Bug 927488

Summary:	[abrt]: BUG: unable to handle kernel NULL pointer dereference at 0000000000000058
Product:	[Fedora] Fedora	Reporter:	Tomislav Vujec <tvujec>
Component:	kernel	Assignee:	Benjamin Tissoires <btissoir>
Status:	CLOSED INSUFFICIENT_DATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	17	CC:	gansalmon, itamar, jforbes, jonathan, kernel-maint, madhu.chinakonda
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Unspecified
Whiteboard:	abrt_hash:0f3a803d03145ba7b4e183f521610c455b9f6880
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-29 14:23:48 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tomislav Vujec 2013-03-26 03:46:55 UTC

Additional info:
BUG: unable to handle kernel NULL pointer dereference at 0000000000000058
IP: [<ffffffff8150e5bc>] hid_submit_ctrl+0x8c/0x2a0
PGD 2302a3067 PUD 2178a9067 PMD 0 
Oops: 0002 [#1] SMP 
Modules linked in: fuse bnep bluetooth rfkill snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq coretemp snd_seq_device kvm_intel snd_pcm kvm snd_page_alloc snd_timer snd soundcore iTCO_wdt i2c_i801 iTCO_vendor_support lpc_ich mfd_core mei microcode e1000e serio_raw nfsd auth_rpcgss nfs_acl lockd sunrpc uinput raid0 crc32c_intel ghash_clmulni_intel ata_generic pata_acpi hid_logitech_dj usb_storage i915 video i2c_algo_bit drm_kms_helper drm i2c_core
CPU 1 
Pid: 886, comm: Xorg Not tainted 3.8.3-103.fc17.x86_64 #1                  /DQ67OW
RIP: 0010:[<ffffffff8150e5bc>]  [<ffffffff8150e5bc>] hid_submit_ctrl+0x8c/0x2a0
RSP: 0018:ffff88022f5efc68  EFLAGS: 00010046
RAX: 0000000080000800 RBX: ffff88022de2c000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff880219564000
RBP: ffff88022f5efca8 R08: 0000000000000020 R09: ffff8801e3945c21
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88021787f000
R13: ffff880219564000 R14: 000000000000000f R15: 0000000000000000
FS:  00007f85c7ed48c0(0000) GS:ffff88023e280000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000058 CR3: 00000002309d0000 CR4: 00000000000407e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process Xorg (pid: 886, threadinfo ffff88022f5ee000, task ffff8802196c1760)
Stack:
 ffff8801ab684400 ffff880219564000 0000000000000000 ffff88022de2c000
 ffff880219564000 0000000000000000 ffff880219564000 000000000000004c
 ffff88022f5efcd8 ffffffff8150edf0 ffff88021787f000 0000000000000000
Call Trace:
 [<ffffffff8150edf0>] usbhid_restart_ctrl_queue+0x90/0x130
 [<ffffffff8150fe68>] __usbhid_submit_report+0x1c8/0x3a0
 [<ffffffff81510182>] usbhid_submit_report+0x52/0x80
 [<ffffffffa013410d>] logi_dj_ll_input_event+0x10d/0x180 [hid_logitech_dj]
 [<ffffffff814a6ace>] input_handle_event+0x8e/0x530
 [<ffffffff814a6ffc>] input_inject_event+0x8c/0xa0
 [<ffffffff814aadce>] evdev_write+0xde/0x160
 [<ffffffff8119d35c>] vfs_write+0xac/0x180
 [<ffffffff8119d6a2>] sys_write+0x52/0xa0
 [<ffffffff810deb3c>] ? __audit_syscall_exit+0x20c/0x2c0
 [<ffffffff81654cd9>] system_call_fastpath+0x16/0x1b
Code: 8d 74 10 01 48 8b 87 b0 18 00 00 48 8b 53 30 48 8b 00 8b 80 78 ff ff ff c1 e0 08 84 c9 0f 85 fc 00 00 00 0d 00 00 00 80 4d 85 ff <89> 42 58 48 8b 43 30 44 89 b0 88 00 00 00 74 2e 48 8b bb 48 18 
RIP  [<ffffffff8150e5bc>] hid_submit_ctrl+0x8c/0x2a0
 RSP <ffff88022f5efc68>
CR2: 0000000000000058

Comment 1 Tomislav Vujec 2013-03-26 03:48:30 UTC

System freezes after this error.

Comment 2 Josh Boyer 2013-03-26 13:32:06 UTC

Benjamin, have you seen something like this before?

Comment 3 Benjamin Tissoires 2013-03-26 13:45:47 UTC

It looks like a duplicate of #881504 though the error is not exactly the same (here a kernel NULL pointer, vs a page fault). At least, the callstack is the same.
Personally, I never encountered it, so I can only guess from the code what is happening.

Tomislav, can you confirm that the bug is triggered when hitting capslock on any other key that triggers a LED?

Comment 4 Justin M. Forbes 2013-04-29 14:23:48 UTC

Closing this bug as insufficient data as it has been needinfo for more than 2 weeks without a response, if you are still seeing this bug, feel free to reopen, but also comment with the requested information.