./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2372757706 <...> Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. execve("./syz-executor2372757706", ["./syz-executor2372757706"], 0x7ffda5e79e10 /* 10 vars */) = 0 brk(NULL) = 0x555557ab8000 brk(0x555557ab8d40) = 0x555557ab8d40 arch_prctl(ARCH_SET_FS, 0x555557ab83c0) = 0 set_tid_address(0x555557ab8690) = 5071 set_robust_list(0x555557ab86a0, 24) = 0 rseq(0x555557ab8ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2372757706", 4096) = 28 getrandom("\x3b\x89\x78\x5d\x40\x02\x11\x84", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557ab8d40 brk(0x555557ad9d40) = 0x555557ad9d40 brk(0x555557ada000) = 0x555557ada000 mprotect(0x7f6140697000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached , child_tidptr=0x555557ab8690) = 5072 [pid 5072] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5072] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5072] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3 [pid 5072] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4 [pid 5072] dup2(4, 202) = 202 [pid 5072] close(4) = 0 [pid 5072] write(202, "\xff\x00", 2) = 2 [pid 5072] read(202, "\xff\x00\x00\x00", 4) = 4 [pid 5072] rt_sigaction(SIGRT_1, {sa_handler=0x7f6140638d40, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f614062a3c0}, NULL, 8) = 0 [pid 5072] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5072] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f613fc00000 [pid 5072] mprotect(0x7f613fc01000, 8388608, PROT_READ|PROT_WRITE) = 0 [pid 5072] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6140400990, parent_tid=0x7f6140400990, exit_signal=0, stack=0x7f613fc00000, stack_size=0x800300, tls=0x7f61404006c0}./strace-static-x86_64: Process 5074 attached => {parent_tid=[2]}, 88) = 2 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] rseq(0x7f6140400fe0, 0x20, 0, 0x53053053) = 0 [pid 5072] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] set_robust_list(0x7f61404009a0, 24 [pid 5072] ioctl(3, HCIDEVUP [pid 5074] <... set_robust_list resumed>) = 0 [pid 5074] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] read(202, "\x01\x03\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x03\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x01\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x09\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13 [pid 5074] read(202, "\x01\x05\x10\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14 [pid 5074] read(202, "\x01\x23\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [ 111.244731][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.264146][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.274783][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [pid 5074] read(202, "\x01\x14\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x25\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x25\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x38\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x39\x0c\x00", 1024) = 4 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255 [pid 5074] read(202, [pid 5072] <... ioctl resumed>, 0) = -1 EALREADY (Operation already in progress) [ 111.295520][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.328049][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.337410][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [pid 5072] ioctl(3, HCISETSCAN [pid 5074] <... read resumed>"\x01\x1a\x0c\x01\x02", 1024) = 5 [pid 5074] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7 [pid 5072] <... ioctl resumed>, 0x7ffe334cb3ac) = 0 [pid 5072] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 [pid 5074] rt_sigprocmask(SIG_BLOCK, ~[RT_1], [pid 5072] <... writev resumed>) = 13 [pid 5072] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3) = 14 [pid 5072] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3 [pid 5074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... writev resumed>) = 14 [pid 5072] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22 [pid 5072] futex(0x7f6140400990, FUTEX_WAIT_BITSET|FUTEX_CLOCK_REALTIME, 2, NULL, FUTEX_BITSET_MATCH_ANY [pid 5074] madvise(0x7f613fc00000, 8372224, MADV_DONTNEED) = 0 [pid 5074] exit(0) = ? [pid 5074] +++ exited with 0 +++ [pid 5072] <... futex resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setsid() = 1 [pid 5072] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5072] dup2(3, 201) = 201 [pid 5072] close(3) = 0 [pid 5072] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5072] unshare(CLONE_NEWNS) = 0 [pid 5072] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5072] unshare(CLONE_NEWIPC) = 0 [pid 5072] unshare(CLONE_NEWCGROUP) = 0 [pid 5072] unshare(CLONE_NEWUTS) = 0 [pid 5072] unshare(CLONE_SYSVSEM) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "16777216", 8) = 8 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "536870912", 9) = 9 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "8192", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5072] close(3) = 0 [pid 5072] getpid() = 1 [pid 5072] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5076] set_robust_list(0x555557ab86a0, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555557ab8690) = 3 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5076] setns(201, 0) = 0 [pid 5076] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5076] setns(3, 0) = 0 [pid 5076] close(3) = 0 [ 113.443093][ T52] Bluetooth: hci0: command tx timeout [ 115.522265][ T52] Bluetooth: hci0: command 0x041b tx timeout [pid 5076] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-3, SIGKILL [pid 5076] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5076] +++ killed by SIGKILL +++ [pid 5072] kill(3, SIGKILL) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=3, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5078 attached , child_tidptr=0x555557ab8690) = 4 [pid 5078] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] setpgid(0, 0) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1000", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5078] setns(201, 0) = 0 [pid 5078] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5078] setns(3, 0) = 0 [pid 5078] close(3) = 0 [ 117.602290][ T52] Bluetooth: hci0: command 0x041b tx timeout [ 119.692572][ T52] Bluetooth: hci0: command 0x041b tx timeout [pid 5078] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-4, SIGKILL) = 0 [pid 5078] <... connect resumed>) = ? [pid 5072] kill(4, SIGKILL) = 0 [pid 5078] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=4, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached , child_tidptr=0x555557ab8690) = 5 [pid 5081] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5081] setns(201, 0) = 0 [pid 5081] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5081] setns(3, 0) = 0 [pid 5081] close(3) = 0 [ 121.762254][ T52] Bluetooth: hci0: command 0x041b tx timeout [pid 5081] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-5, SIGKILL [pid 5081] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5072] kill(5, SIGKILL) = 0 [pid 5081] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached , child_tidptr=0x555557ab8690) = 6 [pid 5083] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [pid 5083] close(3) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5083] setns(201, 0) = 0 [pid 5083] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5083] setns(3, 0) = 0 [pid 5083] close(3) = 0 [pid 5083] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-6, SIGKILL) = 0 [pid 5072] kill(6, SIGKILL [pid 5083] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5083] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=6, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5086 attached , child_tidptr=0x555557ab8690) = 7 [pid 5086] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5086] setns(201, 0) = 0 [pid 5086] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5086] setns(3, 0) = 0 [pid 5086] close(3) = 0 [pid 5086] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-7, SIGKILL [pid 5086] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5086] +++ killed by SIGKILL +++ [pid 5072] kill(7, SIGKILL) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=7, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x555557ab86a0, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555557ab8690) = 8 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5088] setns(201, 0) = 0 [pid 5088] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5088] setns(3, 0) = 0 [pid 5088] close(3) = 0 [pid 5088] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-8, SIGKILL [pid 5088] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5072] kill(8, SIGKILL [pid 5088] +++ killed by SIGKILL +++ [pid 5072] <... kill resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=8, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5095 attached , child_tidptr=0x555557ab8690) = 9 [pid 5095] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5095] setns(201, 0) = 0 [pid 5095] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5095] setns(3, 0) = 0 [pid 5095] close(3) = 0 [pid 5095] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-9, SIGKILL [pid 5095] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5072] kill(9, SIGKILL) = 0 [pid 5095] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=9, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5096 attached , child_tidptr=0x555557ab8690) = 10 [pid 5096] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5096] setns(201, 0) = 0 [pid 5096] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5096] setns(3, 0) = 0 [pid 5096] close(3) = 0 [pid 5096] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-10, SIGKILL) = 0 [pid 5096] <... connect resumed>) = ? [pid 5072] kill(10, SIGKILL [pid 5096] +++ killed by SIGKILL +++ [pid 5072] <... kill resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=10, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5097 attached [pid 5097] set_robust_list(0x555557ab86a0, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555557ab8690) = 11 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5097] setns(201, 0) = 0 [pid 5097] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5097] setns(3, 0) = 0 [pid 5097] close(3) = 0 [ 153.842271][ T4464] Bluetooth: hci0: command 0x041b tx timeout [pid 5097] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-11, SIGKILL) = 0 [pid 5072] kill(11, SIGKILL [pid 5097] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5097] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=11, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5098 attached , child_tidptr=0x555557ab8690) = 12 [pid 5098] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5098] setns(201, 0) = 0 [pid 5098] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5098] setns(3, 0) = 0 [pid 5098] close(3) = 0 [pid 5098] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-12, SIGKILL [pid 5098] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5098] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=12, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] kill(12, SIGKILL) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached , child_tidptr=0x555557ab8690) = 13 [pid 5099] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5099] setns(201, 0) = 0 [pid 5099] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5099] setns(3, 0) = 0 [pid 5099] close(3) = 0 [pid 5099] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-13, SIGKILL [pid 5099] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5099] +++ killed by SIGKILL +++ [pid 5072] kill(13, SIGKILL) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=13, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5100 attached , child_tidptr=0x555557ab8690) = 14 [pid 5100] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5100] setns(201, 0) = 0 [pid 5100] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5100] setns(3, 0) = 0 [pid 5100] close(3) = 0 [pid 5100] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-14, SIGKILL) = 0 [pid 5072] kill(14, SIGKILL) = 0 [pid 5100] <... connect resumed>) = ? [pid 5100] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=14, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached , child_tidptr=0x555557ab8690) = 15 [pid 5101] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5101] setns(201, 0) = 0 [pid 5101] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5101] setns(3, 0) = 0 [pid 5101] close(3) = 0 [pid 5101] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-15, SIGKILL) = 0 [pid 5101] <... connect resumed>) = ? [pid 5072] kill(15, SIGKILL) = 0 [pid 5101] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=15, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached , child_tidptr=0x555557ab8690) = 16 [pid 5102] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5102] setns(201, 0) = 0 [pid 5102] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5102] setns(3, 0) = 0 [pid 5102] close(3) = 0 [pid 5102] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-16, SIGKILL) = 0 [pid 5072] kill(16, SIGKILL) = 0 [pid 5102] <... connect resumed>) = ? [pid 5102] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=16, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached , child_tidptr=0x555557ab8690) = 17 [pid 5103] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5103] setns(201, 0) = 0 [pid 5103] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5103] setns(3, 0) = 0 [pid 5103] close(3) = 0 [pid 5103] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-17, SIGKILL) = 0 [pid 5103] <... connect resumed>) = ? [pid 5072] kill(17, SIGKILL) = 0 [pid 5103] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=17, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5104 attached , child_tidptr=0x555557ab8690) = 18 [pid 5104] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5104] setns(201, 0) = 0 [pid 5104] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5104] setns(3, 0) = 0 [pid 5104] close(3) = 0 [pid 5104] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-18, SIGKILL [pid 5104] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5072] kill(18, SIGKILL) = 0 [pid 5104] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=18, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached , child_tidptr=0x555557ab8690) = 19 [pid 5105] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5105] setns(201, 0) = 0 [pid 5105] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5105] setns(3, 0) = 0 [pid 5105] close(3) = 0 [pid 5105] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10) = -1 ECONNREFUSED (Connection refused) [pid 5105] getsockopt(-1, SOL_IPV6, IPV6_FLOWLABEL_MGR, 0x20000100, NULL) = -1 EBADF (Bad file descriptor) [pid 5105] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5105] setns(201, 0) = 0 [pid 5105] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_RFCOMM) = 5 [pid 5105] setns(3, 0) = 0 [pid 5105] close(3) = 0 [ 192.111347][ T5105] [ 192.113721][ T5105] ====================================================== [ 192.120734][ T5105] WARNING: possible circular locking dependency detected [ 192.127751][ T5105] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 192.134437][ T5105] ------------------------------------------------------ [ 192.141463][ T5105] syz-executor237/5105 is trying to acquire lock: [ 192.147876][ T5105] ffffffff8f58c328 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 192.157077][ T5105] [ 192.157077][ T5105] but task is already holding lock: [ 192.164451][ T5105] ffffffff8f5912a8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x8e4/0x1c80 [ 192.174137][ T5105] [ 192.174137][ T5105] which lock already depends on the new lock. [ 192.174137][ T5105] [ 192.184536][ T5105] [ 192.184536][ T5105] the existing dependency chain (in reverse order) is: [ 192.193550][ T5105] [ 192.193550][ T5105] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 192.201478][ T5105] __mutex_lock+0x175/0x9c0 [ 192.206533][ T5105] rfcomm_dev_ioctl+0x8e4/0x1c80 [ 192.212024][ T5105] rfcomm_sock_ioctl+0xb4/0xe0 [ 192.217338][ T5105] sock_do_ioctl+0x119/0x280 [ 192.222484][ T5105] sock_ioctl+0x22e/0x6c0 [ 192.227369][ T5105] __x64_sys_ioctl+0x196/0x220 [ 192.232695][ T5105] do_syscall_64+0xd5/0x260 [ 192.237767][ T5105] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 192.244226][ T5105] [ 192.244226][ T5105] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 192.253649][ T5105] lock_sock_nested+0x3a/0xf0 [ 192.258877][ T5105] rfcomm_sk_state_change+0x6d/0x3b0 [ 192.264735][ T5105] __rfcomm_dlc_close+0x28f/0x720 [ 192.270320][ T5105] rfcomm_dlc_close+0x1eb/0x240 [ 192.275729][ T5105] __rfcomm_sock_close+0xa7/0x230 [ 192.281336][ T5105] rfcomm_sock_shutdown+0xd5/0x230 [ 192.287010][ T5105] rfcomm_sock_release+0x5d/0x140 [ 192.292597][ T5105] __sock_release+0xb3/0x270 [ 192.297733][ T5105] sock_close+0x1c/0x30 [ 192.302434][ T5105] __fput+0x273/0xb80 [ 192.306961][ T5105] task_work_run+0x151/0x250 [ 192.312101][ T5105] do_exit+0xa7d/0x2be0 [ 192.316811][ T5105] do_group_exit+0xd3/0x2a0 [ 192.321863][ T5105] get_signal+0x2390/0x2760 [ 192.326929][ T5105] arch_do_signal_or_restart+0x90/0x7e0 [ 192.333034][ T5105] syscall_exit_to_user_mode+0x14a/0x2a0 [ 192.339232][ T5105] do_syscall_64+0xe2/0x260 [ 192.344303][ T5105] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 192.350770][ T5105] [ 192.350770][ T5105] -> #1 (&d->lock){+.+.}-{3:3}: [ 192.357844][ T5105] __mutex_lock+0x175/0x9c0 [ 192.362912][ T5105] __rfcomm_dlc_close+0x235/0x720 [ 192.368495][ T5105] rfcomm_dlc_close+0x1eb/0x240 [ 192.373904][ T5105] __rfcomm_sock_close+0xa7/0x230 [ 192.379491][ T5105] rfcomm_sock_shutdown+0xd5/0x230 [ 192.385167][ T5105] rfcomm_sock_release+0x5d/0x140 [ 192.390758][ T5105] __sock_release+0xb3/0x270 [ 192.395893][ T5105] sock_close+0x1c/0x30 [ 192.400595][ T5105] __fput+0x273/0xb80 [ 192.405124][ T5105] task_work_run+0x151/0x250 [ 192.410269][ T5105] do_exit+0xa7d/0x2be0 [ 192.414975][ T5105] do_group_exit+0xd3/0x2a0 [ 192.420025][ T5105] get_signal+0x2390/0x2760 [ 192.425094][ T5105] arch_do_signal_or_restart+0x90/0x7e0 [ 192.431203][ T5105] syscall_exit_to_user_mode+0x14a/0x2a0 [ 192.437405][ T5105] do_syscall_64+0xe2/0x260 [ 192.442473][ T5105] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 192.448933][ T5105] [ 192.448933][ T5105] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 192.456356][ T5105] __lock_acquire+0x2478/0x3b30 [ 192.461753][ T5105] lock_acquire+0x1b1/0x540 [ 192.466807][ T5105] __mutex_lock+0x175/0x9c0 [ 192.471869][ T5105] rfcomm_dlc_exists+0x5f/0x1a0 [ 192.477278][ T5105] rfcomm_dev_ioctl+0x9c5/0x1c80 [ 192.482764][ T5105] rfcomm_sock_ioctl+0xb4/0xe0 [ 192.488090][ T5105] sock_do_ioctl+0x119/0x280 [ 192.493236][ T5105] sock_ioctl+0x22e/0x6c0 [ 192.498132][ T5105] __x64_sys_ioctl+0x196/0x220 [ 192.503448][ T5105] do_syscall_64+0xd5/0x260 [ 192.508533][ T5105] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 192.514990][ T5105] [ 192.514990][ T5105] other info that might help us debug this: [ 192.514990][ T5105] [ 192.525226][ T5105] Chain exists of: [ 192.525226][ T5105] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 192.525226][ T5105] [ 192.540048][ T5105] Possible unsafe locking scenario: [ 192.540048][ T5105] [ 192.547506][ T5105] CPU0 CPU1 [ 192.552878][ T5105] ---- ---- [ 192.558336][ T5105] lock(rfcomm_ioctl_mutex); [ 192.563030][ T5105] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 192.571721][ T5105] lock(rfcomm_ioctl_mutex); [ 192.578938][ T5105] lock(rfcomm_mutex); [ 192.583112][ T5105] [ 192.583112][ T5105] *** DEADLOCK *** [ 192.583112][ T5105] [ 192.591256][ T5105] 2 locks held by syz-executor237/5105: [ 192.596813][ T5105] #0: ffff88802ade4258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa7/0xe0 [ 192.608290][ T5105] #1: ffffffff8f5912a8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x8e4/0x1c80 [ 192.618448][ T5105] [ 192.618448][ T5105] stack backtrace: [ 192.624341][ T5105] CPU: 1 PID: 5105 Comm: syz-executor237 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 192.634432][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 192.644504][ T5105] Call Trace: [ 192.647798][ T5105] [ 192.650766][ T5105] dump_stack_lvl+0x116/0x1f0 [ 192.655486][ T5105] check_noncircular+0x31a/0x400 [ 192.660455][ T5105] ? __pfx_check_noncircular+0x10/0x10 [ 192.665952][ T5105] ? __kernel_text_address+0xd/0x40 [ 192.671189][ T5105] ? unwind_get_return_address+0x45/0xe0 [ 192.676854][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.681754][ T5105] ? lockdep_lock+0xc6/0x200 [ 192.686392][ T5105] ? __pfx_lockdep_lock+0x10/0x10 [ 192.691462][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.696362][ T5105] __lock_acquire+0x2478/0x3b30 [ 192.701253][ T5105] ? __pfx___lock_acquire+0x10/0x10 [ 192.706484][ T5105] ? add_lock_to_list+0x17d/0x380 [ 192.711564][ T5105] lock_acquire+0x1b1/0x540 [ 192.716100][ T5105] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 192.721169][ T5105] ? __pfx_lock_acquire+0x10/0x10 [ 192.726227][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.731124][ T5105] ? __mutex_trylock_common+0xea/0x250 [ 192.736619][ T5105] ? __pfx___might_resched+0x10/0x10 [ 192.741943][ T5105] ? __pfx___mutex_trylock_common+0x10/0x10 [ 192.747881][ T5105] __mutex_lock+0x175/0x9c0 [ 192.752426][ T5105] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 192.757494][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.762395][ T5105] ? aa_get_newest_label+0x376/0x680 [ 192.767715][ T5105] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 192.772781][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.777678][ T5105] ? __pfx___mutex_lock+0x10/0x10 [ 192.782749][ T5105] ? __pfx_lock_release+0x10/0x10 [ 192.787806][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.792705][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.797601][ T5105] ? apparmor_capable+0x126/0x1e0 [ 192.802661][ T5105] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 192.807723][ T5105] rfcomm_dlc_exists+0x5f/0x1a0 [ 192.812618][ T5105] rfcomm_dev_ioctl+0x9c5/0x1c80 [ 192.817588][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.822484][ T5105] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 192.827891][ T5105] ? __pfx_lock_release+0x10/0x10 [ 192.832949][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.837847][ T5105] ? mark_held_locks+0x9f/0xe0 [ 192.842641][ T5105] ? rfcomm_sock_ioctl+0xa7/0xe0 [ 192.847625][ T5105] ? __local_bh_enable_ip+0xa4/0x120 [ 192.852963][ T5105] rfcomm_sock_ioctl+0xb4/0xe0 [ 192.857773][ T5105] sock_do_ioctl+0x119/0x280 [ 192.862405][ T5105] ? __pfx_sock_do_ioctl+0x10/0x10 [ 192.867575][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.872498][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.877396][ T5105] sock_ioctl+0x22e/0x6c0 [ 192.881769][ T5105] ? __pfx_sock_ioctl+0x10/0x10 [ 192.886664][ T5105] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 192.893036][ T5105] ? srso_return_thunk+0x5/0x5f [ 192.897932][ T5105] ? __pfx_sock_ioctl+0x10/0x10 [ 192.902832][ T5105] __x64_sys_ioctl+0x196/0x220 [ 192.907634][ T5105] do_syscall_64+0xd5/0x260 [ 192.912189][ T5105] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 192.918139][ T5105] RIP: 0033:0x7f6140612d49 [ 192.922576][ T5105] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 192.942211][ T5105] RSP: 002b:00007ffe334cb378 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.950652][ T5105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6140612d49 [pid 5105] ioctl(5, RFCOMMCREATEDEV, 0x20000100) = -1 ENFILE (Too many open files in system) [pid 5105] close(3) = -1 EBADF (Bad file descriptor) [pid 5105] close(4) = 0 [pid 5105] close(5) = 0 [pid 5105] close(6) = -1 EBADF (Bad file descriptor) [ 192.958646][ T5105] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 192.966646][ T5105] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000555500000000 [ 192.974638][ T5105] R10: 0000555500000000 R11: 0000000000000246 R12: 00007ffe334cb3c0 [ 192.982628][ T5105] R13: 00007ffe334cb3d0 R14: 000000000002da18 R15: 00007ffe334cb390 [ 192.990634][ T5105] [pid 5105] close(7) = -1 EBADF (Bad file descriptor) [pid 5105] close(8) = -1 EBADF (Bad file descriptor) [pid 5105] close(9) = -1 EBADF (Bad file descriptor) [pid 5105] close(10) = -1 EBADF (Bad file descriptor) [pid 5105] close(11) = -1 EBADF (Bad file descriptor) [pid 5105] close(12) = -1 EBADF (Bad file descriptor) [pid 5105] close(13) = -1 EBADF (Bad file descriptor) [pid 5105] close(14) = -1 EBADF (Bad file descriptor) [pid 5105] close(15) = -1 EBADF (Bad file descriptor) [pid 5105] close(16) = -1 EBADF (Bad file descriptor) [pid 5105] close(17) = -1 EBADF (Bad file descriptor) [pid 5105] close(18) = -1 EBADF (Bad file descriptor) [pid 5105] close(19) = -1 EBADF (Bad file descriptor) [pid 5105] close(20) = -1 EBADF (Bad file descriptor) [pid 5105] close(21) = -1 EBADF (Bad file descriptor) [pid 5105] close(22) = -1 EBADF (Bad file descriptor) [pid 5105] close(23) = -1 EBADF (Bad file descriptor) [pid 5105] close(24) = -1 EBADF (Bad file descriptor) [pid 5105] close(25) = -1 EBADF (Bad file descriptor) [pid 5105] close(26) = -1 EBADF (Bad file descriptor) [pid 5105] close(27) = -1 EBADF (Bad file descriptor) [pid 5105] close(28) = -1 EBADF (Bad file descriptor) [pid 5105] close(29) = -1 EBADF (Bad file descriptor) [pid 5105] exit_group(0) = ? [pid 5105] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557ab8690) = 20 ./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5106] setns(201, 0) = 0 [pid 5106] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5106] setns(3, 0) = 0 [pid 5106] close(3) = 0 [ 195.282207][ T52] Bluetooth: hci0: command 0x041b tx timeout [pid 5106] connect(4, {sa_family=AF_BLUETOOTH, rc_bdaddr=aa:aa:aa:aa:aa:00, rc_channel=1}, 10 [pid 5072] kill(-20, SIGKILL [pid 5106] <... connect resumed>) = ? [pid 5072] <... kill resumed>) = 0 [pid 5072] kill(20, SIGKILL) = 0 [pid 5106] +++ killed by SIGKILL +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=20, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557ab8690) = 21 ./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x555557ab86a0, 24) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5107] close(3) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5107] setns(201, 0) = 0 [pid 5107] socket(AF_BLUETOOTH, SOCK_STREAM, BTPROTO_RFCOMM) = 4 [pid 5107] setns(3, 0) = 0 [pid 5107] close(3) = 0