Warning: Permanently added '10.128.1.126' (ECDSA) to the list of known hosts. 2021/08/26 11:16:14 parsed 1 programs 2021/08/26 11:16:14 executed programs: 0 [ 1588.743540][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 1588.827687][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.837180][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.845125][ T6579] device bridge_slave_0 entered promiscuous mode [ 1588.855706][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.863016][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.871222][ T6579] device bridge_slave_1 entered promiscuous mode [ 1588.904929][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.917345][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.951247][ T6579] team0: Port device team_slave_0 added [ 1588.959605][ T6579] team0: Port device team_slave_1 added [ 1588.986954][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.994796][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.020869][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.033869][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.041030][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.067811][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.107958][ T6579] device hsr_slave_0 entered promiscuous mode [ 1589.114616][ T6579] device hsr_slave_1 entered promiscuous mode [ 1589.242517][ T6579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1589.253790][ T6579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1589.264658][ T6579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1589.275533][ T6579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1589.302573][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.310133][ T6579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.318294][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.325378][ T6579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.373495][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.389279][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1589.403646][ T1265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.413277][ T1265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.423877][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1589.439541][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.453465][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1589.462952][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.470305][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.483133][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1589.492058][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.499343][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.525205][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1589.535126][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1589.550318][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1589.562402][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1589.577677][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.589527][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1589.598833][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1589.622152][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1589.631166][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1589.644516][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.666524][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1589.689008][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1589.698377][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1589.706281][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1589.720001][ T6579] device veth0_vlan entered promiscuous mode [ 1589.732187][ T6579] device veth1_vlan entered promiscuous mode [ 1589.756279][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1589.765666][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1589.780050][ T6579] device veth0_macvtap entered promiscuous mode [ 1589.791962][ T6579] device veth1_macvtap entered promiscuous mode [ 1589.809936][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.818496][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1589.826702][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1589.834733][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1589.844317][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1589.858366][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.865729][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1589.875640][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1589.890583][ T6579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.899846][ T6579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.913061][ T6579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.924158][ T6579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.028228][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.036440][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.069413][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1590.093445][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.101853][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.111838][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1590.567561][ T6912] Bluetooth: hci0: command 0x0409 tx timeout [ 1592.647352][ T6744] Bluetooth: hci0: command 0x041b tx timeout 2021/08/26 11:16:20 executed programs: 3 [ 1594.736421][ T6744] Bluetooth: hci0: command 0x040f tx timeout [ 1596.806173][ T6912] Bluetooth: hci0: command 0x0419 tx timeout 2021/08/26 11:16:25 executed programs: 9 [ 1598.886008][ T6912] Bluetooth: hci0: command 0x0405 tx timeout 2021/08/26 11:16:30 executed programs: 15 [ 1607.046163][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.052973][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 2021/08/26 11:16:35 executed programs: 21 2021/08/26 11:16:40 executed programs: 27 2021/08/26 11:16:46 executed programs: 33 2021/08/26 11:16:51 executed programs: 39 2021/08/26 11:16:56 executed programs: 45 [ 1633.924188][ T6912] ================================================================== [ 1633.932279][ T6912] BUG: KASAN: use-after-free in __lock_acquire+0x3d86/0x54a0 [ 1633.940103][ T6912] Read of size 8 at addr ffff88807c0090a0 by task kworker/1:3/6912 [ 1633.948058][ T6912] [ 1633.950569][ T6912] CPU: 1 PID: 6912 Comm: kworker/1:3 Not tainted 5.14.0-rc7-next-20210825-syzkaller #0 [ 1633.960305][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1633.970465][ T6912] Workqueue: events l2cap_chan_timeout [ 1633.976100][ T6912] Call Trace: [ 1633.979368][ T6912] dump_stack_lvl+0xcd/0x134 [ 1633.984014][ T6912] print_address_description.constprop.0.cold+0x6c/0x309 [ 1633.991060][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1633.996094][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1634.001138][ T6912] kasan_report.cold+0x83/0xdf [ 1634.006000][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1634.011022][ T6912] __lock_acquire+0x3d86/0x54a0 [ 1634.015977][ T6912] ? mark_lock+0xef/0x17b0 [ 1634.020411][ T6912] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1634.026374][ T6912] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1634.032362][ T6912] ? lock_chain_count+0x20/0x20 [ 1634.037301][ T6912] lock_acquire+0x1ab/0x510 [ 1634.041809][ T6912] ? lock_sock_nested+0x40/0x120 [ 1634.047060][ T6912] ? lock_release+0x720/0x720 [ 1634.052085][ T6912] ? del_timer+0xc5/0x110 [ 1634.056499][ T6912] _raw_spin_lock_bh+0x2f/0x40 [ 1634.061282][ T6912] ? lock_sock_nested+0x40/0x120 [ 1634.066233][ T6912] lock_sock_nested+0x40/0x120 [ 1634.071870][ T6912] l2cap_sock_teardown_cb+0xa1/0x660 [ 1634.077245][ T6912] ? __mutex_lock+0x21c/0x12f0 [ 1634.082015][ T6912] l2cap_chan_del+0xbc/0xa80 [ 1634.086704][ T6912] l2cap_chan_close+0x1b9/0xaf0 [ 1634.091577][ T6912] ? l2cap_rx+0x1fb0/0x1fb0 [ 1634.096099][ T6912] ? lock_release+0x720/0x720 [ 1634.100792][ T6912] ? lock_downgrade+0x6e0/0x6e0 [ 1634.105654][ T6912] l2cap_chan_timeout+0x17e/0x2f0 [ 1634.110784][ T6912] process_one_work+0x9b2/0x1690 [ 1634.115863][ T6912] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1634.121282][ T6912] ? rwlock_bug.part.0+0x90/0x90 [ 1634.126235][ T6912] ? _raw_spin_lock_irq+0x41/0x50 [ 1634.131278][ T6912] worker_thread+0x658/0x11f0 [ 1634.135958][ T6912] ? process_one_work+0x1690/0x1690 [ 1634.141166][ T6912] kthread+0x3e5/0x4d0 [ 1634.145289][ T6912] ? set_kthread_struct+0x130/0x130 [ 1634.150917][ T6912] ret_from_fork+0x1f/0x30 [ 1634.155983][ T6912] [ 1634.158294][ T6912] Allocated by task 6957: [ 1634.162623][ T6912] kasan_save_stack+0x1b/0x40 [ 1634.167698][ T6912] __kasan_kmalloc+0xa4/0xd0 [ 1634.172280][ T6912] sk_prot_alloc+0x110/0x290 [ 1634.176869][ T6912] sk_alloc+0x32/0xbc0 [ 1634.181316][ T6912] l2cap_sock_alloc.constprop.0+0x31/0x230 [ 1634.187243][ T6912] l2cap_sock_create+0x123/0x1f0 [ 1634.192191][ T6912] bt_sock_create+0x17c/0x340 [ 1634.196940][ T6912] __sock_create+0x353/0x790 [ 1634.201567][ T6912] __sys_socket+0xef/0x200 [ 1634.205973][ T6912] __x64_sys_socket+0x6f/0xb0 [ 1634.210658][ T6912] do_syscall_64+0x35/0xb0 [ 1634.215234][ T6912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1634.221219][ T6912] [ 1634.223530][ T6912] Freed by task 6957: [ 1634.227507][ T6912] kasan_save_stack+0x1b/0x40 [ 1634.232187][ T6912] kasan_set_track+0x1c/0x30 [ 1634.236810][ T6912] kasan_set_free_info+0x20/0x30 [ 1634.241746][ T6912] __kasan_slab_free+0xff/0x130 [ 1634.246718][ T6912] slab_free_freelist_hook+0x81/0x190 [ 1634.252200][ T6912] kfree+0xe4/0x530 [ 1634.256105][ T6912] __sk_destruct+0x6a8/0x900 [ 1634.260691][ T6912] sk_destruct+0xbd/0xe0 [ 1634.264926][ T6912] __sk_free+0xef/0x3d0 [ 1634.269085][ T6912] sk_free+0x78/0xa0 [ 1634.273073][ T6912] l2cap_sock_kill+0x203/0x240 [ 1634.277930][ T6912] l2cap_sock_release+0x184/0x200 [ 1634.283031][ T6912] __sock_release+0xcd/0x280 [ 1634.287972][ T6912] sock_close+0x18/0x20 [ 1634.292299][ T6912] __fput+0x288/0x9f0 [ 1634.296329][ T6912] task_work_run+0xdd/0x1a0 [ 1634.300825][ T6912] get_signal+0x1b35/0x2160 [ 1634.305467][ T6912] arch_do_signal_or_restart+0x2a9/0x1c40 [ 1634.311416][ T6912] exit_to_user_mode_prepare+0x17d/0x290 [ 1634.317061][ T6912] syscall_exit_to_user_mode+0x19/0x60 [ 1634.322612][ T6912] do_syscall_64+0x42/0xb0 [ 1634.327110][ T6912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1634.333009][ T6912] [ 1634.335320][ T6912] Last potentially related work creation: [ 1634.341019][ T6912] kasan_save_stack+0x1b/0x40 [ 1634.345703][ T6912] kasan_record_aux_stack+0xe9/0x110 [ 1634.351002][ T6912] call_rcu+0xb1/0x740 [ 1634.355156][ T6912] netlink_release+0xdd4/0x1dd0 [ 1634.360060][ T6912] __sock_release+0xcd/0x280 [ 1634.364663][ T6912] sock_close+0x18/0x20 [ 1634.368925][ T6912] __fput+0x288/0x9f0 [ 1634.373184][ T6912] task_work_run+0xdd/0x1a0 [ 1634.377808][ T6912] do_exit+0xbae/0x2a30 [ 1634.382006][ T6912] do_group_exit+0x125/0x310 [ 1634.386873][ T6912] __x64_sys_exit_group+0x3a/0x50 [ 1634.391894][ T6912] do_syscall_64+0x35/0xb0 [ 1634.396314][ T6912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1634.402219][ T6912] [ 1634.404530][ T6912] Second to last potentially related work creation: [ 1634.416218][ T6912] kasan_save_stack+0x1b/0x40 [ 1634.422829][ T6912] kasan_record_aux_stack+0xe9/0x110 [ 1634.428207][ T6912] insert_work+0x48/0x370 [ 1634.432545][ T6912] __queue_work+0x5ca/0xf30 [ 1634.437054][ T6912] queue_work_on+0xee/0x110 [ 1634.441558][ T6912] release_tty+0x4e9/0x610 [ 1634.446250][ T6912] tty_release_struct+0xb4/0xe0 [ 1634.451107][ T6912] tty_release+0xc70/0x1200 [ 1634.455625][ T6912] __fput+0x288/0x9f0 [ 1634.459611][ T6912] task_work_run+0xdd/0x1a0 [ 1634.464196][ T6912] exit_to_user_mode_prepare+0x27e/0x290 [ 1634.469825][ T6912] syscall_exit_to_user_mode+0x19/0x60 [ 1634.475977][ T6912] do_syscall_64+0x42/0xb0 [ 1634.480395][ T6912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1634.486294][ T6912] [ 1634.488607][ T6912] The buggy address belongs to the object at ffff88807c009000 [ 1634.488607][ T6912] which belongs to the cache kmalloc-2k of size 2048 [ 1634.502649][ T6912] The buggy address is located 160 bytes inside of [ 1634.502649][ T6912] 2048-byte region [ffff88807c009000, ffff88807c009800) [ 1634.516177][ T6912] The buggy address belongs to the page: [ 1634.521806][ T6912] page:ffffea0001f00200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807c00f000 pfn:0x7c008 [ 1634.534203][ T6912] head:ffffea0001f00200 order:3 compound_mapcount:0 compound_pincount:0 [ 1634.542615][ T6912] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1634.550595][ T6912] raw: 00fff00000010200 ffffea0000497608 ffffea0001d9b008 ffff888010c42000 [ 1634.559263][ T6912] raw: ffff88807c00f000 0000000000080007 00000001ffffffff 0000000000000000 [ 1634.568174][ T6912] page dumped because: kasan: bad access detected [ 1634.574569][ T6912] page_owner tracks the page as allocated [ 1634.580271][ T6912] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 16734088307, free_ts 13766727995 [ 1634.599104][ T6912] get_page_from_freelist+0xa72/0x2f80 [ 1634.604611][ T6912] __alloc_pages+0x1b2/0x500 [ 1634.609195][ T6912] alloc_pages+0x1a7/0x300 [ 1634.613613][ T6912] new_slab+0x319/0x490 [ 1634.617849][ T6912] ___slab_alloc+0x9b6/0x1100 [ 1634.622560][ T6912] __slab_alloc.constprop.0+0x4d/0xa0 [ 1634.627928][ T6912] kmem_cache_alloc_trace+0x302/0x3c0 [ 1634.633468][ T6912] alloc_tty_struct+0x95/0x920 [ 1634.638227][ T6912] tty_init_dev.part.0+0x20/0x610 [ 1634.643293][ T6912] tty_open+0xb16/0x1000 [ 1634.647616][ T6912] chrdev_open+0x266/0x770 [ 1634.652094][ T6912] do_dentry_open+0x4c8/0x11d0 [ 1634.656970][ T6912] path_openat+0x1c9a/0x2740 [ 1634.661556][ T6912] do_filp_open+0x1aa/0x400 [ 1634.666061][ T6912] do_sys_openat2+0x16d/0x4d0 [ 1634.670743][ T6912] __x64_sys_open+0x119/0x1c0 [ 1634.675430][ T6912] page last free stack trace: [ 1634.680122][ T6912] free_pcp_prepare+0x373/0x860 [ 1634.685067][ T6912] free_unref_page+0x19/0x690 [ 1634.689831][ T6912] free_contig_range+0xa8/0xf0 [ 1634.694590][ T6912] destroy_args+0xa8/0x646 [ 1634.699068][ T6912] debug_vm_pgtable+0x295b/0x29ed [ 1634.704096][ T6912] do_one_initcall+0x103/0x650 [ 1634.708855][ T6912] kernel_init_freeable+0x6b1/0x73a [ 1634.714313][ T6912] kernel_init+0x1a/0x1d0 [ 1634.719333][ T6912] ret_from_fork+0x1f/0x30 [ 1634.723854][ T6912] [ 1634.726165][ T6912] Memory state around the buggy address: [ 1634.731782][ T6912] ffff88807c008f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1634.739834][ T6912] ffff88807c009000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.748050][ T6912] >ffff88807c009080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.756098][ T6912] ^ [ 1634.761457][ T6912] ffff88807c009100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.769518][ T6912] ffff88807c009180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1634.777581][ T6912] ================================================================== [ 1634.785633][ T6912] Disabling lock debugging due to kernel taint [ 1634.791783][ T6912] Kernel panic - not syncing: panic_on_warn set ... [ 1634.798358][ T6912] CPU: 1 PID: 6912 Comm: kworker/1:3 Tainted: G B 5.14.0-rc7-next-20210825-syzkaller #0 [ 1634.809654][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1634.819702][ T6912] Workqueue: events l2cap_chan_timeout [ 1634.825303][ T6912] Call Trace: [ 1634.828579][ T6912] dump_stack_lvl+0xcd/0x134 [ 1634.833170][ T6912] panic+0x2b0/0x6dd [ 1634.837098][ T6912] ? __warn_printk+0xf3/0xf3 [ 1634.841690][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1634.846713][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1634.851765][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1634.856801][ T6912] end_report.cold+0x63/0x6f [ 1634.861388][ T6912] kasan_report.cold+0x71/0xdf [ 1634.866156][ T6912] ? __lock_acquire+0x3d86/0x54a0 [ 1634.871447][ T6912] __lock_acquire+0x3d86/0x54a0 [ 1634.876296][ T6912] ? mark_lock+0xef/0x17b0 [ 1634.880723][ T6912] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1634.886540][ T6912] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1634.892562][ T6912] ? lock_chain_count+0x20/0x20 [ 1634.897434][ T6912] lock_acquire+0x1ab/0x510 [ 1634.902033][ T6912] ? lock_sock_nested+0x40/0x120 [ 1634.907001][ T6912] ? lock_release+0x720/0x720 [ 1634.911701][ T6912] ? del_timer+0xc5/0x110 [ 1634.916046][ T6912] _raw_spin_lock_bh+0x2f/0x40 [ 1634.920825][ T6912] ? lock_sock_nested+0x40/0x120 [ 1634.925760][ T6912] lock_sock_nested+0x40/0x120 [ 1634.930543][ T6912] l2cap_sock_teardown_cb+0xa1/0x660 [ 1634.935825][ T6912] ? __mutex_lock+0x21c/0x12f0 [ 1634.940582][ T6912] l2cap_chan_del+0xbc/0xa80 [ 1634.945176][ T6912] l2cap_chan_close+0x1b9/0xaf0 [ 1634.950032][ T6912] ? l2cap_rx+0x1fb0/0x1fb0 [ 1634.954540][ T6912] ? lock_release+0x720/0x720 [ 1634.959210][ T6912] ? lock_downgrade+0x6e0/0x6e0 [ 1634.964058][ T6912] l2cap_chan_timeout+0x17e/0x2f0 [ 1634.969084][ T6912] process_one_work+0x9b2/0x1690 [ 1634.974025][ T6912] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1634.979413][ T6912] ? rwlock_bug.part.0+0x90/0x90 [ 1634.984355][ T6912] ? _raw_spin_lock_irq+0x41/0x50 [ 1634.989378][ T6912] worker_thread+0x658/0x11f0 [ 1634.994060][ T6912] ? process_one_work+0x1690/0x1690 [ 1634.999284][ T6912] kthread+0x3e5/0x4d0 [ 1635.003348][ T6912] ? set_kthread_struct+0x130/0x130 [ 1635.009080][ T6912] ret_from_fork+0x1f/0x30 [ 1635.015049][ T6912] Kernel Offset: disabled [ 1635.019364][ T6912] Rebooting in 86400 seconds..