./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1569657884 <...> Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. execve("./syz-executor1569657884", ["./syz-executor1569657884"], 0x7ffc53081a70 /* 10 vars */) = 0 brk(NULL) = 0x555555f8d000 brk(0x555555f8dd40) = 0x555555f8dd40 arch_prctl(ARCH_SET_FS, 0x555555f8d3c0) = 0 set_tid_address(0x555555f8d690) = 5055 set_robust_list(0x555555f8d6a0, 24) = 0 rseq(0x555555f8dce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1569657884", 4096) = 28 getrandom("\xae\x8d\x23\xb3\x81\x69\xcd\x78", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555f8dd40 brk(0x555555faed40) = 0x555555faed40 brk(0x555555faf000) = 0x555555faf000 mprotect(0x7f8c696f5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f8d690) = 5056 ./strace-static-x86_64: Process 5056 attached [pid 5056] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5056] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5056] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5056] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [pid 5056] dup2(4, 202) = 202 [pid 5056] close(4) = 0 [pid 5056] write(202, "\xff\x00", 2) = 2 [pid 5056] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 5056] rt_sigaction(SIGRT_1, {sa_handler=0x7f8c69696d80, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8c69688400}, NULL, 8) = 0 [pid 5056] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5056] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8c68e31000 [pid 5056] mprotect(0x7f8c68e32000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 5056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8c69631990, parent_tid=0x7f8c69631990, exit_signal=0, stack=0x7f8c68e31000, stack_size=0x800300, tls=0x7f8c696316c0}./strace-static-x86_64: Process 5059 attached => {parent_tid=[2]}, 88) = 2 [pid 5056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] ioctl(3, HCIDEVUP [pid 5059] rseq(0x7f8c69631fe0, 0x20, 0, 0x53053053) = 0 [pid 5059] set_robust_list(0x7f8c696319a0, 24) = 0 [pid 5059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5059] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5059] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [ 71.018751][ T5057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.039050][ T5057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.056909][ T5057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [pid 5059] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x38\x0c\x00", 1024) = 4 [ 71.080578][ T5057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.120142][ T5057] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5059] read(202, [pid 5056] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [pid 5056] ioctl(3, HCISETSCAN [pid 5059] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5059] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5059] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5056] <... ioctl resumed>, 0x7ffc72b883bc) = 0 [ 71.141338][ T5057] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 5056] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5059] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] madvise(0x7f8c68e31000, 8372224, MADV_DONTNEED [pid 5056] <... writev resumed>) = 13 [pid 5059] <... madvise resumed>) = 0 [pid 5059] exit(0 [pid 5056] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5059] <... exit resumed>) = ? [pid 5056] <... writev resumed>) = 14 [pid 5059] +++ exited with 0 +++ [pid 5056] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14 [pid 5056] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 5056] close(3) = 0 [pid 5056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5056] setsid() = 1 [pid 5056] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5056] dup2(3, 201) = 201 [pid 5056] close(3) = 0 [pid 5056] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5056] unshare(CLONE_NEWNS) = 0 [pid 5056] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5056] unshare(CLONE_NEWIPC) = 0 [pid 5056] unshare(CLONE_NEWCGROUP) = 0 [pid 5056] unshare(CLONE_NEWUTS) = 0 [pid 5056] unshare(CLONE_SYSVSEM) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "16777216", 8) = 8 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "536870912", 9) = 9 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "8192", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5056] close(3) = 0 [pid 5056] getpid() = 1 [pid 5056] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5056] kill(-3, SIGKILL [pid 5061] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5061] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] kill(3, SIGKILL) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f8d690) = 4 ./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5062] setns(201, 0) = 0 [pid 5062] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5062] setns(3, 0) = 0 [pid 5062] close(3) = 0 [ 77.453685][ T4463] Bluetooth: hci0: command 0x040f tx timeout [ 79.533697][ T4463] Bluetooth: hci0: command 0x0419 tx timeout [pid 5062] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-4, SIGKILL) = 0 [pid 5062] <... connect resumed>) = ? [pid 5056] kill(4, SIGKILL) = 0 [pid 5062] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x555555f8d690) = 5 [pid 5063] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [ 81.623697][ T4463] Bluetooth: hci0: command 0x0405 tx timeout [pid 5063] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5063] setns(201, 0) = 0 [pid 5063] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5063] setns(3, 0) = 0 [pid 5063] close(3) = 0 [pid 5063] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-5, SIGKILL) = 0 [pid 5063] <... connect resumed>) = ? [pid 5056] kill(5, SIGKILL) = 0 [pid 5063] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5064 attached [pid 5064] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 6 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5064] setns(201, 0) = 0 [pid 5064] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5064] setns(3, 0) = 0 [pid 5064] close(3) = 0 [ 86.895604][ T1138] cfg80211: failed to load regulatory.db [pid 5064] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-6, SIGKILL [pid 5064] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(6, SIGKILL) = 0 [pid 5064] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 7 [pid 5067] <... prctl resumed>) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5067] setns(201, 0) = 0 [pid 5067] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5067] setns(3, 0) = 0 [pid 5067] close(3) = 0 [pid 5067] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-7, SIGKILL [pid 5067] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(7, SIGKILL) = 0 [pid 5067] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f8d690) = 8 ./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1000", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5070] setns(201, 0) = 0 [pid 5070] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5070] setns(3, 0) = 0 [pid 5070] close(3) = 0 [pid 5070] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-8, SIGKILL [pid 5070] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(8, SIGKILL) = 0 [pid 5070] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=8, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f8d690) = 9 ./strace-static-x86_64: Process 5072 attached [pid 5072] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5072] setns(201, 0) = 0 [pid 5072] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5072] setns(3, 0) = 0 [pid 5072] close(3) = 0 [pid 5072] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-9, SIGKILL [pid 5072] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(9, SIGKILL [pid 5072] +++ killed by SIGKILL +++ [pid 5056] <... kill resumed>) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=9, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f8d690) = 10 ./strace-static-x86_64: Process 5075 attached [pid 5075] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5075] setns(201, 0) = 0 [pid 5075] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5075] setns(3, 0) = 0 [pid 5075] close(3) = 0 [pid 5075] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-10, SIGKILL [pid 5075] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(10, SIGKILL) = 0 [pid 5075] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=10, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached , child_tidptr=0x555555f8d690) = 11 [pid 5083] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [pid 5083] close(3) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5083] setns(201, 0) = 0 [pid 5083] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5083] setns(3, 0) = 0 [pid 5083] close(3) = 0 [ 113.933695][ T5057] Bluetooth: hci0: command 0x0405 tx timeout [pid 5083] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-11, SIGKILL) = 0 [pid 5056] kill(11, SIGKILL [pid 5083] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5083] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=11, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 12 [pid 5086] <... openat resumed>) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5086] setns(201, 0) = 0 [pid 5086] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5086] setns(3, 0) = 0 [pid 5086] close(3) = 0 [pid 5086] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-12, SIGKILL) = 0 [pid 5086] <... connect resumed>) = ? [pid 5056] kill(12, SIGKILL) = 0 [pid 5086] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=12, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 13 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5088] setns(201, 0) = 0 [pid 5088] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5088] setns(3, 0) = 0 [pid 5088] close(3) = 0 [pid 5088] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-13, SIGKILL [pid 5088] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5088] +++ killed by SIGKILL +++ [pid 5056] kill(13, SIGKILL) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=13, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached [pid 5089] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5089] setpgid(0, 0) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 14 [pid 5089] <... openat resumed>) = 3 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5089] setns(201, 0) = 0 [pid 5089] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5089] setns(3, 0) = 0 [pid 5089] close(3) = 0 [pid 5089] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-14, SIGKILL) = 0 [pid 5089] <... connect resumed>) = ? [pid 5056] kill(14, SIGKILL) = 0 [pid 5089] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=14, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x555555f8d690) = 15 [pid 5090] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5090] setns(201, 0) = 0 [pid 5090] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5090] setns(3, 0) = 0 [pid 5090] close(3) = 0 [pid 5090] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-15, SIGKILL) = 0 [pid 5090] <... connect resumed>) = ? [pid 5056] kill(15, SIGKILL) = 0 [pid 5090] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=15, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached , child_tidptr=0x555555f8d690) = 16 [pid 5091] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5091] setns(201, 0) = 0 [pid 5091] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5091] setns(3, 0) = 0 [pid 5091] close(3) = 0 [pid 5091] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-16, SIGKILL [pid 5091] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(16, SIGKILL [pid 5091] +++ killed by SIGKILL +++ [pid 5056] <... kill resumed>) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=16, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5092 attached [pid 5092] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5092] setpgid(0, 0) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 17 [pid 5092] <... openat resumed>) = 3 [pid 5092] write(3, "1000", 4) = 4 [pid 5092] close(3) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5092] setns(201, 0) = 0 [pid 5092] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5092] setns(3, 0) = 0 [pid 5092] close(3) = 0 [pid 5092] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-17, SIGKILL [pid 5092] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(17, SIGKILL) = 0 [pid 5092] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=17, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached , child_tidptr=0x555555f8d690) = 18 [pid 5093] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5093] setpgid(0, 0) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] write(3, "1000", 4) = 4 [pid 5093] close(3) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5093] setns(201, 0) = 0 [pid 5093] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5093] setns(3, 0) = 0 [pid 5093] close(3) = 0 [pid 5093] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-18, SIGKILL [pid 5093] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(18, SIGKILL) = 0 [pid 5093] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=18, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5094 attached , child_tidptr=0x555555f8d690) = 19 [pid 5094] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5094] setns(201, 0) = 0 [pid 5094] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5094] setns(3, 0) = 0 [pid 5094] close(3) = 0 [pid 5094] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10) = -1 ECONNREFUSED (Connection refused) [pid 5094] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5094] setns(201, 0) = 0 [pid 5094] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_RFCOMM) = 5 [pid 5094] setns(3, 0) = 0 [pid 5094] close(3) = 0 [pid 5094] openat(AT_FDCWD, "blkio.bfq.io_serviced", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 5094] write(3, "\x0a\xfb\x84\xab\x3c\xec\xc3\xc2\x06\x57\x15\x00\x00\x00\x00\x77\x5f\x89\x03\x17\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 16776704 [pid 5094] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0) = 0x20000000 [pid 5094] preadv(3, 0x200015c0, 5, 0) = 16776704 [ 152.589612][ T5094] [ 152.591968][ T5094] ====================================================== [ 152.598966][ T5094] WARNING: possible circular locking dependency detected [ 152.605964][ T5094] 6.6.0-syzkaller-10102-gff269e2cd5ad #0 Not tainted [ 152.612617][ T5094] ------------------------------------------------------ [ 152.619615][ T5094] syz-executor156/5094 is trying to acquire lock: [ 152.626098][ T5094] ffffffff8ed29c68 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5b/0x190 [ 152.635142][ T5094] [ 152.635142][ T5094] but task is already holding lock: [ 152.642484][ T5094] ffffffff8ed2ebe8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x8b9/0x1c50 [ 152.652128][ T5094] [ 152.652128][ T5094] which lock already depends on the new lock. [ 152.652128][ T5094] [ 152.662521][ T5094] [ 152.662521][ T5094] the existing dependency chain (in reverse order) is: [ 152.671538][ T5094] [ 152.671538][ T5094] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 152.679447][ T5094] __mutex_lock+0x181/0x1340 [ 152.684658][ T5094] rfcomm_dev_ioctl+0x8b9/0x1c50 [ 152.690128][ T5094] rfcomm_sock_ioctl+0xb0/0xe0 [ 152.695418][ T5094] sock_do_ioctl+0x113/0x270 [ 152.700541][ T5094] sock_ioctl+0x22e/0x6b0 [ 152.705483][ T5094] __x64_sys_ioctl+0x18f/0x210 [ 152.710769][ T5094] do_syscall_64+0x3f/0x110 [ 152.715792][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 152.722216][ T5094] [ 152.722216][ T5094] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 152.731597][ T5094] lock_sock_nested+0x3a/0xf0 [ 152.736807][ T5094] rfcomm_sk_state_change+0x6d/0x3a0 [ 152.742614][ T5094] __rfcomm_dlc_close+0x285/0x720 [ 152.748158][ T5094] rfcomm_dlc_close+0x1e7/0x240 [ 152.753529][ T5094] __rfcomm_sock_close+0xa7/0x230 [ 152.759078][ T5094] rfcomm_sock_shutdown+0xd1/0x230 [ 152.764712][ T5094] rfcomm_sock_release+0x5d/0x140 [ 152.770259][ T5094] __sock_release+0xae/0x260 [ 152.775375][ T5094] sock_close+0x1c/0x20 [ 152.780060][ T5094] __fput+0x270/0xbb0 [ 152.784569][ T5094] task_work_run+0x14d/0x240 [ 152.789687][ T5094] do_exit+0xa92/0x2a20 [ 152.794369][ T5094] do_group_exit+0xd4/0x2a0 [ 152.799414][ T5094] get_signal+0x23ba/0x2790 [ 152.804445][ T5094] arch_do_signal_or_restart+0x90/0x7f0 [ 152.810517][ T5094] exit_to_user_mode_prepare+0x11f/0x240 [ 152.816675][ T5094] syscall_exit_to_user_mode+0x1d/0x60 [ 152.822662][ T5094] do_syscall_64+0x4b/0x110 [ 152.827689][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 152.834112][ T5094] [ 152.834112][ T5094] -> #1 (&d->lock){+.+.}-{3:3}: [ 152.841148][ T5094] __mutex_lock+0x181/0x1340 [ 152.846270][ T5094] __rfcomm_dlc_close+0x231/0x720 [ 152.851814][ T5094] rfcomm_dlc_close+0x1e7/0x240 [ 152.857189][ T5094] __rfcomm_sock_close+0xa7/0x230 [ 152.862733][ T5094] rfcomm_sock_shutdown+0xd1/0x230 [ 152.868368][ T5094] rfcomm_sock_release+0x5d/0x140 [ 152.873916][ T5094] __sock_release+0xae/0x260 [ 152.879032][ T5094] sock_close+0x1c/0x20 [ 152.883712][ T5094] __fput+0x270/0xbb0 [ 152.888220][ T5094] task_work_run+0x14d/0x240 [ 152.893335][ T5094] do_exit+0xa92/0x2a20 [ 152.898023][ T5094] do_group_exit+0xd4/0x2a0 [ 152.903053][ T5094] get_signal+0x23ba/0x2790 [ 152.908074][ T5094] arch_do_signal_or_restart+0x90/0x7f0 [ 152.914145][ T5094] exit_to_user_mode_prepare+0x11f/0x240 [ 152.920299][ T5094] syscall_exit_to_user_mode+0x1d/0x60 [ 152.926373][ T5094] do_syscall_64+0x4b/0x110 [ 152.931402][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 152.937829][ T5094] [ 152.937829][ T5094] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 152.945214][ T5094] __lock_acquire+0x2e3d/0x5de0 [ 152.950590][ T5094] lock_acquire+0x1ae/0x510 [ 152.955623][ T5094] __mutex_lock+0x181/0x1340 [ 152.960737][ T5094] rfcomm_dlc_exists+0x5b/0x190 [ 152.966108][ T5094] rfcomm_dev_ioctl+0x999/0x1c50 [ 152.971569][ T5094] rfcomm_sock_ioctl+0xb0/0xe0 [ 152.976852][ T5094] sock_do_ioctl+0x113/0x270 [ 152.981971][ T5094] sock_ioctl+0x22e/0x6b0 [ 152.986834][ T5094] __x64_sys_ioctl+0x18f/0x210 [ 152.992118][ T5094] do_syscall_64+0x3f/0x110 [ 152.997154][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 153.003574][ T5094] [ 153.003574][ T5094] other info that might help us debug this: [ 153.003574][ T5094] [ 153.013795][ T5094] Chain exists of: [ 153.013795][ T5094] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 153.013795][ T5094] [ 153.028570][ T5094] Possible unsafe locking scenario: [ 153.028570][ T5094] [ 153.036005][ T5094] CPU0 CPU1 [ 153.041357][ T5094] ---- ---- [ 153.046714][ T5094] lock(rfcomm_ioctl_mutex); [ 153.051389][ T5094] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 153.060054][ T5094] lock(rfcomm_ioctl_mutex); [ 153.067246][ T5094] lock(rfcomm_mutex); [ 153.071397][ T5094] [ 153.071397][ T5094] *** DEADLOCK *** [ 153.071397][ T5094] [ 153.079527][ T5094] 2 locks held by syz-executor156/5094: [ 153.085067][ T5094] #0: ffff88807b5c7130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa3/0xe0 [ 153.096475][ T5094] #1: ffffffff8ed2ebe8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x8b9/0x1c50 [ 153.106579][ T5094] [ 153.106579][ T5094] stack backtrace: [ 153.112456][ T5094] CPU: 1 PID: 5094 Comm: syz-executor156 Not tainted 6.6.0-syzkaller-10102-gff269e2cd5ad #0 [ 153.122518][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 153.132570][ T5094] Call Trace: [ 153.135845][ T5094] [ 153.138777][ T5094] dump_stack_lvl+0xd9/0x1b0 [ 153.143373][ T5094] check_noncircular+0x311/0x3f0 [ 153.148325][ T5094] ? print_circular_bug+0x750/0x750 [ 153.153533][ T5094] ? is_bpf_text_address+0x94/0x1a0 [ 153.158735][ T5094] ? kernel_text_address+0x85/0xf0 [ 153.163856][ T5094] ? arch_stack_walk+0x112/0x170 [ 153.168798][ T5094] __lock_acquire+0x2e3d/0x5de0 [ 153.173661][ T5094] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 153.179648][ T5094] ? save_trace+0x4e/0xb30 [ 153.184068][ T5094] ? _find_first_zero_bit+0x94/0xb0 [ 153.189270][ T5094] ? add_lock_to_list+0x17d/0x380 [ 153.194298][ T5094] lock_acquire+0x1ae/0x510 [ 153.198808][ T5094] ? rfcomm_dlc_exists+0x5b/0x190 [ 153.203835][ T5094] ? lock_sync+0x190/0x190 [ 153.208259][ T5094] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 153.214356][ T5094] ? preempt_count_sub+0x150/0x150 [ 153.219471][ T5094] __mutex_lock+0x181/0x1340 [ 153.224066][ T5094] ? rfcomm_dlc_exists+0x5b/0x190 [ 153.229091][ T5094] ? rfcomm_dlc_exists+0x5b/0x190 [ 153.234120][ T5094] ? find_held_lock+0x2d/0x110 [ 153.238887][ T5094] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 153.244439][ T5094] ? __might_fault+0x13f/0x1a0 [ 153.249201][ T5094] ? reacquire_held_locks+0x4b0/0x4b0 [ 153.254576][ T5094] ? preempt_count_sub+0x150/0x150 [ 153.259688][ T5094] ? apparmor_capable+0x1da/0x4e0 [ 153.264714][ T5094] ? rfcomm_dlc_exists+0x5b/0x190 [ 153.269735][ T5094] rfcomm_dlc_exists+0x5b/0x190 [ 153.274589][ T5094] rfcomm_dev_ioctl+0x999/0x1c50 [ 153.279533][ T5094] ? rfcomm_dev_state_change+0x170/0x170 [ 153.285177][ T5094] ? reacquire_held_locks+0x4b0/0x4b0 [ 153.290555][ T5094] ? mark_held_locks+0x9f/0xe0 [ 153.295322][ T5094] ? __local_bh_enable_ip+0xa4/0x120 [ 153.300609][ T5094] rfcomm_sock_ioctl+0xb0/0xe0 [ 153.305381][ T5094] sock_do_ioctl+0x113/0x270 [ 153.309976][ T5094] ? put_user_ifreq+0x140/0x140 [ 153.314828][ T5094] ? do_vfs_ioctl+0x379/0x1920 [ 153.319590][ T5094] ? vfs_fileattr_set+0xbf0/0xbf0 [ 153.324619][ T5094] sock_ioctl+0x22e/0x6b0 [ 153.328955][ T5094] ? br_ioctl_call+0xb0/0xb0 [ 153.333555][ T5094] ? bpf_lsm_file_ioctl+0x9/0x10 [ 153.338499][ T5094] ? br_ioctl_call+0xb0/0xb0 [ 153.343094][ T5094] __x64_sys_ioctl+0x18f/0x210 [ 153.347858][ T5094] do_syscall_64+0x3f/0x110 [ 153.352371][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 153.358272][ T5094] RIP: 0033:0x7f8c69670d89 [ 153.362679][ T5094] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.382282][ T5094] RSP: 002b:00007ffc72b88378 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [pid 5094] ioctl(5, RFCOMMCREATEDEV, 0x20000100) = 0 [pid 5094] close(3) = 0 [pid 5094] close(4) = 0 [pid 5094] close(5) = 0 [pid 5094] close(6) = -1 EBADF (Bad file descriptor) [pid 5094] close(7) = -1 EBADF (Bad file descriptor) [pid 5094] close(8) = -1 EBADF (Bad file descriptor) [pid 5094] close(9) = -1 EBADF (Bad file descriptor) [pid 5094] close(10) = -1 EBADF (Bad file descriptor) [pid 5094] close(11) = -1 EBADF (Bad file descriptor) [pid 5094] close(12) = -1 EBADF (Bad file descriptor) [pid 5094] close(13) = -1 EBADF (Bad file descriptor) [pid 5094] close(14) = -1 EBADF (Bad file descriptor) [pid 5094] close(15) = -1 EBADF (Bad file descriptor) [pid 5094] close(16) = -1 EBADF (Bad file descriptor) [pid 5094] close(17) = -1 EBADF (Bad file descriptor) [pid 5094] close(18) = -1 EBADF (Bad file descriptor) [pid 5094] close(19) = -1 EBADF (Bad file descriptor) [pid 5094] close(20) = -1 EBADF (Bad file descriptor) [pid 5094] close(21) = -1 EBADF (Bad file descriptor) [pid 5094] close(22) = -1 EBADF (Bad file descriptor) [pid 5094] close(23) = -1 EBADF (Bad file descriptor) [pid 5094] close(24) = -1 EBADF (Bad file descriptor) [pid 5094] close(25) = -1 EBADF (Bad file descriptor) [pid 5094] close(26) = -1 EBADF (Bad file descriptor) [pid 5094] close(27) = -1 EBADF (Bad file descriptor) [pid 5094] close(28) = -1 EBADF (Bad file descriptor) [pid 5094] close(29) = -1 EBADF (Bad file descriptor) [pid 5094] exit_group(0) = ? [ 153.390689][ T5094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8c69670d89 [ 153.398674][ T5094] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 153.406644][ T5094] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 153.414616][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc72b883d0 [ 153.422584][ T5094] R13: 00007ffc72b883e0 R14: 0000000000023e45 R15: 00007ffc72b883a0 [ 153.430561][ T5094] [pid 5094] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5096 attached , child_tidptr=0x555555f8d690) = 20 [pid 5096] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5096] setns(201, 0) = 0 [pid 5096] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5096] setns(3, 0) = 0 [pid 5096] close(3) = 0 [ 155.613642][ T4463] Bluetooth: hci0: command 0x0405 tx timeout [pid 5096] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=ff:ff:ff:ff:ff:ff, rc_channel=2}, 10 [pid 5056] kill(-20, SIGKILL [pid 5096] <... connect resumed>) = ? [pid 5056] <... kill resumed>) = 0 [pid 5056] kill(20, SIGKILL) = 0 [pid 5096] +++ killed by SIGKILL +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=20, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5097 attached [pid 5097] set_robust_list(0x555555f8d6a0, 24) = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555555f8d690) = 21 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5097] setns(201, 0) = 0 [pid 5097] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5097] setns(3, 0) = 0 [pid 5097] close(3) = 0