https://bugzilla.redhat.com/show_bug.cgi?id=481741 oops is at drivers/usb/class/cdc-wdm.c:644: iface = &intf->altsetting[0]; ep = &iface->endpoint[0].desc; if (!usb_endpoint_is_int_in(ep)) { <==== ep is NULL rv = -EINVAL; goto err; } BUG: unable to handle kernel NULL pointer dereference at 0000000000000003 IP: [<ffffffffa0308d00>] wdm_probe+0x1a0/0x424 [cdc_wdm] PGD 127161067 PUD 12d436067 PMD 0 Oops: 0000 [#1] SMP last sysfs file: /sys/devices/pci0000:00/0000:00:1d.7/usb1/1-6/1-6.2/1-6.2:2.2/bInterfaceClass CPU 1 Modules linked in: cdc_wdm(+) sco bridge stp bnep l2cap bluetooth coretemp smsc47b397 hwmon nls_utf8 cifs nfs lockd nfs_acl auth_rpcgss sunrpc ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 cpufreq_ondemand acpi_cpufreq freq_table dm_multipath uinput snd_hda_codec_realtek snd_hda_intel snd_hda_codec snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss ppdev snd_pcm iTCO_wdt floppy iTCO_vendor_support parport_pc snd_timer serio_raw snd pcspkr parport wmi soundcore i82975x_edac tg3 edac_core snd_page_alloc [last unloaded: microcode] Pid: 2856, comm: modprobe Not tainted 2.6.29-0.43.rc6.fc10.x86_64 #1 HP xw4400 Workstation RIP: 0010:[<ffffffffa0308d00>] [<ffffffffa0308d00>] wdm_probe+0x1a0/0x424 [cdc_wdm] RSP: 0018:ffff88012715bcc8 EFLAGS: 00010286 RAX: ffff88012d95f648 RBX: ffff88012cc6ae00 RCX: 0000000000000000 RDX: ffffffffa030a9f0 RSI: ffffffffa0309606 RDI: ffff88012cc6aed8 RBP: ffff88012715bd18 R08: 0000000000000000 R09: ffffffff8126b964 R10: ffff88012fa3c000 R11: 00000000ffffffff R12: 0000000000000000 R13: ffff88012d9de46c R14: ffff880128885400 R15: 0000000000000000 FS: 00007f18018136f0(0000) GS:ffff88012e9de280(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000000003 CR3: 000000012715e000 CR4: 00000000000006e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Process modprobe (pid: 2856, threadinfo ffff88012715a000, task ffff8801271096f0) Stack: ffffffff8126b964 ffff880128885430 080088012715bd08 ffff88012701b088 ffff880128885500 ffff880128885430 0000000000000000 ffffffffa030a7c0 ffff880128885400 ffff88012701b000 ffff88012715bd68 ffffffff8126c9ae Call Trace: [<ffffffff8126b964>] ? usb_match_one_id+0x2b/0x88 [<ffffffff8126c9ae>] usb_probe_interface+0x112/0x166 [<ffffffff8121d194>] driver_probe_device+0xc4/0x172 [<ffffffff8121d2a4>] __driver_attach+0x62/0x8c [<ffffffff8121d242>] ? __driver_attach+0x0/0x8c [<ffffffff8121ca48>] bus_for_each_dev+0x4c/0x83 [<ffffffff8121cfdb>] driver_attach+0x1c/0x1e [<ffffffff8121c375>] bus_add_driver+0xb7/0x201 [<ffffffff8121d4b4>] driver_register+0xa8/0x128 [<ffffffff8126c748>] usb_register_driver+0x80/0xe4 [<ffffffffa030d000>] ? wdm_init+0x0/0x20 [cdc_wdm] [<ffffffffa030d01e>] wdm_init+0x1e/0x20 [cdc_wdm] [<ffffffff8100a056>] do_one_initcall+0x56/0x13d [<ffffffff810612b3>] ? __blocking_notifier_call_chain+0x58/0x6a [<ffffffff8106f95a>] sys_init_module+0xa9/0x1c8 [<ffffffff8101133a>] system_call_fastpath+0x16/0x1b Code: 48 c7 83 08 01 00 00 0c 92 30 a0 66 89 43 68 48 8d 83 f8 00 00 00 48 89 83 f8 00 00 00 48 89 83 00 01 00 00 49 8b 06 4c 8b 60 10 <41> 0f b6 44 24 03 83 e0 03 83 f8 03 0f 85 27 02 00 00 41 80 7c RIP [<ffffffffa0308d00>] wdm_probe+0x1a0/0x424 [cdc_wdm] RSP <ffff88012715bcc8> CR2: 0000000000000003 ---[ end trace f1ff473594f6fa1e ]--- -- To unsubscribe from this list: send the line "unsubscribe linux-usb" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
