program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000080)={[], [{@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x0, 0x34, 0x34, 0x37, 0x62, 0x33], 0x2d, [0x78, 0x32, 0x37, 0x31], 0x2d, [0x9, 0x37, 0x66, 0x65], 0x2d, [0x6c, 0x32, 0x30, 0x65], 0x2d, [0x66, 0x66, 0x30, 0x30, 0x65, 0x65, 0x65, 0x64]}}}]}, 0xfc, 0x58b, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/Jvgwn0R0OND3LbRZGU2X0aRjrQO3B/fiiwxBxIHou+8+Dv8B/4qBDoaMog++VG5y02Vt0rVZtqbN5wN3O+fem57zzbnfm3NzExJA3xpL/8lFvBoR3yYRI03bBiPbOFbfb+XRjel0SWJ19fO/k0iydY39k+z/Q1nllYj4/euIk7mN7VaWlucKpVJxIauPV+evjleWlk9dni/MFmeLVyanps68MzX5/nvvdi3WN8//+8Nn9z4+883xle9/fXDkThJn43C2rTmOZ3CzuTIWY9lzMhRn1+040YXGekmy0x2gIwNZng9Feg4YiYEs61taHXmRXQOes6/StAb6VCL/oU815gGNa/suXQfvGg8/rF8AbYx/sP7eSAzXro0OriT1K6P99a3p9e5oF9pP2/jtr7t30iXavQ+xvwsNAaxz81ZEnB4c3Hj+S7LzX+dOb2Gf9W302+sP7KR76fznrVbzn9za/Cea5z+ZQy1ytxNPz//cgy4001Y6//ug5fx37abV6EBWe6k25xtKLl0uFdNz28sRcSKG9qf1iYj4qPVNkIu5lfur7dpvnv+lS9p+Yy6Y9ePB4Lr530yhWnj2yOse3op4reX8N1kb/6TF+KfPx/kttnGsePf1dtueHv/ztfpzxBstx//xYCab358crx0P442jYqN/bh/7o137m8Y/3PVwN0jH/+Dm8Y8mzfdrK9tv46fh/4pPrDjwuNjp8b8v+aJW3petu16oVhcmIvYln25cP/n4sY16Y/80/hPHNz//tTr+0xAubjH+20dvN+/6xKju9PGfxj+zrfHffuH+J1/+2K79rY3/27XSiWzNVs5/W+3gszx3AAAAAAAA0GtyEXE4klx+rZzL5fP1z3ccjYO5UrlSPXmpvHhlJmrflR2NoVzjTvdI0+chJrLPwzbqk+vqUxFxJCK+GzhQq+eny6WZnQ4eAAAAAAAAAAAAAAAAAAAAesShiOFW3/9P/TnQ+jFtVgO70SY/+Q3sce3zP9vSjV96AnqS13/oXx3kv/cAYI/w+g/9S/5D/5L/0L/kP/Qv+Q/9azv5/8u559gRAAAAAAAAAAAAAAAAAAAAAAAAAAAA2BvOnzuXLqsrj25Mp/WZa0uLc+Vrp2aKlbn8/OJ0frq8cDU/Wy7Plor56fL80/5eqVy+OjEZi9fHq8VKdbyytHxhvrx4pXrh8nxhtnihOPRCogIAAAAAAAAAAAAAAAAAAIDdpbK0PFcolYoLu6aQdfxmr/Sn3wuDvdGNHizkeqMbHRZ2+MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE3+DwAA//9wRDgA") syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000"], 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0x40085112, &(0x7f0000000180)=0x8) r2 = dup(r1) readv(r2, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/4096, 0x4}, {0x0, 0x4}], 0x2) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x5, 0x14}, {0x8, 0x2, 0xfcd2, 0xe, [0x101, 0x0, 0x7fff, 0x9, 0xd7, 0x3]}}}}, 0x21) [ 84.362046][ T5302] Bluetooth: hci0: command tx timeout [ 84.505793][ T5325] loop0: detected capacity change from 0 to 1024 [ 84.545441][ T5325] ext4: Unknown parameter 'obj_user' [ 84.577753][ T5302] ================================================================== [ 84.581325][ T5302] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x2a3/0xb90 [ 84.584957][ T5302] Read of size 20 at addr ffffc9000f80f4e0 by task kworker/u5:2/5302 [ 84.588809][ T5302] [ 84.590099][ T5302] CPU: 0 UID: 0 PID: 5302 Comm: kworker/u5:2 Not tainted syzkaller #0 PREEMPT(full) [ 84.590120][ T5302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.590133][ T5302] Workqueue: hci0 hci_rx_work [ 84.590158][ T5302] Call Trace: [ 84.590167][ T5302] [ 84.590176][ T5302] dump_stack_lvl+0xe8/0x150 [ 84.590218][ T5302] print_report+0xba/0x230 [ 84.590236][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 84.590251][ T5302] kasan_report+0x117/0x150 [ 84.590283][ T5302] ? trace_kmem_cache_alloc+0x29/0xf0 [ 84.590334][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 84.590357][ T5302] kasan_check_range+0x264/0x2c0 [ 84.590377][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 84.590394][ T5302] __asan_memcpy+0x29/0x70 [ 84.590414][ T5302] l2cap_send_cmd+0x2a3/0xb90 [ 84.590433][ T5302] l2cap_recv_frame+0xc032/0x10240 [ 84.590450][ T5302] ? lock_release+0x4b/0x3d0 [ 84.591166][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 84.591187][ T5302] ? unwind_next_frame+0xa5/0x23c0 [ 84.591209][ T5302] ? rcu_is_watching+0x15/0xb0 [ 84.591229][ T5302] ? lock_release+0x4b/0x3d0 [ 84.591249][ T5302] ? unwind_next_frame+0x1aaf/0x23c0 [ 84.591270][ T5302] ? unwind_next_frame+0xa5/0x23c0 [ 84.591288][ T5302] ? unwind_next_frame+0x1aaf/0x23c0 [ 84.591312][ T5302] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 84.591327][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 84.591346][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 84.591364][ T5302] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 84.591382][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 84.591401][ T5302] ? stack_trace_save+0xa9/0x100 [ 84.591414][ T5302] ? __pfx_stack_trace_save+0x10/0x10 [ 84.591426][ T5302] ? check_path+0x21/0x40 [ 84.591443][ T5302] ? check_noncircular+0xda/0x150 [ 84.591462][ T5302] ? add_lock_to_list+0xc7/0x100 [ 84.591481][ T5302] ? lockdep_unlock+0x5d/0xd0 [ 84.591495][ T5302] ? __lock_acquire+0x146e/0x2cf0 [ 84.591516][ T5302] ? __mutex_trylock_common+0x158/0x260 [ 84.591537][ T5302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.591556][ T5302] ? rcu_is_watching+0x15/0xb0 [ 84.591572][ T5302] ? trace_contention_end+0x3d/0x150 [ 84.591592][ T5302] ? __mutex_lock+0x319/0x1300 [ 84.591634][ T5302] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 84.591653][ T5302] ? l2cap_recv_acldata+0x30b/0x13e0 [ 84.591670][ T5302] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 84.591686][ T5302] ? __pfx___mutex_lock+0x10/0x10 [ 84.591702][ T5302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.591715][ T5302] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 84.591732][ T5302] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 84.591748][ T5302] ? l2cap_recv_acldata+0x41/0x13e0 [ 84.591764][ T5302] l2cap_recv_acldata+0x7e9/0x13e0 [ 84.591782][ T5302] hci_rx_work+0x4f9/0x1030 [ 84.591798][ T5302] ? process_scheduled_works+0xa8d/0x18c0 [ 84.591816][ T5302] process_scheduled_works+0xb6e/0x18c0 [ 84.591840][ T5302] ? __pfx_process_scheduled_works+0x10/0x10 [ 84.591857][ T5302] ? assign_work+0x3d5/0x5e0 [ 84.591874][ T5302] worker_thread+0xa53/0xfc0 [ 84.591897][ T5302] kthread+0x388/0x470 [ 84.591910][ T5302] ? __pfx_worker_thread+0x10/0x10 [ 84.591924][ T5302] ? __pfx_kthread+0x10/0x10 [ 84.591936][ T5302] ret_from_fork+0x51e/0xb90 [ 84.591956][ T5302] ? __pfx_ret_from_fork+0x10/0x10 [ 84.591970][ T5302] ? __switch_to+0xc7d/0x1450 [ 84.591986][ T5302] ? __pfx_kthread+0x10/0x10 [ 84.591998][ T5302] ret_from_fork_asm+0x1a/0x30 [ 84.592021][ T5302] [ 84.592026][ T5302] [ 84.752884][ T5302] The buggy address belongs to stack of task kworker/u5:2/5302 [ 84.756491][ T5302] and is located at offset 128 in frame: [ 84.759003][ T5302] l2cap_recv_frame+0x0/0x10240 [ 84.761010][ T5302] [ 84.762418][ T5302] This frame has 26 objects: [ 84.765016][ T5302] [32, 34) 'rsp.i241.i.i' [ 84.765032][ T5302] [48, 88) 'chan.i.i.i' [ 84.767630][ T5302] [128, 146) 'pdu_u.i.i.i' [ 84.769959][ T5302] [192, 202) 'rsp.i94.i.i' [ 84.772543][ T5302] [224, 226) 'rsp.i.i.i111' [ 84.775000][ T5302] [240, 242) 'rej.i' [ 84.777241][ T5302] [256, 258) 'rej.i145.i' [ 84.779144][ T5302] [272, 274) 'rej.i143.i' [ 84.781202][ T5302] [288, 290) 'req.i229.i.i' [ 84.783324][ T5302] [304, 312) 'buf.i222.i.i' [ 84.785475][ T5302] [336, 348) 'buf29.i.i.i' [ 84.788441][ T5302] [368, 372) 'rsp49.i.i.i' [ 84.790984][ T5302] [384, 393) 'rfc.i.i118.i.i' [ 84.793263][ T5302] [416, 480) 'buf.i119.i.i' [ 84.795488][ T5302] [512, 576) 'req.i120.i.i' [ 84.797498][ T5302] [608, 617) 'rfc.i.i.i.i' [ 84.799437][ T5302] [640, 656) 'efs.i.i.i.i' [ 84.801465][ T5302] [672, 678) 'rej.i371.i.i.i' [ 84.803746][ T5302] [704, 710) 'rej.i.i.i.i' [ 84.806835][ T5302] [736, 800) 'rsp.i.i.i' [ 84.809507][ T5302] [832, 896) 'buf.i.i.i' [ 84.811379][ T5302] [928, 1056) 'req.i.i.i' [ 84.813268][ T5302] [1088, 1096) 'rsp.i.i.i.i' [ 84.815009][ T5302] [1120, 1122) 'info.i.i.i.i' [ 84.816854][ T5302] [1136, 1264) 'buf.i.i.i.i' [ 84.818831][ T5302] [1296, 1298) 'rej.i.i' [ 84.820783][ T5302] [ 84.823518][ T5302] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc9000f808000 allocated at copy_process+0x508/0x3cd0 [ 84.829828][ T5302] The buggy address belongs to the physical page: [ 84.833107][ T5302] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f5a7 [ 84.837744][ T5302] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.842568][ T5302] raw: 00fff00000000000 0000000000000000 ffffea00007d69c8 0000000000000000 [ 84.847386][ T5302] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 84.851936][ T5302] page dumped because: kasan: bad access detected [ 84.855580][ T5302] page_owner tracks the page as allocated [ 84.859448][ T5302] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 81404387614, free_ts 64724739773 [ 84.868962][ T5302] post_alloc_hook+0x231/0x280 [ 84.871450][ T5302] get_page_from_freelist+0x24dc/0x2580 [ 84.874268][ T5302] __alloc_frozen_pages_noprof+0x18d/0x380 [ 84.877410][ T5302] __alloc_pages_noprof+0xa/0x30 [ 84.880085][ T5302] __vmalloc_node_range_noprof+0x7be/0x1730 [ 84.882934][ T5302] __vmalloc_node_noprof+0xc2/0x100 [ 84.885742][ T5302] dup_task_struct+0x275/0x9a0 [ 84.888505][ T5302] copy_process+0x508/0x3cd0 [ 84.890623][ T5302] kernel_clone+0x248/0x8e0 [ 84.892599][ T5302] kernel_thread+0x13f/0x1b0 [ 84.894385][ T5302] kthreadd+0x4ec/0x6e0 [ 84.896169][ T5302] ret_from_fork+0x51e/0xb90 [ 84.898178][ T5302] ret_from_fork_asm+0x1a/0x30 [ 84.900711][ T5302] page last free pid 5233 tgid 5233 stack trace: [ 84.904122][ T5302] __free_frozen_pages+0xc2b/0xdb0 [ 84.906552][ T5302] __slab_free+0x263/0x2b0 [ 84.908915][ T5302] qlist_free_all+0x97/0x100 [ 84.911889][ T5302] kasan_quarantine_reduce+0x148/0x160 [ 84.915262][ T5302] __kasan_slab_alloc+0x22/0x80 [ 84.918193][ T5302] kmem_cache_alloc_noprof+0x2bc/0x650 [ 84.920778][ T5302] vm_area_alloc+0x24/0x140 [ 84.922904][ T5302] mmap_region+0x10eb/0x2240 [ 84.924942][ T5302] do_mmap+0xc39/0x10c0 [ 84.926985][ T5302] vm_mmap_pgoff+0x2c9/0x4f0 [ 84.929330][ T5302] ksys_mmap_pgoff+0x51e/0x760 [ 84.931677][ T5302] do_syscall_64+0x14d/0xf80 [ 84.934279][ T5302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.937008][ T5302] [ 84.937965][ T5302] Memory state around the buggy address: [ 84.940543][ T5302] ffffc9000f80f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.943576][ T5302] ffffc9000f80f400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 84.946758][ T5302] >ffffc9000f80f480: f8 f2 f8 f8 f8 f8 f8 f2 f2 f2 f2 f2 00 00 02 f2 [ 84.950562][ T5302] ^ [ 84.954758][ T5302] ffffc9000f80f500: f2 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f2 f8 f2 f8 f2 [ 84.959575][ T5302] ffffc9000f80f580: f8 f2 f8 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f8 f2 f2 [ 84.963231][ T5302] ================================================================== [ 84.988605][ T5302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.991644][ T5302] CPU: 0 UID: 0 PID: 5302 Comm: kworker/u5:2 Not tainted syzkaller #0 PREEMPT(full) [ 84.995880][ T5302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.000517][ T5302] Workqueue: hci0 hci_rx_work [ 85.002740][ T5302] Call Trace: [ 85.004059][ T5302] [ 85.005284][ T5302] vpanic+0x56c/0xa60 [ 85.006786][ T5302] ? __pfx_vpanic+0x10/0x10 [ 85.008955][ T5302] panic+0xc5/0xd0 [ 85.010598][ T5302] ? __pfx_panic+0x10/0x10 [ 85.012870][ T5302] ? preempt_schedule_thunk+0x16/0x30 [ 85.015768][ T5302] ? preempt_schedule_thunk+0x16/0x30 [ 85.018203][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 85.020433][ T5302] check_panic_on_warn+0x89/0xb0 [ 85.022837][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 85.025007][ T5302] end_report+0x73/0x180 [ 85.026859][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 85.029497][ T5302] kasan_report+0x128/0x150 [ 85.032041][ T5302] ? trace_kmem_cache_alloc+0x29/0xf0 [ 85.034646][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 85.036848][ T5302] kasan_check_range+0x264/0x2c0 [ 85.039021][ T5302] ? l2cap_send_cmd+0x2a3/0xb90 [ 85.041173][ T5302] __asan_memcpy+0x29/0x70 [ 85.043284][ T5302] l2cap_send_cmd+0x2a3/0xb90 [ 85.046049][ T5302] l2cap_recv_frame+0xc032/0x10240 [ 85.049021][ T5302] ? lock_release+0x4b/0x3d0 [ 85.051409][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 85.053695][ T5302] ? unwind_next_frame+0xa5/0x23c0 [ 85.055726][ T5302] ? rcu_is_watching+0x15/0xb0 [ 85.057756][ T5302] ? lock_release+0x4b/0x3d0 [ 85.059796][ T5302] ? unwind_next_frame+0x1aaf/0x23c0 [ 85.062312][ T5302] ? unwind_next_frame+0xa5/0x23c0 [ 85.064512][ T5302] ? unwind_next_frame+0x1aaf/0x23c0 [ 85.067408][ T5302] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 85.070244][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 85.072734][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 85.075108][ T5302] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.077730][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 85.079759][ T5302] ? stack_trace_save+0xa9/0x100 [ 85.081608][ T5302] ? __pfx_stack_trace_save+0x10/0x10 [ 85.083871][ T5302] ? check_path+0x21/0x40 [ 85.085862][ T5302] ? check_noncircular+0xda/0x150 [ 85.088247][ T5302] ? add_lock_to_list+0xc7/0x100 [ 85.090467][ T5302] ? lockdep_unlock+0x5d/0xd0 [ 85.092825][ T5302] ? __lock_acquire+0x146e/0x2cf0 [ 85.095057][ T5302] ? __mutex_trylock_common+0x158/0x260 [ 85.097616][ T5302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 85.100197][ T5302] ? rcu_is_watching+0x15/0xb0 [ 85.102333][ T5302] ? trace_contention_end+0x3d/0x150 [ 85.104422][ T5302] ? __mutex_lock+0x319/0x1300 [ 85.107040][ T5302] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 85.109913][ T5302] ? l2cap_recv_acldata+0x30b/0x13e0 [ 85.112505][ T5302] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 85.115248][ T5302] ? __pfx___mutex_lock+0x10/0x10 [ 85.117823][ T5302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.120792][ T5302] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 85.123905][ T5302] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 85.126995][ T5302] ? l2cap_recv_acldata+0x41/0x13e0 [ 85.129987][ T5302] l2cap_recv_acldata+0x7e9/0x13e0 [ 85.133103][ T5302] hci_rx_work+0x4f9/0x1030 [ 85.135477][ T5302] ? process_scheduled_works+0xa8d/0x18c0 [ 85.138336][ T5302] process_scheduled_works+0xb6e/0x18c0 [ 85.141267][ T5302] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.144523][ T5302] ? assign_work+0x3d5/0x5e0 [ 85.147046][ T5302] worker_thread+0xa53/0xfc0 [ 85.149068][ T5302] kthread+0x388/0x470 [ 85.150879][ T5302] ? __pfx_worker_thread+0x10/0x10 [ 85.153305][ T5302] ? __pfx_kthread+0x10/0x10 [ 85.155354][ T5302] ret_from_fork+0x51e/0xb90 [ 85.157573][ T5302] ? __pfx_ret_from_fork+0x10/0x10 [ 85.160110][ T5302] ? __switch_to+0xc7d/0x1450 [ 85.162194][ T5302] ? __pfx_kthread+0x10/0x10 [ 85.164064][ T5302] ret_from_fork_asm+0x1a/0x30 [ 85.166094][ T5302] [ 85.167954][ T5302] Kernel Offset: disabled [ 85.169831][ T5302] Rebooting in 86400 seconds..