Bug 103441

Summary: System crashes when bluetooth mouse is disconnected.
Product: Drivers Reporter: Adam (adam.feakin)
Component: BluetoothAssignee: linux-bluetooth (linux-bluetooth)
Status: NEW ---    
Severity: normal CC: bastienphilbert
Priority: P1    
Hardware: Intel   
OS: Linux   
Kernel Version: 4.1.6 Subsystem:
Regression: No Bisected commit-id:

Description Adam 2015-08-25 00:41:27 UTC 
slackware-current 
X.Org X Server 1.17.2
After upgrading from kernel 3.18.11 to 4.1.6 the system freezes when my bluetooth mouse goes to sleep or if I unplug the bluetooth dongle while the mouse is in use.

Reproducible every time when X is running and I unplug the USB bluetooth dongle.

[ 3115.419956] ------------[ cut here ]------------
[ 3115.420058] kernel BUG at mm/slub.c:3413!
[ 3115.420085] invalid opcode: 0000 [#1] PREEMPT SMP
[ 3115.420125] Modules linked in: hidp cmac rfcomm bnep ipv6 xt_limit xt_pkttype xt_tcpudp nf_log_ipv4 nf_log_common xt_conntrack iptable_mangle iptable_nat nf_nat_ipv4 iptable_filter nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp nf_nat xt_LOG nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack ip_tables x_tables cpufreq_ondemand b43 bcma mac80211 cfg80211 ssb pcmcia pcmcia_core lp ppdev parport_pc parport fuse algif_skcipher af_alg snd_hda_codec_hdmi i2c_dev btusb btbcm btintel uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_core bluetooth v4l2_common videodev joydev snd_hda_codec_idt snd_hda_codec_generic snd_hda_intel snd_hda_controller snd_hda_codec snd_hda_core snd_hwdep snd_pcm amdkfd amd_iommu_v2 snd_timer psmouse dell_laptop rfkill serio_raw radeon intel_powerclamp coretemp sdhci_pci sdhci mmc_core
[ 3115.420728] ttm drm_kms_helper drm firewire_ohci intel_agp intel_gtt acpi_cpufreq agpgart video thermal processor fan i2c_i801 i2c_algo_bit evdev dell_wmi sparse_keymap snd intel_ips r8169 mii i2c_core firewire_core dcdbas thermal_sys ehci_pci ehci_hcd dell_smo8800 wmi soundcore hwmon battery ac button mei_me lpc_ich mei kvm_intel kvm crc32c_intel microcode loop ext4 jbd2 mbcache hid_generic usbhid hid
[ 3115.421072] CPU: 0 PID: 1816 Comm: Xorg Not tainted 4.1.6af #1
[ 3115.421108] Hardware name: Dell Inc. Studio 1558/0874P6, BIOS A12 03/30/2011
[ 3115.421148] task: ffff8801520f1120 ti: ffff880091060000 task.ti: ffff880091060000
[ 3115.421191] RIP: 0010:[<ffffffff811a266b>] [<ffffffff811a266b>] kfree+0x18b/0x190
[ 3115.421240] RSP: 0018:ffff880091063d48 EFLAGS: 00010246
[ 3115.421270] RAX: 8000000000000000 RBX: ffff8801525e7400 RCX: 00000001820001c3
[ 3115.421305] RDX: 000077ff80000000 RSI: ffffea0005486840 RDI: ffff8801525e7400
[ 3115.421342] RBP: ffff880091063d68 R08: 00000000521a1501 R09: ffffea00054979c0
[ 3115.421381] R10: ffffffff81306dac R11: 0000000000019350 R12: ffff8801525e74b0
[ 3115.421421] R13: ffffffffc06661f5 R14: ffff8801525e74c0 R15: ffff88009a3f6920
[ 3115.421463] FS: 00007f3b15e63880(0000) GS:ffff880157c00000(0000) knlGS:0000000000000000
[ 3115.421508] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 3115.421540] CR2: 00007fdaed1e5000 CR3: 000000014f3b1000 CR4: 00000000000006f0
[ 3115.421577] Stack:
[ 3115.421592] ffff8801525e74b0 ffff8801525e7400 ffff8801525e74b0 ffff88008b541b40
[ 3115.421644] ffff880091063d88 ffffffffc06661f5 7fffffffffffffff ffff8801525e74c0
[ 3115.421692] ffff880091063db8 ffffffff81414476 ffff880091063df8 ffff8801525e74f8
[ 3115.421743] Call Trace:
[ 3115.421772] [<ffffffffc06661f5>] evdev_free+0x35/0x40 [evdev]
[ 3115.421811] [<ffffffff81414476>] device_release+0x36/0xb0
[ 3115.421847] [<ffffffff81306d9f>] kobject_release+0x3f/0x80
[ 3115.421882] [<ffffffff81306c75>] kobject_put+0x35/0x70
[ 3115.421913] [<ffffffff811bc0ef>] cdev_default_release+0x1f/0x30
[ 3115.421949] [<ffffffff81306d9f>] kobject_release+0x3f/0x80
[ 3115.421983] [<ffffffff81306c75>] kobject_put+0x35/0x70
[ 3115.422016] [<ffffffff811bc79c>] cdev_put+0x1c/0x30
[ 3115.422050] [<ffffffff811b9aaf>] __fput+0x19f/0x1e0
[ 3115.422081] [<ffffffff811b9b3e>] ____fput+0xe/0x10
[ 3115.422111] [<ffffffff810a4047>] task_work_run+0xb7/0xf0
[ 3115.422143] [<ffffffff8100301c>] do_notify_resume+0x5c/0x80
[ 3115.422179] [<ffffffff816737ca>] int_signal+0x12/0x17
[ 3115.422209] Code: 40 74 04 41 8b 71 68 4c 89 cf e8 01 fc fb ff e9 58 ff ff ff 0f 1f 40 00 4c 89 d1 48 89 da 4c 89 ce e8 3a f9 ff ff e9 41 ff ff ff <0f> 0b 0f 1f 00 66 66 66 66 90 55 89 f1 48 89 e5 41 57 41 56 41
[ 3115.422529] RIP [<ffffffff811a266b>] kfree+0x18b/0x190
[ 3115.422565] RSP <ffff880091063d48>
[ 3115.430942] ---[ end trace ab65850fbf9779fe ]---
Comment 1 [account disabled by administrator] 2016-04-26 16:20:06 UTC 
In the file drivers/input/evdev.c from the root of the kernel directory can you change in the function evdev_cleanup:
if (evdev->open) {
                 input_flush_device(handle, NULL);
                 input_close_device(handle);
         }
}
to:
if (evdev->open)
                 input_close_device(handle);

and tell me if that fixes your problem.