RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 000000000000058d R14: 00000000004c8252 R15: 0000000000000000 ====================================================== WARNING: possible circular locking dependency detected 4.14.175-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.3/2043 is trying to acquire lock: (console_owner){-.-.}, at: [] console_trylock_spinning kernel/printk/printk.c:1658 [inline] (console_owner){-.-.}, at: [] vprintk_emit kernel/printk/printk.c:1922 [inline] (console_owner){-.-.}, at: [] vprintk_emit+0x2f0/0x600 kernel/printk/printk.c:1888 but task is already holding lock: (&pool->lock/1){..-.}, at: [] spin_lock include/linux/spinlock.h:317 [inline] (&pool->lock/1){..-.}, at: [] start_flush_work kernel/workqueue.c:2833 [inline] (&pool->lock/1){..-.}, at: [] flush_work+0x134/0x780 kernel/workqueue.c:2892 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (&pool->lock/1){..-.}: __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152 spin_lock include/linux/spinlock.h:317 [inline] __queue_work+0x174/0xf70 kernel/workqueue.c:1421 queue_work_on+0x159/0x1d0 kernel/workqueue.c:1490 pty_write+0x173/0x1c0 drivers/tty/pty.c:125 process_output_block drivers/tty/n_tty.c:595 [inline] n_tty_write+0x375/0xe30 drivers/tty/n_tty.c:2333 do_tty_write drivers/tty/tty_io.c:959 [inline] tty_write+0x3f0/0x700 drivers/tty/tty_io.c:1043 __vfs_write+0xe4/0x630 fs/read_write.c:480 vfs_write+0x192/0x4e0 fs/read_write.c:544 SYSC_write fs/read_write.c:590 [inline] SyS_write+0xf2/0x210 fs/read_write.c:582 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 -> #2 (&(&port->lock)->rlock){-.-.}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160 tty_port_tty_get+0x1d/0x80 drivers/tty/tty_port.c:288 tty_port_default_wakeup+0x11/0x40 drivers/tty/tty_port.c:46 serial8250_tx_chars+0x400/0x9e0 drivers/tty/serial/8250/8250_port.c:1810 serial8250_handle_irq.part.0+0x1f8/0x240 drivers/tty/serial/8250/8250_port.c:1883 serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1869 [inline] serial8250_default_handle_irq+0x96/0x110 drivers/tty/serial/8250/8250_port.c:1899 serial8250_interrupt+0xe4/0x1a0 drivers/tty/serial/8250/8250_core.c:129 __handle_irq_event_percpu+0x125/0x7e0 kernel/irq/handle.c:147 handle_irq_event_percpu+0x66/0x120 kernel/irq/handle.c:187 handle_irq_event+0xa2/0x12d kernel/irq/handle.c:204 handle_edge_irq+0x215/0x810 kernel/irq/chip.c:770 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87 do_IRQ+0x93/0x1d0 arch/x86/kernel/irq.c:230 ret_from_intr+0x0/0x1e native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline] default_idle+0x47/0x370 arch/x86/kernel/process.c:566 cpuidle_idle_call kernel/sched/idle.c:156 [inline] do_idle+0x250/0x3c0 kernel/sched/idle.c:246 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:351 start_kernel+0x659/0x676 init/main.c:708 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240 -> #1 (&port_lock_key){-.-.}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xbf kernel/locking/spinlock.c:160 serial8250_console_write+0x6c1/0x8e0 drivers/tty/serial/8250/8250_port.c:3236 call_console_drivers kernel/printk/printk.c:1725 [inline] console_unlock+0x9b2/0xec0 kernel/printk/printk.c:2397 vprintk_emit kernel/printk/printk.c:1923 [inline] vprintk_emit+0x1f8/0x600 kernel/printk/printk.c:1888 vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401 printk+0x9e/0xbc kernel/printk/printk.c:1996 register_console+0x5ec/0x9a0 kernel/printk/printk.c:2716 univ8250_console_init+0x2f/0x3a drivers/tty/serial/8250/8250_core.c:691 console_init+0x46/0x53 kernel/printk/printk.c:2797 start_kernel+0x437/0x676 init/main.c:634 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240 -> #0 (console_owner){-.-.}: lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994 console_trylock_spinning kernel/printk/printk.c:1679 [inline] vprintk_emit kernel/printk/printk.c:1922 [inline] vprintk_emit+0x32d/0x600 kernel/printk/printk.c:1888 vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401 printk+0x9e/0xbc kernel/printk/printk.c:1996 fail_dump lib/fault-inject.c:44 [inline] should_fail.cold+0xdf/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x44/0x770 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] fill_pool lib/debugobjects.c:110 [inline] __debug_object_init+0x5b7/0x830 lib/debugobjects.c:341 __init_work kernel/workqueue.c:504 [inline] insert_wq_barrier kernel/workqueue.c:2500 [inline] start_flush_work kernel/workqueue.c:2848 [inline] flush_work+0x1f7/0x780 kernel/workqueue.c:2892 __cancel_work_timer+0x2d0/0x460 kernel/workqueue.c:2964 hci_unregister_dev+0x168/0x7d0 net/bluetooth/hci_core.c:3189 hci_uart_tty_close+0x1ca/0x220 drivers/bluetooth/hci_ldisc.c:548 tty_ldisc_close.isra.0+0x8c/0xc0 drivers/tty/tty_ldisc.c:505 tty_ldisc_kill+0x46/0xc0 drivers/tty/tty_ldisc.c:651 tty_ldisc_hangup+0x287/0x5c0 drivers/tty/tty_ldisc.c:769 __tty_hangup.part.0+0x2cd/0x6b0 drivers/tty/tty_io.c:622 __tty_hangup drivers/tty/tty_io.c:2600 [inline] tty_vhangup drivers/tty/tty_io.c:695 [inline] tty_ioctl+0x498/0x1220 drivers/tty/tty_io.c:2599 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 other info that might help us debug this: Chain exists of: console_owner --> &(&port->lock)->rlock --> &pool->lock/1 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&pool->lock/1); lock(&(&port->lock)->rlock); lock(&pool->lock/1); lock(console_owner); *** DEADLOCK *** 3 locks held by syz-executor.3/2043: #0: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x5f/0x70 drivers/tty/tty_mutex.c:19 #1: (&tty->ldisc_sem){++++}, at: [] __tty_ldisc_lock drivers/tty/tty_ldisc.c:332 [inline] #1: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_lock+0x4d/0x80 drivers/tty/tty_ldisc.c:356 #2: (&pool->lock/1){..-.}, at: [] spin_lock include/linux/spinlock.h:317 [inline] #2: (&pool->lock/1){..-.}, at: [] start_flush_work kernel/workqueue.c:2833 [inline] #2: (&pool->lock/1){..-.}, at: [] flush_work+0x134/0x780 kernel/workqueue.c:2892 stack backtrace: CPU: 1 PID: 2043 Comm: syz-executor.3 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 print_circular_bug.isra.0.cold+0x1c4/0x282 kernel/locking/lockdep.c:1258 check_prev_add kernel/locking/lockdep.c:1901 [inline] check_prevs_add kernel/locking/lockdep.c:2018 [inline] validate_chain kernel/locking/lockdep.c:2460 [inline] __lock_acquire+0x2cb3/0x4620 kernel/locking/lockdep.c:3487 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3994 console_trylock_spinning kernel/printk/printk.c:1679 [inline] vprintk_emit kernel/printk/printk.c:1922 [inline] vprintk_emit+0x32d/0x600 kernel/printk/printk.c:1888 vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401 printk+0x9e/0xbc kernel/printk/printk.c:1996 fail_dump lib/fault-inject.c:44 [inline] should_fail.cold+0xdf/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x44/0x770 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] fill_pool lib/debugobjects.c:110 [inline] __debug_object_init+0x5b7/0x830 lib/debugobjects.c:341 __init_work kernel/workqueue.c:504 [inline] insert_wq_barrier kernel/workqueue.c:2500 [inline] start_flush_work kernel/workqueue.c:2848 [inline] flush_work+0x1f7/0x780 kernel/workqueue.c:2892 __cancel_work_timer+0x2d0/0x460 kernel/workqueue.c:2964 hci_unregister_dev+0x168/0x7d0 net/bluetooth/hci_core.c:3189 hci_uart_tty_close+0x1ca/0x220 drivers/bluetooth/hci_ldisc.c:548 tty_ldisc_close.isra.0+0x8c/0xc0 drivers/tty/tty_ldisc.c:505 tty_ldisc_kill+0x46/0xc0 drivers/tty/tty_ldisc.c:651 tty_ldisc_hangup+0x287/0x5c0 drivers/tty/tty_ldisc.c:769 __tty_hangup.part.0+0x2cd/0x6b0 drivers/tty/tty_io.c:622 __tty_hangup drivers/tty/tty_io.c:2600 [inline] tty_vhangup drivers/tty/tty_io.c:695 [inline] tty_ioctl+0x498/0x1220 drivers/tty/tty_io.c:2599 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c879 RSP: 002b:00007f44e66d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f44e66d96d4 RCX: 000000000045c879 RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 R13: 000000000000058d R14: 00000000004c8252 R15: 0000000000000000 CPU: 0 PID: 2044 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x44/0x770 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] fill_pool lib/debugobjects.c:110 [inline] __debug_object_init+0x5b7/0x830 lib/debugobjects.c:341 init_rcu_head_on_stack kernel/rcu/update.c:449 [inline] __wait_rcu_gp+0x83/0x2e0 kernel/rcu/update.c:394 synchronize_sched.part.0+0x9b/0xa0 kernel/rcu/tree.c:3241 rcu_sync_enter+0x16e/0x2d0 kernel/rcu/sync.c:131 percpu_down_write+0x59/0x3e0 kernel/locking/percpu-rwsem.c:143 hci_uart_tty_close+0x11d/0x220 drivers/bluetooth/hci_ldisc.c:540 tty_ldisc_close.isra.0+0x8c/0xc0 drivers/tty/tty_ldisc.c:505 tty_ldisc_kill+0x46/0xc0 drivers/tty/tty_ldisc.c:651 tty_ldisc_hangup+0x287/0x5c0 drivers/tty/tty_ldisc.c:769 __tty_hangup.part.0+0x2cd/0x6b0 drivers/tty/tty_io.c:622 __tty_hangup drivers/tty/tty_io.c:2600 [inline] tty_vhangup drivers/tty/tty_io.c:695 [inline] tty_ioctl+0x498/0x1220 drivers/tty/tty_io.c:2599 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xfe0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c879 RSP: 002b:00007f238293ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f238293f6d4 RCX: 000000000045c879 RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 R13: 000000000000058d R14: 00000000004c8252 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 2064 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x2b5/0x770 mm/slab.c:3550 prepare_creds+0x37/0x380 kernel/cred.c:255 SYSC_faccessat fs/open.c:365 [inline] SyS_faccessat+0x7c/0x680 fs/open.c:353 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c879 RSP: 002b:00007f03165bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000010d RAX: ffffffffffffffda RBX: 00007f03165bf6d4 RCX: 000000000045c879 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 R13: 00000000000000aa R14: 00000000004c33d1 R15: 0000000000000000 Bluetooth: hci2: Frame reassembly failed (-84) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 2086 Comm: syz-executor.5 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x2e9/0x7c0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] kzalloc include/linux/slab.h:661 [inline] perf_read_group kernel/events/core.c:4526 [inline] __perf_read kernel/events/core.c:4618 [inline] perf_read+0x22c/0x7c0 kernel/events/core.c:4633 __vfs_read+0xe4/0x610 fs/read_write.c:411 vfs_read+0x131/0x330 fs/read_write.c:447 SYSC_read fs/read_write.c:574 [inline] SyS_read+0xf2/0x210 fs/read_write.c:567 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c879 RSP: 002b:00007f4c990dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f4c990df6d4 RCX: 000000000045c879 RDX: 00000000000000a2 RSI: 0000000020000000 RDI: 0000000000000003 RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 R13: 0000000000000873 R14: 00000000004c9d44 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 2088 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc_track_caller+0x2e1/0x7b0 mm/slab.c:3735 kmemdup+0x23/0x50 mm/util.c:118 kmemdup include/linux/string.h:420 [inline] selinux_cred_prepare+0x44/0xa0 security/selinux/hooks.c:3849 security_prepare_creds+0x76/0xb0 security/security.c:1008 prepare_creds+0x2cc/0x380 kernel/cred.c:282 SYSC_faccessat fs/open.c:365 [inline] SyS_faccessat+0x7c/0x680 fs/open.c:353 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c879 RSP: 002b:00007f03165bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000010d RAX: ffffffffffffffda RBX: 00007f03165bf6d4 RCX: 000000000045c879 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 R13: 00000000000000aa R14: 00000000004c33d1 R15: 0000000000000001 Bluetooth: hci1 command 0x1003 tx timeout Bluetooth: hci1 sending frame failed (-49) Bluetooth: hci0 command 0x1003 tx timeout Bluetooth: hci0 sending frame failed (-49) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 2100 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x13e/0x194 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x14b lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x2b5/0x770 mm/slab.c:3550 getname_flags fs/namei.c:138 [inline] getname_flags+0xc8/0x560 fs/namei.c:128 user_path_at_empty+0x2a/0x50 fs/namei.c:2631 user_path_at include/linux/namei.h:57 [inline] SYSC_faccessat fs/open.c:403 [inline] SyS_faccessat+0x21f/0x680 fs/open.c:353 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45c879 RSP: 002b:00007f03165bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000010d RAX: ffffffffffffffda RBX: 00007f03165bf6d4 RCX: 000000000045c879 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 R13: 00000000000000aa R14: 00000000004c33d1 R15: 0000000000000002 Bluetooth: hci3: Frame reassembly failed (-84) Bluetooth: hci2 command 0x1003 tx timeout Bluetooth: hci2 sending frame failed (-49) Bluetooth: hci1 command 0x1001 tx timeout Bluetooth: hci1 sending frame failed (-49) Bluetooth: hci0 command 0x1001 tx timeout Bluetooth: hci0 sending frame failed (-49) Bluetooth: hci3 command 0x1003 tx timeout Bluetooth: hci3 sending frame failed (-49) Bluetooth: hci2 command 0x1001 tx timeout Bluetooth: hci2 sending frame failed (-49) Bluetooth: hci0 command 0x1009 tx timeout Bluetooth: hci1 command 0x1009 tx timeout Bluetooth: hci3 command 0x1001 tx timeout Bluetooth: hci3 sending frame failed (-49) Bluetooth: hci2 command 0x1009 tx timeout Bluetooth: hci3 command 0x1009 tx timeout