kernel crash

[Chris Brannon]

Just saw this crash on kernel 4.11.12; it seems related to Speakup.
Interestingly, the machine stayed up for a few seconds after the crash,
long enough for it to get logged to disk.

[  280.972645] BUG: unable to handle kernel paging request at ffff960000d279f2
[  280.972799] IP: get_char.part.3+0x23/0x60 [speakup]
[  280.972885] PGD 0 
[  280.972887] 
[  280.972960] Oops: 0000 [#1] PREEMPT SMP
[  280.973030] Modules linked in: algif_hash algif_skcipher af_alg ctr ccm cmac bnep speakup_soft(C) speakup(C) nls_iso8859_1 nls_cp437 vfat fat arc4 b43 rt2800usb rt2x00usb rt2800lib btusb rt2x00lib btrtl btbcm btintel mac80211 snd_usb_audio snd_usbmidi_lib joydev snd_rawmidi bcm5974 input_leds crc_ccitt cfg80211 ssb mmc_core rng_core iTCO_wdt iTCO_vendor_support coretemp intel_rapl x86_pkg_temp_thermal intel_powerclamp kvm_intel kvm applesmc input_polldev hwmon snd_hda_codec_hdmi snd_hda_codec_cirrus snd_hda_codec_generic irqbypass intel_cstate intel_rapl_perf pcspkr snd_hda_intel dw_dmac_pci bdc_pci snd_hda_codec snd_hda_core bcma mei_me i2c_i801 snd_hwdep lpc_ich dw_dmac_core thunderbolt snd_pcm mei shpchp sbs sbshc acpi_als kfifo_buf industrialio evdev apple_bl spi_pxa2xx_platform tpm_tis battery
[  280.974269]  mac_hid tpm_tis_core ac tpm pci_stub vboxpci(O) vboxnetflt(O) vboxnetadp(O) vboxdrv(O) snd_seq snd_seq_device snd_timer snd soundcore vhost_net vhost tap uhid hci_vhci bluetooth rfkill vfio_iommu_type1 vfio uinput userio ppp_generic slhc tun loop btrfs xor raid6_pq cuse fuse ext4 crc16 jbd2 mbcache sd_mod hid_apple usbkbd usbmouse hid_generic usbhid hid i915 crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel pcbc ahci libahci intel_gtt i2c_algo_bit libata drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops xhci_pci aesni_intel xhci_hcd scsi_mod drm aes_x86_64 crypto_simd glue_helper cryptd usbcore agpgart video button dm_mirror dm_region_hash dm_log dm_mod
[  280.975356] CPU: 0 PID: 868 Comm: bluetoothd Tainted: G         C O    4.11.12_1 #1
[  280.975484] Hardware name: Apple Inc. MacBookAir6,1/Mac-35C1E88140C3E6CF, BIOS MBA61.88Z.0099.B33.1702181657 02/18/2017
[  280.975662] task: ffff95ffe585d580 task.stack: ffffaaae00d24000
[  280.975769] RIP: 0010:get_char.part.3+0x23/0x60 [speakup]
[  280.975863] RSP: 0018:ffffaaae00d279c8 EFLAGS: 00010082
[  280.975955] RAX: ffff960000d279f2 RBX: ffffffffc0e0ba01 RCX: 0000000000000000
[  280.976076] RDX: 0000000000000001 RSI: 0000000019b2f9f2 RDI: ffff95ffe3ecac00
[  280.976196] RBP: ffffaaae00d279ef R08: ffffffff8980be80 R09: 0000000000000001
[  280.976317] R10: 0000000000000000 R11: 0000000000000000 R12: ffff95ffe3ecac00
[  280.976437] R13: ffff95ffe3ecac00 R14: ffffffffc0e1c3cb R15: 0000000000000103
[  280.976559] FS:  00007efebc18e740(0000) GS:ffff95ffef200000(0000) knlGS:0000000000000000
[  280.976695] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.976794] CR2: ffff960000d279f2 CR3: 00000001674a0000 CR4: 00000000001406f0
[  280.976914] Call Trace:
[  280.976968]  ? get_word+0x261/0x300 [speakup]
[  280.977050]  ? get_word+0x1b0/0x300 [speakup]
[  280.977132]  ? get_word+0x300/0x300 [speakup]
[  280.977213]  ? say_word+0xb/0x50 [speakup]
[  280.977290]  ? get_word+0x300/0x300 [speakup]
[  280.977371]  ? keyboard_notifier_call+0xb85/0xc00 [speakup]
[  280.977472]  ? try_to_wake_up+0x25a/0x420
[  280.977548]  ? notifier_call_chain+0x34/0xa0
[  280.977627]  ? atomic_notifier_call_chain+0x2e/0x40
[  280.977715]  ? kbd_event+0x26b/0x6d0
[  280.977785]  ? input_to_handler+0xcc/0xf0
[  280.981894]  ? input_pass_values.part.1+0x126/0x140
[  280.986017]  ? input_handle_event+0x11f/0x4f0
[  280.990125]  ? input_event+0x4a/0x70
[  280.994236]  ? hidinput_report_event+0x33/0x40 [hid]
[  280.998388]  ? hid_report_raw_event+0x28f/0x420 [hid]
[  281.002568]  ? hid_input_report+0xfe/0x170 [hid]
[  281.006770]  ? uhid_char_write+0x423/0x480 [uhid]
[  281.010974]  ? __do_readv_writev+0x2e2/0x390
[  281.015115]  ? import_iovec+0x37/0xd0
[  281.019187]  ? do_readv_writev+0x8d/0xe0
[  281.023245]  ? sock_read_iter+0x9e/0xf0
[  281.027328]  ? __vfs_read+0xe6/0x150
[  281.031410]  ? do_writev+0x5e/0xf0
[  281.035338]  ? do_writev+0x5e/0xf0
[  281.039078]  ? SyS_read+0x52/0xc0
[  281.042654]  ? entry_SYSCALL_64_fastpath+0x1a/0xa9
[  281.046108] Code: c3 b8 f4 ff ff ff eb c6 0f 1f 44 00 00 41 54 55 49 89 fc 53 48 2b b7 78 01 00 00 48 89 d5 ba 01 00 00 00 48 d1 fe e8 7d ff 61 c8 <0f> b7 18 41 0f b7 84 24 d8 01 00 00 66 85 c3 0f b6 f3 74 09 f7 
[  281.053201] RIP: get_char.part.3+0x23/0x60 [speakup] RSP: ffffaaae00d279c8
[  281.056556] CR2: ffff960000d279f2
[  281.059741] ---[ end trace 6d93033dfd450bdc ]---
[  281.062809] note: bluetoothd[868] exited with preempt_count 3

-- Chris