Hello community,
It seems that there's a bug in Bluetooth stack of 4.20 kernel. I
discovered it during Bluetooth qualification tests. L2CAP/COS/CFD/BV-
12-C [Unknown Option Response] test fails because instead of
"Configuration Response" with error code 0x0003 "unknown option" the
Bluetooth stack generates "Command Reject".
I think, this happens because the tester (Bluetooth SIG PTS) uses hints
as unknown options, and the Bluetooth stack has special handling for
hints.
I made a small patch in order to overcome this problem. Please confirm,
that the patch is feasible. If not, please suggest how to fix the
"Command Reject" problem.
Thank you and best regards,
Konstantin
--- a/net/bluetooth/l2cap_core.c
+++ b/net/bluetooth/l2cap_core.c
@@ -3381,11 +3381,11 @@
break;
default:
- if (hint)
- break;
-
result = L2CAP_CONF_UNKNOWN;
- *((u8 *) ptr++) = type;
+
+ if (!hint)
+ *((u8 *) ptr++) = type;
+
break;
}
}
Hi Konstantin,
> It seems that there's a bug in Bluetooth stack of 4.20 kernel. I
> discovered it during Bluetooth qualification tests. L2CAP/COS/CFD/BV-
> 12-C [Unknown Option Response] test fails because instead of
> "Configuration Response" with error code 0x0003 "unknown option" the
> Bluetooth stack generates "Command Reject".
>
> I think, this happens because the tester (Bluetooth SIG PTS) uses hints
> as unknown options, and the Bluetooth stack has special handling for
> hints.
>
> I made a small patch in order to overcome this problem. Please confirm,
> that the patch is feasible. If not, please suggest how to fix the
> "Command Reject" problem.
is the limited to 4.20 kernel or does it also happen with the latest 5.5 kernel?
Regards
Marcel
Hi Marcel,
Unfortunately, I don't have a possibility to test 5.5 kernel. As far as
I can see, the most recent version available to the public via
git.kernel.org is 5.3-rc3 and the problematic part in
/net/bluetooth/l2cap_core.c file is the same for 4.20 and 5.3-rc3.
Hence I suppose it will behave the same way as 4.20.
Best regards,
Konstantin
On Wed, 2020-01-29 at 04:56 +0100, Marcel Holtmann wrote:
> Hi Konstantin,
>
> > It seems that there's a bug in Bluetooth stack of 4.20 kernel. I
> > discovered it during Bluetooth qualification tests.
> > L2CAP/COS/CFD/BV-
> > 12-C [Unknown Option Response] test fails because instead of
> > "Configuration Response" with error code 0x0003 "unknown option"
> > the
> > Bluetooth stack generates "Command Reject".
> >
> > I think, this happens because the tester (Bluetooth SIG PTS) uses
> > hints
> > as unknown options, and the Bluetooth stack has special handling
> > for
> > hints.
> >
> > I made a small patch in order to overcome this problem. Please
> > confirm,
> > that the patch is feasible. If not, please suggest how to fix the
> > "Command Reject" problem.
>
> is the limited to 4.20 kernel or does it also happen with the latest
> 5.5 kernel?
>
> Regards
>
> Marcel
>
>
>
>
>
Hi Konstantin,
> Unfortunately, I don't have a possibility to test 5.5 kernel. As far as
> I can see, the most recent version available to the public via
> git.kernel.org is 5.3-rc3 and the problematic part in
> /net/bluetooth/l2cap_core.c file is the same for 4.20 and 5.3-rc3.
> Hence I suppose it will behave the same way as 4.20.
can you include the btmon trace for the PTS test case so that I see what PTS sends and what we are responding.
Regards
Marcel
Hi Marcel,
As far as I understand, it's not possible to post binary data to
kernel.org mailing lists, hence I just copied console output for both
cases into this message. I'll send you btmon logs in btsnoop format in
a separate message.
Best regards,
Konstantin
Without patch - "Command Reject"
===================================================
btmon -w
/tmp/20200129_L2CAP_COS_CFD_BV_12_C_no_patch.log
Bluetooth monitor ver 5.50
= Note: Linux version 4.20.0-ceedev-standard
(armv7l)
0.436856
= Note: Bluetooth subsystem version
2.22
0.436866
= New Index: 40:BD:32:8D:4E:6B
(Primary,UART,hci0)
[hci0] 0.436869
= Open Index:
40:BD:32:8D:4E:6B
[hci0] 0.436872
= Index Info: 40:BD:32:8D:4E:6B (Texas Instruments
Inc.)
[hci0] 0.436874
@ MGMT Open: bluetoothd (privileged) version
1.14
{0x0001} 0.436880
@ MGMT Open: btmon (privileged) version
1.14
{0x0002} 0.436933
< HCI Command: Create Connection (0x01|0x0005) plen
13 #1
[hci0] 50.845422
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Packet type: 0xcc18
DM1 may be used
DH1 may be used
DM3 may be used
DH3 may be used
DM5 may be used
DH5 may be used
Page scan repetition mode: R2 (0x02)
Page scan mode: Mandatory (0x00)
Clock offset: 0x0000
Role switch: Allow slave (0x01)
> HCI Event: Command Status (0x0f) plen
4
#2 [hci0] 50.852531
Create Connection (0x01|0x0005) ncmd 1
Status: Success (0x00)
> HCI Event: Connect Complete (0x03) plen
11
#3 [hci0] 51.635293
Status: Success (0x00)
Handle: 1
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Link type: ACL (0x01)
Encryption: Disabled (0x00)
< HCI Command: Read Remote Supported Features (0x01|0x001b) plen
2 #4 [hci0]
51.635543
Handle: 1
> HCI Event: Command Status (0x0f) plen
4
#5 [hci0] 51.637357
Read Remote Supported Features (0x01|0x001b) ncmd 1
Status: Success (0x00)
> HCI Event: Max Slots Change (0x1b) plen
3
#6 [hci0] 51.645127
Handle: 1
Max slots: 5
> HCI Event: Read Remote Supported Features (0x0b) plen
11 #7
[hci0] 51.647540
Status: Success (0x00)
Handle: 1
Features: 0xff 0xff 0x8f 0x7e 0xd8 0x1f 0x5b 0x87
3 slot packets
5 slot packets
Encryption
Slot offset
Timing accuracy
Role switch
Hold mode
Sniff mode
Park state
Power control requests
Channel quality driven data rate (CQDDR)
SCO link
HV2 packets
HV3 packets
u-law log synchronous data
A-law log synchronous data
CVSD synchronous data
Paging parameter negotiation
Power control
Transparent synchronous data
Broadcast Encryption
Enhanced Data Rate ACL 2 Mbps mode
Enhanced Data Rate ACL 3 Mbps mode
Enhanced inquiry scan
Interlaced inquiry scan
Interlaced page scan
RSSI with inquiry results
AFH capable slave
AFH classification slave
LE Supported (Controller)
3-slot Enhanced Data Rate ACL packets
5-slot Enhanced Data Rate ACL packets
Sniff subrating
Pause encryption
AFH capable master
AFH classification master
Extended Inquiry Response
Simultaneous LE and BR/EDR (Controller)
Secure Simple Pairing
Encapsulated PDU
Non-flushable Packet Boundary Flag
Link Supervision Timeout Changed Event
Inquiry TX Power Level
Enhanced Power Control
Extended features
< HCI Command: Read Remote Extended Features (0x01|0x001c) plen
3 #8 [hci0]
51.647598
Handle: 1
Page: 1
> HCI Event: Command Status (0x0f) plen
4
#9 [hci0] 51.649877
Read Remote Extended Features (0x01|0x001c) ncmd 1
Status: Success (0x00)
> HCI Event: Read Remote Extended Features (0x23) plen
13 #10
[hci0] 51.651244
Status: Success (0x00)
Handle: 1
Page: 1/2
Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00
Secure Simple Pairing (Host Support)
< HCI Command: Remote Name Request (0x01|0x0019) plen
10 #11
[hci0] 51.651315
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Page scan repetition mode: R2 (0x02)
Page scan mode: Mandatory (0x00)
Clock offset: 0x0000
> HCI Event: Command Status (0x0f) plen
4
#12 [hci0] 51.651867
Remote Name Request (0x01|0x0019) ncmd 1
Status: Success (0x00)
> HCI Event: Remote Name Req Complete (0x07) plen
255 #1
3 [hci0] 51.664648
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Name: PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35 {0
x0002} [hci0] 51.664711
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Flags: 0x00000000
Data length: 22
Name (complete): PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35 {0
x0001} [hci0] 51.664711
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Flags: 0x00000000
Data length: 22
Name (complete): PTS-L2CAP-PCEE-NB025
< HCI Command: Authentication Requested (0x01|0x0011) plen
2 #14 [hci0]
51.664758
Handle: 1
> HCI Event: Command Status (0x0f) plen
4
#15 [hci0] 51.672084
Authentication Requested (0x01|0x0011) ncmd 1
Status: Success (0x00)
> HCI Event: Link Key Request (0x17) plen
6
#16 [hci0] 51.672097
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen
6 #17 [hci0]
51.672184
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10
#18 [hci0] 51.672554
Link Key Request Negative Reply (0x01|0x000c) ncmd 1
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Request (0x31) plen
6
#19 [hci0] 51.672594
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: IO Capability Request Reply (0x01|0x002b) plen
9 #20 [hci0]
51.672621
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
IO capability: NoInputNoOutput (0x03)
OOB data: Authentication data not present (0x00)
Authentication: No Bonding - MITM not required (0x00)
> HCI Event: Command Complete (0x0e) plen
10
#21 [hci0] 51.672921
IO Capability Request Reply (0x01|0x002b) ncmd 1
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Response (0x32) plen
9
#22 [hci0] 51.688845
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
IO capability: DisplayYesNo (0x01)
OOB data: Authentication data not present (0x00)
Authentication: No Bonding - MITM not required (0x00)
> HCI Event: User Confirmation Request (0x33) plen
10 #23
[hci0] 51.945949
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Passkey: 835166
< HCI Command: User Confirmation Request Reply (0x01|0x002c) plen
6 #24 [hci0]
51.946028
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10
#25 [hci0] 51.947784
User Confirmation Request Reply (0x01|0x002c) ncmd 1
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Simple Pairing Complete (0x36) plen
7 #
26 [hci0] 52.127146
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Link Key Notification (0x18) plen
23
#27 [hci0] 52.140183
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Link key: c1d789f769d3eebca69574169c42e6ed
Key type: Unauthenticated Combination key from P-192 (0x04)
@ MGMT Event: New Link Key (0x0009) plen
26
{0x0002} [hci0] 52.140251
Store hint: No (0x00)
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Key type: Unauthenticated Combination key from P-192 (0x04)
Link key: c1d789f769d3eebca69574169c42e6ed
PIN length: 0
@ MGMT Event: New Link Key (0x0009) plen
26
{0x0001} [hci0] 52.140251
Store hint: No (0x00)
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Key type: Unauthenticated Combination key from P-192 (0x04)
Link key: c1d789f769d3eebca69574169c42e6ed
PIN length: 0
> HCI Event: Auth Complete (0x06) plen
3
#28 [hci0] 52.140189
Status: Success (0x00)
Handle: 1
< HCI Command: Set Connection Encryption (0x01|0x0013) plen
3 #29 [hci0]
52.140303
Handle: 1
Encryption: Enabled (0x01)
> HCI Event: Command Status (0x0f) plen
4
#30 [hci0] 52.140554
Set Connection Encryption (0x01|0x0013) ncmd 1
Status: Success (0x00)
> HCI Event: Encryption Change (0x08) plen
4
#31 [hci0] 52.171352
Status: Success (0x00)
Handle: 1
Encryption: Enabled with E0 (0x01)
< HCI Command: Read Encryption Key Size (0x05|0x0008) plen
2 #32 [hci0]
52.171436
Handle: 1
> HCI Event: Command Complete (0x0e) plen
7
#33 [hci0] 52.171694
Read Encryption Key Size (0x05|0x0008) ncmd 1
Status: Success (0x00)
Handle: 1
Key size: 16
< ACL Data TX: Handle 1 flags 0x00 dlen
10
#34 [hci0] 52.171774
L2CAP: Information Request (0x0a) ident 1 len 2
Type: Extended features supported (0x0002)
> HCI Event: Number of Completed Packets (0x13) plen
5 #35
[hci0] 52.173741
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16
#36 [hci0] 52.182522
L2CAP: Information Response (0x0b) ident 1 len 8
Type: Extended features supported (0x0002)
Result: Success (0x0000)
Features: 0x00000000
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#37 [hci0] 52.182585
L2CAP: Connection Request (0x02) ident 2 len 4
PSM: 4113 (0x1011)
Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5 #38
[hci0] 52.185028
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16
#39 [hci0] 52.717720
L2CAP: Connection Response (0x03) ident 2 len 8
Destination CID: 66
Source CID: 64
Result: Connection successful (0x0000)
Status: No further information available (0x0000)
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#40 [hci0] 52.717793
L2CAP: Configure Request (0x04) ident 3 len 4
Destination CID: 66
Flags: 0x0000
> ACL Data RX: Handle 1 flags 0x02 dlen
16
#41 [hci0] 52.718812
L2CAP: Configure Request (0x04) ident 1 len 8
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01
00 ..
< ACL Data TX: Handle 1 flags 0x00 dlen
18
#42 [hci0] 52.718875
L2CAP: Configure Response (0x05) ident 1 len 10
Source CID: 66
Flags: 0x0000
Result: Success (0x0000)
Option: Maximum Transmission Unit (0x01) [mandatory]
MTU: 672
> HCI Event: Number of Completed Packets (0x13) plen
5 #43
[hci0] 52.721268
Num handles: 1
Handle: 1
Count: 2
> ACL Data RX: Handle 1 flags 0x02 dlen
14
#44 [hci0] 52.752564
L2CAP: Configure Response (0x05) ident 3 len 6
Source CID: 64
Flags: 0x0000
Result: Success (0x0000)
> ACL Data RX: Handle 1 flags 0x02 dlen
20
#45 [hci0] 52.778814
L2CAP: Configure Request (0x04) ident 1 len 12
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11
11 ......
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#46 [hci0] 52.778914
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #47
[hci0] 52.781300
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
24
#48 [hci0] 52.812581
L2CAP: Configure Request (0x04) ident 1 len 16
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22
22 ........""
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#49 [hci0] 52.812647
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #50
[hci0] 52.815069
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
28
#51 [hci0] 52.840018
L2CAP: Configure Request (0x04) ident 1 len 20
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33
33 ........""..33
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#52 [hci0] 52.840081
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #53
[hci0] 52.842551
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
32
#54 [hci0] 52.857601
L2CAP: Configure Request (0x04) ident 1 len 24
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44
44 DD
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#55 [hci0] 52.857687
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #56
[hci0] 52.860056
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
36
#57 [hci0] 52.882607
L2CAP: Configure Request (0x04) ident 1 len 28
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55
55 DD..UU
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#58 [hci0] 52.882687
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #59
[hci0] 52.885060
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
40
#60 [hci0] 52.900129
L2CAP: Configure Request (0x04) ident 1 len 32
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66
66 DD..UU..ff
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#61 [hci0] 52.900214
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #62
[hci0] 52.902597
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
44
#63 [hci0] 52.946407
L2CAP: Configure Request (0x04) ident 1 len 36
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 97 02 77
77 DD..UU..ff..ww
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#64 [hci0] 52.946472
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#65 [hci0] 52.946621
L2CAP: Connection Request (0x02) ident 4 len 4
PSM: 1 (0x0001)
Source CID: 65
> HCI Event: Number of Completed Packets (0x13) plen
5 #66
[hci0] 52.950091
Num handles: 1
Handle: 1
Count: 2
> ACL Data RX: Handle 1 flags 0x02 dlen
48
#67 [hci0] 52.977657
L2CAP: Configure Request (0x04) ident 1 len 40
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02 DD..UU..ff..ww..
88
88 ..
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#68 [hci0] 52.977706
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #69
[hci0] 52.980047
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
52
#70 [hci0] 52.988929
L2CAP: Configure Request (0x04) ident 1 len 44
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02 DD..UU..ff..ww..
88 88 99 02 99
99 ......
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#71 [hci0] 52.988997
L2CAP: Command Reject (0x01) ident 1 len 6
Reason: Invalid CID in request (0x0002)
Destination CID: 64
Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5 #72
[hci0] 52.991325
Num handles: 1
Handle: 1
Count: 1
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#73 [hci0] 57.659214
L2CAP: Disconnection Request (0x06) ident 5 len 4
Destination CID: 66
Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5 #74
[hci0] 57.662835
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
12
#75 [hci0] 58.208064
L2CAP: Disconnection Response (0x07) ident 5 len 4
Destination CID: 66
Source CID: 64
< HCI Command: Disconnect (0x01|0x0006) plen
3
#76 [hci0] 75.855047
Handle: 1
Reason: Remote User Terminated Connection (0x13)
> HCI Event: Command Status (0x0f) plen
4
#77 [hci0] 75.855936
Disconnect (0x01|0x0006) ncmd 1
Status: Success (0x00)
> HCI Event: Disconnect Complete (0x05) plen
4
#78 [hci0] 75.860459
Status: Success (0x00)
Handle: 1
Reason: Connection Terminated By Local Host (0x16)
@ MGMT Event: Device Disconnected (0x000c) plen
8 {0x00
02} [hci0] 75.860501
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Reason: Connection terminated by local host (0x02)
@ MGMT Event: Device Disconnected (0x000c) plen
8 {0x00
01} [hci0] 75.860501
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Reason: Connection terminated by local host (0x02)
@ MGMT Command: Unpair Device (0x001b) plen
8 {
0x0001} [hci0] 75.860893
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Disconnect: Enabled (0x01)
@ MGMT Event: Command Complete (0x0001) plen
10 {0
x0001} [hci0] 75.946993
Unpair Device (0x001b) plen 7
Status: Not Paired (0x06)
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
With patch - "Config Response with error code 3"
===================================================
btmon -w /tmp/20200129_L2CAP_COS_CFD_BV_12_C_with_patch.log
Bluetooth monitor ver 5.50
= Note: Linux version 4.20.0-ceedev-standard
(armv7l)
0.821108
= Note: Bluetooth subsystem version
2.22
0.821123
= New Index: 40:BD:32:8D:4E:6B
(Primary,UART,hci0)
[hci0] 0.821127
= Open Index:
40:BD:32:8D:4E:6B
[hci0] 0.821129
= Index Info: 40:BD:32:8D:4E:6B (Texas Instruments
Inc.)
[hci0] 0.821132
@ MGMT Open: bluetoothd (privileged) version
1.14
{0x0001} 0.821136
@ MGMT Open: btmon (privileged) version
1.14
{0x0002} 0.821194
< HCI Command: Create Connection (0x01|0x0005) plen
13 #1
[hci0] 25.998428
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Packet type: 0xcc18
DM1 may be used
DH1 may be used
DM3 may be used
DH3 may be used
DM5 may be used
DH5 may be used
Page scan repetition mode: R2 (0x02)
Page scan mode: Mandatory (0x00)
Clock offset: 0x0000
Role switch: Allow slave (0x01)
> HCI Event: Command Status (0x0f) plen
4
#2 [hci0] 26.006970
Create Connection (0x01|0x0005) ncmd 1
Status: Success (0x00)
> HCI Event: Connect Complete (0x03) plen
11
#3 [hci0] 29.356531
Status: Success (0x00)
Handle: 1
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Link type: ACL (0x01)
Encryption: Disabled (0x00)
< HCI Command: Read Remote Supported Features (0x01|0x001b) plen
2 #4 [hci0]
29.356814
Handle: 1
> HCI Event: Command Status (0x0f) plen
4
#5 [hci0] 29.358763
Read Remote Supported Features (0x01|0x001b) ncmd 1
Status: Success (0x00)
> HCI Event: Max Slots Change (0x1b) plen
3
#6 [hci0] 29.366300
Handle: 1
Max slots: 5
> HCI Event: Read Remote Supported Features (0x0b) plen
11 #7
[hci0] 29.368754
Status: Success (0x00)
Handle: 1
Features: 0xff 0xff 0x8f 0x7e 0xd8 0x1f 0x5b 0x87
3 slot packets
5 slot packets
Encryption
Slot offset
Timing accuracy
Role switch
Hold mode
Sniff mode
Park state
Power control requests
Channel quality driven data rate (CQDDR)
SCO link
HV2 packets
HV3 packets
u-law log synchronous data
A-law log synchronous data
CVSD synchronous data
Paging parameter negotiation
Power control
Transparent synchronous data
Broadcast Encryption
Enhanced Data Rate ACL 2 Mbps mode
Enhanced Data Rate ACL 3 Mbps mode
Enhanced inquiry scan
Interlaced inquiry scan
Interlaced page scan
RSSI with inquiry results
AFH capable slave
AFH classification slave
LE Supported (Controller)
3-slot Enhanced Data Rate ACL packets
5-slot Enhanced Data Rate ACL packets
Sniff subrating
Pause encryption
AFH capable master
AFH classification master
Extended Inquiry Response
Simultaneous LE and BR/EDR (Controller)
Secure Simple Pairing
Encapsulated PDU
Non-flushable Packet Boundary Flag
Link Supervision Timeout Changed Event
Inquiry TX Power Level
Enhanced Power Control
Extended features
< HCI Command: Read Remote Extended Features (0x01|0x001c) plen
3 #8 [hci0]
29.368818
Handle: 1
Page: 1
> HCI Event: Command Status (0x0f) plen
4
#9 [hci0] 29.369115
Read Remote Extended Features (0x01|0x001c) ncmd 1
Status: Success (0x00)
> HCI Event: Read Remote Extended Features (0x23) plen
13 #10
[hci0] 29.372444
Status: Success (0x00)
Handle: 1
Page: 1/2
Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00
Secure Simple Pairing (Host Support)
< HCI Command: Remote Name Request (0x01|0x0019) plen
10 #11
[hci0] 29.372512
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Page scan repetition mode: R2 (0x02)
Page scan mode: Mandatory (0x00)
Clock offset: 0x0000
> HCI Event: Command Status (0x0f) plen
4
#12 [hci0] 29.372748
Remote Name Request (0x01|0x0019) ncmd 1
Status: Success (0x00)
> HCI Event: Remote Name Req Complete (0x07) plen
255 #1
3 [hci0] 29.385847
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Name: PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35 {0
x0002} [hci0] 29.385907
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Flags: 0x00000000
Data length: 22
Name (complete): PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35 {0
x0001} [hci0] 29.385907
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Flags: 0x00000000
Data length: 22
Name (complete): PTS-L2CAP-PCEE-NB025
< HCI Command: Authentication Requested (0x01|0x0011) plen
2 #14 [hci0]
29.385968
Handle: 1
> HCI Event: Command Status (0x0f) plen
4
#15 [hci0] 29.388610
Authentication Requested (0x01|0x0011) ncmd 1
Status: Success (0x00)
> HCI Event: Link Key Request (0x17) plen
6
#16 [hci0] 29.388679
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen
6 #17 [hci0]
29.388725
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10
#18 [hci0] 29.389125
Link Key Request Negative Reply (0x01|0x000c) ncmd 1
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Request (0x31) plen
6
#19 [hci0] 29.389165
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: IO Capability Request Reply (0x01|0x002b) plen
9 #20 [hci0]
29.389243
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
IO capability: NoInputNoOutput (0x03)
OOB data: Authentication data not present (0x00)
Authentication: No Bonding - MITM not required (0x00)
> HCI Event: Command Complete (0x0e) plen
10
#21 [hci0] 29.389622
IO Capability Request Reply (0x01|0x002b) ncmd 1
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Response (0x32) plen
9
#22 [hci0] 29.412611
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
IO capability: DisplayYesNo (0x01)
OOB data: Authentication data not present (0x00)
Authentication: No Bonding - MITM not required (0x00)
> HCI Event: User Confirmation Request (0x33) plen
10 #23
[hci0] 29.669675
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Passkey: 592401
< HCI Command: User Confirmation Request Reply (0x01|0x002c) plen
6 #24 [hci0]
29.669757
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10
#25 [hci0] 29.671694
User Confirmation Request Reply (0x01|0x002c) ncmd 1
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Simple Pairing Complete (0x36) plen
7 #
26 [hci0] 29.863395
Status: Success (0x00)
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Link Key Notification (0x18) plen
23
#27 [hci0] 29.873884
Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Link key: 9a58028a445c7aca0beaadcb009b2bb9
Key type: Unauthenticated Combination key from P-192 (0x04)
@ MGMT Event: New Link Key (0x0009) plen
26
{0x0002} [hci0] 29.873931
Store hint: No (0x00)
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Key type: Unauthenticated Combination key from P-192 (0x04)
Link key: 9a58028a445c7aca0beaadcb009b2bb9
PIN length: 0
@ MGMT Event: New Link Key (0x0009) plen
26
{0x0001} [hci0] 29.873931
Store hint: No (0x00)
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Key type: Unauthenticated Combination key from P-192 (0x04)
Link key: 9a58028a445c7aca0beaadcb009b2bb9
PIN length: 0
> HCI Event: Auth Complete (0x06) plen
3
#28 [hci0] 29.873891
Status: Success (0x00)
Handle: 1
< HCI Command: Set Connection Encryption (0x01|0x0013) plen
3 #29 [hci0]
29.873986
Handle: 1
Encryption: Enabled (0x01)
> HCI Event: Command Status (0x0f) plen
4
#30 [hci0] 29.874229
Set Connection Encryption (0x01|0x0013) ncmd 1
Status: Success (0x00)
> HCI Event: Encryption Change (0x08) plen
4
#31 [hci0] 29.905061
Status: Success (0x00)
Handle: 1
Encryption: Enabled with E0 (0x01)
< HCI Command: Read Encryption Key Size (0x05|0x0008) plen
2 #32 [hci0]
29.905144
Handle: 1
> HCI Event: Command Complete (0x0e) plen
7
#33 [hci0] 29.905436
Read Encryption Key Size (0x05|0x0008) ncmd 1
Status: Success (0x00)
Handle: 1
Key size: 16
< ACL Data TX: Handle 1 flags 0x00 dlen
10
#34 [hci0] 29.905510
L2CAP: Information Request (0x0a) ident 1 len 2
Type: Extended features supported (0x0002)
> HCI Event: Number of Completed Packets (0x13) plen
5 #35
[hci0] 29.908729
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16
#36 [hci0] 29.923713
L2CAP: Information Response (0x0b) ident 1 len 8
Type: Extended features supported (0x0002)
Result: Success (0x0000)
Features: 0x00000000
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#37 [hci0] 29.923782
L2CAP: Connection Request (0x02) ident 2 len 4
PSM: 4113 (0x1011)
Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5 #38
[hci0] 29.926242
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16
#39 [hci0] 30.462642
L2CAP: Connection Response (0x03) ident 2 len 8
Destination CID: 66
Source CID: 64
Result: Connection successful (0x0000)
Status: No further information available (0x0000)
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#40 [hci0] 30.462719
L2CAP: Configure Request (0x04) ident 3 len 4
Destination CID: 66
Flags: 0x0000
> HCI Event: Number of Completed Packets (0x13) plen
5 #41
[hci0] 30.466252
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16
#42 [hci0] 30.475008
L2CAP: Configure Request (0x04) ident 1 len 8
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 ..
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#43 [hci0] 30.475090
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #44
[hci0] 30.477534
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
14
#45 [hci0] 30.508764
L2CAP: Configure Response (0x05) ident 3 len 6
Source CID: 64
Flags: 0x0000
Result: Success (0x0000)
> ACL Data RX: Handle 1 flags 0x02 dlen
20
#46 [hci0] 30.527515
L2CAP: Configure Request (0x04) ident 1 len 12
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 ......
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#47 [hci0] 30.527604
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #48
[hci0] 30.530033
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
24
#49 [hci0] 30.561269
L2CAP: Configure Request (0x04) ident 1 len 16
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 ........""
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#50 [hci0] 30.561335
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #51
[hci0] 30.563771
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
28
#52 [hci0] 30.578791
L2CAP: Configure Request (0x04) ident 1 len 20
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 ........""..33
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#53 [hci0] 30.578847
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #54
[hci0] 30.581277
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
32
#55 [hci0] 30.612601
L2CAP: Configure Request (0x04) ident 1 len 24
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 DD
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#56 [hci0] 30.612655
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #57
[hci0] 30.615027
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
36
#58 [hci0] 30.646336
L2CAP: Configure Request (0x04) ident 1 len 28
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 DD..UU
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#59 [hci0] 30.646385
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #60
[hci0] 30.648864
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
40
#61 [hci0] 30.671348
L2CAP: Configure Request (0x04) ident 1 len 32
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 DD..UU..ff
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#62 [hci0] 30.671394
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #63
[hci0] 30.673798
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
44
#64 [hci0] 30.706355
L2CAP: Configure Request (0x04) ident 1 len 36
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 97 02 77 77 DD..UU..ff..ww
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#65 [hci0] 30.706402
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #66
[hci0] 30.708775
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
48
#67 [hci0] 30.740112
L2CAP: Configure Request (0x04) ident 1 len 40
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02 DD..UU..ff..ww..
88 88 ..
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#68 [hci0] 30.740159
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #69
[hci0] 30.742523
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
52
#70 [hci0] 30.765143
L2CAP: Configure Request (0x04) ident 1 len 44
Destination CID: 64
Flags: 0x0000
Option: Unknown (0x10) [hint]
01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02 ........""..33..
44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02 DD..UU..ff..ww..
88 88 99 02 99 99 ......
< ACL Data TX: Handle 1 flags 0x00 dlen
14
#71 [hci0] 30.765204
L2CAP: Configure Response (0x05) ident 1 len 6
Source CID: 66
Flags: 0x0000
Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5 #72
[hci0] 30.767538
Num handles: 1
Handle: 1
Count: 1
< ACL Data TX: Handle 1 flags 0x00 dlen
12
#73 [hci0] 35.999402
L2CAP: Disconnection Request (0x06) ident 4 len 4
Destination CID: 66
Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5 #74
[hci0] 36.002783
Num handles: 1
Handle: 1
Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
12
#75 [hci0] 36.564217
L2CAP: Disconnection Response (0x07) ident 4 len 4
Destination CID: 66
Source CID: 64
< HCI Command: Disconnect (0x01|0x0006) plen
3
#76 [hci0] 38.604323
Handle: 1
Reason: Remote User Terminated Connection (0x13)
> HCI Event: Command Status (0x0f) plen
4
#77 [hci0] 38.604814
Disconnect (0x01|0x0006) ncmd 1
Status: Success (0x00)
> HCI Event: Disconnect Complete (0x05) plen
4
#78 [hci0] 38.609533
Status: Success (0x00)
Handle: 1
Reason: Connection Terminated By Local Host (0x16)
@ MGMT Event: Device Disconnected (0x000c) plen
8 {0x00
02} [hci0] 38.609576
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Reason: Connection terminated by local host (0x02)
@ MGMT Event: Device Disconnected (0x000c) plen
8 {0x00
01} [hci0] 38.609576
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Reason: Connection terminated by local host (0x02)
@ MGMT Command: Unpair Device (0x001b) plen
8 {
0x0001} [hci0] 38.609885
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
Disconnect: Enabled (0x01)
@ MGMT Event: Command Complete (0x0001) plen
10 {0
x0001} [hci0] 38.704517
Unpair Device (0x001b) plen 7
Status: Not Paired (0x06)
BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
On Wed, 2020-01-29 at 10:01 +0100, Marcel Holtmann wrote:
> Hi Konstantin,
>
> > Unfortunately, I don't have a possibility to test 5.5 kernel. As
> > far as
> > I can see, the most recent version available to the public via
> > git.kernel.org is 5.3-rc3 and the problematic part in
> > /net/bluetooth/l2cap_core.c file is the same for 4.20 and 5.3-rc3.
> > Hence I suppose it will behave the same way as 4.20.
>
> can you include the btmon trace for the PTS test case so that I see
> what PTS sends and what we are responding.
>
> Regards
>
> Marcel
>
>
>
>
>