cancel_delayed_work_sync(&conn->info_work);
 
        if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->pend)) {
-               del_timer(&conn->security_timer);
+               cancel_delayed_work_sync(&conn->security_timer);
                smp_chan_destroy(conn);
        }
 
        kfree(conn);
 }
 
-static void security_timeout(unsigned long arg)
+static void security_timeout(struct work_struct *work)
 {
-       struct l2cap_conn *conn = (void *) arg;
+       struct l2cap_conn *conn = container_of(work, struct l2cap_conn,
+                                               security_timer.work);
 
        l2cap_conn_del(conn->hcon, ETIMEDOUT);
 }
        INIT_LIST_HEAD(&conn->chan_l);
 
        if (hcon->type == LE_LINK)
-               setup_timer(&conn->security_timer, security_timeout,
-                                               (unsigned long) conn);
+               INIT_DELAYED_WORK(&conn->security_timer, security_timeout);
        else
                INIT_DELAYED_WORK(&conn->info_work, l2cap_info_timeout);
 
 
        if (hcon->type == LE_LINK) {
                smp_distribute_keys(conn, 0);
-               del_timer(&conn->security_timer);
+               cancel_delayed_work_sync(&conn->security_timer);
        }
 
        rcu_read_lock();
 
        skb->priority = HCI_PRIO_MAX;
        hci_send_acl(conn->hchan, skb, 0);
 
-       mod_timer(&conn->security_timer, jiffies +
+       cancel_delayed_work_sync(&conn->security_timer);
+       schedule_delayed_work(&conn->security_timer,
                                        msecs_to_jiffies(SMP_TIMEOUT));
 }
 
 
        clear_bit(HCI_CONN_ENCRYPT_PEND, &conn->hcon->pend);
        mgmt_auth_failed(conn->hcon->hdev, conn->dst, reason);
-       del_timer(&conn->security_timer);
+       cancel_delayed_work_sync(&conn->security_timer);
        smp_chan_destroy(conn);
 }
 
 
        if (conn->hcon->out || force) {
                clear_bit(HCI_CONN_LE_SMP_PEND, &conn->hcon->pend);
-               del_timer(&conn->security_timer);
+               cancel_delayed_work_sync(&conn->security_timer);
                smp_chan_destroy(conn);
        }