[ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ 41.116122][ T8365] bash (8365) used greatest stack depth: 18264 bytes left Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.129' (ECDSA) to the list of known hosts. 2021/08/22 13:40:00 parsed 1 programs 2021/08/22 13:40:00 executed programs: 0 syzkaller login: [ 410.469091][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 410.563333][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.576402][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.586384][ T8457] device bridge_slave_0 entered promiscuous mode [ 410.595674][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.603525][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.611996][ T8457] device bridge_slave_1 entered promiscuous mode [ 410.631822][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.642540][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.664624][ T8457] team0: Port device team_slave_0 added [ 410.671819][ T8457] team0: Port device team_slave_1 added [ 410.690201][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.697146][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.725024][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.738189][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.745941][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.773186][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.798849][ T8457] device hsr_slave_0 entered promiscuous mode [ 410.805479][ T8457] device hsr_slave_1 entered promiscuous mode [ 410.902304][ T8457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.912732][ T8457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.924909][ T8457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.933894][ T8457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.955818][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.962988][ T8457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.970910][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.977970][ T8457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.016830][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.031713][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.043345][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.052050][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.061142][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 411.074793][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.085484][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.094623][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.101720][ T8670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.113473][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.122649][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.129806][ T8512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.148920][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.157270][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.171840][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.185517][ T8457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.197062][ T8457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.210017][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.220316][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.228941][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.245024][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.252536][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.265417][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.283661][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.302248][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.311328][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.320345][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.329830][ T8457] device veth0_vlan entered promiscuous mode [ 411.342500][ T8457] device veth1_vlan entered promiscuous mode [ 411.363727][ T8457] device veth0_macvtap entered promiscuous mode [ 411.371471][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 411.380685][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 411.389241][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.397535][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.408096][ T8457] device veth1_macvtap entered promiscuous mode [ 411.425494][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.433971][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.450457][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.457931][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.470958][ T8457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.480086][ T8457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.488873][ T8457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.497551][ T8457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.576100][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.585826][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.613588][ T8560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.617498][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.625598][ T8560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.639979][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 412.389471][ T8512] Bluetooth: hci0: command 0x0409 tx timeout 2021/08/22 13:40:05 executed programs: 95 [ 414.468942][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 416.549004][ T8512] Bluetooth: hci0: command 0x040f tx timeout [ 418.628217][ T8512] Bluetooth: hci0: command 0x0419 tx timeout 2021/08/22 13:40:10 executed programs: 286 [ 420.708092][ T5] Bluetooth: hci0: command 0x0405 tx timeout 2021/08/22 13:40:15 executed programs: 482 2021/08/22 13:40:20 executed programs: 680 2021/08/22 13:40:25 executed programs: 872 2021/08/22 13:40:30 executed programs: 1068 [ 439.668875][ T3254] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.675421][ T3254] ieee802154 phy1 wpan1: encryption failed: -22 2021/08/22 13:40:35 executed programs: 1259 2021/08/22 13:40:40 executed programs: 1450 [ 452.480481][ T8670] ================================================================== [ 452.488576][ T8670] BUG: KASAN: use-after-free in __lock_acquire+0xfe/0x6100 [ 452.495900][ T8670] Read of size 8 at addr ffff8880331190a0 by task kworker/1:0/8670 [ 452.503790][ T8670] [ 452.506111][ T8670] CPU: 1 PID: 8670 Comm: kworker/1:0 Not tainted 5.14.0-rc6-syzkaller #0 [ 452.514520][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.524570][ T8670] Workqueue: events l2cap_chan_timeout [ 452.530281][ T8670] Call Trace: [ 452.533542][ T8670] dump_stack_lvl+0x1ae/0x29f [ 452.538257][ T8670] ? show_regs_print_info+0x12/0x12 [ 452.543433][ T8670] ? printk+0xc0/0x108 [ 452.547527][ T8670] ? wake_up_klogd+0xb2/0xf0 [ 452.552098][ T8670] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 452.557800][ T8670] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 452.563301][ T8670] ? _raw_spin_lock+0x40/0x40 [ 452.567969][ T8670] print_address_description+0x66/0x3b0 [ 452.573556][ T8670] kasan_report+0x163/0x210 [ 452.578040][ T8670] ? __lock_acquire+0xfe/0x6100 [ 452.582875][ T8670] __lock_acquire+0xfe/0x6100 [ 452.587535][ T8670] ? del_timer+0x7e/0x390 [ 452.591890][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 452.597552][ T8670] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 452.603526][ T8670] ? trace_lock_acquire+0x190/0x190 [ 452.608720][ T8670] ? mark_lock+0x199/0x1eb0 [ 452.613216][ T8670] ? __bfs+0x700/0x700 [ 452.617277][ T8670] ? do_raw_spin_unlock+0x134/0x8a0 [ 452.622540][ T8670] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 452.628086][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 452.633699][ T8670] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 452.639658][ T8670] ? del_timer+0x14f/0x390 [ 452.644056][ T8670] lock_acquire+0x182/0x4a0 [ 452.648541][ T8670] ? lock_sock_nested+0x48/0x110 [ 452.653557][ T8670] ? read_lock_is_recursive+0x10/0x10 [ 452.658911][ T8670] ? print_irqtrace_events+0x220/0x220 [ 452.664362][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 452.669980][ T8670] ? __local_bh_disable_ip+0x130/0x1c0 [ 452.675464][ T8670] ? __bpf_trace_softirq+0x10/0x10 [ 452.680553][ T8670] ? cancel_delayed_work+0x252/0x360 [ 452.685847][ T8670] ? lockdep_hardirqs_on+0x8d/0x130 [ 452.691040][ T8670] ? cancel_delayed_work+0x2be/0x360 [ 452.696301][ T8670] ? lock_sock_nested+0x48/0x110 [ 452.701308][ T8670] _raw_spin_lock_bh+0x31/0x40 [ 452.706054][ T8670] ? lock_sock_nested+0x48/0x110 [ 452.711060][ T8670] lock_sock_nested+0x48/0x110 [ 452.715807][ T8670] l2cap_sock_teardown_cb+0x76/0x360 [ 452.721209][ T8670] l2cap_chan_del+0xaf/0x610 [ 452.725780][ T8670] ? l2cap_chan_close+0x8b/0x520 [ 452.730718][ T8670] l2cap_chan_timeout+0x12c/0x280 [ 452.735726][ T8670] process_one_work+0x833/0x10c0 [ 452.740697][ T8670] ? worker_detach_from_pool+0x260/0x260 [ 452.746318][ T8670] ? _raw_spin_lock_irqsave+0x100/0x100 [ 452.751865][ T8670] ? kthread_data+0x4d/0xc0 [ 452.756348][ T8670] ? wq_worker_running+0x8b/0x140 [ 452.761394][ T8670] worker_thread+0xac1/0x1320 [ 452.766059][ T8670] ? __kthread_parkme+0x166/0x1c0 [ 452.771241][ T8670] kthread+0x453/0x480 [ 452.775309][ T8670] ? rcu_lock_release+0x20/0x20 [ 452.780148][ T8670] ? kthread_blkcg+0xd0/0xd0 [ 452.784833][ T8670] ret_from_fork+0x1f/0x30 [ 452.789378][ T8670] [ 452.791702][ T8670] Allocated by task 14308: [ 452.796098][ T8670] ____kasan_kmalloc+0xcd/0x100 [ 452.800938][ T8670] kmem_cache_alloc_trace+0x96/0x340 [ 452.806209][ T8670] l2cap_chan_create+0x4c/0x480 [ 452.811055][ T8670] l2cap_sock_alloc+0x136/0x1d0 [ 452.815894][ T8670] l2cap_sock_create+0x113/0x1d0 [ 452.820817][ T8670] bt_sock_create+0x15b/0x220 [ 452.825560][ T8670] __sock_create+0x580/0x8d0 [ 452.830160][ T8670] __sys_socket+0x115/0x350 [ 452.834645][ T8670] __x64_sys_socket+0x76/0x80 [ 452.839305][ T8670] do_syscall_64+0x3d/0xb0 [ 452.843760][ T8670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 452.849721][ T8670] [ 452.852028][ T8670] Freed by task 14307: [ 452.856071][ T8670] kasan_set_track+0x3d/0x70 [ 452.860643][ T8670] kasan_set_free_info+0x1f/0x40 [ 452.865560][ T8670] ____kasan_slab_free+0x10d/0x150 [ 452.870652][ T8670] slab_free_freelist_hook+0x1e8/0x2a0 [ 452.876089][ T8670] kfree+0xcf/0x2e0 [ 452.879876][ T8670] l2cap_sock_release+0x159/0x1c0 [ 452.884883][ T8670] sock_close+0xd8/0x260 [ 452.889107][ T8670] __fput+0x352/0x7b0 [ 452.893124][ T8670] task_work_run+0x146/0x1c0 [ 452.897697][ T8670] exit_to_user_mode_prepare+0x201/0x220 [ 452.903312][ T8670] syscall_exit_to_user_mode+0x26/0x60 [ 452.908751][ T8670] do_syscall_64+0x4c/0xb0 [ 452.913150][ T8670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 452.919038][ T8670] [ 452.921356][ T8670] The buggy address belongs to the object at ffff888033119000 [ 452.921356][ T8670] which belongs to the cache kmalloc-2k of size 2048 [ 452.935391][ T8670] The buggy address is located 160 bytes inside of [ 452.935391][ T8670] 2048-byte region [ffff888033119000, ffff888033119800) [ 452.948827][ T8670] The buggy address belongs to the page: [ 452.954435][ T8670] page:ffffea0000cc4600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33118 [ 452.964562][ T8670] head:ffffea0000cc4600 order:3 compound_mapcount:0 compound_pincount:0 [ 452.972863][ T8670] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 452.980829][ T8670] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888011042000 [ 452.989401][ T8670] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 452.997958][ T8670] page dumped because: kasan: bad access detected [ 453.004347][ T8670] page_owner tracks the page as allocated [ 453.010035][ T8670] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8771, ts 412181758795, free_ts 412161556871 [ 453.027201][ T8670] get_page_from_freelist+0x779/0xa30 [ 453.032636][ T8670] __alloc_pages+0x26c/0x5f0 [ 453.037205][ T8670] allocate_slab+0xf1/0x540 [ 453.041690][ T8670] ___slab_alloc+0x1cf/0x350 [ 453.046261][ T8670] kmem_cache_alloc_trace+0x29d/0x340 [ 453.051611][ T8670] l2cap_chan_create+0x4c/0x480 [ 453.056459][ T8670] l2cap_sock_alloc+0x136/0x1d0 [ 453.061290][ T8670] l2cap_sock_create+0x113/0x1d0 [ 453.066221][ T8670] bt_sock_create+0x15b/0x220 [ 453.070878][ T8670] __sock_create+0x580/0x8d0 [ 453.075446][ T8670] __sys_socket+0x115/0x350 [ 453.079931][ T8670] __x64_sys_socket+0x76/0x80 [ 453.084588][ T8670] do_syscall_64+0x3d/0xb0 [ 453.088990][ T8670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 453.095212][ T8670] page last free stack trace: [ 453.099878][ T8670] free_pcp_prepare+0xc29/0xd20 [ 453.104712][ T8670] free_unref_page+0x7e/0x550 [ 453.109372][ T8670] unfreeze_partials+0x18c/0x1e0 [ 453.114290][ T8670] put_cpu_partial+0xd2/0x210 [ 453.118958][ T8670] __slab_free+0x3a8/0x6b0 [ 453.123354][ T8670] ___cache_free+0xfc/0x120 [ 453.127837][ T8670] kasan_quarantine_reduce+0x151/0x1c0 [ 453.133276][ T8670] __kasan_slab_alloc+0x2f/0xd0 [ 453.138105][ T8670] kmem_cache_alloc+0x1d1/0x340 [ 453.142935][ T8670] getname_flags+0xba/0x640 [ 453.147476][ T8670] user_path_at_empty+0x28/0x50 [ 453.152315][ T8670] vfs_statx+0x102/0x3d0 [ 453.156551][ T8670] __se_sys_newlstat+0xab/0x770 [ 453.161380][ T8670] do_syscall_64+0x3d/0xb0 [ 453.165784][ T8670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 453.171660][ T8670] [ 453.173962][ T8670] Memory state around the buggy address: [ 453.179567][ T8670] ffff888033118f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 453.187692][ T8670] ffff888033119000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.195742][ T8670] >ffff888033119080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.203781][ T8670] ^ [ 453.208880][ T8670] ffff888033119100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.216920][ T8670] ffff888033119180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.224979][ T8670] ================================================================== [ 453.233023][ T8670] Disabling lock debugging due to kernel taint [ 453.239161][ T8670] Kernel panic - not syncing: panic_on_warn set ... [ 453.245738][ T8670] CPU: 1 PID: 8670 Comm: kworker/1:0 Tainted: G B 5.14.0-rc6-syzkaller #0 [ 453.255616][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.265653][ T8670] Workqueue: events l2cap_chan_timeout [ 453.271127][ T8670] Call Trace: [ 453.274404][ T8670] dump_stack_lvl+0x1ae/0x29f [ 453.279069][ T8670] ? show_regs_print_info+0x12/0x12 [ 453.284261][ T8670] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 453.289963][ T8670] panic+0x2e1/0x850 [ 453.293874][ T8670] ? nmi_panic+0x90/0x90 [ 453.298105][ T8670] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 453.304153][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 453.309772][ T8670] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 453.315734][ T8670] kasan_report+0x206/0x210 [ 453.320230][ T8670] ? __lock_acquire+0xfe/0x6100 [ 453.325065][ T8670] __lock_acquire+0xfe/0x6100 [ 453.329734][ T8670] ? del_timer+0x7e/0x390 [ 453.334155][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 453.339772][ T8670] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 453.345822][ T8670] ? trace_lock_acquire+0x190/0x190 [ 453.351028][ T8670] ? mark_lock+0x199/0x1eb0 [ 453.355522][ T8670] ? __bfs+0x700/0x700 [ 453.359570][ T8670] ? do_raw_spin_unlock+0x134/0x8a0 [ 453.364748][ T8670] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 453.370208][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 453.375820][ T8670] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 453.381780][ T8670] ? del_timer+0x14f/0x390 [ 453.386178][ T8670] lock_acquire+0x182/0x4a0 [ 453.390660][ T8670] ? lock_sock_nested+0x48/0x110 [ 453.395578][ T8670] ? read_lock_is_recursive+0x10/0x10 [ 453.400932][ T8670] ? print_irqtrace_events+0x220/0x220 [ 453.406373][ T8670] ? rcu_read_lock_sched_held+0x87/0x110 [ 453.411987][ T8670] ? __local_bh_disable_ip+0x130/0x1c0 [ 453.417423][ T8670] ? __bpf_trace_softirq+0x10/0x10 [ 453.422514][ T8670] ? cancel_delayed_work+0x252/0x360 [ 453.427780][ T8670] ? lockdep_hardirqs_on+0x8d/0x130 [ 453.432958][ T8670] ? cancel_delayed_work+0x2be/0x360 [ 453.438219][ T8670] ? lock_sock_nested+0x48/0x110 [ 453.443137][ T8670] _raw_spin_lock_bh+0x31/0x40 [ 453.447877][ T8670] ? lock_sock_nested+0x48/0x110 [ 453.452795][ T8670] lock_sock_nested+0x48/0x110 [ 453.457539][ T8670] l2cap_sock_teardown_cb+0x76/0x360 [ 453.462807][ T8670] l2cap_chan_del+0xaf/0x610 [ 453.467377][ T8670] ? l2cap_chan_close+0x8b/0x520 [ 453.472291][ T8670] l2cap_chan_timeout+0x12c/0x280 [ 453.477299][ T8670] process_one_work+0x833/0x10c0 [ 453.482221][ T8670] ? worker_detach_from_pool+0x260/0x260 [ 453.487835][ T8670] ? _raw_spin_lock_irqsave+0x100/0x100 [ 453.493359][ T8670] ? kthread_data+0x4d/0xc0 [ 453.497842][ T8670] ? wq_worker_running+0x8b/0x140 [ 453.502854][ T8670] worker_thread+0xac1/0x1320 [ 453.507512][ T8670] ? __kthread_parkme+0x166/0x1c0 [ 453.512517][ T8670] kthread+0x453/0x480 [ 453.516566][ T8670] ? rcu_lock_release+0x20/0x20 [ 453.521394][ T8670] ? kthread_blkcg+0xd0/0xd0 [ 453.525961][ T8670] ret_from_fork+0x1f/0x30 [ 453.531709][ T8670] Kernel Offset: disabled [ 453.536016][ T8670] Rebooting in 86400 seconds..