Over the weekend I reported the issue to the linux-bluetooth mailing list, which led to bisecting the issue down to a single commit: https://lore.kernel.org/linux-bluetooth/CADRbXaDqx6S+7tzdDPPEpRu9eDLrHQkqoWTTGfKJSRxY=hT5MQ@mail.gmail.com/ Jeremy