Re: BUG: kernel NULL pointer dereference, address: 0000000000000000

[Sudip Mukherjee <sudipm.mukherjee@gmail.com>]

On Thu, 27 Nov 2025 at 22:55, Paul Menzel <pmenzel@molgen.mpg.de> wrote:
>
> Dear Linux folks,
>
>
> Am 27.11.25 um 19:51 schrieb Paul Menzel:
>
> > Unfortunately, not reproducible, but starting with Linux 6.18-rc7, I got
> > the oops below *once*:
> >
> > ```

<snip>

>
> Building and booting Linux 6.18.0-rc7-00041-g765e56e41a5a, I got another
> oops.
>
>      [   15.234799] ppdev lp.0: really_probe: driver_sysfs_add failed
>      [   15.234852] ------------[ cut here ]------------
>      [   15.234854] refcount_t: addition on 0; use-after-free.
>      [   15.234864] WARNING: CPU: 0 PID: 353 at lib/refcount.c:25
> refcount_warn_saturate+0xcd/0xf0
>
> Please find the output of `dmesg` attached.
>
> (It might be related to booting with an USB-C mini-dock connected, but I
> do not know yet.)

In both cases, it seems the underlying hardware was removed  or the
module was unloaded while it was still registering.

In the first case, 'parport_default_proc_unregister' has been called
while parport driver is still checking for all the connected devices
and was executing 'lp_attach'.
'parport_default_proc_unregister' will only be called when the parport
module is exiting.

Same in the second case,  'lp_attach' was still executing and
'ppdev_cleanup' was called.

Are you seeing the crash only from v6.18-rc7 onwards? Was v6.18-rc6 or
v6.17 ok for you ?


-- 
Regards
Sudip