bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response"

linux-bluetooth.vger.kernel.org archive mirror
 help / color / mirror / Atom feed

* bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response"
@ 2020-01-28 13:27 Konstantin Forostyan
  2020-01-29  3:56 ` Marcel Holtmann
  0 siblings, 1 reply; 5+ messages in thread
From: Konstantin Forostyan @ 2020-01-28 13:27 UTC (permalink / raw)
  To: linux-bluetooth

Hello community,

It seems that there's a bug in Bluetooth stack of 4.20 kernel. I
discovered it during Bluetooth qualification tests. L2CAP/COS/CFD/BV-
12-C [Unknown Option Response] test fails because instead of
"Configuration Response" with error code 0x0003 "unknown option" the
Bluetooth stack generates "Command Reject".

I think, this happens because the tester (Bluetooth SIG PTS) uses hints
as unknown options, and the Bluetooth stack has special handling for
hints. 

I made a small patch in order to overcome this problem. Please confirm,
that the patch is feasible. If not, please suggest how to fix the
"Command Reject" problem.

Thank you and best regards,
Konstantin

--- a/net/bluetooth/l2cap_core.c
+++ b/net/bluetooth/l2cap_core.c
@@ -3381,11 +3381,11 @@
 			break;

 		default:
-			if (hint)
-				break;
-
 			result = L2CAP_CONF_UNKNOWN;
-			*((u8 *) ptr++) = type;
+
+			if (!hint)
+			    *((u8 *) ptr++) = type;
+
 			break;
 		}
 	}

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response"
  2020-01-28 13:27 bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response" Konstantin Forostyan
@ 2020-01-29  3:56 ` Marcel Holtmann
  2020-01-29  8:53   ` Konstantin Forostyan
  0 siblings, 1 reply; 5+ messages in thread
From: Marcel Holtmann @ 2020-01-29  3:56 UTC (permalink / raw)
  To: Konstantin Forostyan; +Cc: linux-bluetooth

Hi Konstantin,

> It seems that there's a bug in Bluetooth stack of 4.20 kernel. I
> discovered it during Bluetooth qualification tests. L2CAP/COS/CFD/BV-
> 12-C [Unknown Option Response] test fails because instead of
> "Configuration Response" with error code 0x0003 "unknown option" the
> Bluetooth stack generates "Command Reject".
> 
> I think, this happens because the tester (Bluetooth SIG PTS) uses hints
> as unknown options, and the Bluetooth stack has special handling for
> hints. 
> 
> I made a small patch in order to overcome this problem. Please confirm,
> that the patch is feasible. If not, please suggest how to fix the
> "Command Reject" problem.

is the limited to 4.20 kernel or does it also happen with the latest 5.5 kernel?

Regards

Marcel


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response"
  2020-01-29  3:56 ` Marcel Holtmann
@ 2020-01-29  8:53   ` Konstantin Forostyan
  2020-01-29  9:01     ` Marcel Holtmann
  0 siblings, 1 reply; 5+ messages in thread
From: Konstantin Forostyan @ 2020-01-29  8:53 UTC (permalink / raw)
  To: marcel; +Cc: linux-bluetooth

Hi Marcel,

Unfortunately, I don't have a possibility to test 5.5 kernel. As far as
I can see, the most recent version available to the public via
git.kernel.org is 5.3-rc3 and the problematic part in
/net/bluetooth/l2cap_core.c file is the same for 4.20 and 5.3-rc3.
Hence I suppose it will behave the same way as 4.20.

Best regards,
Konstantin


On Wed, 2020-01-29 at 04:56 +0100, Marcel Holtmann wrote:
> Hi Konstantin,
> 
> > It seems that there's a bug in Bluetooth stack of 4.20 kernel. I
> > discovered it during Bluetooth qualification tests.
> > L2CAP/COS/CFD/BV-
> > 12-C [Unknown Option Response] test fails because instead of
> > "Configuration Response" with error code 0x0003 "unknown option"
> > the
> > Bluetooth stack generates "Command Reject".
> > 
> > I think, this happens because the tester (Bluetooth SIG PTS) uses
> > hints
> > as unknown options, and the Bluetooth stack has special handling
> > for
> > hints. 
> > 
> > I made a small patch in order to overcome this problem. Please
> > confirm,
> > that the patch is feasible. If not, please suggest how to fix the
> > "Command Reject" problem.
> 
> is the limited to 4.20 kernel or does it also happen with the latest
> 5.5 kernel?
> 
> Regards
> 
> Marcel
> 
> 
> 
> 
> 


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response"
  2020-01-29  8:53   ` Konstantin Forostyan
@ 2020-01-29  9:01     ` Marcel Holtmann
  2020-01-29 10:52       ` Konstantin Forostyan
  0 siblings, 1 reply; 5+ messages in thread
From: Marcel Holtmann @ 2020-01-29  9:01 UTC (permalink / raw)
  To: Konstantin Forostyan; +Cc: linux-bluetooth

Hi Konstantin,

> Unfortunately, I don't have a possibility to test 5.5 kernel. As far as
> I can see, the most recent version available to the public via
> git.kernel.org is 5.3-rc3 and the problematic part in
> /net/bluetooth/l2cap_core.c file is the same for 4.20 and 5.3-rc3.
> Hence I suppose it will behave the same way as 4.20.

can you include the btmon trace for the PTS test case so that I see what PTS sends and what we are responding.

Regards

Marcel


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response"
  2020-01-29  9:01     ` Marcel Holtmann
@ 2020-01-29 10:52       ` Konstantin Forostyan
  0 siblings, 0 replies; 5+ messages in thread
From: Konstantin Forostyan @ 2020-01-29 10:52 UTC (permalink / raw)
  To: marcel; +Cc: linux-bluetooth

Hi Marcel,

As far as I understand, it's not possible to post binary data to
kernel.org mailing lists, hence I just copied console output for both
cases into this message. I'll send you btmon logs in btsnoop format in
a separate message.

Best regards,
Konstantin


Without patch - "Command Reject"
===================================================
btmon -w
/tmp/20200129_L2CAP_COS_CFD_BV_12_C_no_patch.log                       
                                      
Bluetooth monitor ver 5.50
= Note: Linux version 4.20.0-ceedev-standard
(armv7l)                                                               
               0.436856
= Note: Bluetooth subsystem version
2.22                                                                   
                        0.436866
= New Index: 40:BD:32:8D:4E:6B
(Primary,UART,hci0)                                                    
                      [hci0] 0.436869
= Open Index:
40:BD:32:8D:4E:6B                                                      
                                       [hci0] 0.436872
= Index Info: 40:BD:32:8D:4E:6B (Texas Instruments
Inc.)                                                                  
  [hci0] 0.436874
@ MGMT Open: bluetoothd (privileged) version
1.14                                                                   
      {0x0001} 0.436880
@ MGMT Open: btmon (privileged) version
1.14                                                                   
           {0x0002} 0.436933
< HCI Command: Create Connection (0x01|0x0005) plen
13                                                                  #1
[hci0] 50.845422
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Packet type: 0xcc18
          DM1 may be used
          DH1 may be used
          DM3 may be used
          DH3 may be used
          DM5 may be used
          DH5 may be used
        Page scan repetition mode: R2 (0x02)
        Page scan mode: Mandatory (0x00)
        Clock offset: 0x0000
        Role switch: Allow slave (0x01)
> HCI Event: Command Status (0x0f) plen
4                                                                      
         #2 [hci0] 50.852531
      Create Connection (0x01|0x0005) ncmd 1
        Status: Success (0x00)
> HCI Event: Connect Complete (0x03) plen
11                                                                     
       #3 [hci0] 51.635293
        Status: Success (0x00)
        Handle: 1
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Link type: ACL (0x01)
        Encryption: Disabled (0x00)
< HCI Command: Read Remote Supported Features (0x01|0x001b) plen
2                                                      #4 [hci0]
51.635543
        Handle: 1
> HCI Event: Command Status (0x0f) plen
4                                                                      
         #5 [hci0] 51.637357
      Read Remote Supported Features (0x01|0x001b) ncmd 1
        Status: Success (0x00)
> HCI Event: Max Slots Change (0x1b) plen
3                                                                      
       #6 [hci0] 51.645127
        Handle: 1
        Max slots: 5
> HCI Event: Read Remote Supported Features (0x0b) plen
11                                                              #7
[hci0] 51.647540
        Status: Success (0x00)
        Handle: 1
        Features: 0xff 0xff 0x8f 0x7e 0xd8 0x1f 0x5b 0x87
          3 slot packets
          5 slot packets
          Encryption
          Slot offset
          Timing accuracy
          Role switch
          Hold mode
          Sniff mode
          Park state
          Power control requests
          Channel quality driven data rate (CQDDR)
          SCO link
          HV2 packets
          HV3 packets
          u-law log synchronous data
          A-law log synchronous data
          CVSD synchronous data
          Paging parameter negotiation
          Power control
          Transparent synchronous data
          Broadcast Encryption
          Enhanced Data Rate ACL 2 Mbps mode
          Enhanced Data Rate ACL 3 Mbps mode
          Enhanced inquiry scan
          Interlaced inquiry scan
          Interlaced page scan
          RSSI with inquiry results
          AFH capable slave
          AFH classification slave
          LE Supported (Controller)
          3-slot Enhanced Data Rate ACL packets
          5-slot Enhanced Data Rate ACL packets
          Sniff subrating
          Pause encryption
          AFH capable master
          AFH classification master
          Extended Inquiry Response
          Simultaneous LE and BR/EDR (Controller)
          Secure Simple Pairing
          Encapsulated PDU
          Non-flushable Packet Boundary Flag
          Link Supervision Timeout Changed Event
          Inquiry TX Power Level
          Enhanced Power Control
          Extended features
< HCI Command: Read Remote Extended Features (0x01|0x001c) plen
3                                                       #8 [hci0]
51.647598
        Handle: 1
        Page: 1
> HCI Event: Command Status (0x0f) plen
4                                                                      
         #9 [hci0] 51.649877
      Read Remote Extended Features (0x01|0x001c) ncmd 1
        Status: Success (0x00)
> HCI Event: Read Remote Extended Features (0x23) plen
13                                                              #10
[hci0] 51.651244
        Status: Success (0x00)
        Handle: 1
        Page: 1/2
        Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00
          Secure Simple Pairing (Host Support)
< HCI Command: Remote Name Request (0x01|0x0019) plen
10                                                               #11
[hci0] 51.651315
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Page scan repetition mode: R2 (0x02)
        Page scan mode: Mandatory (0x00)
        Clock offset: 0x0000
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #12 [hci0] 51.651867
      Remote Name Request (0x01|0x0019) ncmd 1
        Status: Success (0x00)
> HCI Event: Remote Name Req Complete (0x07) plen
255                                                                  #1
3 [hci0] 51.664648
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Name: PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35                                                                   {0
x0002} [hci0] 51.664711
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Flags: 0x00000000
        Data length: 22
        Name (complete): PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35                                                                   {0
x0001} [hci0] 51.664711
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Flags: 0x00000000
        Data length: 22
        Name (complete): PTS-L2CAP-PCEE-NB025
< HCI Command: Authentication Requested (0x01|0x0011) plen
2                                                           #14 [hci0]
51.664758
        Handle: 1
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #15 [hci0] 51.672084
      Authentication Requested (0x01|0x0011) ncmd 1
        Status: Success (0x00)
> HCI Event: Link Key Request (0x17) plen
6                                                                      
      #16 [hci0] 51.672097
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen
6                                                    #17 [hci0]
51.672184
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10                                                                     
      #18 [hci0] 51.672554
      Link Key Request Negative Reply (0x01|0x000c) ncmd 1
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Request (0x31) plen
6                                                                      
 #19 [hci0] 51.672594
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: IO Capability Request Reply (0x01|0x002b) plen
9                                                        #20 [hci0]
51.672621
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        IO capability: NoInputNoOutput (0x03)
        OOB data: Authentication data not present (0x00)
        Authentication: No Bonding - MITM not required (0x00)
> HCI Event: Command Complete (0x0e) plen
10                                                                     
      #21 [hci0] 51.672921
      IO Capability Request Reply (0x01|0x002b) ncmd 1
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Response (0x32) plen
9                                                                      
#22 [hci0] 51.688845
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        IO capability: DisplayYesNo (0x01)
        OOB data: Authentication data not present (0x00)
        Authentication: No Bonding - MITM not required (0x00)
> HCI Event: User Confirmation Request (0x33) plen
10                                                                  #23
[hci0] 51.945949
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Passkey: 835166
< HCI Command: User Confirmation Request Reply (0x01|0x002c) plen
6                                                    #24 [hci0]
51.946028
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10                                                                     
      #25 [hci0] 51.947784
      User Confirmation Request Reply (0x01|0x002c) ncmd 1
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Simple Pairing Complete (0x36) plen
7                                                                     #
26 [hci0] 52.127146
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Link Key Notification (0x18) plen
23                                                                     
 #27 [hci0] 52.140183
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Link key: c1d789f769d3eebca69574169c42e6ed
        Key type: Unauthenticated Combination key from P-192 (0x04)
@ MGMT Event: New Link Key (0x0009) plen
26                                                                     
  {0x0002} [hci0] 52.140251
        Store hint: No (0x00)
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Key type: Unauthenticated Combination key from P-192 (0x04)
        Link key: c1d789f769d3eebca69574169c42e6ed
        PIN length: 0
@ MGMT Event: New Link Key (0x0009) plen
26                                                                     
  {0x0001} [hci0] 52.140251
        Store hint: No (0x00)
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Key type: Unauthenticated Combination key from P-192 (0x04)
        Link key: c1d789f769d3eebca69574169c42e6ed
        PIN length: 0
> HCI Event: Auth Complete (0x06) plen
3                                                                      
         #28 [hci0] 52.140189
        Status: Success (0x00)
        Handle: 1
< HCI Command: Set Connection Encryption (0x01|0x0013) plen
3                                                          #29 [hci0]
52.140303
        Handle: 1
        Encryption: Enabled (0x01)
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #30 [hci0] 52.140554
      Set Connection Encryption (0x01|0x0013) ncmd 1
        Status: Success (0x00)
> HCI Event: Encryption Change (0x08) plen
4                                                                      
     #31 [hci0] 52.171352
        Status: Success (0x00)
        Handle: 1
        Encryption: Enabled with E0 (0x01)
< HCI Command: Read Encryption Key Size (0x05|0x0008) plen
2                                                           #32 [hci0]
52.171436
        Handle: 1
> HCI Event: Command Complete (0x0e) plen
7                                                                      
      #33 [hci0] 52.171694
      Read Encryption Key Size (0x05|0x0008) ncmd 1
        Status: Success (0x00)
        Handle: 1
        Key size: 16
< ACL Data TX: Handle 1 flags 0x00 dlen
10                                                                     
        #34 [hci0] 52.171774
      L2CAP: Information Request (0x0a) ident 1 len 2
        Type: Extended features supported (0x0002)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #35
[hci0] 52.173741
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16                                                                     
        #36 [hci0] 52.182522
      L2CAP: Information Response (0x0b) ident 1 len 8
        Type: Extended features supported (0x0002)
        Result: Success (0x0000)
        Features: 0x00000000
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #37 [hci0] 52.182585
      L2CAP: Connection Request (0x02) ident 2 len 4
        PSM: 4113 (0x1011)
        Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #38
[hci0] 52.185028
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16                                                                     
        #39 [hci0] 52.717720
      L2CAP: Connection Response (0x03) ident 2 len 8
        Destination CID: 66
        Source CID: 64
        Result: Connection successful (0x0000)
        Status: No further information available (0x0000)
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #40 [hci0] 52.717793
      L2CAP: Configure Request (0x04) ident 3 len 4
        Destination CID: 66
        Flags: 0x0000
> ACL Data RX: Handle 1 flags 0x02 dlen
16                                                                     
        #41 [hci0] 52.718812
      L2CAP: Configure Request (0x04) ident 1 len 8
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01
00                                            ..              
< ACL Data TX: Handle 1 flags 0x00 dlen
18                                                                     
        #42 [hci0] 52.718875
      L2CAP: Configure Response (0x05) ident 1 len 10
        Source CID: 66
        Flags: 0x0000
        Result: Success (0x0000)
        Option: Maximum Transmission Unit (0x01) [mandatory]
          MTU: 672
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #43
[hci0] 52.721268
        Num handles: 1
        Handle: 1
        Count: 2
> ACL Data RX: Handle 1 flags 0x02 dlen
14                                                                     
        #44 [hci0] 52.752564
      L2CAP: Configure Response (0x05) ident 3 len 6
        Source CID: 64
        Flags: 0x0000
        Result: Success (0x0000)
> ACL Data RX: Handle 1 flags 0x02 dlen
20                                                                     
        #45 [hci0] 52.778814
      L2CAP: Configure Request (0x04) ident 1 len 12
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11
11                                ......          
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #46 [hci0] 52.778914
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #47
[hci0] 52.781300
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
24                                                                     
        #48 [hci0] 52.812581
      L2CAP: Configure Request (0x04) ident 1 len 16
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22
22                    ........""      
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #49 [hci0] 52.812647
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #50
[hci0] 52.815069
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
28                                                                     
        #51 [hci0] 52.840018
      L2CAP: Configure Request (0x04) ident 1 len 20
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33
33        ........""..33  
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #52 [hci0] 52.840081
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #53
[hci0] 52.842551
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
32                                                                     
        #54 [hci0] 52.857601
      L2CAP: Configure Request (0x04) ident 1 len 24
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44
44                                            DD              
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #55 [hci0] 52.857687
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #56
[hci0] 52.860056
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
36                                                                     
        #57 [hci0] 52.882607
      L2CAP: Configure Request (0x04) ident 1 len 28
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55
55                                DD..UU          
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #58 [hci0] 52.882687
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #59
[hci0] 52.885060
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
40                                                                     
        #60 [hci0] 52.900129
      L2CAP: Configure Request (0x04) ident 1 len 32
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66
66                    DD..UU..ff      
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #61 [hci0] 52.900214
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #62
[hci0] 52.902597
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
44                                                                     
        #63 [hci0] 52.946407
      L2CAP: Configure Request (0x04) ident 1 len 36
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66 97 02 77
77        DD..UU..ff..ww  
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #64 [hci0] 52.946472
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #65 [hci0] 52.946621
      L2CAP: Connection Request (0x02) ident 4 len 4
        PSM: 1 (0x0001)
        Source CID: 65
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #66
[hci0] 52.950091
        Num handles: 1
        Handle: 1
        Count: 2
> ACL Data RX: Handle 1 flags 0x02 dlen
48                                                                     
        #67 [hci0] 52.977657
      L2CAP: Configure Request (0x04) ident 1 len 40
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02  DD..UU..ff..ww..
        88
88                                            ..              
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #68 [hci0] 52.977706
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #69
[hci0] 52.980047
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
52                                                                     
        #70 [hci0] 52.988929
      L2CAP: Configure Request (0x04) ident 1 len 44
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02  DD..UU..ff..ww..
        88 88 99 02 99
99                                ......          
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #71 [hci0] 52.988997
      L2CAP: Command Reject (0x01) ident 1 len 6
        Reason: Invalid CID in request (0x0002)
        Destination CID: 64
        Source CID: 66
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #72
[hci0] 52.991325
        Num handles: 1
        Handle: 1
        Count: 1
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #73 [hci0] 57.659214
      L2CAP: Disconnection Request (0x06) ident 5 len 4
        Destination CID: 66
        Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #74
[hci0] 57.662835
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
12                                                                     
        #75 [hci0] 58.208064
      L2CAP: Disconnection Response (0x07) ident 5 len 4
        Destination CID: 66
        Source CID: 64
< HCI Command: Disconnect (0x01|0x0006) plen
3                                                                      
   #76 [hci0] 75.855047
        Handle: 1
        Reason: Remote User Terminated Connection (0x13)
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #77 [hci0] 75.855936
      Disconnect (0x01|0x0006) ncmd 1
        Status: Success (0x00)
> HCI Event: Disconnect Complete (0x05) plen
4                                                                      
   #78 [hci0] 75.860459
        Status: Success (0x00)
        Handle: 1
        Reason: Connection Terminated By Local Host (0x16)
@ MGMT Event: Device Disconnected (0x000c) plen
8                                                                 {0x00
02} [hci0] 75.860501
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Reason: Connection terminated by local host (0x02)
@ MGMT Event: Device Disconnected (0x000c) plen
8                                                                 {0x00
01} [hci0] 75.860501
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Reason: Connection terminated by local host (0x02)
@ MGMT Command: Unpair Device (0x001b) plen
8                                                                     {
0x0001} [hci0] 75.860893
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Disconnect: Enabled (0x01)
@ MGMT Event: Command Complete (0x0001) plen
10                                                                   {0
x0001} [hci0] 75.946993
      Unpair Device (0x001b) plen 7
        Status: Not Paired (0x06)
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)




With patch - "Config Response with error code 3"
===================================================
btmon -w /tmp/20200129_L2CAP_COS_CFD_BV_12_C_with_patch.log
Bluetooth monitor ver 5.50
= Note: Linux version 4.20.0-ceedev-standard
(armv7l)                                                               
               0.821108
= Note: Bluetooth subsystem version
2.22                                                                   
                        0.821123
= New Index: 40:BD:32:8D:4E:6B
(Primary,UART,hci0)                                                    
                      [hci0] 0.821127
= Open Index:
40:BD:32:8D:4E:6B                                                      
                                       [hci0] 0.821129
= Index Info: 40:BD:32:8D:4E:6B (Texas Instruments
Inc.)                                                                  
  [hci0] 0.821132
@ MGMT Open: bluetoothd (privileged) version
1.14                                                                   
      {0x0001} 0.821136
@ MGMT Open: btmon (privileged) version
1.14                                                                   
           {0x0002} 0.821194
< HCI Command: Create Connection (0x01|0x0005) plen
13                                                                  #1
[hci0] 25.998428
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Packet type: 0xcc18
          DM1 may be used
          DH1 may be used
          DM3 may be used
          DH3 may be used
          DM5 may be used
          DH5 may be used
        Page scan repetition mode: R2 (0x02)
        Page scan mode: Mandatory (0x00)
        Clock offset: 0x0000
        Role switch: Allow slave (0x01)
> HCI Event: Command Status (0x0f) plen
4                                                                      
         #2 [hci0] 26.006970
      Create Connection (0x01|0x0005) ncmd 1
        Status: Success (0x00)
> HCI Event: Connect Complete (0x03) plen
11                                                                     
       #3 [hci0] 29.356531
        Status: Success (0x00)
        Handle: 1
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Link type: ACL (0x01)
        Encryption: Disabled (0x00)
< HCI Command: Read Remote Supported Features (0x01|0x001b) plen
2                                                      #4 [hci0]
29.356814
        Handle: 1
> HCI Event: Command Status (0x0f) plen
4                                                                      
         #5 [hci0] 29.358763
      Read Remote Supported Features (0x01|0x001b) ncmd 1
        Status: Success (0x00)
> HCI Event: Max Slots Change (0x1b) plen
3                                                                      
       #6 [hci0] 29.366300
        Handle: 1
        Max slots: 5
> HCI Event: Read Remote Supported Features (0x0b) plen
11                                                              #7
[hci0] 29.368754
        Status: Success (0x00)
        Handle: 1
        Features: 0xff 0xff 0x8f 0x7e 0xd8 0x1f 0x5b 0x87
          3 slot packets
          5 slot packets
          Encryption
          Slot offset
          Timing accuracy
          Role switch
          Hold mode
          Sniff mode
          Park state
          Power control requests
          Channel quality driven data rate (CQDDR)
          SCO link
          HV2 packets
          HV3 packets
          u-law log synchronous data
          A-law log synchronous data
          CVSD synchronous data
          Paging parameter negotiation
          Power control
          Transparent synchronous data
          Broadcast Encryption
          Enhanced Data Rate ACL 2 Mbps mode
          Enhanced Data Rate ACL 3 Mbps mode
          Enhanced inquiry scan
          Interlaced inquiry scan
          Interlaced page scan
          RSSI with inquiry results
          AFH capable slave
          AFH classification slave
          LE Supported (Controller)
          3-slot Enhanced Data Rate ACL packets
          5-slot Enhanced Data Rate ACL packets
          Sniff subrating
          Pause encryption
          AFH capable master
          AFH classification master
          Extended Inquiry Response
          Simultaneous LE and BR/EDR (Controller)
          Secure Simple Pairing
          Encapsulated PDU
          Non-flushable Packet Boundary Flag
          Link Supervision Timeout Changed Event
          Inquiry TX Power Level
          Enhanced Power Control
          Extended features
< HCI Command: Read Remote Extended Features (0x01|0x001c) plen
3                                                       #8 [hci0]
29.368818
        Handle: 1
        Page: 1
> HCI Event: Command Status (0x0f) plen
4                                                                      
         #9 [hci0] 29.369115
      Read Remote Extended Features (0x01|0x001c) ncmd 1
        Status: Success (0x00)
> HCI Event: Read Remote Extended Features (0x23) plen
13                                                              #10
[hci0] 29.372444
        Status: Success (0x00)
        Handle: 1
        Page: 1/2
        Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00
          Secure Simple Pairing (Host Support)
< HCI Command: Remote Name Request (0x01|0x0019) plen
10                                                               #11
[hci0] 29.372512
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Page scan repetition mode: R2 (0x02)
        Page scan mode: Mandatory (0x00)
        Clock offset: 0x0000
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #12 [hci0] 29.372748
      Remote Name Request (0x01|0x0019) ncmd 1
        Status: Success (0x00)
> HCI Event: Remote Name Req Complete (0x07) plen
255                                                                  #1
3 [hci0] 29.385847
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Name: PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35                                                                   {0
x0002} [hci0] 29.385907
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Flags: 0x00000000
        Data length: 22
        Name (complete): PTS-L2CAP-PCEE-NB025
@ MGMT Event: Device Connected (0x000b) plen
35                                                                   {0
x0001} [hci0] 29.385907
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Flags: 0x00000000
        Data length: 22
        Name (complete): PTS-L2CAP-PCEE-NB025
< HCI Command: Authentication Requested (0x01|0x0011) plen
2                                                           #14 [hci0]
29.385968
        Handle: 1
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #15 [hci0] 29.388610
      Authentication Requested (0x01|0x0011) ncmd 1
        Status: Success (0x00)
> HCI Event: Link Key Request (0x17) plen
6                                                                      
      #16 [hci0] 29.388679
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen
6                                                    #17 [hci0]
29.388725
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10                                                                     
      #18 [hci0] 29.389125
      Link Key Request Negative Reply (0x01|0x000c) ncmd 1
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Request (0x31) plen
6                                                                      
 #19 [hci0] 29.389165
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
< HCI Command: IO Capability Request Reply (0x01|0x002b) plen
9                                                        #20 [hci0]
29.389243
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        IO capability: NoInputNoOutput (0x03)
        OOB data: Authentication data not present (0x00)
        Authentication: No Bonding - MITM not required (0x00)
> HCI Event: Command Complete (0x0e) plen
10                                                                     
      #21 [hci0] 29.389622
      IO Capability Request Reply (0x01|0x002b) ncmd 1
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: IO Capability Response (0x32) plen
9                                                                      
#22 [hci0] 29.412611
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        IO capability: DisplayYesNo (0x01)
        OOB data: Authentication data not present (0x00)
        Authentication: No Bonding - MITM not required (0x00)
> HCI Event: User Confirmation Request (0x33) plen
10                                                                  #23
[hci0] 29.669675
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Passkey: 592401
< HCI Command: User Confirmation Request Reply (0x01|0x002c) plen
6                                                    #24 [hci0]
29.669757
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Command Complete (0x0e) plen
10                                                                     
      #25 [hci0] 29.671694
      User Confirmation Request Reply (0x01|0x002c) ncmd 1
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Simple Pairing Complete (0x36) plen
7                                                                     #
26 [hci0] 29.863395
        Status: Success (0x00)
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
> HCI Event: Link Key Notification (0x18) plen
23                                                                     
 #27 [hci0] 29.873884
        Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Link key: 9a58028a445c7aca0beaadcb009b2bb9
        Key type: Unauthenticated Combination key from P-192 (0x04)
@ MGMT Event: New Link Key (0x0009) plen
26                                                                     
  {0x0002} [hci0] 29.873931
        Store hint: No (0x00)
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Key type: Unauthenticated Combination key from P-192 (0x04)
        Link key: 9a58028a445c7aca0beaadcb009b2bb9
        PIN length: 0
@ MGMT Event: New Link Key (0x0009) plen
26                                                                     
  {0x0001} [hci0] 29.873931
        Store hint: No (0x00)
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Key type: Unauthenticated Combination key from P-192 (0x04)
        Link key: 9a58028a445c7aca0beaadcb009b2bb9
        PIN length: 0
> HCI Event: Auth Complete (0x06) plen
3                                                                      
         #28 [hci0] 29.873891
        Status: Success (0x00)
        Handle: 1
< HCI Command: Set Connection Encryption (0x01|0x0013) plen
3                                                          #29 [hci0]
29.873986
        Handle: 1
        Encryption: Enabled (0x01)
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #30 [hci0] 29.874229
      Set Connection Encryption (0x01|0x0013) ncmd 1
        Status: Success (0x00)
> HCI Event: Encryption Change (0x08) plen
4                                                                      
     #31 [hci0] 29.905061
        Status: Success (0x00)
        Handle: 1
        Encryption: Enabled with E0 (0x01)
< HCI Command: Read Encryption Key Size (0x05|0x0008) plen
2                                                           #32 [hci0]
29.905144
        Handle: 1
> HCI Event: Command Complete (0x0e) plen
7                                                                      
      #33 [hci0] 29.905436
      Read Encryption Key Size (0x05|0x0008) ncmd 1
        Status: Success (0x00)
        Handle: 1
        Key size: 16
< ACL Data TX: Handle 1 flags 0x00 dlen
10                                                                     
        #34 [hci0] 29.905510
      L2CAP: Information Request (0x0a) ident 1 len 2
        Type: Extended features supported (0x0002)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #35
[hci0] 29.908729
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16                                                                     
        #36 [hci0] 29.923713
      L2CAP: Information Response (0x0b) ident 1 len 8
        Type: Extended features supported (0x0002)
        Result: Success (0x0000)
        Features: 0x00000000
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #37 [hci0] 29.923782
      L2CAP: Connection Request (0x02) ident 2 len 4
        PSM: 4113 (0x1011)
        Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #38
[hci0] 29.926242
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16                                                                     
        #39 [hci0] 30.462642
      L2CAP: Connection Response (0x03) ident 2 len 8
        Destination CID: 66
        Source CID: 64
        Result: Connection successful (0x0000)
        Status: No further information available (0x0000)
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #40 [hci0] 30.462719
      L2CAP: Configure Request (0x04) ident 3 len 4
        Destination CID: 66
        Flags: 0x0000
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #41
[hci0] 30.466252
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
16                                                                     
        #42 [hci0] 30.475008
      L2CAP: Configure Request (0x04) ident 1 len 8
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00                                            ..
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #43 [hci0] 30.475090
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #44
[hci0] 30.477534
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
14                                                                     
        #45 [hci0] 30.508764
      L2CAP: Configure Response (0x05) ident 3 len 6
        Source CID: 64
        Flags: 0x0000
        Result: Success (0x0000)
> ACL Data RX: Handle 1 flags 0x02 dlen
20                                                                     
        #46 [hci0] 30.527515
      L2CAP: Configure Request (0x04) ident 1 len 12
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11                                ......
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #47 [hci0] 30.527604
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #48
[hci0] 30.530033
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
24                                                                     
        #49 [hci0] 30.561269
      L2CAP: Configure Request (0x04) ident 1 len 16
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22                    ........""
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #50 [hci0] 30.561335
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #51
[hci0] 30.563771
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
28                                                                     
        #52 [hci0] 30.578791
      L2CAP: Configure Request (0x04) ident 1 len 20
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33        ........""..33
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #53 [hci0] 30.578847
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #54
[hci0] 30.581277
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
32                                                                     
        #55 [hci0] 30.612601
      L2CAP: Configure Request (0x04) ident 1 len 24
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44                                            DD
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #56 [hci0] 30.612655
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #57
[hci0] 30.615027
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
36                                                                     
        #58 [hci0] 30.646336
      L2CAP: Configure Request (0x04) ident 1 len 28
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55                                DD..UU
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #59 [hci0] 30.646385
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #60
[hci0] 30.648864
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
40                                                                     
        #61 [hci0] 30.671348
      L2CAP: Configure Request (0x04) ident 1 len 32
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66                    DD..UU..ff
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #62 [hci0] 30.671394
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #63
[hci0] 30.673798
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
44                                                                     
        #64 [hci0] 30.706355
      L2CAP: Configure Request (0x04) ident 1 len 36
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66 97 02 77 77        DD..UU..ff..ww
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #65 [hci0] 30.706402
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #66
[hci0] 30.708775
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
48                                                                     
        #67 [hci0] 30.740112
      L2CAP: Configure Request (0x04) ident 1 len 40
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02  DD..UU..ff..ww..
        88 88                                            ..
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #68 [hci0] 30.740159
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #69
[hci0] 30.742523
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
52                                                                     
        #70 [hci0] 30.765143
      L2CAP: Configure Request (0x04) ident 1 len 44
        Destination CID: 64
        Flags: 0x0000
        Option: Unknown (0x10) [hint]
        01 00 91 02 11 11 92 02 22 22 93 02 33 33 94
02  ........""..33..
        44 44 95 02 55 55 96 02 66 66 97 02 77 77 98
02  DD..UU..ff..ww..
        88 88 99 02 99 99                                ......
< ACL Data TX: Handle 1 flags 0x00 dlen
14                                                                     
        #71 [hci0] 30.765204
      L2CAP: Configure Response (0x05) ident 1 len 6
        Source CID: 66
        Flags: 0x0000
        Result: Failure - unknown options (0x0003)
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #72
[hci0] 30.767538
        Num handles: 1
        Handle: 1
        Count: 1
< ACL Data TX: Handle 1 flags 0x00 dlen
12                                                                     
        #73 [hci0] 35.999402
      L2CAP: Disconnection Request (0x06) ident 4 len 4
        Destination CID: 66
        Source CID: 64
> HCI Event: Number of Completed Packets (0x13) plen
5                                                                 #74
[hci0] 36.002783
        Num handles: 1
        Handle: 1
        Count: 1
> ACL Data RX: Handle 1 flags 0x02 dlen
12                                                                     
        #75 [hci0] 36.564217
      L2CAP: Disconnection Response (0x07) ident 4 len 4
        Destination CID: 66
        Source CID: 64
< HCI Command: Disconnect (0x01|0x0006) plen
3                                                                      
   #76 [hci0] 38.604323
        Handle: 1
        Reason: Remote User Terminated Connection (0x13)
> HCI Event: Command Status (0x0f) plen
4                                                                      
        #77 [hci0] 38.604814
      Disconnect (0x01|0x0006) ncmd 1
        Status: Success (0x00)
> HCI Event: Disconnect Complete (0x05) plen
4                                                                      
   #78 [hci0] 38.609533
        Status: Success (0x00)
        Handle: 1
        Reason: Connection Terminated By Local Host (0x16)
@ MGMT Event: Device Disconnected (0x000c) plen
8                                                                 {0x00
02} [hci0] 38.609576
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Reason: Connection terminated by local host (0x02)
@ MGMT Event: Device Disconnected (0x000c) plen
8                                                                 {0x00
01} [hci0] 38.609576
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Reason: Connection terminated by local host (0x02)
@ MGMT Command: Unpair Device (0x001b) plen
8                                                                     {
0x0001} [hci0] 38.609885
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)
        Disconnect: Enabled (0x01)
@ MGMT Event: Command Complete (0x0001) plen
10                                                                   {0
x0001} [hci0] 38.704517
      Unpair Device (0x001b) plen 7
        Status: Not Paired (0x06)
        BR/EDR Address: 00:1B:DC:08:E7:0C (Vencer Co., Ltd.)




On Wed, 2020-01-29 at 10:01 +0100, Marcel Holtmann wrote:
> Hi Konstantin,
> 
> > Unfortunately, I don't have a possibility to test 5.5 kernel. As
> > far as
> > I can see, the most recent version available to the public via
> > git.kernel.org is 5.3-rc3 and the problematic part in
> > /net/bluetooth/l2cap_core.c file is the same for 4.20 and 5.3-rc3.
> > Hence I suppose it will behave the same way as 4.20.
> 
> can you include the btmon trace for the PTS test case so that I see
> what PTS sends and what we are responding.
> 
> Regards
> 
> Marcel
> 
> 
> 
> 
> 


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2020-01-29 10:52 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-01-28 13:27 bluetooth: If unknown option in L2CAP Configuration Request is a hint, Bluetooth stack responds with "Command Reject" instead of "Configuration Response" Konstantin Forostyan
2020-01-29  3:56 ` Marcel Holtmann
2020-01-29  8:53   ` Konstantin Forostyan
2020-01-29  9:01     ` Marcel Holtmann
2020-01-29 10:52       ` Konstantin Forostyan

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).