [ 110.232232][ T54] __local_bh_enable_ip+0x1bb/0x200 [ 110.237448][ T54] ipv6_get_lladdr+0x295/0x3d0 [ 110.242213][ T54] mld_newpack+0x337/0xaf0 [ 110.246644][ T54] add_grec+0x1492/0x19a0 [ 110.250969][ T54] mld_ifc_work+0x691/0xd90 [ 110.255476][ T54] process_scheduled_works+0xa63/0x1850 [ 110.261284][ T54] worker_thread+0x870/0xd30 [ 110.265916][ T54] kthread+0x2f0/0x390 [ 110.269979][ T54] ret_from_fork+0x4b/0x80 [ 110.274436][ T54] ret_from_fork_asm+0x1a/0x30 [ 110.279200][ T54] [ 110.281515][ T54] Memory state around the buggy address: [ 110.287159][ T54] ffff8880791bd400: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 110.295232][ T54] ffff8880791bd480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 110.303307][ T54] >ffff8880791bd500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 110.311374][ T54] ^ [ 110.316221][ T54] ffff8880791bd580: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 110.324378][ T54] ffff8880791bd600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 110.332708][ T54] ================================================================== [ 110.343155][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.350725][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc7-syzkaller-01627-g6bbdb903db08 #0 [ 110.361617][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.371771][ T54] Workqueue: hci0 hci_cmd_sync_work [ 110.376983][ T54] Call Trace: [ 110.380366][ T54] [ 110.383295][ T54] dump_stack_lvl+0x241/0x360 [ 110.387983][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.393179][ T54] ? __pfx__printk+0x10/0x10 [ 110.397779][ T54] ? preempt_schedule+0xe1/0xf0 [ 110.402631][ T54] ? vscnprintf+0x5d/0x90 [ 110.406973][ T54] panic+0x349/0x880 [ 110.410952][ T54] ? check_panic_on_warn+0x21/0xb0 [ 110.416063][ T54] ? __pfx_panic+0x10/0x10 [ 110.420483][ T54] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 110.426464][ T54] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.432824][ T54] ? print_report+0x502/0x550 [ 110.437493][ T54] check_panic_on_warn+0x86/0xb0 [ 110.442426][ T54] ? set_powered_sync+0x3a/0xc0 [ 110.447281][ T54] end_report+0x77/0x160 [ 110.451550][ T54] kasan_report+0x154/0x180 [ 110.456289][ T54] ? set_powered_sync+0x3a/0xc0 [ 110.461146][ T54] set_powered_sync+0x3a/0xc0 [ 110.465838][ T54] ? __pfx_set_powered_sync+0x10/0x10 [ 110.471207][ T54] hci_cmd_sync_work+0x22b/0x400 [ 110.476161][ T54] ? process_scheduled_works+0x976/0x1850 [ 110.481877][ T54] process_scheduled_works+0xa63/0x1850 [ 110.487431][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.493411][ T54] ? assign_work+0x364/0x3d0 [ 110.497997][ T54] worker_thread+0x870/0xd30 [ 110.502587][ T54] ? __kthread_parkme+0x169/0x1d0 [ 110.507607][ T54] ? __pfx_worker_thread+0x10/0x10 [ 110.512728][ T54] kthread+0x2f0/0x390 [ 110.516802][ T54] ? __pfx_worker_thread+0x10/0x10 [ 110.522036][ T54] ? __pfx_kthread+0x10/0x10 [ 110.526627][ T54] ret_from_fork+0x4b/0x80 [ 110.531054][ T54] ? __pfx_kthread+0x10/0x10 [ 110.535644][ T54] ret_from_fork_asm+0x1a/0x30 [ 110.540425][ T54] [ 110.543762][ T54] Kernel Offset: disabled [ 110.548082][ T54] Rebooting in 86400 seconds..