./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3728497443 <...> Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. execve("./syz-executor3728497443", ["./syz-executor3728497443"], 0x7ffd9c01a9a0 /* 10 vars */) = 0 brk(NULL) = 0x555556ff6000 brk(0x555556ff6d40) = 0x555556ff6d40 arch_prctl(ARCH_SET_FS, 0x555556ff63c0) = 0 set_tid_address(0x555556ff6690) = 5070 set_robust_list(0x555556ff66a0, 24) = 0 rseq(0x555556ff6ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3728497443", 4096) = 28 getrandom("\xb5\xa1\xa2\x14\xcb\x23\x7d\x4e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556ff6d40 brk(0x555557017d40) = 0x555557017d40 brk(0x555557018000) = 0x555557018000 mprotect(0x7f5d992be000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached , child_tidptr=0x555556ff6690) = 5071 [pid 5071] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5071] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5071] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5071] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [pid 5071] dup2(4, 202) = 202 [pid 5071] close(4) = 0 [pid 5071] write(202, "\xff\x00", 2) = 2 [pid 5071] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 5071] rt_sigaction(SIGRT_1, {sa_handler=0x7f5d9925fd40, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5d992513c0}, NULL, 8) = 0 [pid 5071] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5071] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5d989fa000 [pid 5071] mprotect(0x7f5d989fb000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 5071] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5071] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f5d991fa990, parent_tid=0x7f5d991fa990, exit_signal=0, stack=0x7f5d989fa000, stack_size=0x800300, tls=0x7f5d991fa6c0}./strace-static-x86_64: Process 5074 attached [pid 5074] rseq(0x7f5d991fafe0, 0x20, 0, 0x53053053 [pid 5071] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5074] <... rseq resumed>) = 0 [pid 5071] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] set_robust_list(0x7f5d991fa9a0, 24 [pid 5071] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... set_robust_list resumed>) = 0 [pid 5071] ioctl(3, HCIDEVUP [pid 5074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5074] read(202, "\x01\x05\x10\x00", 1024) = 4 [ 94.745876][ T5072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.766002][ T5072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.784552][ T5072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5074] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [ 94.830924][ T5072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.850895][ T5072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.859231][ T5072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, [pid 5071] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [pid 5071] ioctl(3, HCISETSCAN [pid 5074] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5074] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5071] <... ioctl resumed>, 0x7ffce2f1908c) = 0 [pid 5074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5074] madvise(0x7f5d989fa000, 8372224, MADV_DONTNEED [pid 5071] <... writev resumed>) = 13 [pid 5074] <... madvise resumed>) = 0 [pid 5071] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3 [pid 5074] exit(0 [pid 5071] <... writev resumed>) = 14 [pid 5074] <... exit resumed>) = ? [pid 5071] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5074] +++ exited with 0 +++ [pid 5071] <... writev resumed>) = 14 [pid 5071] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 5071] close(3) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setsid() = 1 [pid 5071] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5071] dup2(3, 201) = 201 [pid 5071] close(3) = 0 [pid 5071] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5071] unshare(CLONE_NEWNS) = 0 [pid 5071] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5071] unshare(CLONE_NEWIPC) = 0 [pid 5071] unshare(CLONE_NEWCGROUP) = 0 [pid 5071] unshare(CLONE_NEWUTS) = 0 [pid 5071] unshare(CLONE_SYSVSEM) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "16777216", 8) = 8 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "536870912", 9) = 9 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "8192", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5071] close(3) = 0 [pid 5071] getpid() = 1 [pid 5071] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5071] kill(-3, SIGKILL [pid 5076] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(3, SIGKILL) = 0 [pid 5076] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5077 attached , child_tidptr=0x555556ff6690) = 4 [pid 5077] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5077] setpgid(0, 0) = 0 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5077] write(3, "1000", 4) = 4 [pid 5077] close(3) = 0 [pid 5077] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5077] setns(201, 0) = 0 [pid 5077] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5077] setns(3, 0) = 0 [pid 5077] close(3) = 0 [ 101.139404][ T4464] Bluetooth: hci0: command 0x040f tx timeout [ 103.219331][ T4464] Bluetooth: hci0: command 0x0419 tx timeout [ 105.299327][ T4464] Bluetooth: hci0: command 0x0405 tx timeout [pid 5077] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-4, SIGKILL [pid 5077] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(4, SIGKILL) = 0 [pid 5077] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached , child_tidptr=0x555556ff6690) = 5 [pid 5080] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5080] setns(201, 0) = 0 [pid 5080] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5080] setns(3, 0) = 0 [pid 5080] close(3) = 0 [pid 5080] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-5, SIGKILL) = 0 [pid 5080] <... connect resumed>) = ? [pid 5071] kill(5, SIGKILL) = 0 [pid 5080] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached [pid 5083] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... clone resumed>, child_tidptr=0x555556ff6690) = 6 [pid 5083] <... prctl resumed>) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [pid 5083] close(3) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5083] setns(201, 0) = 0 [pid 5083] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5083] setns(3, 0) = 0 [pid 5083] close(3) = 0 [pid 5083] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-6, SIGKILL) = 0 [pid 5083] <... connect resumed>) = ? [pid 5071] kill(6, SIGKILL) = 0 [pid 5083] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556ff6690) = 7 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5085] setns(201, 0) = 0 [pid 5085] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5085] setns(3, 0) = 0 [pid 5085] close(3) = 0 [pid 5085] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-7, SIGKILL) = 0 [pid 5085] <... connect resumed>) = ? [pid 5071] kill(7, SIGKILL) = 0 [pid 5085] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556ff6690) = 8 ./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5088] setns(201, 0) = 0 [pid 5088] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5088] setns(3, 0) = 0 [pid 5088] close(3) = 0 [pid 5088] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-8, SIGKILL [pid 5088] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(8, SIGKILL) = 0 [pid 5088] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=8, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x555556ff6690) = 9 [pid 5090] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5090] setns(201, 0) = 0 [pid 5090] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5090] setns(3, 0) = 0 [pid 5090] close(3) = 0 [pid 5090] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-9, SIGKILL [pid 5090] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(9, SIGKILL) = 0 [pid 5090] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=9, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5096 attached , child_tidptr=0x555556ff6690) = 10 [pid 5096] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5096] setns(201, 0) = 0 [pid 5096] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5096] setns(3, 0) = 0 [pid 5096] close(3) = 0 [pid 5096] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-10, SIGKILL [pid 5096] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(10, SIGKILL [pid 5096] +++ killed by SIGKILL +++ [pid 5071] <... kill resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=10, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556ff6690) = 11 ./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5100] setns(201, 0) = 0 [pid 5100] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5100] setns(3, 0) = 0 [pid 5100] close(3) = 0 [ 137.779246][ T5072] Bluetooth: hci0: command 0x0405 tx timeout [pid 5100] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-11, SIGKILL [pid 5100] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(11, SIGKILL) = 0 [pid 5100] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=11, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x555556ff66a0, 24 [pid 5071] <... clone resumed>, child_tidptr=0x555556ff6690) = 12 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5101] setns(201, 0) = 0 [pid 5101] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5101] setns(3, 0) = 0 [pid 5101] close(3) = 0 [pid 5101] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-12, SIGKILL [pid 5101] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(12, SIGKILL) = 0 [pid 5101] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=12, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached , child_tidptr=0x555556ff6690) = 13 [pid 5102] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5102] setns(201, 0) = 0 [pid 5102] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5102] setns(3, 0) = 0 [pid 5102] close(3) = 0 [pid 5102] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-13, SIGKILL [pid 5102] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(13, SIGKILL [pid 5102] +++ killed by SIGKILL +++ [pid 5071] <... kill resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=13, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached , child_tidptr=0x555556ff6690) = 14 [pid 5103] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5103] setns(201, 0) = 0 [pid 5103] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5103] setns(3, 0) = 0 [pid 5103] close(3) = 0 [pid 5103] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-14, SIGKILL [pid 5103] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(14, SIGKILL [pid 5103] +++ killed by SIGKILL +++ [pid 5071] <... kill resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=14, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5104 attached , child_tidptr=0x555556ff6690) = 15 [pid 5104] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5104] setns(201, 0) = 0 [pid 5104] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5104] setns(3, 0) = 0 [pid 5104] close(3) = 0 [pid 5104] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-15, SIGKILL [pid 5104] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(15, SIGKILL) = 0 [pid 5104] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=15, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached , child_tidptr=0x555556ff6690) = 16 [pid 5105] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5105] setns(201, 0) = 0 [pid 5105] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5105] setns(3, 0) = 0 [pid 5105] close(3) = 0 [pid 5105] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-16, SIGKILL [pid 5105] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(16, SIGKILL) = 0 [pid 5105] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=16, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5106 attached , child_tidptr=0x555556ff6690) = 17 [pid 5106] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5106] setns(201, 0) = 0 [pid 5106] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5106] setns(3, 0) = 0 [pid 5106] close(3) = 0 [pid 5106] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-17, SIGKILL [pid 5106] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(17, SIGKILL) = 0 [pid 5106] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=17, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... clone resumed>, child_tidptr=0x555556ff6690) = 18 [pid 5107] <... prctl resumed>) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5107] close(3) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5107] setns(201, 0) = 0 [pid 5107] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5107] setns(3, 0) = 0 [pid 5107] close(3) = 0 [pid 5107] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-18, SIGKILL) = 0 [pid 5107] <... connect resumed>) = ? [pid 5071] kill(18, SIGKILL) = 0 [pid 5107] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=18, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached , child_tidptr=0x555556ff6690) = 19 [pid 5108] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5108] setns(201, 0) = 0 [pid 5108] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5108] setns(3, 0) = 0 [pid 5108] close(3) = 0 [pid 5108] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10) = -1 ECONNREFUSED (Connection refused) [pid 5108] getsockopt(-1, SOL_IPV6, IPV6_FLOWLABEL_MGR, 0x20000100, NULL) = -1 EBADF (Bad file descriptor) [pid 5108] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5108] setns(201, 0) = 0 [pid 5108] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_RFCOMM) = 5 [pid 5108] setns(3, 0) = 0 [pid 5108] close(3) = 0 [ 176.047254][ T5108] [ 176.049633][ T5108] ====================================================== [ 176.056646][ T5108] WARNING: possible circular locking dependency detected [ 176.063665][ T5108] 6.6.0-syzkaller-15859-g89cdf9d55601 #0 Not tainted [ 176.070341][ T5108] ------------------------------------------------------ [ 176.077366][ T5108] syz-executor372/5108 is trying to acquire lock: [ 176.083781][ T5108] ffffffff8ed39b08 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5b/0x190 [ 176.092876][ T5108] [ 176.092876][ T5108] but task is already holding lock: [ 176.100240][ T5108] ffffffff8ed3ea88 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x8b9/0x1c50 [ 176.110028][ T5108] [ 176.110028][ T5108] which lock already depends on the new lock. [ 176.110028][ T5108] [ 176.120533][ T5108] [ 176.120533][ T5108] the existing dependency chain (in reverse order) is: [ 176.129556][ T5108] [ 176.129556][ T5108] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 176.137482][ T5108] __mutex_lock+0x175/0x9d0 [ 176.142544][ T5108] rfcomm_dev_ioctl+0x8b9/0x1c50 [ 176.148020][ T5108] rfcomm_sock_ioctl+0xb0/0xe0 [ 176.153353][ T5108] sock_do_ioctl+0x113/0x270 [ 176.158483][ T5108] sock_ioctl+0x22e/0x6b0 [ 176.163359][ T5108] __x64_sys_ioctl+0x18f/0x210 [ 176.168713][ T5108] do_syscall_64+0x40/0x110 [ 176.173786][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 176.180243][ T5108] [ 176.180243][ T5108] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 176.189684][ T5108] lock_sock_nested+0x3a/0xf0 [ 176.194900][ T5108] rfcomm_sk_state_change+0x6d/0x3a0 [ 176.200742][ T5108] __rfcomm_dlc_close+0x285/0x720 [ 176.206301][ T5108] rfcomm_dlc_close+0x1e7/0x240 [ 176.211684][ T5108] __rfcomm_sock_close+0xa7/0x230 [ 176.217245][ T5108] rfcomm_sock_shutdown+0xd1/0x230 [ 176.222891][ T5108] rfcomm_sock_release+0x5d/0x140 [ 176.228452][ T5108] __sock_release+0xae/0x260 [ 176.233666][ T5108] sock_close+0x1c/0x20 [ 176.238360][ T5108] __fput+0x270/0xbb0 [ 176.242879][ T5108] task_work_run+0x14d/0x240 [ 176.248002][ T5108] do_exit+0xa92/0x2ae0 [ 176.252695][ T5108] do_group_exit+0xd4/0x2a0 [ 176.257729][ T5108] get_signal+0x23be/0x2790 [ 176.262773][ T5108] arch_do_signal_or_restart+0x90/0x7f0 [ 176.268873][ T5108] exit_to_user_mode_prepare+0x121/0x240 [ 176.275056][ T5108] syscall_exit_to_user_mode+0x1e/0x60 [ 176.281154][ T5108] do_syscall_64+0x4d/0x110 [ 176.286199][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 176.292648][ T5108] [ 176.292648][ T5108] -> #1 (&d->lock){+.+.}-{3:3}: [ 176.299708][ T5108] __mutex_lock+0x175/0x9d0 [ 176.304783][ T5108] __rfcomm_dlc_close+0x231/0x720 [ 176.310349][ T5108] rfcomm_dlc_close+0x1e7/0x240 [ 176.315735][ T5108] __rfcomm_sock_close+0xa7/0x230 [ 176.321323][ T5108] rfcomm_sock_shutdown+0xd1/0x230 [ 176.327009][ T5108] rfcomm_sock_release+0x5d/0x140 [ 176.332594][ T5108] __sock_release+0xae/0x260 [ 176.337729][ T5108] sock_close+0x1c/0x20 [ 176.342437][ T5108] __fput+0x270/0xbb0 [ 176.346964][ T5108] task_work_run+0x14d/0x240 [ 176.352113][ T5108] do_exit+0xa92/0x2ae0 [ 176.356802][ T5108] do_group_exit+0xd4/0x2a0 [ 176.361864][ T5108] get_signal+0x23be/0x2790 [ 176.366907][ T5108] arch_do_signal_or_restart+0x90/0x7f0 [ 176.373003][ T5108] exit_to_user_mode_prepare+0x121/0x240 [ 176.379187][ T5108] syscall_exit_to_user_mode+0x1e/0x60 [ 176.385195][ T5108] do_syscall_64+0x4d/0x110 [ 176.390241][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 176.396689][ T5108] [ 176.396689][ T5108] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 176.404094][ T5108] __lock_acquire+0x2464/0x3b10 [ 176.409495][ T5108] lock_acquire+0x1ae/0x520 [ 176.414558][ T5108] __mutex_lock+0x175/0x9d0 [ 176.419608][ T5108] rfcomm_dlc_exists+0x5b/0x190 [ 176.424991][ T5108] rfcomm_dev_ioctl+0x999/0x1c50 [ 176.430490][ T5108] rfcomm_sock_ioctl+0xb0/0xe0 [ 176.435796][ T5108] sock_do_ioctl+0x113/0x270 [ 176.440946][ T5108] sock_ioctl+0x22e/0x6b0 [ 176.445818][ T5108] __x64_sys_ioctl+0x18f/0x210 [ 176.451133][ T5108] do_syscall_64+0x40/0x110 [ 176.456352][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 176.462799][ T5108] [ 176.462799][ T5108] other info that might help us debug this: [ 176.462799][ T5108] [ 176.473036][ T5108] Chain exists of: [ 176.473036][ T5108] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 176.473036][ T5108] [ 176.487835][ T5108] Possible unsafe locking scenario: [ 176.487835][ T5108] [ 176.495291][ T5108] CPU0 CPU1 [ 176.500662][ T5108] ---- ---- [ 176.506037][ T5108] lock(rfcomm_ioctl_mutex); [ 176.510729][ T5108] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 176.519417][ T5108] lock(rfcomm_ioctl_mutex); [ 176.526622][ T5108] lock(rfcomm_mutex); [ 176.530787][ T5108] [ 176.530787][ T5108] *** DEADLOCK *** [ 176.530787][ T5108] [ 176.538932][ T5108] 2 locks held by syz-executor372/5108: [ 176.544490][ T5108] #0: ffff888029376130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa3/0xe0 [ 176.555931][ T5108] #1: ffffffff8ed3ea88 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x8b9/0x1c50 [ 176.566071][ T5108] [ 176.566071][ T5108] stack backtrace: [ 176.571981][ T5108] CPU: 0 PID: 5108 Comm: syz-executor372 Not tainted 6.6.0-syzkaller-15859-g89cdf9d55601 #0 [ 176.582073][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 176.592140][ T5108] Call Trace: [ 176.595431][ T5108] [ 176.598370][ T5108] dump_stack_lvl+0xd9/0x1b0 [ 176.602984][ T5108] check_noncircular+0x317/0x400 [ 176.607961][ T5108] ? print_circular_bug+0x5c0/0x5c0 [ 176.613206][ T5108] ? __kernel_text_address+0xd/0x30 [ 176.618419][ T5108] ? unwind_get_return_address+0x45/0xe0 [ 176.624070][ T5108] ? lockdep_lock+0xc6/0x200 [ 176.628684][ T5108] ? hlock_class+0x130/0x130 [ 176.633317][ T5108] __lock_acquire+0x2464/0x3b10 [ 176.638227][ T5108] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 176.644256][ T5108] ? add_lock_to_list+0x17d/0x380 [ 176.649319][ T5108] lock_acquire+0x1ae/0x520 [ 176.653858][ T5108] ? rfcomm_dlc_exists+0x5b/0x190 [ 176.658906][ T5108] ? lock_sync+0x190/0x190 [ 176.663360][ T5108] ? __mutex_trylock_common+0xeb/0x250 [ 176.668848][ T5108] ? preempt_count_sub+0x160/0x160 [ 176.673977][ T5108] ? mutex_is_locked+0x40/0x40 [ 176.678771][ T5108] __mutex_lock+0x175/0x9d0 [ 176.683309][ T5108] ? rfcomm_dlc_exists+0x5b/0x190 [ 176.688357][ T5108] ? aa_get_newest_label+0x376/0x680 [ 176.693676][ T5108] ? rfcomm_dlc_exists+0x5b/0x190 [ 176.698724][ T5108] ? mutex_trylock+0x130/0x130 [ 176.703608][ T5108] ? reacquire_held_locks+0x4c0/0x4c0 [ 176.709040][ T5108] ? apparmor_capable+0x126/0x1e0 [ 176.714101][ T5108] ? rfcomm_dlc_exists+0x5b/0x190 [ 176.719171][ T5108] rfcomm_dlc_exists+0x5b/0x190 [ 176.724042][ T5108] rfcomm_dev_ioctl+0x999/0x1c50 [ 176.729012][ T5108] ? rfcomm_dev_state_change+0x170/0x170 [ 176.734676][ T5108] ? reacquire_held_locks+0x4c0/0x4c0 [ 176.740086][ T5108] ? mark_held_locks+0x9f/0xe0 [ 176.744887][ T5108] ? __local_bh_enable_ip+0xa4/0x120 [ 176.750203][ T5108] rfcomm_sock_ioctl+0xb0/0xe0 [ 176.755020][ T5108] sock_do_ioctl+0x113/0x270 [ 176.759638][ T5108] ? put_user_ifreq+0x140/0x140 [ 176.764515][ T5108] ? do_vfs_ioctl+0x379/0x1920 [ 176.769312][ T5108] ? vfs_fileattr_set+0xbf0/0xbf0 [ 176.774381][ T5108] sock_ioctl+0x22e/0x6b0 [ 176.778737][ T5108] ? br_ioctl_call+0xb0/0xb0 [ 176.783354][ T5108] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 176.789280][ T5108] ? bpf_lsm_file_ioctl+0x9/0x10 [ 176.794237][ T5108] ? br_ioctl_call+0xb0/0xb0 [ 176.798856][ T5108] __x64_sys_ioctl+0x18f/0x210 [ 176.803655][ T5108] do_syscall_64+0x40/0x110 [ 176.808219][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 176.814149][ T5108] RIP: 0033:0x7f5d99239d49 [ 176.818593][ T5108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 176.838217][ T5108] RSP: 002b:00007ffce2f19058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [pid 5108] ioctl(5, RFCOMMCREATEDEV, 0x20000100) = -1 ENFILE (Too many open files in system) [pid 5108] close(3) = -1 EBADF (Bad file descriptor) [pid 5108] close(4) = 0 [pid 5108] close(5) = 0 [pid 5108] close(6) = -1 EBADF (Bad file descriptor) [pid 5108] close(7) = -1 EBADF (Bad file descriptor) [pid 5108] close(8) = -1 EBADF (Bad file descriptor) [pid 5108] close(9) = -1 EBADF (Bad file descriptor) [pid 5108] close(10) = -1 EBADF (Bad file descriptor) [pid 5108] close(11) = -1 EBADF (Bad file descriptor) [pid 5108] close(12) = -1 EBADF (Bad file descriptor) [pid 5108] close(13) = -1 EBADF (Bad file descriptor) [pid 5108] close(14) = -1 EBADF (Bad file descriptor) [pid 5108] close(15) = -1 EBADF (Bad file descriptor) [pid 5108] close(16) = -1 EBADF (Bad file descriptor) [pid 5108] close(17) = -1 EBADF (Bad file descriptor) [pid 5108] close(18) = -1 EBADF (Bad file descriptor) [pid 5108] close(19) = -1 EBADF (Bad file descriptor) [pid 5108] close(20) = -1 EBADF (Bad file descriptor) [pid 5108] close(21) = -1 EBADF (Bad file descriptor) [pid 5108] close(22) = -1 EBADF (Bad file descriptor) [pid 5108] close(23) = -1 EBADF (Bad file descriptor) [pid 5108] close(24) = -1 EBADF (Bad file descriptor) [pid 5108] close(25) = -1 EBADF (Bad file descriptor) [pid 5108] close(26) = -1 EBADF (Bad file descriptor) [pid 5108] close(27) = -1 EBADF (Bad file descriptor) [pid 5108] close(28) = -1 EBADF (Bad file descriptor) [pid 5108] close(29) = -1 EBADF (Bad file descriptor) [pid 5108] exit_group(0) = ? [pid 5108] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5109 attached , child_tidptr=0x555556ff6690) = 20 [pid 5109] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 176.846664][ T5108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5d99239d49 [ 176.854650][ T5108] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 176.862634][ T5108] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000555500000000 [ 176.870630][ T5108] R10: 0000555500000000 R11: 0000000000000246 R12: 00007ffce2f190a0 [ 176.878645][ T5108] R13: 00007ffce2f190b0 R14: 0000000000029b38 R15: 00007ffce2f19070 [ 176.886645][ T5108] [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5109] setns(201, 0) = 0 [pid 5109] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5109] setns(3, 0) = 0 [pid 5109] close(3) = 0 [ 179.059307][ T4464] Bluetooth: hci0: command 0x0405 tx timeout [pid 5109] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5071] kill(-20, SIGKILL [pid 5109] <... connect resumed>) = ? [pid 5071] <... kill resumed>) = 0 [pid 5071] kill(20, SIGKILL) = 0 [pid 5109] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=20, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x555556ff66a0, 24) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555556ff6690) = 21 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5110] setns(201, 0) = 0 [pid 5110] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5110] setns(3, 0) = 0 [pid 5110] close(3) = 0