Bug 206719 - Intel AX200 errors and kernel crash
Summary: Intel AX200 errors and kernel crash
Status: NEW
Alias: None
Product: Drivers
Classification: Unclassified
Component: network-wireless-intel (show other bugs)
Hardware: Intel Linux
: P1 normal
Assignee: Default virtual assignee for network-wireless-intel
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-02-29 14:04 UTC by kcn
Modified: 2021-01-04 18:53 UTC (History)
5 users (show)

See Also:
Kernel Version: 5.4.22
Subsystem:
Regression: No
Bisected commit-id:


Attachments
dmesg output when the kernel crashs (25.12 KB, text/plain)
2020-02-29 14:04 UTC, kcn
Details

Description kcn 2020-02-29 14:04:33 UTC
Created attachment 287711 [details]
dmesg output when the kernel crashs

After installing the Intel AX200 wifi card (https://ark.intel.com/content/www/us/en/ark/products/189347/intel-wi-fi-6-ax200.html), the following faulty behavior was frequently observed.

1. bluetooth crashes:

[  282.011415] Bluetooth: hci0: link tx timeout
[  282.011418] Bluetooth: hci0: killing stalled connection $MAC
[  284.003339] Bluetooth: hci0: link tx timeout
[  284.003343] Bluetooth: hci0: killing stalled connection $MAC
[  284.020431] Bluetooth: hci0: link tx timeout
[  284.020434] Bluetooth: hci0: killing stalled connection $MAC
[  284.020757] Bluetooth: hci0: link tx timeout
[  284.020759] Bluetooth: hci0: killing stalled connection $MAC
[  284.047114] Bluetooth: hci0: command 0x041f tx timeout
[  286.095176] Bluetooth: hci0: command 0x0406 tx timeout
[  306.703085] Bluetooth: hci0: command 0x0c03 tx timeout
[  314.767112] Bluetooth: hci0: HCI reset during shutdown failed
[  324.495108] Bluetooth: hci0: HCI reset during shutdown failed

After bluetooth crashes, sometimes the kernel freezes and there's no way to recover. Even SysRq commands do not work.

Sometimes the kernel does not crash and one can recover simply by restarting
bluetooth.service

2. the wifi connection is not stable: the card frequently disconnects from the AP, as one can see in the attached log (crash.log) This happens regardless of whether bluetooth is enabled or not.

system information:

1. firmware-version: 50.3e391d3e.0
2. kernel module options:

Module = "iwlwifi"

  Attributes:
    coresize            = "278528"
    initsize            = "0"
    initstate           = "live"
    refcnt              = "1"
    srcversion          = "22F15ECA47A11374C64FAC2"
    taint               = ""
    uevent              = <store method only>

  Parameters:
    11n_disable         = "0"
    amsdu_size          = "3"
    antenna_coupling    = "0"
    bt_coex_active      = "Y"
    disable_11ac        = "N"
    disable_11ax        = "N"
    enable_ini          = "N"
    fw_monitor          = "N"
    fw_restart          = "Y"
    lar_disable         = "Y"
    led_mode            = "0"
    nvm_file            = "(null)"
    power_level         = "0"
    power_save          = "N"
    remove_when_gone    = "N"
    swcrypto            = "0"
    uapsd_disable       = "3"

  Sections:
    .altinstr_aux       = "0xffffffffc1159dfb"
    .altinstr_replacement= "0xffffffffc1159dad"
    .altinstructions    = "0xffffffffc1176fb0"
    .bss                = "0xffffffffc1178f80"
    .data.once          = "0xffffffffc1178b9c"
    .data               = "0xffffffffc1178000"
    .exit.text          = "0xffffffffc1159a2d"
    .gnu.linkonce.this_module= "0xffffffffc1178bc0"
    .init.text          = "0xffffffffc1183000"
    .note.Linux         = "0xffffffffc115a024"
    .note.gnu.build-id  = "0xffffffffc115a000"
    .orc_unwind         = "0xffffffffc1171967"
    .orc_unwind_ip      = "0xffffffffc116e1ab"
    .rodata             = "0xffffffffc115a4c0"
    .rodata.str1.1      = "0xffffffffc1169b08"
    .rodata.str1.8      = "0xffffffffc116ae70"
    .smp_locks          = "0xffffffffc1177138"
    .strtab             = "0xffffffffc118f760"
    .symtab             = "0xffffffffc1184000"
    .text               = "0xffffffffc113e000"
    .text.unlikely      = "0xffffffffc1159a32"
    __bug_table         = "0xffffffffc11784f4"
    __kcrctab_gpl       = "0xffffffffc115a390"
    __ksymtab_gpl       = "0xffffffffc115a03c"
    __ksymtab_strings   = "0xffffffffc116dc1d"
    __mcount_loc        = "0xffffffffc1169230"
    __param             = "0xffffffffc1176d08"

Module = "btusb"

  Attributes:
    coresize            = "65536"
    initsize            = "0"
    initstate           = "live"
    refcnt              = "0"
    srcversion          = "BCE052A6E82A97DBD26331C"
    taint               = ""
    uevent              = <store method only>
    version             = "0.8"

  Parameters:
    disable_scofix      = "N"
    enable_autosuspend  = "Y"
    force_scofix        = "N"
    reset               = "Y"

  Sections:
    .bss                = "0xffffffffc10f1a80"
    .data               = "0xffffffffc10f1000"
    .exit.text          = "0xffffffffc10e9849"
    .gnu.linkonce.this_module= "0xffffffffc10f16c0"
    .init.text          = "0xffffffffc10f5000"
    .note.Linux         = "0xffffffffc10ea024"
    .note.gnu.build-id  = "0xffffffffc10ea000"
    .orc_unwind         = "0xffffffffc10ee230"
    .orc_unwind_ip      = "0xffffffffc10ed580"
    .rodata             = "0xffffffffc10eb340"
    .rodata.str1.1      = "0xffffffffc10ea1e4"
    .rodata.str1.8      = "0xffffffffc10ea4b0"
    .smp_locks          = "0xffffffffc10eb234"
    .strtab             = "0xffffffffc10f7ec0"
    .symtab             = "0xffffffffc10f6000"
    .text               = "0xffffffffc10e4000"
    .text.unlikely      = "0xffffffffc10e9823"
    __jump_table        = "0xffffffffc10f0000"
    __mcount_loc        = "0xffffffffc10ea03c"
    __param             = "0xffffffffc10ed4e0"
    __verbose           = "0xffffffffc10f1110"

3. dmesg:

[   12.913772] iwlwifi 0000:02:00.0: TLV_FW_FSEQ_VERSION: FSEQ Version: 58.3.35.22
[   12.913778] iwlwifi 0000:02:00.0: Found debug destination: EXTERNAL_DRAM
[   12.913781] iwlwifi 0000:02:00.0: Found debug configuration: 0
[   12.914504] iwlwifi 0000:02:00.0: loaded firmware version 50.3e391d3e.0 op_mode iwlmvm
[   13.225165] iwlwifi 0000:02:00.0: Detected Intel(R) Wi-Fi 6 AX200 160MHz, REV=0x340
[   13.238649] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[   13.239360] iwlwifi 0000:02:00.0: Allocated 0x00400000 bytes for firmware monitor.
[   13.389531] iwlwifi 0000:02:00.0: base HW address: $ADDR
[   19.033715] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[   19.185833] iwlwifi 0000:02:00.0: FW already configured (0) - re-configuring
[   19.188122] iwlwifi 0000:02:00.0: Conflict between TLV & NVM regarding enabling LAR (TLV = enabled NVM =disabled)
[   19.217110] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[   19.368825] iwlwifi 0000:02:00.0: FW already configured (0) - re-configuring
[   19.371244] iwlwifi 0000:02:00.0: Conflict between TLV & NVM regarding enabling LAR (TLV = enabled NVM =disabled)
[ 5990.032797] iwlwifi 0000:02:00.0: expected hw-decrypted unicast frame for station
[ 5991.763158] iwlwifi 0000:02:00.0: Unhandled alg: 0x707
[ 5991.854553] iwlwifi 0000:02:00.0: Unhandled alg: 0x707
[ 5991.931472] iwlwifi 0000:02:00.0: Unhandled alg: 0x707
[ 5992.034956] iwlwifi 0000:02:00.0: fail to flush all tx fifo queues Q 5
[ 5992.034958] iwlwifi 0000:02:00.0: Queue 5 is stuck 20 29
[ 5992.035006] Modules linked in: uinput rfcomm cmac algif_hash algif_skcipher af_alg bnep ccm nft_counter nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables_set nf_tables nfnetlink btusb btrtl btbcm btintel bluetooth ecdh_generic ecc wacom crc16 cdc_mbim cdc_wdm cdc_ncm usbnet mii qcserial usb_wwan joydev mousedev intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal iTCO_wdt intel_powerclamp iTCO_vendor_support iwlmvm snd_hda_codec_hdmi mac80211 coretemp snd_hda_codec_realtek libarc4 snd_hda_codec_generic kvm_intel snd_hda_intel snd_intel_nhlt iwlwifi snd_hda_codec kvm snd_hda_core irqbypass intel_cstate intel_uncore snd_hwdep intel_rapl_perf input_leds cfg80211 psmouse snd_pcm thinkpad_acpi tpm_tis i2c_i801 tpm_tis_core snd_timer nvram e1000e ledtrig_audio rfkill lpc_ich tpm coreboot_table snd rng_core soundcore battery ac evdev mac_hid crypto_user acpi_call(O) ip_tables x_tables btrfs libcrc32c crc32c_generic xor raid6_pq dm_crypt dm_mod sd_mod hid_generic usbhid hid mmc_block
[ 5992.042350] WARNING: CPU: 0 PID: 8400 at drivers/net/wireless/intel/iwlwifi/pcie/tx-gen2.c:1206 iwl_trans_pcie_txq_alloc_response+0x113/0x120 [iwlwifi]
[ 5992.042351] Modules linked in: uinput rfcomm cmac algif_hash algif_skcipher af_alg bnep ccm nft_counter nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables_set nf_tables nfnetlink btusb btrtl btbcm btintel bluetooth ecdh_generic ecc wacom crc16 cdc_mbim cdc_wdm cdc_ncm usbnet mii qcserial usb_wwan joydev mousedev intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal iTCO_wdt intel_powerclamp iTCO_vendor_support iwlmvm snd_hda_codec_hdmi mac80211 coretemp snd_hda_codec_realtek libarc4 snd_hda_codec_generic kvm_intel snd_hda_intel snd_intel_nhlt iwlwifi snd_hda_codec kvm snd_hda_core irqbypass intel_cstate intel_uncore snd_hwdep intel_rapl_perf input_leds cfg80211 psmouse snd_pcm thinkpad_acpi tpm_tis i2c_i801 tpm_tis_core snd_timer nvram e1000e ledtrig_audio rfkill lpc_ich tpm coreboot_table snd rng_core soundcore battery ac evdev mac_hid crypto_user acpi_call(O) ip_tables x_tables btrfs libcrc32c crc32c_generic xor raid6_pq dm_crypt dm_mod sd_mod hid_generic usbhid hid mmc_block
[ 5992.042450] RIP: 0010:iwl_trans_pcie_txq_alloc_response+0x113/0x120 [iwlwifi]
[ 5992.042478]  iwl_trans_pcie_dyn_txq_alloc+0x10e/0x150 [iwlwifi]
[ 5992.042575] WARNING: CPU: 0 PID: 8400 at drivers/net/wireless/intel/iwlwifi/mvm/tx.c:1146 iwl_mvm_tx_mpdu+0x4ed/0x500 [iwlmvm]
[ 5992.042575] Modules linked in: uinput rfcomm cmac algif_hash algif_skcipher af_alg bnep ccm nft_counter nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables_set nf_tables nfnetlink btusb btrtl btbcm btintel bluetooth ecdh_generic ecc wacom crc16 cdc_mbim cdc_wdm cdc_ncm usbnet mii qcserial usb_wwan joydev mousedev intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal iTCO_wdt intel_powerclamp iTCO_vendor_support iwlmvm snd_hda_codec_hdmi mac80211 coretemp snd_hda_codec_realtek libarc4 snd_hda_codec_generic kvm_intel snd_hda_intel snd_intel_nhlt iwlwifi snd_hda_codec kvm snd_hda_core irqbypass intel_cstate intel_uncore snd_hwdep intel_rapl_perf input_leds cfg80211 psmouse snd_pcm thinkpad_acpi tpm_tis i2c_i801 tpm_tis_core snd_timer nvram e1000e ledtrig_audio rfkill lpc_ich tpm coreboot_table snd rng_core soundcore battery ac evdev mac_hid crypto_user acpi_call(O) ip_tables x_tables btrfs libcrc32c crc32c_generic xor raid6_pq dm_crypt dm_mod sd_mod hid_generic usbhid hid mmc_block
[ 6000.014975] iwlwifi 0000:02:00.0: Queue 5 is stuck 20 29
[ 6000.015230] iwlwifi 0000:02:00.0: Microcode SW error detected. Restarting 0x0.
[ 6000.015350] iwlwifi 0000:02:00.0: Start IWL Error Log Dump:
[ 6000.015351] iwlwifi 0000:02:00.0: Status: 0x00000040, count: 6
[ 6000.015365] iwlwifi 0000:02:00.0: Loaded firmware version: 50.3e391d3e.0
[ 6000.015367] iwlwifi 0000:02:00.0: 0x00000084 | NMI_INTERRUPT_UNKNOWN       
[ 6000.015368] iwlwifi 0000:02:00.0: 0x0000A2F0 | trm_hw_status0
[ 6000.015369] iwlwifi 0000:02:00.0: 0x00000000 | trm_hw_status1
[ 6000.015370] iwlwifi 0000:02:00.0: 0x004F9608 | branchlink2
[ 6000.015371] iwlwifi 0000:02:00.0: 0x004FB95A | interruptlink1
[ 6000.015371] iwlwifi 0000:02:00.0: 0x004FB95A | interruptlink2
[ 6000.015372] iwlwifi 0000:02:00.0: 0x004F4672 | data1
[ 6000.015373] iwlwifi 0000:02:00.0: 0xFF000000 | data2
[ 6000.015374] iwlwifi 0000:02:00.0: 0x00000000 | data3
[ 6000.015375] iwlwifi 0000:02:00.0: 0xB9018719 | beacon time
[ 6000.015376] iwlwifi 0000:02:00.0: 0xA42D18E0 | tsf low
[ 6000.015377] iwlwifi 0000:02:00.0: 0x0000006E | tsf hi
[ 6000.015378] iwlwifi 0000:02:00.0: 0x00000000 | time gp1
[ 6000.015379] iwlwifi 0000:02:00.0: 0x647BB53F | time gp2
[ 6000.015380] iwlwifi 0000:02:00.0: 0x00000001 | uCode revision type
[ 6000.015380] iwlwifi 0000:02:00.0: 0x00000032 | uCode version major
[ 6000.015381] iwlwifi 0000:02:00.0: 0x3E391D3E | uCode version minor
[ 6000.015382] iwlwifi 0000:02:00.0: 0x00000340 | hw version
[ 6000.015383] iwlwifi 0000:02:00.0: 0x00489000 | board version
[ 6000.015384] iwlwifi 0000:02:00.0: 0x80F0FD04 | hcmd
[ 6000.015385] iwlwifi 0000:02:00.0: 0x20020000 | isr0
[ 6000.015386] iwlwifi 0000:02:00.0: 0x00400000 | isr1
[ 6000.015387] iwlwifi 0000:02:00.0: 0x08F84802 | isr2
[ 6000.015387] iwlwifi 0000:02:00.0: 0x04C1100C | isr3
[ 6000.015388] iwlwifi 0000:02:00.0: 0x00000000 | isr4
[ 6000.015389] iwlwifi 0000:02:00.0: 0x80D10502 | last cmd Id
[ 6000.015390] iwlwifi 0000:02:00.0: 0x004F4672 | wait_event
[ 6000.015391] iwlwifi 0000:02:00.0: 0x00000080 | l2p_control
[ 6000.015392] iwlwifi 0000:02:00.0: 0x00000000 | l2p_duration
[ 6000.015393] iwlwifi 0000:02:00.0: 0x0000003F | l2p_mhvalid
[ 6000.015393] iwlwifi 0000:02:00.0: 0x00000000 | l2p_addr_match
[ 6000.015394] iwlwifi 0000:02:00.0: 0x00000008 | lmpm_pmg_sel
[ 6000.015395] iwlwifi 0000:02:00.0: 0x00000000 | timestamp
[ 6000.015396] iwlwifi 0000:02:00.0: 0x00001000 | flow_handler
[ 6000.015447] iwlwifi 0000:02:00.0: Start IWL Error Log Dump:
[ 6000.015448] iwlwifi 0000:02:00.0: Status: 0x00000040, count: 7
[ 6000.015450] iwlwifi 0000:02:00.0: 0x20000066 | NMI_INTERRUPT_HOST
[ 6000.015450] iwlwifi 0000:02:00.0: 0x00000000 | umac branchlink1
[ 6000.015451] iwlwifi 0000:02:00.0: 0x80465A16 | umac branchlink2
[ 6000.015452] iwlwifi 0000:02:00.0: 0xC00870D4 | umac interruptlink1
[ 6000.015453] iwlwifi 0000:02:00.0: 0xC0084BF8 | umac interruptlink2
[ 6000.015454] iwlwifi 0000:02:00.0: 0x01000000 | umac data1
[ 6000.015455] iwlwifi 0000:02:00.0: 0xC0084BF8 | umac data2
[ 6000.015455] iwlwifi 0000:02:00.0: 0x00000000 | umac data3
[ 6000.015456] iwlwifi 0000:02:00.0: 0x00000032 | umac major
[ 6000.015457] iwlwifi 0000:02:00.0: 0x3E391D3E | umac minor
[ 6000.015458] iwlwifi 0000:02:00.0: 0x647BB536 | frame pointer
[ 6000.015459] iwlwifi 0000:02:00.0: 0xC0887F3C | stack pointer
[ 6000.015459] iwlwifi 0000:02:00.0: 0x00540108 | last host cmd
[ 6000.015460] iwlwifi 0000:02:00.0: 0x00000009 | isr status reg
[ 6000.015475] iwlwifi 0000:02:00.0: Fseq Registers:
[ 6000.015486] iwlwifi 0000:02:00.0: 0x60000100 | FSEQ_ERROR_CODE
[ 6000.015497] iwlwifi 0000:02:00.0: 0x00290011 | FSEQ_TOP_INIT_VERSION
[ 6000.015503] iwlwifi 0000:02:00.0: 0x00050008 | FSEQ_CNVIO_INIT_VERSION
[ 6000.015514] iwlwifi 0000:02:00.0: 0x0000A503 | FSEQ_OTP_VERSION
[ 6000.015525] iwlwifi 0000:02:00.0: 0x80000003 | FSEQ_TOP_CONTENT_VERSION
[ 6000.015536] iwlwifi 0000:02:00.0: 0x4552414E | FSEQ_ALIVE_TOKEN
[ 6000.015547] iwlwifi 0000:02:00.0: 0x00100530 | FSEQ_CNVI_ID
[ 6000.015559] iwlwifi 0000:02:00.0: 0x00000532 | FSEQ_CNVR_ID
[ 6000.015571] iwlwifi 0000:02:00.0: 0x00100530 | CNVI_AUX_MISC_CHIP
[ 6000.015578] iwlwifi 0000:02:00.0: 0x00000532 | CNVR_AUX_MISC_CHIP
[ 6000.015604] iwlwifi 0000:02:00.0: 0x05B0905B | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
[ 6000.015618] iwlwifi 0000:02:00.0: 0x0000025B | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
[ 6000.015792] iwlwifi 0000:02:00.0: Collecting data: trigger 2 fired.
[ 6000.796457] iwlwifi 0000:02:00.0: Applying debug destination EXTERNAL_DRAM
[ 6000.948016] iwlwifi 0000:02:00.0: FW already configured (0) - re-configuring
[ 6000.950305] iwlwifi 0000:02:00.0: Conflict between TLV & NVM regarding enabling LAR (TLV = enabled NVM =disabled)
[ 6260.252043] iwlwifi 0000:02:00.0: expected hw-decrypted unicast frame for station
Comment 1 Sydney Meyer 2020-04-28 00:24:07 UTC
Do you have any updates on this issue? I think, i have the same or a similar issue.


I have a Thinkpad X1 6th Gen. upgraded with a Intel AX200NGW Wireless Adapter and after about 20-40 minutes the audio stops playing while the speakers appear to be still connected. Trying to dis- and reconnect them renders the complete system unusable, i.e. requiring a hard reset to poweroff. This only started happening after i switched to original Intel 8265 card with the Intel AX200 one.


Inital connection 


Apr 27 23:39:12 x1 systemd[1354]: Started Sound Service.
Apr 27 23:39:12 x1 bluetoothd[936]: Endpoint registered: sender=:1.1217 path=/MediaEndpoint/A2DPSink/sbc
Apr 27 23:39:12 x1 bluetoothd[936]: Endpoint registered: sender=:1.1217 path=/MediaEndpoint/A2DPSource/sbc
Apr 27 23:39:18 x1 bluetoothd[936]: /org/bluez/hci0/dev_B8_D5_0B_79_B2_B8/sep1/fd1: fd(45) ready
Apr 27 23:39:18 x1 rtkit-daemon[1576]: Supervising 7 threads of 6 processes of 1 users.
Apr 27 23:39:18 x1 rtkit-daemon[1576]: Successfully made thread 8007 of process 7999 (/nix/store/kf6vah1n55ak7zsvr44zfnq3h9qpgbwk-pulseaudio-13.0/bin/pulseaudio) owned by 'sydney' RT at priority 5.
Apr 27 23:39:18 x1 rtkit-daemon[1576]: Supervising 8 threads of 6 processes of 1 users.
Apr 27 23:39:18 x1 kernel: input: SRS-XB20 (AVRCP) as /devices/virtual/input/input25
Apr 27 23:39:18 x1 systemd-logind[1232]: Watching system buttons on /dev/input/event18 (SRS-XB20 (AVRCP))


and after playing audio files through mpv for about 20 minutes, again 20 minutes later, the bt speakers were idle, the issue appears to begin with:


Apr 28 00:19:24 x1 kernel: Bluetooth: hci0: ACL packet for unknown connection handle 0
Apr 28 00:19:24 x1 kernel: Bluetooth: hci0: ACL packet for unknown connection handle 0
Apr 28 00:19:24 x1 kernel: Bluetooth: hci0: ACL packet for unknown connection handle 0
Apr 28 00:19:24 x1 kernel: Bluetooth: hci0: ACL packet for unknown connection handle 0
Apr 28 00:19:24 x1 kernel: Bluetooth: hci0: ACL packet for unknown connection handle 0
Apr 28 00:19:24 x1 kernel: Bluetooth: hci0: corrupted ACL packet


following:


Apr 28 00:38:42 x1 kernel: Bluetooth: hci0: last event is not cmd complete (0x00)
Apr 28 00:38:42 x1 kernel: Bluetooth: hci0: last event is not cmd complete (0x00)
Apr 28 00:38:42 x1 kernel: Bluetooth: hci0: last event is not cmd complete (0x00)
Apr 28 00:38:42 x1 kernel: Bluetooth: hci0: last event is not cmd complete (0x00)
Apr 28 00:55:38 x1 kernel: Bluetooth: hci0: link tx timeout
Apr 28 00:55:38 x1 kernel: Bluetooth: hci0: killing stalled connection b8:d5:0b:79:b2:b8
Apr 28 00:55:40 x1 kernel: Bluetooth: hci0: command 0x0406 tx timeout


After (trying to) resume playback, i cannot hear any sound from the speakers but mpv plays just fine and pulseaudio believes the speakers are still connected and used.
When i try to disconnect the speakers with bluetoothctl i get:


Apr 28 00:56:29 x1 kernel: Bluetooth: hci0: link tx timeout
Apr 28 00:56:29 x1 kernel: Bluetooth: hci0: killing stalled connection b8:d5:0b:79:b2:b8
Apr 28 00:56:31 x1 bluetoothd[936]: Disconnecting failed: already disconnected
Apr 28 00:56:35 x1 bluetoothd[936]: Close: Connection timed out (110)
Apr 28 00:56:35 x1 kernel: Bluetooth: hci0: link tx timeout
Apr 28 00:56:35 x1 kernel: Bluetooth: hci0: killing stalled connection b8:d5:0b:79:b2:b8
Apr 28 00:56:37 x1 bluetoothd[936]: Abort: Connection timed out (110)
Apr 28 00:56:37 x1 kernel: Bluetooth: hci0: link tx timeout
Apr 28 00:56:37 x1 kernel: Bluetooth: hci0: killing stalled connection b8:d5:0b:79:b2:b8
Apr 28 00:56:37 x1 kernel: Bluetooth: hci0: link tx timeout
Apr 28 00:56:37 x1 kernel: Bluetooth: hci0: killing stalled connection b8:d5:0b:79:b2:b8
Apr 28 00:56:37 x1 dbus-daemon[948]: [system] Rejected send message, 0 matched rules; type="method_return", sender=":1.1217" (uid=1001 pid=7999 comm="/nix/store/kf6vah1n55ak7zsvr44zfnq3h9qpgbwk-pulsea" label="kernel") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.4" (uid=0 pid=936 comm="/nix/store/842s29if0psvcd5l7m8ijldldfjp6bhp-bluez-" label="kernel")


Then, turning the speakers off and on again, the speakers are trying to reconnect, giving:


Apr 28 00:56:52 x1 kernel: debugfs: Directory '768' with parent 'hci0' already present!
Apr 28 00:56:52 x1 kernel: sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:14.0/usb1/1-7/1-7:1.0/bluetooth/hci0/hci0:768'
Apr 28 00:56:52 x1 kernel: CPU: 0 PID: 8597 Comm: kworker/u17:1 Not tainted 5.6.7 #1-NixOS
Apr 28 00:56:52 x1 kernel: Hardware name: LENOVO 20KHCTO1WW/20KHCTO1WW, BIOS N23ET71W (1.46 ) 02/20/2020
Apr 28 00:56:52 x1 kernel: Workqueue: hci0 hci_rx_work [bluetooth]
Apr 28 00:56:52 x1 kernel: Call Trace:
Apr 28 00:56:52 x1 kernel:  dump_stack+0x66/0x90
Apr 28 00:56:52 x1 kernel:  sysfs_warn_dup.cold+0x17/0x2d
Apr 28 00:56:52 x1 kernel:  sysfs_create_dir_ns+0xb6/0xd0
Apr 28 00:56:52 x1 kernel:  kobject_add_internal+0xad/0x290
Apr 28 00:56:52 x1 kernel:  kobject_add+0x7e/0xb0
Apr 28 00:56:52 x1 kernel:  ? kobject_move+0x140/0x170
Apr 28 00:56:52 x1 kernel:  device_add+0x123/0x850
Apr 28 00:56:52 x1 kernel:  hci_conn_add_sysfs+0x43/0xb0 [bluetooth]
Apr 28 00:56:52 x1 kernel:  hci_event_packet+0x123b/0x2a50 [bluetooth]
Apr 28 00:56:52 x1 kernel:  ? __switch_to_asm+0x40/0x70
Apr 28 00:56:52 x1 kernel:  ? __switch_to_asm+0x40/0x70
Apr 28 00:56:52 x1 kernel:  ? __switch_to_asm+0x34/0x70
Apr 28 00:56:52 x1 kernel:  hci_rx_work+0x17c/0x360 [bluetooth]
Apr 28 00:56:52 x1 kernel:  process_one_work+0x1e3/0x3b0
Apr 28 00:56:52 x1 kernel:  worker_thread+0x4d/0x3f0
Apr 28 00:56:52 x1 kernel:  kthread+0xfb/0x130
Apr 28 00:56:52 x1 kernel:  ? process_one_work+0x3b0/0x3b0
Apr 28 00:56:52 x1 kernel:  ? kthread_park+0x90/0x90
Apr 28 00:56:52 x1 kernel:  ret_from_fork+0x35/0x40
Apr 28 00:56:52 x1 kernel: kobject_add_internal failed for hci0:768 with -EEXIST, don't try to register things with the same name in the same directory.
Apr 28 00:56:52 x1 kernel: Bluetooth: hci0: failed to register connection device
Apr 28 00:56:53 x1 kernel: Bluetooth: hci0: link tx timeout
Apr 28 00:56:53 x1 kernel: Bluetooth: hci0: killing stalled connection b8:d5:0b:79:b2:b8
Apr 28 00:56:53 x1 bluetoothd[936]: No matching connection for device
Apr 28 00:56:53 x1 kernel: BUG: kernel NULL pointer dereference, address: 0000000000000020
Apr 28 00:56:53 x1 kernel: #PF: supervisor read access in kernel mode
Apr 28 00:56:53 x1 kernel: #PF: error_code(0x0000) - not-present page
Apr 28 00:56:53 x1 kernel: PGD 0 P4D 0 
Apr 28 00:56:53 x1 kernel: Oops: 0000 [#1] SMP PTI
Apr 28 00:56:53 x1 kernel: CPU: 7 PID: 9171 Comm: kworker/u17:3 Not tainted 5.6.7 #1-NixOS
Apr 28 00:56:53 x1 kernel: Hardware name: LENOVO 20KHCTO1WW/20KHCTO1WW, BIOS N23ET71W (1.46 ) 02/20/2020
Apr 28 00:56:53 x1 kernel: Workqueue: hci0 hci_rx_work [bluetooth]
Apr 28 00:56:53 x1 kernel: RIP: 0010:klist_next+0x12/0x100
Apr 28 00:56:53 x1 kernel: Code: 44 89 f0 5b 5d 41 5c 41 5d 41 5e c3 0f 0b e9 22 ff ff ff 0f 1f 44 00 00 41 56 41 55 41 54 55 53 48 89 fb 48 8b 3f 4c 8b 63 08 <4c> 8b 6f 20 e8 c5 10 02 00 49 89 c6 4d 85 e4 0f 84 9d 00 00 00 49
Apr 28 00:56:53 x1 kernel: RSP: 0018:ffffad8984e3bce0 EFLAGS: 00010282
Apr 28 00:56:53 x1 kernel: RAX: 0000000000000000 RBX: ffffad8984e3bd10 RCX: 0000000000000000
Apr 28 00:56:53 x1 kernel: RDX: ffffffffc09ca1e0 RSI: ffffad8984e3bd10 RDI: 0000000000000000
Apr 28 00:56:53 x1 kernel: RBP: ffffffffc09ca1e0 R08: 0000000000000000 R09: 000000007fffffff
Apr 28 00:56:53 x1 kernel: R10: 0000000000000325 R11: ffff9aed8f5eb524 R12: 0000000000000000
Apr 28 00:56:53 x1 kernel: R13: 0000000000000000 R14: ffff9aece73aa800 R15: 0000000000000016
Apr 28 00:56:53 x1 kernel: FS:  0000000000000000(0000) GS:ffff9aed8f5c0000(0000) knlGS:0000000000000000
Apr 28 00:56:53 x1 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Apr 28 00:56:53 x1 kernel: CR2: 0000000000000020 CR3: 000000003280a006 CR4: 00000000003606e0
Apr 28 00:56:53 x1 kernel: Call Trace:
Apr 28 00:56:53 x1 kernel:  ? bt_link_release+0x20/0x20 [bluetooth]
Apr 28 00:56:53 x1 kernel:  device_find_child+0x3c/0xa0
Apr 28 00:56:53 x1 kernel:  hci_conn_del_sysfs+0x4e/0xb0 [bluetooth]
Apr 28 00:56:53 x1 kernel:  hci_conn_cleanup+0x8e/0x130 [bluetooth]
Apr 28 00:56:53 x1 kernel:  hci_conn_del+0xe5/0x1d0 [bluetooth]
Apr 28 00:56:53 x1 kernel:  hci_event_packet+0xc27/0x2a50 [bluetooth]
Apr 28 00:56:53 x1 kernel:  ? syscall_return_via_sysret+0x10/0x7f
Apr 28 00:56:53 x1 kernel:  ? __switch_to_asm+0x40/0x70
Apr 28 00:56:53 x1 kernel:  ? __switch_to_asm+0x34/0x70
Apr 28 00:56:53 x1 kernel:  hci_rx_work+0x17c/0x360 [bluetooth]
Apr 28 00:56:53 x1 kernel:  process_one_work+0x1e3/0x3b0
Apr 28 00:56:53 x1 kernel:  worker_thread+0x4d/0x3f0
Apr 28 00:56:53 x1 kernel:  kthread+0xfb/0x130
Apr 28 00:56:53 x1 kernel:  ? process_one_work+0x3b0/0x3b0
Apr 28 00:56:53 x1 kernel:  ? kthread_park+0x90/0x90
Apr 28 00:56:53 x1 kernel:  ret_from_fork+0x35/0x40
Apr 28 00:56:53 x1 kernel: Modules linked in: wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libblake2s blake2s_x86_64 ip6_udp_tunnel udp_tunnel libcurve25519_generic libchacha libblake2s_generic uinput rfcomm hid_magicmouse fuse hid_apple hid_generic hidp xt_CHECKSUM xt_MASQUERADE ipt_REJECT nf_reject_ipv4 ip6table_mangle iptable_mangle ebtable_filter ebtables af_packet ctr snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic ccm algif_aead joydev mousedev cbc des_generic libdes ecb bnep arc4 cmac typec_displayport msr sha512_ssse3 sha512_generic md4 algif_hash rmi_smbus rmi_core i915 snd_soc_skl snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi intel_pmc_core_pltdrv intel_pmc_core cec iwlmvm snd_soc_core drm_kms_helper snd_compress ac97_bus snd_pcm_dmaengine iTCO_wdt snd_hda_intel mei_hdcp watchdog intel_rapl_msr mac80211 wmi_bmof intel_wmi_thunderbolt x86_pkg_temp_thermal intel_powerclamp coretemp snd_intel_dspcfg libarc4
Apr 28 00:56:53 x1 kernel:  crc32_pclmul nls_iso8859_1 ghash_clmulni_intel deflate intel_cstate efi_pstore drm intel_uncore pstore nls_cp437 iwlwifi e1000e vfat intel_rapl_perf snd_hda_codec btusb fat btrtl evdev intel_gtt psmouse ptp agpgart mac_hid snd_hda_core btbcm serio_raw efivars btintel i2c_algo_bit mei_me snd_hwdep pps_core i2c_i801 cfg80211 fb_sys_fops thunderbolt bluetooth mei thinkpad_acpi processor_thermal_device ip6table_nat ucsi_acpi intel_pch_thermal syscopyarea typec_ucsi nvram iptable_nat intel_rapl_common intel_xhci_usb_role_switch sysfillrect ecdh_generic nf_nat sysimgblt roles ecc ledtrig_audio intel_soc_dts_iosf typec thermal int3403_thermal xt_conntrack int340x_thermal_zone rfkill battery i2c_hid wmi nf_conntrack ac hid nf_defrag_ipv4 video libcrc32c int3400_thermal i2c_core backlight acpi_thermal_rel button acpi_pad ip6t_rpfilter ipt_rpfilter ip6table_raw iptable_raw xt_pkttype nf_log_ipv6 nf_log_ipv4 nf_log_common xt_LOG xt_tcpudp ip6table_filter ip6_tables sch_fq_codel
Apr 28 00:56:53 x1 kernel:  iptable_filter snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd soundcore loop cpufreq_powersave tap macvlan bridge stp llc tun kvm_intel kvm irqbypass efivarfs ip_tables x_tables ipv6 nf_defrag_ipv6 crc_ccitt autofs4 ext4 crc32c_generic crc16 mbcache jbd2 dm_crypt algif_skcipher af_alg input_leds led_class crc32c_intel atkbd xhci_pci nvme libps2 xhci_hcd nvme_core t10_pi crc_t10dif aesni_intel usbcore libaes crypto_simd cryptd glue_helper crct10dif_generic crct10dif_pclmul crct10dif_common usb_common i8042 rtc_cmos serio dm_snapshot dm_bufio dm_mod
Apr 28 00:56:53 x1 kernel: CR2: 0000000000000020
Apr 28 00:56:53 x1 kernel: ---[ end trace 1f090a66ab09528a ]---
Apr 28 00:56:53 x1 kernel: RIP: 0010:klist_next+0x12/0x100
Apr 28 00:56:53 x1 kernel: Code: 44 89 f0 5b 5d 41 5c 41 5d 41 5e c3 0f 0b e9 22 ff ff ff 0f 1f 44 00 00 41 56 41 55 41 54 55 53 48 89 fb 48 8b 3f 4c 8b 63 08 <4c> 8b 6f 20 e8 c5 10 02 00 49 89 c6 4d 85 e4 0f 84 9d 00 00 00 49
Apr 28 00:56:53 x1 kernel: RSP: 0018:ffffad8984e3bce0 EFLAGS: 00010282
Apr 28 00:56:53 x1 kernel: RAX: 0000000000000000 RBX: ffffad8984e3bd10 RCX: 0000000000000000
Apr 28 00:56:53 x1 kernel: RDX: ffffffffc09ca1e0 RSI: ffffad8984e3bd10 RDI: 0000000000000000
Apr 28 00:56:53 x1 kernel: RBP: ffffffffc09ca1e0 R08: 0000000000000000 R09: 000000007fffffff
Apr 28 00:56:53 x1 kernel: R10: 0000000000000325 R11: ffff9aed8f5eb524 R12: 0000000000000000
Apr 28 00:56:53 x1 kernel: R13: 0000000000000000 R14: ffff9aece73aa800 R15: 0000000000000016
Apr 28 00:56:53 x1 kernel: FS:  0000000000000000(0000) GS:ffff9aed8f5c0000(0000) knlGS:0000000000000000
Apr 28 00:56:53 x1 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Apr 28 00:56:53 x1 kernel: CR2: 0000000000000020 CR3: 00000004630f8005 CR4: 00000000003606e0
Comment 2 Julian Hille 2021-01-04 18:53:31 UTC
I do not see this errors in dmesg or kern log but the issue is the same.
I'm using kernel 5.9 and 5.10 and just since two weeks it happens to crash the whole system. 

Before it was absolutely without any issue.

Since then i see frequent re / disconnects and crashes / freezes.
These happen together with 

Jan  3 02:59:47 julian-ThinkPad kernel: [    5.267846] cma: cma_alloc: alloc failed, req-size: 8 pages, ret: -12
Jan  3 02:59:47 julian-ThinkPad kernel: [    5.267853] cma: cma_alloc: alloc failed, req-size: 8 pages, ret: -12
Jan  3 02:59:47 julian-ThinkPad kernel: [    5.267862] cma: cma_alloc: alloc failed, req-size: 4 pages, ret: -12



and after adding some debug kernel params:
i've seen these:
Jan  4 19:27:41 julian-ThinkPad kernel: [   11.256799] cma: cma_alloc: alloc failed, req-size: 16 pages, ret: -12
Jan  4 19:27:41 julian-ThinkPad kernel: [   11.257122] alloc_contig_range: [3aeff8, 3aeffc) PFNs busy
Jan  4 19:27:41 julian-ThinkPad kernel: [   11.257126] cma: cma_alloc: alloc failed, req-size: 4 pages, ret: -16
Jan  4 19:27:41 julian-ThinkPad kernel: [   11.265722] cma: cma_alloc: alloc failed, req-size: 16 pages, ret: -12
Jan  4 19:27:41 julian-ThinkPad kernel: [   11.265966] alloc_contig_range: [3aeff8, 3aeffc) PFNs busy
Jan  4 19:27:41 julian-ThinkPad kernel: [   11.265973] cma: cma_alloc: alloc failed, req-size: 4 pages, ret: -16



I was unable to track this new issue to any changes i made,
no new kernel between the first occurrence of this, now new software installed no hardware added.

I can confirm that disabling the wifi removes those errors and stops my machine from crashing.

Note You need to log in before you can comment on or make changes to this bug.