Bug 2214436

Summary: [abrt] __die: BUG: kernel NULL pointer dereference, address: 0000000000000000
Product: [Fedora] Fedora Reporter: Steve <cyberdiamond.steve>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 38CC: acaringi, adscvr, airlied, alciregi, bskeggs, cyberdiamond.steve, hdegoede, hpa, jarodwilson, josef, kernel-maint, lgoncalv, linville, masami256, mchehab, ptalbert, steved
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/af0a24c5ce907e090f7f7f7206a7c910f689a50
Whiteboard: abrt_hash:8c113d92e3b0b8237cf99139816c8a026c99b8f8;VARIANT_ID=workstation;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-05-22 14:05:47 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: dmesg none

Description Steve 2023-06-13 01:24:33 UTC 
Additional info:
reporter:       libreport-2.17.10
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 23190 Comm: kworker/u24:32 Not tainted 6.3.5-200.fc38.x86_64 #1
Hardware name: LENOVO 21AH00C2AU/21AH00C2AU, BIOS N3MET15W (1.14 ) 04/27/2023
Workqueue: USBC000:00-con2 ucsi_poll_worker [typec_ucsi]
RIP: 0010:ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
Code: 44 00 00 41 55 49 89 cd 41 54 49 89 d4 55 53 89 f3 e8 d4 dd 1c 00 4c 89 e6 89 df 4c 89 ea 48 03 78 10 48 89 c5 e8 b0 da 98 c3 <49> 8b 04 24 48 89 ef be 01 00 00 00 48 89 45 50 5b 5d 41 5c 41 5d
RSP: 0018:ffffa4b644a3fd58 EFLAGS: 00010282
RAX: ffffa4b640111002 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffa4b640111002
RBP: ffff8f640cfcf728 R08: 0000000000000000 R09: 00000000802a0029
R10: 000000000000000f R11: ffffa4b644a3fb58 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8f640d81a3b8 R15: 0000000400000000
FS:  0000000000000000(0000) GS:ffff8f6f2f680000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000023f022000 CR4: 0000000000f50ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7c/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ucsi_exec_command+0x22d/0x2e0 [typec_ucsi]
 ucsi_send_command+0x4b/0xe0 [typec_ucsi]
 ucsi_get_pdos+0x55/0x130 [typec_ucsi]
 ucsi_register_partner_pdos+0xb5/0x1c0 [typec_ucsi]
 ? wake_up_q+0x4e/0x90
 ucsi_poll_worker+0x3a/0x110 [typec_ucsi]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer sunrpc nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_hda_dsp_common snd_soc_hdac_hdmi snd_sof_probes binfmt_misc vfat fat squashfs snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci iwlmvm snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda mac80211 snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_bus intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp coretemp snd_soc_core iTCO_wdt mei_pxp mei_hdcp intel_pmc_bxt libarc4 kvm_intel snd_compress ac97_bus iTCO_vendor_support uvcvideo snd_pcm_dmaengine uvc kvm
 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi btusb snd_hda_codec videobuf2_vmalloc pmt_telemetry irqbypass btrtl videobuf2_memops intel_rapl_msr pmt_class snd_hda_core videobuf2_v4l2 btbcm rapl snd_hwdep iwlwifi btintel videobuf2_common snd_seq btmtk intel_cstate snd_seq_device intel_uncore think_lmi pcspkr processor_thermal_device_pci cfg80211 firmware_attributes_class wmi_bmof snd_pcm bluetooth videodev processor_thermal_device thinkpad_acpi processor_thermal_rfim processor_thermal_mbox i2c_i801 ledtrig_audio mei_me snd_timer platform_profile processor_thermal_rapl mei thunderbolt i2c_smbus rfkill idma64 intel_rapl_common intel_vsec igen6_edac mc int3400_thermal snd intel_hid int3403_thermal int340x_thermal_zone sparse_keymap acpi_thermal_rel soundcore acpi_pad acpi_tad joydev loop zram dm_crypt i915 nvme i2c_algo_bit drm_buddy drm_display_helper nvme_core crct10dif_pclmul crc32_pclmul crc32c_intel cec polyval_clmulni ucsi_acpi polyval_generic hid_multitouch e1000e ghash_clmulni_intel typec_ucsi
 sha512_ssse3 ttm typec nvme_common video i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse [last unloaded: ipmi_msghandler]
CR2: 0000000000000000
Comment 1 Steve 2023-06-13 01:24:39 UTC 
Created attachment 1970539 [details]
File: dmesg
Comment 2 Stepan Broz 2023-06-19 06:29:28 UTC 
Description of problem:
Just rebooted. Occurs every time.

Version-Release number of selected component:
kernel-core-6.3.7-200.fc38

Additional info:
reporter:       libreport-2.17.10
cmdline:        BOOT_IMAGE=(hd0,gpt2)/vmlinuz-6.3.7-200.fc38.x86_64 root=/dev/mapper/fedora_localhost--live-root ro resume=/dev/mapper/fedora_localhost--live-swap rd.lvm.lv=fedora_localhost-live/root rd.luks.uuid=luks-d2afe174-8db0-4ead-aef2-ec41f6199607 rd.lvm.lv=fedora_localhost-live/swap rhgb quiet
kernel:         6.3.7-200.fc38.x86_64
crash_function: __die
type:           Kerneloops
reason:         BUG: kernel NULL pointer dereference, address: 0000000000000000
package:        kernel-core-6.3.7-200.fc38
runlevel:       unknown
comment:        Just rebooted. Occurs every time.

Truncated backtrace:
BUG: kernel NULL pointer dereference, address: 0000000000000000
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 4 PID: 11 Comm: kworker/u16:1 Not tainted 6.3.7-200.fc38.x86_64 #1
Hardware name: LENOVO 20NYS7K91E/20NYS7K91E, BIOS N2JET93W (1.71 ) 11/04/2020
Workqueue: USBC000:00-con1 ucsi_poll_worker [typec_ucsi]
RIP: 0010:ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
Code: 44 00 00 41 55 49 89 cd 41 54 49 89 d4 55 53 89 f3 e8 d4 cd 07 00 4c 89 e6 89 df 4c 89 ea 48 03 78 10 48 89 c5 e8 b0 ca b6 c6 <49> 8b 04 24 48 89 ef be 01 00 00 00 48 89 45 50 5b 5d 41 5c 41 5d
RSP: 0018:ffffbd5b000d7d58 EFLAGS: 00010282
RAX: ffffbd5b00121002 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffbd5b00121002
RBP: ffff94de8a03a428 R08: ffff94de8d5c9078 R09: ffff94de8d5c9060
R10: 000000000000000f R11: ffffbd5b000d7b58 R12: 0000000000000000
R13: 0000000000000000 R14: ffff94de8c8745b8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff94e5e2500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000060d022002 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7c/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ucsi_exec_command+0x22d/0x2e0 [typec_ucsi]
 ucsi_send_command+0x4b/0xe0 [typec_ucsi]
 ucsi_get_pdos+0x55/0x130 [typec_ucsi]
 ? usb_power_delivery_link_device+0x5b/0x80 [typec]
 ucsi_register_partner_pdos+0x123/0x1c0 [typec_ucsi]
 ucsi_poll_worker+0x3a/0x110 [typec_ucsi]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core r8152 e1000e i2c_algo_bit drm_buddy drm_display_helper mii nvme_common hid_cherry hid_jabra rtsx_pci cec ucsi_acpi typec_ucsi ttm typec video wmi pinctrl_cannonlake serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000000
Comment 3 RejectedWolf 2023-08-07 19:25:18 UTC 
Description of problem:
i dont know

Version-Release number of selected component:
kernel-core-6.3.6-200.fc38

Additional info:
reporter:       libreport-2.17.11
kernel:         6.3.6-200.fc38.x86_64
crash_function: __die
reason:         BUG: kernel NULL pointer dereference, address: 0000000000000000
type:           Kerneloops
cmdline:        BOOT_IMAGE=(hd0,gpt2)/vmlinuz-6.3.6-200.fc38.x86_64 root=UUID=231333c2-29ea-4e22-a4f7-c61b337c555d ro rootflags=subvol=root rhgb quiet
package:        kernel-core-6.3.6-200.fc38
runlevel:       N 5
comment:        i dont know

Truncated backtrace:
#1 [TASK] ? __die
#2 [TASK] ? page_fault_oops
#3 [TASK] ? exc_page_fault
#4 [TASK] ? asm_exc_page_fault
#5 [TASK] ? ucsi_acpi_async_write in ucsi_acpi
#6 [TASK] ? ucsi_acpi_async_write in ucsi_acpi
#7 [TASK] ucsi_exec_command in typec_ucsi
#8 [TASK] ucsi_send_command in typec_ucsi
#9 [TASK] ucsi_get_pdos in typec_ucsi
#10 [TASK] ucsi_register_partner_pdos in typec_ucsi
#11 [TASK] ? btrfs_work_helper
#12 [TASK] ucsi_poll_worker in typec_ucsi
#13 [TASK] ? __pfx_worker_thread
#14 [TASK] ? __pfx_kthread
#15 [TASK] ret_from_fork
Comment 4 Aoife Moloney 2024-05-22 14:05:47 UTC 
Fedora Linux 38 entered end-of-life (EOL) status on 2024-05-21.

Fedora Linux 38 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.