Hide Forgot
Description of problem: While testing with the Apple USB SuperDrive (BZ#713509) I accidental unplugged the drive while being mounted. This resulted in a kernel dump/crash. Version-Release number of selected component (if applicable): kernel-2.6.38.7-30.fc15.x86_64 How reproducible: always Steps to Reproduce: 1. Connect SuperDrive, insert disc 2. Let it be mounted 3. Unplug USB SuperDrive Actual results: Unplugging mounted USB SuperDrive causes kernel dump Expected results: No dump Additional info: Of course unplugging a mounted drive is not normal behaviour it probably should no cause a kernel dump. Jun 15 17:53:32 paragon kernel: [ 290.086410] usb 1-5.4: new high speed USB device using ehci_hcd and address 6 Jun 15 17:53:32 paragon kernel: [ 290.180250] usb 1-5.4: New USB device found, idVendor=05ac, idProduct=1500 Jun 15 17:53:32 paragon kernel: [ 290.180255] usb 1-5.4: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Jun 15 17:53:32 paragon kernel: [ 290.180259] usb 1-5.4: Product: MacBook Air SuperDrive Jun 15 17:53:32 paragon kernel: [ 290.180262] usb 1-5.4: Manufacturer: Apple Inc. Jun 15 17:53:32 paragon kernel: [ 290.180264] usb 1-5.4: SerialNumber: KZ1A9SL0257 Jun 15 17:53:32 paragon kernel: [ 290.188000] scsi9 : usb-storage 1-5.4:1.0 Jun 15 17:53:32 paragon mtp-probe: checking bus 1, device 6: "/sys/devices/pci0000:00/0000:00:1a.7/usb1/1-5/1-5.4" Jun 15 17:53:32 paragon mtp-probe: bus: 1, device: 6 was not an MTP device Jun 15 17:53:33 paragon kernel: [ 291.197731] scsi 9:0:0:0: CD-ROM Apple SuperDrive 2.00 PQ: 0 ANSI: 0 Jun 15 17:53:33 paragon kernel: [ 291.232074] sr1: scsi3-mmc drive: 24x/24x writer cd/rw xa/form2 cdda tray Jun 15 17:53:33 paragon kernel: [ 291.233450] sr 9:0:0:0: Attached scsi generic sg4 type 5 Jun 15 17:56:17 paragon kernel: [ 455.529073] usb 1-5.4: USB disconnect, address 6 Jun 15 17:56:17 paragon kernel: [ 455.552671] ------------[ cut here ]------------ Jun 15 17:56:17 paragon kernel: [ 455.552680] WARNING: at lib/list_debug.c:26 __list_add+0x3d/0x7f() Jun 15 17:56:17 paragon kernel: [ 455.552683] Hardware name: System Product Name Jun 15 17:56:17 paragon kernel: [ 455.552687] list_add corruption. next->prev should be prev (ffff88018c5206d0), but was ffff88018c520000. (next=ffff88018c520000). Jun 15 17:56:17 paragon kernel: [ 455.552690] Modules linked in: tcp_lp nls_utf8 usb_storage uas fuse ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat xt_CHECKSUM iptable_mangle bridge stp llc sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables nvidia(P) snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_event snd_seq_midi_emul snd_emu10k1 snd_rawmidi snd_ac97_codec ac97_bus snd_seq snd_pcm snd_seq_device snd_timer microcode snd_page_alloc snd_util_mem snd_hwdep snd serio_raw soundcore emu10k1_gp iTCO_wdt gameport i2c_i801 iTCO_vendor_support i7core_edac asus_atk0110 sky2 wmi edac_core i2c_core virtio_net kvm_intel kvm ipv6 firewire_ohci pata_acpi ata_generic firewire_core crc_itu_t pata_marvell [last unloaded: scsi_wait_scan] Jun 15 17:56:17 paragon kernel: [ 455.552751] Pid: 2230, comm: umount Tainted: P 2.6.38.7-30.fc15.x86_64 #1 Jun 15 17:56:17 paragon kernel: [ 455.552754] Call Trace: Jun 15 17:56:17 paragon kernel: [ 455.552761] [<ffffffff8105511a>] warn_slowpath_common+0x83/0x9b Jun 15 17:56:17 paragon kernel: [ 455.552765] [<ffffffff810551d5>] warn_slowpath_fmt+0x46/0x48 Jun 15 17:56:17 paragon kernel: [ 455.552770] [<ffffffff81237882>] __list_add+0x3d/0x7f Jun 15 17:56:17 paragon kernel: [ 455.552776] [<ffffffff81211346>] elv_insert+0x90/0x17b Jun 15 17:56:17 paragon kernel: [ 455.552780] [<ffffffff812114a2>] __elv_add_request+0x71/0x78 Jun 15 17:56:17 paragon kernel: [ 455.552787] [<ffffffff814757cb>] ? _raw_spin_lock_irq+0x1c/0x1e Jun 15 17:56:17 paragon kernel: [ 455.552792] [<ffffffff812198aa>] blk_execute_rq_nowait+0x6d/0x9c Jun 15 17:56:17 paragon kernel: [ 455.552796] [<ffffffff81219972>] blk_execute_rq+0x99/0xcf Jun 15 17:56:17 paragon kernel: [ 455.552801] [<ffffffff8147577e>] ? _raw_spin_lock+0xe/0x10 Jun 15 17:56:17 paragon kernel: [ 455.552806] [<ffffffff81216a4e>] ? blk_get_request+0x3f/0x6e Jun 15 17:56:17 paragon kernel: [ 455.552812] [<ffffffff812fca34>] scsi_execute+0xf4/0x146 Jun 15 17:56:17 paragon kernel: [ 455.552816] [<ffffffff812fcb22>] scsi_execute_req+0x9c/0xce Jun 15 17:56:17 paragon kernel: [ 455.552821] [<ffffffff812f8bbc>] ioctl_internal_command.constprop.1+0x6b/0x163 Jun 15 17:56:17 paragon kernel: [ 455.552827] [<ffffffff8115044c>] ? inotify_remove_from_idr+0x1ee/0x1f0 Jun 15 17:56:17 paragon kernel: [ 455.552831] [<ffffffff812f8d0d>] scsi_set_medium_removal+0x59/0x94 Jun 15 17:56:17 paragon kernel: [ 455.552836] [<ffffffff8130b329>] sr_lock_door+0x20/0x22 Jun 15 17:56:17 paragon kernel: [ 455.552841] [<ffffffff8132c579>] cdrom_release+0x195/0x205 Jun 15 17:56:17 paragon kernel: [ 455.552847] [<ffffffff8104127e>] ? should_resched+0xe/0x2d Jun 15 17:56:17 paragon kernel: [ 455.552851] [<ffffffff81474228>] ? _cond_resched+0xe/0x22 Jun 15 17:56:17 paragon kernel: [ 455.552856] [<ffffffff8130a2bd>] sr_block_release+0x30/0x4d Jun 15 17:56:17 paragon kernel: [ 455.552860] [<ffffffff81149c22>] __blkdev_put+0xc6/0x179 Jun 15 17:56:17 paragon kernel: [ 455.552864] [<ffffffff81149dd9>] blkdev_put+0x104/0x10c Jun 15 17:56:17 paragon kernel: [ 455.552870] [<ffffffff811230e5>] kill_block_super+0x65/0x6a Jun 15 17:56:17 paragon kernel: [ 455.552874] [<ffffffff81123321>] deactivate_locked_super+0x26/0x4b Jun 15 17:56:17 paragon kernel: [ 455.552879] [<ffffffff81123e8a>] deactivate_super+0x37/0x3b Jun 15 17:56:17 paragon kernel: [ 455.552884] [<ffffffff811387bc>] mntput_no_expire+0xcc/0xd1 Jun 15 17:56:17 paragon kernel: [ 455.552888] [<ffffffff811391f3>] sys_umount+0x2ac/0x2da Jun 15 17:56:17 paragon kernel: [ 455.552893] [<ffffffff81009bc2>] system_call_fastpath+0x16/0x1b Jun 15 17:56:17 paragon kernel: [ 455.552896] ---[ end trace c9cbf46c98b4de76 ]--- Jun 15 17:56:17 paragon kernel: [ 455.552899] scsi: killing requests for dead queue Jun 15 17:56:17 paragon kernel: [ 455.552903] BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1087 Jun 15 17:56:17 paragon kernel: [ 455.552908] in_atomic(): 0, irqs_disabled(): 1, pid: 2230, name: umount Jun 15 17:56:17 paragon kernel: [ 455.552911] Pid: 2230, comm: umount Tainted: P W 2.6.38.7-30.fc15.x86_64 #1 Jun 15 17:56:17 paragon kernel: [ 455.552914] Call Trace: Jun 15 17:56:17 paragon kernel: [ 455.552918] [<ffffffff81047d33>] __might_sleep+0xeb/0xf0 Jun 15 17:56:17 paragon kernel: [ 455.552923] [<ffffffff81478bc3>] do_page_fault+0x1eb/0x37a Jun 15 17:56:17 paragon kernel: [ 455.552928] [<ffffffff814757e4>] ? _raw_spin_unlock_irqrestore+0x17/0x19 Jun 15 17:56:17 paragon kernel: [ 455.552934] [<ffffffff8123062e>] ? vsnprintf+0x83/0x401 Jun 15 17:56:17 paragon kernel: [ 455.552940] [<ffffffff81080b9f>] ? arch_local_irq_save+0x15/0x1b Jun 15 17:56:17 paragon kernel: [ 455.552945] [<ffffffff81475fd5>] page_fault+0x25/0x30 Jun 15 17:56:17 paragon kernel: [ 455.552949] [<ffffffff812fd72d>] ? scsi_prep_state_check+0x9/0x75 Jun 15 17:56:17 paragon kernel: [ 455.552954] [<ffffffff812fe135>] scsi_setup_blk_pc_cmnd+0x1b/0x10c Jun 15 17:56:17 paragon kernel: [ 455.552959] [<ffffffff812fe24f>] scsi_prep_fn+0x29/0x3b Jun 15 17:56:17 paragon kernel: [ 455.552962] [<ffffffff81216d51>] blk_peek_request+0xe1/0x1b6 Jun 15 17:56:17 paragon kernel: [ 455.552967] [<ffffffff812fd98a>] scsi_request_fn+0x48/0x421 Jun 15 17:56:17 paragon kernel: [ 455.552971] [<ffffffff81216878>] __generic_unplug_device+0x34/0x38 Jun 15 17:56:17 paragon kernel: [ 455.552976] [<ffffffff812198b2>] blk_execute_rq_nowait+0x75/0x9c Jun 15 17:56:17 paragon kernel: [ 455.552980] [<ffffffff81219972>] blk_execute_rq+0x99/0xcf Jun 15 17:56:17 paragon kernel: [ 455.552984] [<ffffffff8147577e>] ? _raw_spin_lock+0xe/0x10 Jun 15 17:56:17 paragon kernel: [ 455.552989] [<ffffffff81216a4e>] ? blk_get_request+0x3f/0x6e Jun 15 17:56:17 paragon kernel: [ 455.552993] [<ffffffff812fca34>] scsi_execute+0xf4/0x146 Jun 15 17:56:17 paragon kernel: [ 455.552997] [<ffffffff812fcb22>] scsi_execute_req+0x9c/0xce Jun 15 17:56:17 paragon kernel: [ 455.553002] [<ffffffff812f8bbc>] ioctl_internal_command.constprop.1+0x6b/0x163 Jun 15 17:56:17 paragon kernel: [ 455.553007] [<ffffffff8115044c>] ? inotify_remove_from_idr+0x1ee/0x1f0 Jun 15 17:56:17 paragon kernel: [ 455.553011] [<ffffffff812f8d0d>] scsi_set_medium_removal+0x59/0x94 Jun 15 17:56:17 paragon kernel: [ 455.553015] [<ffffffff8130b329>] sr_lock_door+0x20/0x22 Jun 15 17:56:17 paragon kernel: [ 455.553019] [<ffffffff8132c579>] cdrom_release+0x195/0x205 Jun 15 17:56:17 paragon kernel: [ 455.553024] [<ffffffff8104127e>] ? should_resched+0xe/0x2d Jun 15 17:56:17 paragon kernel: [ 455.553028] [<ffffffff81474228>] ? _cond_resched+0xe/0x22 Jun 15 17:56:17 paragon kernel: [ 455.553032] [<ffffffff8130a2bd>] sr_block_release+0x30/0x4d Jun 15 17:56:17 paragon kernel: [ 455.553036] [<ffffffff81149c22>] __blkdev_put+0xc6/0x179 Jun 15 17:56:17 paragon kernel: [ 455.553040] [<ffffffff81149dd9>] blkdev_put+0x104/0x10c Jun 15 17:56:17 paragon kernel: [ 455.553044] [<ffffffff811230e5>] kill_block_super+0x65/0x6a Jun 15 17:56:17 paragon kernel: [ 455.553049] [<ffffffff81123321>] deactivate_locked_super+0x26/0x4b Jun 15 17:56:17 paragon kernel: [ 455.553054] [<ffffffff81123e8a>] deactivate_super+0x37/0x3b Jun 15 17:56:17 paragon kernel: [ 455.553058] [<ffffffff811387bc>] mntput_no_expire+0xcc/0xd1 Jun 15 17:56:17 paragon kernel: [ 455.553062] [<ffffffff811391f3>] sys_umount+0x2ac/0x2da Jun 15 17:56:17 paragon kernel: [ 455.553066] [<ffffffff81009bc2>] system_call_fastpath+0x16/0x1b Jun 15 17:56:17 paragon kernel: [ 455.553073] BUG: unable to handle kernel NULL pointer dereference at 0000000000000600 Jun 15 17:56:17 paragon kernel: [ 455.553077] IP: [<ffffffff812fd72d>] scsi_prep_state_check+0x9/0x75 Jun 15 17:56:17 paragon kernel: [ 455.553082] PGD 0 Jun 15 17:56:17 paragon kernel: [ 455.553085] Oops: 0000 [#1] SMP Jun 15 17:56:17 paragon kernel: [ 455.553088] last sysfs file: /sys/devices/pci0000:00/0000:00:1d.7/usb2/idProduct Jun 15 17:56:17 paragon kernel: [ 455.553092] CPU 0 Jun 15 17:56:17 paragon kernel: [ 455.553094] Modules linked in: tcp_lp nls_utf8 usb_storage uas fuse ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat xt_CHECKSUM iptable_mangle bridge stp llc sunrpc cpufreq_ondemand acpi_cpufreq freq_table mperf ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables nvidia(P) snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_event snd_seq_midi_emul snd_emu10k1 snd_rawmidi snd_ac97_codec ac97_bus snd_seq snd_pcm snd_seq_device snd_timer microcode snd_page_alloc snd_util_mem snd_hwdep snd serio_raw soundcore emu10k1_gp iTCO_wdt gameport i2c_i801 iTCO_vendor_support i7core_edac asus_atk0110 sky2 wmi edac_core i2c_core virtio_net kvm_intel kvm ipv6 firewire_ohci pata_acpi ata_generic firewire_core crc_itu_t pata_marvell [last unloaded: scsi_wait_scan] Jun 15 17:56:17 paragon kernel: [ 455.553149] Jun 15 17:56:17 paragon kernel: [ 455.553152] Pid: 2230, comm: umount Tainted: P W 2.6.38.7-30.fc15.x86_64 #1 System manufacturer System Product Name/P6T DELUXE Jun 15 17:56:17 paragon kernel: [ 455.553159] RIP: 0010:[<ffffffff812fd72d>] [<ffffffff812fd72d>] scsi_prep_state_check+0x9/0x75 Jun 15 17:56:17 paragon kernel: [ 455.553165] RSP: 0018:ffff88018c79f9e8 EFLAGS: 00010046 Jun 15 17:56:17 paragon kernel: [ 455.553168] RAX: 0000000000000001 RBX: ffff8801aec28870 RCX: 000000000000cafa Jun 15 17:56:17 paragon kernel: [ 455.553172] RDX: 0000000000000000 RSI: ffff8801aec28870 RDI: 0000000000000000 Jun 15 17:56:17 paragon kernel: [ 455.553175] RBP: ffff88018c79f9e8 R08: 0000000000000002 R09: 0000ffff00066c0a Jun 15 17:56:17 paragon kernel: [ 455.553178] R10: 0000ffff00066c0a R11: 0000000000000000 R12: ffff88018c5206d0 Jun 15 17:56:17 paragon kernel: [ 455.553181] R13: 0000000000000000 R14: ffff880197a95a20 R15: 0000000000000000 Jun 15 17:56:17 paragon kernel: [ 455.553185] FS: 00007fbc49e2a820(0000) GS:ffff8800bf400000(0000) knlGS:0000000000000000 Jun 15 17:56:17 paragon kernel: [ 455.553188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Jun 15 17:56:17 paragon kernel: [ 455.553191] CR2: 0000000000000600 CR3: 00000001afe42000 CR4: 00000000000006f0 Jun 15 17:56:17 paragon kernel: [ 455.553194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Jun 15 17:56:17 paragon kernel: [ 455.553197] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Jun 15 17:56:17 paragon kernel: [ 455.553201] Process umount (pid: 2230, threadinfo ffff88018c79e000, task ffff880197d79730) Jun 15 17:56:17 paragon kernel: [ 455.553203] Stack: Jun 15 17:56:17 paragon kernel: [ 455.553205] ffff88018c79fa18 ffffffff812fe135 0000000000000002 ffff8801aec28870 Jun 15 17:56:17 paragon kernel: [ 455.553211] ffff88018c5206d0 ffff88018c520bc8 ffff88018c79fa38 ffffffff812fe24f Jun 15 17:56:17 paragon kernel: [ 455.553217] ffff8801aec28870 ffff88018c5206d0 ffff88018c79fa68 ffffffff81216d51 Jun 15 17:56:17 paragon kernel: [ 455.553222] Call Trace: Jun 15 17:56:17 paragon kernel: [ 455.553226] [<ffffffff812fe135>] scsi_setup_blk_pc_cmnd+0x1b/0x10c Jun 15 17:56:17 paragon kernel: [ 455.553231] [<ffffffff812fe24f>] scsi_prep_fn+0x29/0x3b Jun 15 17:56:17 paragon kernel: [ 455.553235] [<ffffffff81216d51>] blk_peek_request+0xe1/0x1b6 Jun 15 17:56:17 paragon kernel: [ 455.553239] [<ffffffff812fd98a>] scsi_request_fn+0x48/0x421 Jun 15 17:56:17 paragon kernel: [ 455.553244] [<ffffffff81216878>] __generic_unplug_device+0x34/0x38 Jun 15 17:56:17 paragon kernel: [ 455.553249] [<ffffffff812198b2>] blk_execute_rq_nowait+0x75/0x9c Jun 15 17:56:17 paragon kernel: [ 455.553253] [<ffffffff81219972>] blk_execute_rq+0x99/0xcf Jun 15 17:56:17 paragon kernel: [ 455.553258] [<ffffffff8147577e>] ? _raw_spin_lock+0xe/0x10 Jun 15 17:56:17 paragon kernel: [ 455.553263] [<ffffffff81216a4e>] ? blk_get_request+0x3f/0x6e Jun 15 17:56:17 paragon kernel: [ 455.553267] [<ffffffff812fca34>] scsi_execute+0xf4/0x146 Jun 15 17:56:17 paragon kernel: [ 455.553271] [<ffffffff812fcb22>] scsi_execute_req+0x9c/0xce Jun 15 17:56:17 paragon kernel: [ 455.553276] [<ffffffff812f8bbc>] ioctl_internal_command.constprop.1+0x6b/0x163 Jun 15 17:56:17 paragon kernel: [ 455.553281] [<ffffffff8115044c>] ? inotify_remove_from_idr+0x1ee/0x1f0 Jun 15 17:56:17 paragon kernel: [ 455.553285] [<ffffffff812f8d0d>] scsi_set_medium_removal+0x59/0x94 Jun 15 17:56:17 paragon kernel: [ 455.553290] [<ffffffff8130b329>] sr_lock_door+0x20/0x22 Jun 15 17:56:17 paragon kernel: [ 455.553293] [<ffffffff8132c579>] cdrom_release+0x195/0x205 Jun 15 17:56:17 paragon kernel: [ 455.553298] [<ffffffff8104127e>] ? should_resched+0xe/0x2d Jun 15 17:56:17 paragon kernel: [ 455.553302] [<ffffffff81474228>] ? _cond_resched+0xe/0x22 Jun 15 17:56:17 paragon kernel: [ 455.553307] [<ffffffff8130a2bd>] sr_block_release+0x30/0x4d Jun 15 17:56:17 paragon kernel: [ 455.553311] [<ffffffff81149c22>] __blkdev_put+0xc6/0x179 Jun 15 17:56:17 paragon kernel: [ 455.553315] [<ffffffff81149dd9>] blkdev_put+0x104/0x10c Jun 15 17:56:17 paragon kernel: [ 455.553319] [<ffffffff811230e5>] kill_block_super+0x65/0x6a Jun 15 17:56:17 paragon kernel: [ 455.553324] [<ffffffff81123321>] deactivate_locked_super+0x26/0x4b Jun 15 17:56:17 paragon kernel: [ 455.553329] [<ffffffff81123e8a>] deactivate_super+0x37/0x3b Jun 15 17:56:17 paragon kernel: [ 455.553333] [<ffffffff811387bc>] mntput_no_expire+0xcc/0xd1 Jun 15 17:56:17 paragon kernel: [ 455.553337] [<ffffffff811391f3>] sys_umount+0x2ac/0x2da Jun 15 17:56:17 paragon kernel: [ 455.553342] [<ffffffff81009bc2>] system_call_fastpath+0x16/0x1b Jun 15 17:56:17 paragon kernel: [ 455.553344] Code: c8 2f 81 31 f6 e8 b8 94 ff ff eb 11 48 c7 c2 71 d6 2f 81 31 f6 48 89 df e8 ae 59 fe ff 41 5b 5b 5d c3 55 48 89 e5 0f 1f 44 00 00 <8b> 97 00 06 00 00 31 c0 83 fa 02 74 5d 8d 42 fc 83 f8 04 77 4c Jun 15 17:56:17 paragon kernel: [ 455.553382] RIP [<ffffffff812fd72d>] scsi_prep_state_check+0x9/0x75 Jun 15 17:56:17 paragon kernel: [ 455.553386] RSP <ffff88018c79f9e8> Jun 15 17:56:17 paragon kernel: [ 455.553389] CR2: 0000000000000600 Jun 15 17:56:17 paragon kernel: [ 455.553392] ---[ end trace c9cbf46c98b4de77 ]---
Please test this build. http://koji.fedoraproject.org/koji/buildinfo?buildID=251810
I can confirm that the issue is fixed with kernel 2.6.38.8-35.fc15.x86_64. Unplugging the mounted CD-ROM drive now results in: Jul 13 10:57:07 paragon kernel: [ 469.116311] scsi 8:0:0:0: rejecting I/O to dead device