Another "hci0 command tx timeout"

Hello, All.

How can I help to debug this issue? BT works without userspace, but does not work if I enable it in udev rules (ACTION=="add", SUBSYSTEM=="bluetooth", RUN+="/usr/sbin/bluetoothd --udev") or do "/etc/rc.d/bluetooth start".

(Probably related to
https://bugzilla.redhat.com/show_bug.cgi?id=519176
and
https://bugs.launchpad.net/linux/+bug/268502)

Packages:
kernel26 2.6.35.5-1
bluez 4.72-1

Devices:
Bus 007 Device 005: ID 0a5c:3503 Broadcom Corp.
Bus 007 Device 004: ID 0a5c:3502 Broadcom Corp.
Bus 007 Device 003: ID 0a12:0001 Cambridge Silicon Radio, Ltd Bluetooth Dongle (HCI mode) Bus 007 Device 002: ID 0a5c:3500 Broadcom Corp.

Without userspace:
HCI sniffer - Bluetooth packet analyzer ver 1.42
device: hci0 snap_len: 1028 filter: 0xffffffffffffffff < HCI Command: Read Local Supported Features (0x04|0x0003) plen 0

< HCI Command: Read Local Version Information (0x04|0x0001) plen 0

< HCI Command: Read Buffer Size (0x04|0x0005) plen 0

< HCI Command: Read BD ADDR (0x04|0x0009) plen 0

< HCI Command: Read Class of Device (0x03|0x0023) plen 0

< HCI Command: Read Local Name (0x03|0x0014) plen 0

< HCI Command: Read Voice Setting (0x03|0x0025) plen 0

< HCI Command: Set Event Filter (0x03|0x0005) plen 1

< HCI Command: Write Page Timeout (0x03|0x0018) plen 2

< HCI Command: Write Connection Accept Timeout (0x03|0x0016) plen 2

< HCI Command: Inquiry (0x01|0x0001) plen 5

With userspace:
HCI sniffer - Bluetooth packet analyzer ver 1.42
device: hci0 snap_len: 1028 filter: 0xffffffffffffffff < HCI Command: Read Local Supported Features (0x04|0x0003) plen 0

< HCI Command: Read Local Version Information (0x04|0x0001) plen 0

< HCI Command: Read Buffer Size (0x04|0x0005) plen 0

< HCI Command: Read BD ADDR (0x04|0x0009) plen 0

< HCI Command: Read Class of Device (0x03|0x0023) plen 0

< HCI Command: Read Local Name (0x03|0x0014) plen 0

< HCI Command: Read Voice Setting (0x03|0x0025) plen 0

< HCI Command: Set Event Filter (0x03|0x0005) plen 1

< HCI Command: Write Page Timeout (0x03|0x0018) plen 2

< HCI Command: Write Connection Accept Timeout (0x03|0x0016) plen 2

< HCI Command: Write Page Timeout (0x03|0x0018) plen 2

< HCI Command: Write Default Link Policy Settings (0x02|0x000f) plen 2

< HCI Command: Read Stored Link Key (0x03|0x000d) plen 7

< HCI Command: Read Local Version Information (0x04|0x0001) plen 0

< HCI Command: Read Local Supported Features (0x04|0x0003) plen 0

< HCI Command: Read Default Link Policy Settings (0x02|0x000e) plen 0 < HCI Command: Write Scan Enable (0x03|0x001a) plen 1

Hi Sergej,

What do you mean by "works without userspace"?

Gustavo F. Padovan
ProFUSION embedded systems - http://profusion.mobi

I try to do following:

1. ensure that userspace does not work (stop bluetoothd and comment udev bluetooth rule)
2. modprobe btusb
3. hciconfig hci0 up
4. hcitool inq

then remove btusb, uncomment udev rules, start bluetoothd and do 2-4 again.

With userspace I got

$ hcitool inq
Inquiring ...
Inquiry failed.: Connection timed out

and subj error in dmesg.

Also I see that hcidump with userspace does not catch inquiry command.

So that is the problem, you are removing btusb.

Gustavo F. Padovan
ProFUSION embedded systems - http://profusion.mobi

Do you mean that removing/inserting back btusb can damage something? I repeat it many times and it always works if bluetoothd stopped and always does not work if bluetoothd is running.