Bug 2214436

Summary: [abrt] __die: BUG: kernel NULL pointer dereference, address: 0000000000000000
Product: [Fedora] Fedora Reporter: Steve <stevewilliams>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 38CC: acaringi, adscvr, airlied, alciregi, bskeggs, hdegoede, hpa, jarodwilson, josef, kernel-maint, lgoncalv, linville, masami256, mchehab, ptalbert, steved, stevewilliams
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/af0a24c5ce907e090f7f7f7206a7c910f689a50
Whiteboard: abrt_hash:8c113d92e3b0b8237cf99139816c8a026c99b8f8;VARIANT_ID=workstation;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: dmesg none

Description Steve 2023-06-13 01:24:33 UTC 
Additional info:
reporter:       libreport-2.17.10
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 10 PID: 23190 Comm: kworker/u24:32 Not tainted 6.3.5-200.fc38.x86_64 #1
Hardware name: LENOVO 21AH00C2AU/21AH00C2AU, BIOS N3MET15W (1.14 ) 04/27/2023
Workqueue: USBC000:00-con2 ucsi_poll_worker [typec_ucsi]
RIP: 0010:ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
Code: 44 00 00 41 55 49 89 cd 41 54 49 89 d4 55 53 89 f3 e8 d4 dd 1c 00 4c 89 e6 89 df 4c 89 ea 48 03 78 10 48 89 c5 e8 b0 da 98 c3 <49> 8b 04 24 48 89 ef be 01 00 00 00 48 89 45 50 5b 5d 41 5c 41 5d
RSP: 0018:ffffa4b644a3fd58 EFLAGS: 00010282
RAX: ffffa4b640111002 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffa4b640111002
RBP: ffff8f640cfcf728 R08: 0000000000000000 R09: 00000000802a0029
R10: 000000000000000f R11: ffffa4b644a3fb58 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8f640d81a3b8 R15: 0000000400000000
FS:  0000000000000000(0000) GS:ffff8f6f2f680000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000023f022000 CR4: 0000000000f50ee0
PKRU: 55555554
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7c/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ucsi_exec_command+0x22d/0x2e0 [typec_ucsi]
 ucsi_send_command+0x4b/0xe0 [typec_ucsi]
 ucsi_get_pdos+0x55/0x130 [typec_ucsi]
 ucsi_register_partner_pdos+0xb5/0x1c0 [typec_ucsi]
 ? wake_up_q+0x4e/0x90
 ucsi_poll_worker+0x3a/0x110 [typec_ucsi]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: uinput rfcomm snd_seq_dummy snd_hrtimer sunrpc nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink qrtr bnep snd_ctl_led snd_soc_skl_hda_dsp snd_soc_intel_hda_dsp_common snd_soc_hdac_hdmi snd_sof_probes binfmt_misc vfat fat squashfs snd_hda_codec_hdmi snd_hda_codec_realtek snd_hda_codec_generic snd_soc_dmic snd_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci iwlmvm snd_sof_xtensa_dsp snd_sof snd_sof_utils snd_soc_hdac_hda mac80211 snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi soundwire_bus intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp coretemp snd_soc_core iTCO_wdt mei_pxp mei_hdcp intel_pmc_bxt libarc4 kvm_intel snd_compress ac97_bus iTCO_vendor_support uvcvideo snd_pcm_dmaengine uvc kvm
 snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi btusb snd_hda_codec videobuf2_vmalloc pmt_telemetry irqbypass btrtl videobuf2_memops intel_rapl_msr pmt_class snd_hda_core videobuf2_v4l2 btbcm rapl snd_hwdep iwlwifi btintel videobuf2_common snd_seq btmtk intel_cstate snd_seq_device intel_uncore think_lmi pcspkr processor_thermal_device_pci cfg80211 firmware_attributes_class wmi_bmof snd_pcm bluetooth videodev processor_thermal_device thinkpad_acpi processor_thermal_rfim processor_thermal_mbox i2c_i801 ledtrig_audio mei_me snd_timer platform_profile processor_thermal_rapl mei thunderbolt i2c_smbus rfkill idma64 intel_rapl_common intel_vsec igen6_edac mc int3400_thermal snd intel_hid int3403_thermal int340x_thermal_zone sparse_keymap acpi_thermal_rel soundcore acpi_pad acpi_tad joydev loop zram dm_crypt i915 nvme i2c_algo_bit drm_buddy drm_display_helper nvme_core crct10dif_pclmul crc32_pclmul crc32c_intel cec polyval_clmulni ucsi_acpi polyval_generic hid_multitouch e1000e ghash_clmulni_intel typec_ucsi
 sha512_ssse3 ttm typec nvme_common video i2c_hid_acpi i2c_hid wmi pinctrl_tigerlake serio_raw ip6_tables ip_tables fuse [last unloaded: ipmi_msghandler]
CR2: 0000000000000000
Comment 1 Steve 2023-06-13 01:24:39 UTC 
Created attachment 1970539 [details]
File: dmesg
Comment 2 Stepan Broz 2023-06-19 06:29:28 UTC 
Description of problem:
Just rebooted. Occurs every time.

Version-Release number of selected component:
kernel-core-6.3.7-200.fc38

Additional info:
reporter:       libreport-2.17.10
cmdline:        BOOT_IMAGE=(hd0,gpt2)/vmlinuz-6.3.7-200.fc38.x86_64 root=/dev/mapper/fedora_localhost--live-root ro resume=/dev/mapper/fedora_localhost--live-swap rd.lvm.lv=fedora_localhost-live/root rd.luks.uuid=luks-d2afe174-8db0-4ead-aef2-ec41f6199607 rd.lvm.lv=fedora_localhost-live/swap rhgb quiet
kernel:         6.3.7-200.fc38.x86_64
crash_function: __die
type:           Kerneloops
reason:         BUG: kernel NULL pointer dereference, address: 0000000000000000
package:        kernel-core-6.3.7-200.fc38
runlevel:       unknown
comment:        Just rebooted. Occurs every time.

Truncated backtrace:
BUG: kernel NULL pointer dereference, address: 0000000000000000
fbcon: Taking over console
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 4 PID: 11 Comm: kworker/u16:1 Not tainted 6.3.7-200.fc38.x86_64 #1
Hardware name: LENOVO 20NYS7K91E/20NYS7K91E, BIOS N2JET93W (1.71 ) 11/04/2020
Workqueue: USBC000:00-con1 ucsi_poll_worker [typec_ucsi]
RIP: 0010:ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
Code: 44 00 00 41 55 49 89 cd 41 54 49 89 d4 55 53 89 f3 e8 d4 cd 07 00 4c 89 e6 89 df 4c 89 ea 48 03 78 10 48 89 c5 e8 b0 ca b6 c6 <49> 8b 04 24 48 89 ef be 01 00 00 00 48 89 45 50 5b 5d 41 5c 41 5d
RSP: 0018:ffffbd5b000d7d58 EFLAGS: 00010282
RAX: ffffbd5b00121002 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffbd5b00121002
RBP: ffff94de8a03a428 R08: ffff94de8d5c9078 R09: ffff94de8d5c9060
R10: 000000000000000f R11: ffffbd5b000d7b58 R12: 0000000000000000
R13: 0000000000000000 R14: ffff94de8c8745b8 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff94e5e2500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000060d022002 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7c/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ? ucsi_acpi_async_write+0x30/0x50 [ucsi_acpi]
 ucsi_exec_command+0x22d/0x2e0 [typec_ucsi]
 ucsi_send_command+0x4b/0xe0 [typec_ucsi]
 ucsi_get_pdos+0x55/0x130 [typec_ucsi]
 ? usb_power_delivery_link_device+0x5b/0x80 [typec]
 ucsi_register_partner_pdos+0x123/0x1c0 [typec_ucsi]
 ucsi_poll_worker+0x3a/0x110 [typec_ucsi]
 process_one_work+0x1c4/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xdb/0x110
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x29/0x50
 </TASK>
Modules linked in: i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic nvme ghash_clmulni_intel sha512_ssse3 nvme_core r8152 e1000e i2c_algo_bit drm_buddy drm_display_helper mii nvme_common hid_cherry hid_jabra rtsx_pci cec ucsi_acpi typec_ucsi ttm typec video wmi pinctrl_cannonlake serio_raw scsi_dh_rdac scsi_dh_emc scsi_dh_alua ip6_tables ip_tables dm_multipath fuse
CR2: 0000000000000000
Comment 3 RejectedWolf 2023-08-07 19:25:18 UTC 
Description of problem:
i dont know

Version-Release number of selected component:
kernel-core-6.3.6-200.fc38

Additional info:
reporter:       libreport-2.17.11
kernel:         6.3.6-200.fc38.x86_64
crash_function: __die
reason:         BUG: kernel NULL pointer dereference, address: 0000000000000000
type:           Kerneloops
cmdline:        BOOT_IMAGE=(hd0,gpt2)/vmlinuz-6.3.6-200.fc38.x86_64 root=UUID=231333c2-29ea-4e22-a4f7-c61b337c555d ro rootflags=subvol=root rhgb quiet
package:        kernel-core-6.3.6-200.fc38
runlevel:       N 5
comment:        i dont know

Truncated backtrace:
#1 [TASK] ? __die
#2 [TASK] ? page_fault_oops
#3 [TASK] ? exc_page_fault
#4 [TASK] ? asm_exc_page_fault
#5 [TASK] ? ucsi_acpi_async_write in ucsi_acpi
#6 [TASK] ? ucsi_acpi_async_write in ucsi_acpi
#7 [TASK] ucsi_exec_command in typec_ucsi
#8 [TASK] ucsi_send_command in typec_ucsi
#9 [TASK] ucsi_get_pdos in typec_ucsi
#10 [TASK] ucsi_register_partner_pdos in typec_ucsi
#11 [TASK] ? btrfs_work_helper
#12 [TASK] ucsi_poll_worker in typec_ucsi
#13 [TASK] ? __pfx_worker_thread
#14 [TASK] ? __pfx_kthread
#15 [TASK] ret_from_fork