Why does bluetoothd crash by the request of AVDTP: Get Capabilities?

[takeshi-dodo]

Hi,

I don't know much about bluez, so I'd be grateful if I get some advise.
After the request timeout of AVDTP: Get Capabilities, the bluetoothd crashed by SEGV. Why?

This happened during running the A2DP/SNK/SET/BV-05-C in PTS.
When the request timeout was extended, the time until the timeout and crash increased,
so I think that the request timeout of AVDTP: Get Capabilities is causing the crash .

[version]
bluez 5.72

[log]
bluetootctl.txt
btmon.txt
gdb.txt
strace.txt
varlog.txt
pts.txt

Best regards,
Takeshi.