Bug 218299

Summary:	kernel BUG at mm/slub.c:440! (6.5.0-5-amd64)
Product:	Drivers	Reporter:	Marco Marzetti (marco)
Component:	Bluetooth	Assignee:	linux-bluetooth (linux-bluetooth)
Status:	NEW ---
Severity:	normal
Priority:	P3
Hardware:	All
OS:	Linux
Kernel Version:	6.5.0-5-amd64 #1 Debian 6.5.13-1	Subsystem:
Regression:	No	Bisected commit-id:

Description Marco Marzetti 2023-12-21 13:39:06 UTC

Dear kernel developers,

From time to time my bluetooth mouse stops working until reboot.

Here's what i could find in dmesg when i checked after it occurred earlier today:

[515089.228203] ------------[ cut here ]------------
[515089.228208] kernel BUG at mm/slub.c:440!
[515089.228225] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
[515089.228233] CPU: 0 PID: 197473 Comm: kworker/u33:0 Not tainted 6.5.0-5-amd64 #1  Debian 6.5.13-1
[515089.228241] Hardware name: LENOVO 21F8CTO1WW/21F8CTO1WW, BIOS R2EET30W (1.11 ) 09/07/2023
[515089.228246] Workqueue: hci0 hci_devcd_rx [bluetooth]
[515089.228327] RIP: 0010:__slab_free+0x152/0x330
[515089.228339] Code: 8b 06 48 89 0c 24 48 c1 e8 36 48 8b 84 c3 d8 00 00 00 48 89 c7 48 89 44 24 20 e8 49 60 82 00 48 8b 0c 24 48 89 44 24 08 eb 87 <0f> 0b f7 43 08 00 0d 21 00 75 ca eb c3 f7 43 08 00 0d 21 00 0f 84
[515089.228345] RSP: 0018:ffff9b1282f2bd10 EFLAGS: 00010246
[515089.228351] RAX: ffff8c219a49f370 RBX: ffff8c1d8106ed00 RCX: 000000008020001f
[515089.228356] RDX: ffff8c219a49f300 RSI: ffff8c219a49f300 RDI: ffff9b1282f2bd80
[515089.228360] RBP: ffff9b1282f2bdb0 R08: 0000000000000001 R09: ffffffffc22a090d
[515089.228363] R10: 0000000000000000 R11: 203a65746174530a R12: ffff8c219a49f300
[515089.228367] R13: ffff8c219a49f300 R14: fffff79294692780 R15: ffff8c1f697e8da8
[515089.228371] FS:  0000000000000000(0000) GS:ffff8c24bec00000(0000) knlGS:0000000000000000
[515089.228376] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[515089.228381] CR2: 0000239c07ed4000 CR3: 0000000016a20000 CR4: 0000000000750ef0
[515089.228385] PKRU: 55555554
[515089.228389] Call Trace:
[515089.228394]  <TASK>
[515089.228399]  ? die+0x36/0x90
[515089.228411]  ? do_trap+0xda/0x100
[515089.228418]  ? __slab_free+0x152/0x330
[515089.228427]  ? do_error_trap+0x6a/0x90
[515089.228433]  ? __slab_free+0x152/0x330
[515089.228440]  ? exc_invalid_op+0x50/0x70
[515089.228450]  ? __slab_free+0x152/0x330
[515089.228456]  ? asm_exc_invalid_op+0x1a/0x20
[515089.228468]  ? hci_devcd_rx+0xad/0x7b0 [bluetooth]
[515089.228534]  ? __slab_free+0x152/0x330
[515089.228548]  hci_devcd_rx+0xad/0x7b0 [bluetooth]
[515089.228620]  process_one_work+0x1de/0x3f0
[515089.228631]  worker_thread+0x51/0x390
[515089.228640]  ? __pfx_worker_thread+0x10/0x10
[515089.228646]  kthread+0xe5/0x120
[515089.228654]  ? __pfx_kthread+0x10/0x10
[515089.228662]  ret_from_fork+0x31/0x50
[515089.228671]  ? __pfx_kthread+0x10/0x10
[515089.228678]  ret_from_fork_asm+0x1b/0x30
[515089.228695]  </TASK>
[515089.228698] Modules linked in: tun uhid ctr ccm michael_mic rfcomm xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo snd_seq_dummy snd_hrtimer xt_addrtype snd_seq nft_compat snd_seq_device nf_tables libcrc32c nfnetlink br_netfilter bridge stp llc qrtr_mhi overlay cmac algif_hash algif_skcipher af_alg bnep binfmt_misc intel_rapl_msr intel_rapl_common btusb btrtl btbcm btintel btmtk bluetooth qrtr ath11k_pci edac_mce_amd ath11k qmi_helpers sha3_generic jitterentropy_rng mac80211 drbg snd_ctl_led nls_ascii ansi_cprng nls_cp437 uvcvideo snd_hda_codec_realtek videobuf2_vmalloc vfat uvc joydev libarc4 ecdh_generic videobuf2_memops snd_hda_codec_generic fat snd_hda_codec_hdmi thinkpad_acpi videobuf2_v4l2 kvm ecc cfg80211 nvram videodev irqbypass snd_hda_intel ledtrig_audio snd_intel_dspcfg platform_profile videobuf2_common rapl snd_intel_sdw_acpi mc snd_hda_codec pcspkr think_lmi firmware_attributes_class snd_hda_core ucsi_acpi snd_pci_acp6x
[515089.228867]  snd_hwdep wmi_bmof typec_ucsi snd_pcm snd_pci_acp5x snd_timer snd_rn_pci_acp3x roles snd_acp_config ccp snd_soc_acpi sp5100_tco snd mhi typec soundcore k10temp snd_pci_acp3x ac watchdog rfkill amd_pmc hid_multitouch evdev serio_raw msr parport_pc ppdev lp parport fuse loop efi_pstore configfs efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic dm_crypt dm_mod amdgpu crc32_pclmul crc32c_intel amdxcp drm_buddy gpu_sched i2c_algo_bit drm_suballoc_helper ghash_clmulni_intel drm_display_helper sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 cec nvme rc_core drm_ttm_helper nvme_core ttm xhci_pci t10_pi hid_generic drm_kms_helper xhci_hcd crc64_rocksoft_generic aesni_intel crc64_rocksoft crc_t10dif video crct10dif_generic crct10dif_pclmul crc64 crypto_simd drm thunderbolt usbcore psmouse cryptd i2c_hid_acpi i2c_piix4 usb_common i2c_hid crct10dif_common button fan battery wmi hid
[515089.229043] ---[ end trace 0000000000000000 ]---
[515089.446436] RIP: 0010:__slab_free+0x152/0x330
[515089.446445] Code: 8b 06 48 89 0c 24 48 c1 e8 36 48 8b 84 c3 d8 00 00 00 48 89 c7 48 89 44 24 20 e8 49 60 82 00 48 8b 0c 24 48 89 44 24 08 eb 87 <0f> 0b f7 43 08 00 0d 21 00 75 ca eb c3 f7 43 08 00 0d 21 00 0f 84
[515089.446447] RSP: 0018:ffff9b1282f2bd10 EFLAGS: 00010246
[515089.446450] RAX: ffff8c219a49f370 RBX: ffff8c1d8106ed00 RCX: 000000008020001f
[515089.446452] RDX: ffff8c219a49f300 RSI: ffff8c219a49f300 RDI: ffff9b1282f2bd80
[515089.446453] RBP: ffff9b1282f2bdb0 R08: 0000000000000001 R09: ffffffffc22a090d
[515089.446455] R10: 0000000000000000 R11: 203a65746174530a R12: ffff8c219a49f300
[515089.446456] R13: ffff8c219a49f300 R14: fffff79294692780 R15: ffff8c1f697e8da8
[515089.446457] FS:  0000000000000000(0000) GS:ffff8c24bec00000(0000) knlGS:0000000000000000
[515089.446458] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[515089.446460] CR2: 0000239c07ed4000 CR3: 00000001ebefc000 CR4: 0000000000750ef0
[515089.446461] PKRU: 55555554
[515089.899637] Bluetooth: hci0: memdump done: pkts(1881), total(458752)

[515090.472841] usb 1-3.1: USB disconnect, device number 7


And here's the output from hciconfig
$ hciconfig -a
hci0:	Type: Primary  Bus: USB
	BD Address: 04:7B:CB:CC:4E:3B  ACL MTU: 1024:7  SCO MTU: 240:8
	UP RUNNING 
	RX bytes:338328 acl:16848 sco:0 events:147 errors:0
	TX bytes:6436 acl:34 sco:0 commands:108 errors:0
	Features: 0xff 0xfe 0x8f 0xfe 0xd8 0x3f 0x7b 0x87
	Packet type: DM1 DM3 DM5 DH1 DH3 DH5 HV1 HV2 HV3 
	Link policy: RSWITCH HOLD SNIFF 
	Link mode: PERIPHERAL ACCEPT 
	Name: 'lilith'
	Class: 0x6c010c
	Service Classes: Rendering, Capturing, Audio, Telephony
	Device Class: Computer, Laptop
	HCI Version:  (0xc)  Revision: 0x0
	LMP Version:  (0xc)  Subversion: 0x5073
	Manufacturer: Qualcomm (29)


Thank you

Regards