Bug 790982 - Kernel crash when unplugging a USB key
Summary: Kernel crash when unplugging a USB key
Keywords:
Status: CLOSED DUPLICATE of bug 754518
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: 15
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Kernel Maintainer List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-15 21:13 UTC by Arnaud Lacombe
Modified: 2012-02-15 23:40 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2012-02-15 23:40:37 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Arnaud Lacombe 2012-02-15 21:13:48 UTC 
Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:
unknown

Steps to Reproduce:
1. unplug a USB key
2.
3.
  
Actual results:
kernel BUG() triggered

Expected results:
no kernel BUG() triggered.

Additional info:
relevant part of /var/log/messages:

Feb 15 15:55:02 alia kernel: [2943272.829812] usb 1-1.6: new high speed USB device number 115 using ehci_hcd
Feb 15 15:55:02 alia kernel: [2943272.922096] usb 1-1.6: New USB device found, idVendor=090c, idProduct=1000
Feb 15 15:55:02 alia kernel: [2943272.922102] usb 1-1.6: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Feb 15 15:55:02 alia kernel: [2943272.922107] usb 1-1.6: Product: DISK 2.0
Feb 15 15:55:02 alia kernel: [2943272.922111] usb 1-1.6: Manufacturer: USB
Feb 15 15:55:02 alia kernel: [2943272.922115] usb 1-1.6: SerialNumber: PPGGS1FVW38P9K5M
Feb 15 15:55:02 alia kernel: [2943272.930194] scsi32 : usb-storage 1-1.6:1.0
Feb 15 15:55:03 alia kernel: [2943273.931131] scsi 32:0:0:0: Direct-Access     USB      DISK 2.0         1219 PQ: 0 ANSI: 0 CCS
Feb 15 15:55:03 alia kernel: [2943273.931273] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.931435] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.931598] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.931840] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.931981] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.932099] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.932216] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.932335] scsi: killing requests for dead queue
Feb 15 15:55:03 alia kernel: [2943273.933239] sd 32:0:0:0: Attached scsi generic sg2 type 0
Feb 15 15:55:03 alia kernel: [2943273.934658] sd 32:0:0:0: [sdb] 15663104 512-byte logical blocks: (8.01 GB/7.46 GiB)
Feb 15 15:55:03 alia kernel: [2943273.935525] sd 32:0:0:0: [sdb] Write Protect is off
Feb 15 15:55:03 alia kernel: [2943273.936396] sd 32:0:0:0: [sdb] No Caching mode page present
Feb 15 15:55:03 alia kernel: [2943273.936402] sd 32:0:0:0: [sdb] Assuming drive cache: write through
Feb 15 15:55:03 alia kernel: [2943273.944913] sd 32:0:0:0: [sdb] No Caching mode page present
Feb 15 15:55:03 alia kernel: [2943273.944920] sd 32:0:0:0: [sdb] Assuming drive cache: write through
Feb 15 15:55:03 alia kernel: [2943274.006580]  sdb: sdb1
Feb 15 15:55:03 alia kernel: [2943274.006582]  sdb1: <bsd: >
Feb 15 15:55:03 alia kernel: [2943274.009869] sd 32:0:0:0: [sdb] No Caching mode page present
Feb 15 15:55:03 alia kernel: [2943274.009876] sd 32:0:0:0: [sdb] Assuming drive cache: write through
Feb 15 15:55:03 alia kernel: [2943274.009882] sd 32:0:0:0: [sdb] Attached SCSI removable disk
Feb 15 15:56:35 alia dbus: [system] Activating service name='net.reactivated.Fprint' (using servicehelper)
Feb 15 15:56:35 alia dbus: [system] Successfully activated service 'net.reactivated.Fprint'
Feb 15 16:00:24 alia kernel: [2943594.384380] EXT4-fs (sdb1): mounted filesystem with ordered data mode. Opts: (null)
Feb 15 16:03:24 alia kernel: [2943774.296588] usb 1-1.6: USB disconnect, device number 115
Feb 15 16:03:24 alia kernel: [2943774.300398] scsi: killing requests for dead queue
Feb 15 16:03:24 alia kernel: [2943774.301748] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008
Feb 15 16:03:24 alia kernel: [2943774.301880] IP: [<ffffffff813229fa>] sd_revalidate_disk+0x36/0x16c7
Feb 15 16:03:24 alia kernel: [2943774.301993] PGD 21b7d0067 PUD 20659f067 PMD 0 
Feb 15 16:03:24 alia kernel: [2943774.302087] Oops: 0000 [#1] SMP 
Feb 15 16:03:24 alia kernel: [2943774.302158] CPU 2 
Feb 15 16:03:24 alia kernel: [2943774.302201] Modules linked in: nls_utf8 tun usb_storage uas ppdev parport_pc lp parport sunrpc 8021q garp stp llc cpufreq_ondemand acpi_cpufreq mperf ip6t_REJECT nf_conntrack_ipv6 bnep nf_defrag_ipv6 ip6table_filter bluetooth ip6_tables nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack snd_hda_codec_hdmi snd_hda_codec_si3054 snd_hda_codec_realtek arc4 snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device iwlagn snd_pcm uvcvideo videodev media v4l2_compat_ioctl32 mac80211 snd_timer asus_laptop cfg80211 snd pl2303 soundcore sparse_keymap rfkill intel_ips iTCO_wdt iTCO_vendor_support e1000e i2c_i801 tpm_infineon snd_page_alloc serio_raw microcode joydev ipv6 i915 radeon ttm drm_kms_helper drm video i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan]
Feb 15 16:03:24 alia kernel: [2943774.303996] 
Feb 15 16:03:24 alia kernel: [2943774.304039] Pid: 1737, comm: udisks-daemon Not tainted 2.6.41.4-1.fc15.x86_64 #1 ASUSTeK Computer Inc.          B43J/B43J
Feb 15 16:03:24 alia kernel: [2943774.304301] RIP: 0010:[<ffffffff813229fa>]  [<ffffffff813229fa>] sd_revalidate_disk+0x36/0x16c7
Feb 15 16:03:24 alia kernel: [2943774.304510] RSP: 0018:ffff88021a717a48  EFLAGS: 00010246
Feb 15 16:03:24 alia kernel: [2943774.304629] RAX: 0000000000000000 RBX: ffff880218404780 RCX: 0000000000000002
Feb 15 16:03:24 alia kernel: [2943774.304788] RDX: 0000000000000002 RSI: ffff88021a717a94 RDI: ffff880004345800
Feb 15 16:03:24 alia kernel: [2943774.304956] RBP: ffff88021a717b08 R08: 00000008ffffffff R09: 0000000000000005
Feb 15 16:03:24 alia kernel: [2943774.305128] R10: 0080001081234fcc R11: ffff880004345848 R12: 0000000000000000
Feb 15 16:03:24 alia kernel: [2943774.305303] R13: ffff880004345800 R14: 000000000000001d R15: 0000000000000000
Feb 15 16:03:24 alia kernel: [2943774.305480] FS:  00007f2c337b47c0(0000) GS:ffff88022bc80000(0000) knlGS:0000000000000000
Feb 15 16:03:24 alia kernel: [2943774.305651] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Feb 15 16:03:24 alia kernel: [2943774.305784] CR2: 0000000000000008 CR3: 0000000209362000 CR4: 00000000000006e0
Feb 15 16:03:24 alia kernel: [2943774.305947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Feb 15 16:03:24 alia kernel: [2943774.306110] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Feb 15 16:03:24 alia kernel: [2943774.306277] Process udisks-daemon (pid: 1737, threadinfo ffff88021a716000, task ffff88020914c590)
Feb 15 16:03:24 alia kernel: [2943774.306477] Stack:
Feb 15 16:03:24 alia kernel: [2943774.306527]  ffffea0007abdd40 ffff880004345848 ffff880004345878 ffff880004345800
Feb 15 16:03:24 alia kernel: [2943774.306702]  ffff88021a717a78 ffffffff8149ca36 ffff880004345800 ffffffff8112b528
Feb 15 16:03:24 alia kernel: [2943774.306891]  ffff880218404858 ffff880004345800 ffff88021a717ac8 ffffffff8113d4eb
Feb 15 16:03:24 alia kernel: [2943774.307087] Call Trace:
Feb 15 16:03:24 alia kernel: [2943774.307164]  [<ffffffff8149ca36>] ? _raw_spin_lock+0xe/0x10
Feb 15 16:03:24 alia kernel: [2943774.307302]  [<ffffffff8112b528>] ? get_super+0x29/0xa9
Feb 15 16:03:24 alia kernel: [2943774.307376]  [<ffffffff8113d4eb>] ? iput+0x39/0x182
Feb 15 16:03:24 alia kernel: [2943774.307422]  [<ffffffff8117fee5>] rescan_partitions+0xb4/0x43f
Feb 15 16:03:24 alia kernel: [2943774.307468]  [<ffffffff811535ef>] __blkdev_get+0x1b4/0x397
Feb 15 16:03:24 alia kernel: [2943774.307509]  [<ffffffff81153a92>] ? blkdev_get+0x2c0/0x2c0
Feb 15 16:03:24 alia kernel: [2943774.307553]  [<ffffffff811539a3>] blkdev_get+0x1d1/0x2c0
Feb 15 16:03:24 alia kernel: [2943774.307594]  [<ffffffff81153a92>] ? blkdev_get+0x2c0/0x2c0
Feb 15 16:03:24 alia kernel: [2943774.307635]  [<ffffffff81153af9>] blkdev_open+0x67/0x6b
Feb 15 16:03:24 alia kernel: [2943774.307674]  [<ffffffff81128082>] __dentry_open+0x17a/0x2b8
Feb 15 16:03:24 alia kernel: [2943774.307715]  [<ffffffff8149ca36>] ? _raw_spin_lock+0xe/0x10
Feb 15 16:03:24 alia kernel: [2943774.307755]  [<ffffffff81128fab>] nameidata_to_filp+0x60/0x67
Feb 15 16:03:24 alia kernel: [2943774.307798]  [<ffffffff8113563c>] do_last+0x461/0x5ad
Feb 15 16:03:24 alia kernel: [2943774.307835]  [<ffffffff8113588a>] path_openat+0xcf/0x310
Feb 15 16:03:24 alia kernel: [2943774.307878]  [<ffffffff812fd61c>] ? put_device+0x17/0x19
Feb 15 16:03:24 alia kernel: [2943774.307919]  [<ffffffff81135bc8>] do_filp_open+0x38/0x86
Feb 15 16:03:24 alia kernel: [2943774.307959]  [<ffffffff8113f180>] ? alloc_fd+0x72/0x11d
Feb 15 16:03:24 alia kernel: [2943774.307997]  [<ffffffff81129020>] do_sys_open+0x6e/0x100
Feb 15 16:03:24 alia kernel: [2943774.309972]  [<ffffffff810a37c8>] ? audit_syscall_entry+0x145/0x171
Feb 15 16:03:24 alia kernel: [2943774.311902]  [<ffffffff811290d2>] sys_open+0x20/0x22
Feb 15 16:03:24 alia kernel: [2943774.315690]  [<ffffffff814a31c2>] system_call_fastpath+0x16/0x1b
Feb 15 16:03:24 alia kernel: [2943774.319451] Code: 54 53 48 81 ec 98 00 00 00 66 66 66 66 90 4c 8b a7 28 03 00 00 65 48 8b 04 25 28 00 00 00 48 89 45 c8 31 c0 48 89 bd 70 ff ff ff 
Feb 15 16:03:24 alia kernel: [2943774.326279] RIP  [<ffffffff813229fa>] sd_revalidate_disk+0x36/0x16c7
Feb 15 16:03:24 alia kernel: [2943774.328989]  RSP <ffff88021a717a48>
Feb 15 16:03:24 alia kernel: [2943774.331545] CR2: 0000000000000008
Feb 15 16:03:24 alia kernel: [2943774.452943] ---[ end trace 7f560520eaa20b27 ]---

Kernel is:
% uname -a
Linux alia 2.6.41.4-1.fc15.x86_64 #1 SMP Tue Nov 29 11:53:48 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
Comment 1 Arnaud Lacombe 2012-02-15 21:15:08 UTC 
btw, sorry for the badly formatted report. I should have added the trace as a attachment.
Comment 2 Josh Boyer 2012-02-15 23:40:37 UTC 

*** This bug has been marked as a duplicate of bug 754518 ***
Note You need to log in before you can comment on or make changes to this bug.