Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. 2020/10/04 20:22:07 parsed 1 programs 2020/10/04 20:22:08 executed programs: 0 syzkaller login: [ 1588.178263][ T6873] IPVS: ftp: loaded support on port[0] = 21 [ 1588.329665][ T6873] chnl_net:caif_netlink_parms(): no params data found [ 1588.404913][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.412846][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.421049][ T6873] device bridge_slave_0 entered promiscuous mode [ 1588.429202][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.436916][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.445658][ T6873] device bridge_slave_1 entered promiscuous mode [ 1588.465789][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.476471][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.497507][ T6873] team0: Port device team_slave_0 added [ 1588.504961][ T6873] team0: Port device team_slave_1 added [ 1588.522211][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.529138][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.555071][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.567462][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.574465][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.601184][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.628822][ T6873] device hsr_slave_0 entered promiscuous mode [ 1588.635500][ T6873] device hsr_slave_1 entered promiscuous mode [ 1588.729065][ T6873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1588.738834][ T6873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1588.748859][ T6873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1588.758678][ T6873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1588.784273][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.791425][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.798907][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.806013][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.850885][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.864483][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1588.875391][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.884771][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.892863][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1588.905758][ T6873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.916757][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1588.926058][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.933162][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.952661][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1588.961263][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.968287][ T6850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.980213][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1588.998880][ T6873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1589.009480][ T6873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.022255][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1589.031140][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1589.039384][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1589.048422][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1589.057187][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1589.078445][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.086167][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1589.094867][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1589.115654][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1589.137059][ T6873] device veth0_vlan entered promiscuous mode [ 1589.145061][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1589.155141][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1589.163271][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1589.175650][ T6873] device veth1_vlan entered promiscuous mode [ 1589.183922][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1589.205779][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1589.215183][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1589.226264][ T6873] device veth0_macvtap entered promiscuous mode [ 1589.236541][ T6873] device veth1_macvtap entered promiscuous mode [ 1589.254241][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.262510][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1589.273404][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1589.284782][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.292947][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1589.304671][ T6873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.314766][ T6873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.323512][ T6873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.332487][ T6873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.403365][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.419455][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.451524][ T2469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1589.467027][ T6909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.475192][ T6909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.485153][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1590.210796][ T7094] Bluetooth: hci0: command 0x0409 tx timeout [ 1592.290108][ T7094] Bluetooth: hci0: command 0x041b tx timeout 2020/10/04 20:22:13 executed programs: 4 [ 1594.370117][ T6850] Bluetooth: hci0: command 0x040f tx timeout [ 1596.459570][ T7094] Bluetooth: hci0: command 0x0419 tx timeout 2020/10/04 20:22:19 executed programs: 11 [ 1598.530562][ T7094] Bluetooth: hci0: command 0x0405 tx timeout 2020/10/04 20:22:25 executed programs: 18 2020/10/04 20:22:31 executed programs: 25 2020/10/04 20:22:36 executed programs: 32 2020/10/04 20:22:42 executed programs: 39 2020/10/04 20:22:48 executed programs: 46 2020/10/04 20:22:54 executed programs: 53 2020/10/04 20:22:59 executed programs: 60 2020/10/04 20:23:05 executed programs: 67 2020/10/04 20:23:11 executed programs: 74 [ 1652.927843][ T6839] INFO: trying to register non-static key. [ 1652.933688][ T6839] the code is fine but needs lockdep annotation. [ 1652.939979][ T6839] turning off the locking correctness validator. [ 1652.946311][ T6839] CPU: 1 PID: 6839 Comm: kworker/1:1 Not tainted 5.9.0-rc6-syzkaller #0 [ 1652.954599][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.964756][ T6839] Workqueue: events l2cap_chan_timeout [ 1652.970206][ T6839] Call Trace: [ 1652.973527][ T6839] dump_stack+0x198/0x1fd [ 1652.977875][ T6839] register_lock_class+0x157d/0x1630 [ 1652.983154][ T6839] ? is_dynamic_key+0x1a0/0x1a0 [ 1652.988049][ T6839] ? lock_is_held_type+0xbb/0xf0 [ 1652.992966][ T6839] ? find_held_lock+0x2d/0x110 [ 1652.997704][ T6839] __lock_acquire+0x101/0x5780 [ 1653.002440][ T6839] ? __lock_acquire+0x2eb6/0x5780 [ 1653.007471][ T6839] ? do_raw_spin_unlock+0x171/0x230 [ 1653.012641][ T6839] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1653.018642][ T6839] ? debug_object_assert_init+0x246/0x2e0 [ 1653.024331][ T6839] ? debug_object_free+0x350/0x350 [ 1653.029411][ T6839] lock_acquire+0x1f3/0xaf0 [ 1653.034021][ T6839] ? lock_sock_nested+0x3b/0x110 [ 1653.038936][ T6839] ? lock_acquire+0x1f3/0xaf0 [ 1653.043617][ T6839] ? lock_release+0x8f0/0x8f0 [ 1653.048281][ T6839] ? mark_held_locks+0x9f/0xe0 [ 1653.053021][ T6839] ? lock_is_held_type+0xbb/0xf0 [ 1653.057997][ T6839] _raw_spin_lock_bh+0x2f/0x40 [ 1653.062739][ T6839] ? lock_sock_nested+0x3b/0x110 [ 1653.067647][ T6839] lock_sock_nested+0x3b/0x110 [ 1653.072427][ T6839] l2cap_sock_teardown_cb+0x88/0x400 [ 1653.077685][ T6839] l2cap_chan_del+0xad/0x1300 [ 1653.082334][ T6839] l2cap_chan_close+0x118/0xb10 [ 1653.087158][ T6839] ? lock_acquire+0x1f3/0xaf0 [ 1653.091811][ T6839] ? l2cap_retransmit_all+0x760/0x760 [ 1653.097165][ T6839] ? lock_release+0x8f0/0x8f0 [ 1653.101816][ T6839] ? lock_downgrade+0x830/0x830 [ 1653.106639][ T6839] ? do_raw_spin_lock+0x120/0x2b0 [ 1653.111672][ T6839] l2cap_chan_timeout+0x173/0x450 [ 1653.116725][ T6839] process_one_work+0x94c/0x1670 [ 1653.121637][ T6839] ? lock_release+0x8f0/0x8f0 [ 1653.126286][ T6839] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1653.131635][ T6839] ? rwlock_bug.part.0+0x90/0x90 [ 1653.136548][ T6839] ? lockdep_hardirqs_off+0x96/0xd0 [ 1653.141763][ T6839] worker_thread+0x64c/0x1120 [ 1653.146451][ T6839] ? __kthread_parkme+0x13f/0x1e0 [ 1653.151468][ T6839] ? process_one_work+0x1670/0x1670 [ 1653.156637][ T6839] kthread+0x3b5/0x4a0 [ 1653.160678][ T6839] ? __kthread_bind_mask+0xc0/0xc0 [ 1653.165874][ T6839] ret_from_fork+0x1f/0x30 [ 1653.506088][ T6839] ================================================================== [ 1653.514164][ T6839] BUG: KASAN: use-after-free in __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.522717][ T6839] Read of size 4 at addr ffff8880a604a088 by task kworker/1:1/6839 [ 1653.530570][ T6839] [ 1653.532874][ T6839] CPU: 1 PID: 6839 Comm: kworker/1:1 Not tainted 5.9.0-rc6-syzkaller #0 [ 1653.541180][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.551232][ T6839] Workqueue: events l2cap_chan_timeout [ 1653.556670][ T6839] Call Trace: [ 1653.559948][ T6839] dump_stack+0x198/0x1fd [ 1653.564248][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.570461][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.576735][ T6839] print_address_description.constprop.0.cold+0xae/0x497 [ 1653.583801][ T6839] ? trace_hardirqs_on+0x5f/0x220 [ 1653.588827][ T6839] ? vprintk_func+0x95/0x1d4 [ 1653.593391][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.599600][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.605822][ T6839] kasan_report.cold+0x1f/0x37 [ 1653.610579][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.616798][ T6839] check_memory_region+0x13d/0x180 [ 1653.621882][ T6839] __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1653.628050][ T6839] ? arch_local_irq_restore+0x45/0x51 [ 1653.633426][ T6839] ? pv_hash+0xe0/0xe0 [ 1653.637470][ T6839] ? lock_acquire+0x1f3/0xaf0 [ 1653.642115][ T6839] ? lock_release+0x8f0/0x8f0 [ 1653.646858][ T6839] do_raw_spin_lock+0x200/0x2b0 [ 1653.651685][ T6839] ? rwlock_bug.part.0+0x90/0x90 [ 1653.656594][ T6839] ? lock_is_held_type+0xbb/0xf0 [ 1653.661506][ T6839] lock_sock_nested+0x3b/0x110 [ 1653.666274][ T6839] l2cap_sock_teardown_cb+0x88/0x400 [ 1653.671545][ T6839] l2cap_chan_del+0xad/0x1300 [ 1653.676236][ T6839] l2cap_chan_close+0x118/0xb10 [ 1653.681059][ T6839] ? lock_acquire+0x1f3/0xaf0 [ 1653.685706][ T6839] ? l2cap_retransmit_all+0x760/0x760 [ 1653.691050][ T6839] ? lock_release+0x8f0/0x8f0 [ 1653.695697][ T6839] ? lock_downgrade+0x830/0x830 [ 1653.700558][ T6839] ? do_raw_spin_lock+0x120/0x2b0 [ 1653.705554][ T6839] l2cap_chan_timeout+0x173/0x450 [ 1653.710569][ T6839] process_one_work+0x94c/0x1670 [ 1653.715515][ T6839] ? lock_release+0x8f0/0x8f0 [ 1653.720172][ T6839] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1653.725516][ T6839] ? rwlock_bug.part.0+0x90/0x90 [ 1653.730429][ T6839] ? lockdep_hardirqs_off+0x96/0xd0 [ 1653.735596][ T6839] worker_thread+0x64c/0x1120 [ 1653.740243][ T6839] ? __kthread_parkme+0x13f/0x1e0 [ 1653.745235][ T6839] ? process_one_work+0x1670/0x1670 [ 1653.750403][ T6839] kthread+0x3b5/0x4a0 [ 1653.754444][ T6839] ? __kthread_bind_mask+0xc0/0xc0 [ 1653.759528][ T6839] ret_from_fork+0x1f/0x30 [ 1653.763916][ T6839] [ 1653.766278][ T6839] Allocated by task 7580: [ 1653.770678][ T6839] kasan_save_stack+0x1b/0x40 [ 1653.775434][ T6839] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1653.781040][ T6839] kmem_cache_alloc_trace+0x174/0x300 [ 1653.786387][ T6839] l2cap_chan_create+0x40/0x3a0 [ 1653.791228][ T6839] l2cap_sock_alloc.constprop.0+0x185/0x230 [ 1653.797190][ T6839] l2cap_sock_create+0x110/0x1b0 [ 1653.802156][ T6839] bt_sock_create+0x17c/0x340 [ 1653.806808][ T6839] __sock_create+0x3de/0x780 [ 1653.811370][ T6839] __sys_socket+0xef/0x200 [ 1653.815764][ T6839] __x64_sys_socket+0x6f/0xb0 [ 1653.820419][ T6839] do_syscall_64+0x2d/0x70 [ 1653.824809][ T6839] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1653.830665][ T6839] [ 1653.832964][ T6839] Freed by task 7580: [ 1653.836929][ T6839] kasan_save_stack+0x1b/0x40 [ 1653.841575][ T6839] kasan_set_track+0x1c/0x30 [ 1653.846136][ T6839] kasan_set_free_info+0x1b/0x30 [ 1653.851042][ T6839] __kasan_slab_free+0xd8/0x120 [ 1653.855861][ T6839] kfree+0x10e/0x2b0 [ 1653.859728][ T6839] l2cap_chan_put+0x1b2/0x230 [ 1653.864375][ T6839] l2cap_sock_release+0x181/0x1d0 [ 1653.869369][ T6839] __sock_release+0xcd/0x280 [ 1653.873943][ T6839] sock_close+0x18/0x20 [ 1653.878124][ T6839] __fput+0x285/0x920 [ 1653.882076][ T6839] task_work_run+0xdd/0x190 [ 1653.886603][ T6839] get_signal+0xd89/0x1f00 [ 1653.891045][ T6839] arch_do_signal+0x82/0x2520 [ 1653.895747][ T6839] exit_to_user_mode_prepare+0x1ae/0x200 [ 1653.901356][ T6839] syscall_exit_to_user_mode+0x7e/0x2e0 [ 1653.907132][ T6839] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1653.912998][ T6839] [ 1653.915306][ T6839] The buggy address belongs to the object at ffff8880a604a000 [ 1653.915306][ T6839] which belongs to the cache kmalloc-2k of size 2048 [ 1653.929419][ T6839] The buggy address is located 136 bytes inside of [ 1653.929419][ T6839] 2048-byte region [ffff8880a604a000, ffff8880a604a800) [ 1653.942743][ T6839] The buggy address belongs to the page: [ 1653.948349][ T6839] page:00000000d3427b4f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa604a [ 1653.958464][ T6839] flags: 0xfffe0000000200(slab) [ 1653.963290][ T6839] raw: 00fffe0000000200 ffffea0002513148 ffffea0002a59e08 ffff8880aa040800 [ 1653.971853][ T6839] raw: 0000000000000000 ffff8880a604a000 0000000100000001 0000000000000000 [ 1653.980440][ T6839] page dumped because: kasan: bad access detected [ 1653.986819][ T6839] [ 1653.989116][ T6839] Memory state around the buggy address: [ 1653.994723][ T6839] ffff8880a6049f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1654.002762][ T6839] ffff8880a604a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.010803][ T6839] >ffff8880a604a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.018848][ T6839] ^ [ 1654.023146][ T6839] ffff8880a604a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.031176][ T6839] ffff8880a604a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1654.039203][ T6839] ================================================================== [ 1654.047282][ T6839] Kernel panic - not syncing: panic_on_warn set ... [ 1654.053858][ T6839] CPU: 1 PID: 6839 Comm: kworker/1:1 Tainted: G B 5.9.0-rc6-syzkaller #0 [ 1654.063551][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.074121][ T6839] Workqueue: events l2cap_chan_timeout [ 1654.079582][ T6839] Call Trace: [ 1654.082846][ T6839] dump_stack+0x198/0x1fd [ 1654.087147][ T6839] ? __pv_queued_spin_lock_slowpath+0x1d0/0xb40 [ 1654.093423][ T6839] panic+0x382/0x7fb [ 1654.097295][ T6839] ? __warn_printk+0xf3/0xf3 [ 1654.101872][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1654.108126][ T6839] ? trace_hardirqs_on+0x55/0x220 [ 1654.113122][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1654.119332][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1654.125547][ T6839] end_report+0x4d/0x53 [ 1654.129674][ T6839] kasan_report.cold+0xd/0x37 [ 1654.134324][ T6839] ? __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1654.140542][ T6839] check_memory_region+0x13d/0x180 [ 1654.145627][ T6839] __pv_queued_spin_lock_slowpath+0x214/0xb40 [ 1654.151669][ T6839] ? arch_local_irq_restore+0x45/0x51 [ 1654.157010][ T6839] ? pv_hash+0xe0/0xe0 [ 1654.161049][ T6839] ? lock_acquire+0x1f3/0xaf0 [ 1654.165697][ T6839] ? lock_release+0x8f0/0x8f0 [ 1654.170388][ T6839] do_raw_spin_lock+0x200/0x2b0 [ 1654.175241][ T6839] ? rwlock_bug.part.0+0x90/0x90 [ 1654.180149][ T6839] ? lock_is_held_type+0xbb/0xf0 [ 1654.185060][ T6839] lock_sock_nested+0x3b/0x110 [ 1654.189830][ T6839] l2cap_sock_teardown_cb+0x88/0x400 [ 1654.195087][ T6839] l2cap_chan_del+0xad/0x1300 [ 1654.199734][ T6839] l2cap_chan_close+0x118/0xb10 [ 1654.204593][ T6839] ? lock_acquire+0x1f3/0xaf0 [ 1654.209242][ T6839] ? l2cap_retransmit_all+0x760/0x760 [ 1654.214587][ T6839] ? lock_release+0x8f0/0x8f0 [ 1654.219234][ T6839] ? lock_downgrade+0x830/0x830 [ 1654.224063][ T6839] ? do_raw_spin_lock+0x120/0x2b0 [ 1654.229070][ T6839] l2cap_chan_timeout+0x173/0x450 [ 1654.234068][ T6839] process_one_work+0x94c/0x1670 [ 1654.238980][ T6839] ? lock_release+0x8f0/0x8f0 [ 1654.243633][ T6839] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1654.248984][ T6839] ? rwlock_bug.part.0+0x90/0x90 [ 1654.253893][ T6839] ? lockdep_hardirqs_off+0x96/0xd0 [ 1654.259061][ T6839] worker_thread+0x64c/0x1120 [ 1654.263709][ T6839] ? __kthread_parkme+0x13f/0x1e0 [ 1654.268704][ T6839] ? process_one_work+0x1670/0x1670 [ 1654.273985][ T6839] kthread+0x3b5/0x4a0 [ 1654.278025][ T6839] ? __kthread_bind_mask+0xc0/0xc0 [ 1654.283121][ T6839] ret_from_fork+0x1f/0x30 [ 1654.288677][ T6839] Kernel Offset: disabled [ 1654.293000][ T6839] Rebooting in 86400 seconds..