Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts.
2026/02/15 02:57:11 parsed 1 programs
[ 109.266439][ T30] kauditd_printk_skb: 19 callbacks suppressed
[ 109.266456][ T30] audit: type=1400 audit(1771124234.355:105): avc: denied { unlink } for pid=6147 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 110.580835][ T6147] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 113.567652][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.575632][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.600277][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.609365][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.835799][ T30] audit: type=1400 audit(1771124238.925:106): avc: denied { read write } for pid=6190 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 113.861010][ T30] audit: type=1400 audit(1771124238.925:107): avc: denied { open } for pid=6190 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 113.861673][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.893935][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.902077][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.910898][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.924220][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 113.998680][ T30] audit: type=1400 audit(1771124239.085:108): avc: denied { unmount } for pid=6190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 114.291657][ T30] audit: type=1401 audit(1771124239.375:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 114.429377][ T6204] chnl_net:caif_netlink_parms(): no params data found
[ 114.481769][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.489033][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.496467][ T6204] bridge_slave_0: entered allmulticast mode
[ 114.503459][ T6204] bridge_slave_0: entered promiscuous mode
[ 114.511147][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.518560][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.525740][ T6204] bridge_slave_1: entered allmulticast mode
[ 114.532521][ T6204] bridge_slave_1: entered promiscuous mode
[ 114.595251][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 114.607887][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 114.630813][ T6204] team0: Port device team_slave_0 added
[ 114.638986][ T6204] team0: Port device team_slave_1 added
[ 114.669811][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 114.678073][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 114.703992][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 114.716037][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 114.722975][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 114.748895][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 114.791081][ T6204] hsr_slave_0: entered promiscuous mode
[ 114.797274][ T6204] hsr_slave_1: entered promiscuous mode
[ 115.257700][ T6204] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.268865][ T6204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.279611][ T6204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.291777][ T6204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.389767][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.410290][ T6204] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.425640][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.432764][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.463379][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.470505][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.680748][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 115.739296][ T6204] veth0_vlan: entered promiscuous mode
[ 115.752203][ T6204] veth1_vlan: entered promiscuous mode
[ 115.790087][ T6204] veth0_macvtap: entered promiscuous mode
[ 115.801287][ T6204] veth1_macvtap: entered promiscuous mode
[ 115.824306][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 115.841986][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.864786][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.875494][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.891629][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.902751][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.066248][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.160746][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.246163][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.325932][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/02/15 02:57:22 executed programs: 0
[ 117.528260][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.538508][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.547251][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.573418][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.586531][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.775947][ T6325] chnl_net:caif_netlink_parms(): no params data found
[ 117.865132][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.872368][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.879624][ T6325] bridge_slave_0: entered allmulticast mode
[ 117.887287][ T6325] bridge_slave_0: entered promiscuous mode
[ 117.895895][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.903033][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.910381][ T6325] bridge_slave_1: entered allmulticast mode
[ 117.918198][ T6325] bridge_slave_1: entered promiscuous mode
[ 117.951322][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.963503][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.001393][ T6325] team0: Port device team_slave_0 added
[ 118.009807][ T6325] team0: Port device team_slave_1 added
[ 118.040832][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.047964][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.073981][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.086507][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.093563][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.119839][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.180711][ T6325] hsr_slave_0: entered promiscuous mode
[ 118.187644][ T6325] hsr_slave_1: entered promiscuous mode
[ 118.194399][ T6325] debugfs: 'hsr0' already exists in 'hsr'
[ 118.200160][ T6325] Cannot create hsr debugfs directory
[ 119.160443][ T58] bridge_slave_1: left allmulticast mode
[ 119.167328][ T58] bridge_slave_1: left promiscuous mode
[ 119.173097][ T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.187150][ T58] bridge_slave_0: left allmulticast mode
[ 119.192829][ T58] bridge_slave_0: left promiscuous mode
[ 119.199596][ T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.362007][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.373011][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.384325][ T58] bond0 (unregistering): Released all slaves
[ 119.477010][ T58] hsr_slave_0: left promiscuous mode
[ 119.483033][ T58] hsr_slave_1: left promiscuous mode
[ 119.489204][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 119.496761][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 119.508756][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 119.516562][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 119.548329][ T58] veth1_macvtap: left promiscuous mode
[ 119.553931][ T58] veth0_macvtap: left promiscuous mode
[ 119.559474][ T58] veth1_vlan: left promiscuous mode
[ 119.565357][ T58] veth0_vlan: left promiscuous mode
[ 119.674270][ T5897] Bluetooth: hci0: command tx timeout
[ 119.800694][ T58] team0 (unregistering): Port device team_slave_1 removed
[ 119.816854][ T58] team0 (unregistering): Port device team_slave_0 removed
[ 120.206280][ T6325] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 120.217607][ T6325] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.238157][ T6325] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 120.257346][ T6325] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 120.473920][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.560524][ T6325] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.595404][ T86] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.602525][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.638761][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.646148][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.882913][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.921195][ T6325] veth0_vlan: entered promiscuous mode
[ 120.932001][ T6325] veth1_vlan: entered promiscuous mode
[ 120.956873][ T6325] veth0_macvtap: entered promiscuous mode
[ 120.965802][ T6325] veth1_macvtap: entered promiscuous mode
[ 120.979763][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 120.994374][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.006895][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.015918][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.027382][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.036987][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.087092][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.095028][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.118657][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.126664][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.166763][ T30] audit: type=1400 audit(1771124246.255:110): avc: denied { read } for pid=6459 comm="syz.0.17" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 121.191717][ T30] audit: type=1400 audit(1771124246.255:111): avc: denied { open } for pid=6459 comm="syz.0.17" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 121.229276][ T30] audit: type=1400 audit(1771124246.315:112): avc: denied { map_create } for pid=6459 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 121.753981][ T5128] Bluetooth: hci0: command tx timeout
[ 123.283386][ T5128] Bluetooth: hci1: command 0x1003 tx timeout
[ 123.283395][ T5897] Bluetooth: hci1: Opcode 0x1003 failed: -110
2026/02/15 02:57:28 executed programs: 3
[ 123.401368][ T9] ==================================================================
[ 123.409440][ T9] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x81c/0x950
[ 123.417504][ T9] Read of size 4 at addr ffff888034228570 by task kworker/0:0/9
[ 123.425135][ T9]
[ 123.427453][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 123.427468][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 123.427479][ T9] Workqueue: events hci_uart_write_work
[ 123.427503][ T9] Call Trace:
[ 123.427509][ T9]
[ 123.427516][ T9] dump_stack_lvl+0x100/0x190
[ 123.427538][ T9] print_report+0x156/0x4c9
[ 123.427554][ T9] ? __virt_addr_valid+0x81/0x620
[ 123.427570][ T9] ? __phys_addr+0xe8/0x180
[ 123.427586][ T9] ? hci_uart_write_work+0x81c/0x950
[ 123.427597][ T9] kasan_report+0xdf/0x1e0
[ 123.427614][ T9] ? hci_uart_write_work+0x81c/0x950
[ 123.427627][ T9] hci_uart_write_work+0x81c/0x950
[ 123.427639][ T9] ? __pfx_pty_write+0x10/0x10
[ 123.427653][ T9] process_one_work+0x9d7/0x1920
[ 123.427667][ T9] ? __pfx_process_one_work+0x10/0x10
[ 123.427681][ T9] ? __pfx_hci_uart_write_work+0x10/0x10
[ 123.427692][ T9] worker_thread+0x5da/0xe40
[ 123.427710][ T9] ? kthread+0x13a/0x450
[ 123.427720][ T9] ? __pfx_worker_thread+0x10/0x10
[ 123.427730][ T9] kthread+0x370/0x450
[ 123.427739][ T9] ? __pfx_kthread+0x10/0x10
[ 123.427757][ T9] ret_from_fork+0x754/0xd80
[ 123.427768][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 123.427779][ T9] ? __switch_to+0x7b4/0x1120
[ 123.427793][ T9] ? __pfx_kthread+0x10/0x10
[ 123.427810][ T9] ret_from_fork_asm+0x1a/0x30
[ 123.427827][ T9]
[ 123.427831][ T9]
[ 123.568736][ T9] Allocated by task 29:
[ 123.572884][ T9] kasan_save_stack+0x30/0x50
[ 123.577539][ T9] kasan_save_track+0x14/0x30
[ 123.582189][ T9] __kasan_slab_alloc+0x89/0x90
[ 123.587123][ T9] kmem_cache_alloc_node_noprof+0x25a/0x6f0
[ 123.592989][ T9] __alloc_skb+0x140/0x710
[ 123.597383][ T9] bcsp_prepare_pkt+0xe0/0xa90
[ 123.602117][ T9] bcsp_dequeue+0x237/0x4b0
[ 123.606589][ T9] hci_uart_write_work+0x4d9/0x950
[ 123.611668][ T9] process_one_work+0x9d7/0x1920
[ 123.616579][ T9] worker_thread+0x5da/0xe40
[ 123.621135][ T9] kthread+0x370/0x450
[ 123.625173][ T9] ret_from_fork+0x754/0xd80
[ 123.629755][ T9] ret_from_fork_asm+0x1a/0x30
[ 123.634491][ T9]
[ 123.636786][ T9] The buggy address belongs to the object at ffff888034228500
[ 123.636786][ T9] which belongs to the cache skbuff_head_cache of size 240
[ 123.651327][ T9] The buggy address is located 112 bytes inside of
[ 123.651327][ T9] freed 240-byte region [ffff888034228500, ffff8880342285f0)
[ 123.665176][ T9]
[ 123.667560][ T9] The buggy address belongs to the physical page:
[ 123.673934][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34228
[ 123.682679][ T9] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 123.689780][ T9] page_type: f5(slab)
[ 123.693737][ T9] raw: 00fff00000000000 ffff8881404c23c0 dead000000000122 0000000000000000
[ 123.702376][ T9] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000
[ 123.710930][ T9] page dumped because: kasan: bad access detected
[ 123.717327][ T9] page_owner tracks the page as allocated
[ 123.723015][ T9] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6153, tgid 6153 (udevd), ts 123386421440, free_ts 123386012254
[ 123.743304][ T9] post_alloc_hook+0x153/0x170
[ 123.748046][ T9] get_page_from_freelist+0x111d/0x3140
[ 123.753580][ T9] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 123.759440][ T9] new_slab+0xa6/0x6e0
[ 123.763483][ T9] refill_objects+0x26b/0x400
[ 123.768141][ T9] __pcs_replace_empty_main+0x19f/0x600
[ 123.773676][ T9] kmem_cache_alloc_node_noprof+0x569/0x6f0
[ 123.779562][ T9] __alloc_skb+0x140/0x710
[ 123.783954][ T9] netlink_alloc_large_skb+0x69/0x150
[ 123.789304][ T9] netlink_sendmsg+0x680/0xda0
[ 123.794048][ T9] ____sys_sendmsg+0xa54/0xc30
[ 123.798784][ T9] ___sys_sendmsg+0x190/0x1e0
[ 123.803434][ T9] __sys_sendmsg+0x170/0x220
[ 123.807996][ T9] do_syscall_64+0x106/0xf80
[ 123.812559][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.818438][ T9] page last free pid 6153 tgid 6153 stack trace:
[ 123.824732][ T9] __free_frozen_pages+0x7ca/0x10a0
[ 123.829898][ T9] inode_doinit_with_dentry+0x99d/0x1320
[ 123.835506][ T9] selinux_d_instantiate+0x26/0x40
[ 123.840588][ T9] security_d_instantiate+0x14c/0x1b0
[ 123.846028][ T9] d_splice_alias_ops+0xd7/0x1320
[ 123.851026][ T9] kernfs_iop_lookup+0x23f/0x2d0
[ 123.855934][ T9] lookup_open.isra.0+0x631/0x11b0
[ 123.861016][ T9] path_openat+0xa98/0x31a0
[ 123.865510][ T9] do_file_open+0x20e/0x430
[ 123.869987][ T9] do_sys_openat2+0x10d/0x1e0
[ 123.874633][ T9] __x64_sys_openat+0x12d/0x210
[ 123.879462][ T9] do_syscall_64+0x106/0xf80
[ 123.884031][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.889914][ T9]
[ 123.892222][ T9] Memory state around the buggy address:
[ 123.897846][ T9] ffff888034228400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 123.905893][ T9] ffff888034228480: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 123.913950][ T9] >ffff888034228500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 123.921976][ T9] ^
[ 123.929658][ T9] ffff888034228580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 123.937686][ T9] ffff888034228600: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[ 123.945716][ T9] ==================================================================
[ 123.962527][ T5128] Bluetooth: hci0: command tx timeout
[ 123.974129][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 123.981343][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 123.990449][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 124.000519][ T9] Workqueue: events hci_uart_write_work
[ 124.006057][ T9] Call Trace:
[ 124.009324][ T9]
[ 124.012231][ T9] dump_stack_lvl+0x100/0x190
[ 124.016900][ T9] vpanic+0x552/0x970
[ 124.020858][ T9] ? __pfx_vpanic+0x10/0x10
[ 124.025338][ T9] ? hci_uart_write_work+0x81c/0x950
[ 124.030602][ T9] panic+0xd1/0xe0
[ 124.034299][ T9] ? __pfx_panic+0x10/0x10
[ 124.038690][ T9] ? hci_uart_write_work+0x81c/0x950
[ 124.043953][ T9] ? preempt_schedule_common+0x42/0xc0
[ 124.049400][ T9] ? check_panic_on_warn+0x1f/0x90
[ 124.054499][ T9] check_panic_on_warn.cold+0x19/0x34
[ 124.059859][ T9] end_report.part.0+0x3a/0x90
[ 124.064603][ T9] kasan_report.cold+0xe/0x18
[ 124.069301][ T9] ? hci_uart_write_work+0x81c/0x950
[ 124.074564][ T9] hci_uart_write_work+0x81c/0x950
[ 124.079651][ T9] ? __pfx_pty_write+0x10/0x10
[ 124.084403][ T9] process_one_work+0x9d7/0x1920
[ 124.089340][ T9] ? __pfx_process_one_work+0x10/0x10
[ 124.094701][ T9] ? __pfx_hci_uart_write_work+0x10/0x10
[ 124.100319][ T9] worker_thread+0x5da/0xe40
[ 124.104906][ T9] ? kthread+0x13a/0x450
[ 124.109129][ T9] ? __pfx_worker_thread+0x10/0x10
[ 124.114221][ T9] kthread+0x370/0x450
[ 124.118270][ T9] ? __pfx_kthread+0x10/0x10
[ 124.122862][ T9] ret_from_fork+0x754/0xd80
[ 124.127437][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 124.132555][ T9] ? __switch_to+0x7b4/0x1120
[ 124.137216][ T9] ? __pfx_kthread+0x10/0x10
[ 124.141803][ T9] ret_from_fork_asm+0x1a/0x30
[ 124.146563][ T9]
[ 124.149871][ T9] Kernel Offset: disabled
[ 124.154173][ T9] Rebooting in 86400 seconds..