Bug#311187: kernel-image-2.6.8-3-686: kernel panic with Memorex traveldrive 1GB U3 smart usb 2.0
Package: kernel-image-2.6.8-3-686
Version: 2.6.8-16sarge5
Followup-For: Bug #311187
Two servers running debian stable crashed with kernel panic today in my
organization. The kernel pannic ocurred after the pendrive "Memorex travel
drive" (1GB) be removed. It was not necessary mount the device. Only the
connect and disconnect were enough to crash the servers.
The syslog messages since the connection until the crash in server A were:
#######################################################################
kernel: usb 3-1: new high speed USB device using address 3
kernel: scsi2 : SCSI emulation for USB Mass Storage devices
kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17
kernel: Type: Direct-Access ANSI SCSI revision: 02
kernel: Attached scsi removable disk sdb at scsi2, channel 0, id 0, lun 0
kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17
kernel: Type: CD-ROM ANSI SCSI revision: 02
kernel: sr0: scsi3-mmc drive: 8x/40x writer xa/form2 cdda tray
kernel: Uniform CD-ROM driver Revision: 3.20
kernel: Attached scsi CD-ROM sr0 at scsi2, channel 0, id 0, lun 1
udev[3268]: configured rule in '/etc/udev/rules.d/z_hal-plugdev.rules[2]' applied, 'sdb' becomes '%k'
kernel: USB Mass Storage device found at 3
udev[3268]: creating device node '/dev/sdb'
scsi.agent[3306]: sd_mod: loaded sucessfully (for disk)
udev[3282]: configured rule in '/etc/udev/rules.d/cd-aliases.rules[8]' applied, added symlink '%c{1} %c{2} %c{3} %c{4} %c{5} %c{6}'
udev[3282]: configured rule in '/etc/udev/rules.d/udev.rules[20]' applied, added symlink 'sr%n'
udev[3282]: configured rule in '/etc/udev/rules.d/udev.rules[20]' applied, 'sr0' becomes 'scd%n'
udev[3282]: creating device node '/dev/scd0'
scsi.agent[3373]: sr_mod: loaded sucessfully (for cdrom)
scsi.agent[3373]: sg: loaded sucessfully (for cdrom)
usb.agent[3358]: usb-storage: already loaded
kernel: Attached scsi generic sg0 at scsi0, channel 0, id 0, lun 0, type 0
kernel: Attached scsi generic sg1 at scsi2, channel 0, id 0, lun 0, type 0
kernel: Attached scsi generic sg2 at scsi2, channel 0, id 0, lun 1, type 5
udev[3420]: creating device node '/dev/sg0'
udev[3424]: creating device node '/dev/sg1'
udev[3428]: creating device node '/dev/sg2'
kernel: SCSI device sdb: 1994751 512-byte hdwr sectors (1021 MB)
kernel: sdb: assuming Write Enabled
kernel: sdb: assuming drive cache: write through
kernel: SCSI device sdb: 1994751 512-byte hdwr sectors (1021 MB)
kernel: sdb: assuming Write Enabled
kernel: sdb: assuming drive cache: write through
kernel: /dev/scsi/host2/bus0/target0/lun0: p1
udev[3466]: configured rule in '/etc/udev/rules.d/z_hal-plugdev.rules[2]' applied, 'sdb1' becomes '%k'
udev[3466]: creating device node '/dev/sdb1'
kernel: usb 3-1: USB disconnect, address 3
udev[3484]: removing device node '/dev/sg1'
udev[3498]: removing device node '/dev/sdb1'
udev[3553]: symlink '/dev/' points to a different device, skip removal
udev[3553]: removing device node '/dev/scd0'
udev[3523]: removing device node '/dev/sg2'
udev[3562]: removing device node '/dev/sdb'
kernel: scsi: Device offlined - not ready after error recovery: host 2 channel 0 id 0 lun 1
kernel: sr 2:0:0:1: Illegal state transition cancel->offline
kernel: Badness in scsi_device_set_state at drivers/scsi/scsi_lib.c:1643
kernel: [__crc_sk_stream_mem_schedule+313066/1457199] scsi_device_set_state+0xc9/0x120 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+303103/1457199] scsi_eh_offline_sdevs+0x6e/0x90 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+304717/1457199] scsi_unjam_host+0xcc/0x210 [scsi_mod]
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [__crc_sk_stream_mem_schedule+305305/1457199] scsi_error_handler+0x108/0x1c0 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+305041/1457199] scsi_error_handler+0x0/0x1c0 [scsi_mod]
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Badness in kobject_get at lib/kobject.c:433
kernel: [kobject_get+79/96] kobject_get+0x4f/0x60
kernel: [get_device+24/32] get_device+0x18/0x20
kernel: [__crc_sk_stream_mem_schedule+310806/1457199] scsi_request_fn+0x25/0x420 [scsi_mod]
kernel: [blk_insert_request+185/224] blk_insert_request+0xb9/0xe0
kernel: [__crc_sk_stream_mem_schedule+306268/1457199] scsi_queue_insert+0x8b/0xe0 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+304371/1457199] scsi_eh_flush_done_q+0x72/0x100 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+304665/1457199] scsi_unjam_host+0x98/0x210 [scsi_mod]
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [__crc_sk_stream_mem_schedule+305305/1457199] scsi_error_handler+0x108/0x1c0 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+305041/1457199] scsi_error_handler+0x0/0x1c0 [scsi_mod]
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Unable to handle kernel paging request at virtual address 00200200
kernel: printing eip:
kernel: e0868c60
kernel: *pde = 1b79f067
kernel: *pte = 00000000
kernel: Oops: 0002 [#1]
kernel: PREEMPT
kernel: Modules linked in: sg nfsd exportfs lockd sunrpc ipv6 e100 e1000 capability commoncap ext3 jbd mbcache pcspkr mii dm_mod parport_pc lp parport rtc usblp hw_random shpchp pciehp pci_hotplug intel_agp intel_mch_agp agpgart tsdev mousedev evdev psmouse ds yenta_socket pcmcia_core sr_mod sd_mod ide_cd cdrom ide_disk ide_generic pdc202xx_new aec62xx alim15x3 amd74xx atiixp cmd64x cs5520 cs5530 cy82c693 generic hpt34x ns87415 opti621 pdc202xx_old rz1000 sc1200 serverworks siimage sis5513 slc90e66 triflex trm290 via82cxxx floppy piix fbcon vga16fb vgastate usbserial usbhid usbkbd ehci_hcd uhci_hcd thermal processor fan usb_storage usbcore ide_core ata_piix libata scsi_mod unix font vesafb cfbcopyarea cfbimgblt cfbfillrect
kernel: CPU: 0
kernel: EIP: 0060:[__crc_sk_stream_mem_schedule+320913/1457199] Not tainted
kernel: EFLAGS: 00010002 (2.6.8-3-686)
kernel: EIP is at scsi_device_dev_release+0x30/0x120 [scsi_mod]
kernel: eax: 00100100 ebx: de34f808 ecx: 00200200 edx: de34f984
kernel: esi: de34f800 edi: 00000282 ebp: df8654b4 esp: d4611ea8
kernel: ds: 007b es: 007b ss: 0068
kernel: Process scsi_eh_2 (pid: 3203, threadinfo=d4610000 task=d4fce030)
kernel: Stack: 00000000 de34f9a8 c02ff3e8 c02ff400 df8654d8 c01f711b de34f984 de34f9a8
kernel: c02ff3e8 c02ff400 c01a5e58 de34f9a8 d4610000 de34f800 d4610000 d4610000
kernel: e0866702 de34f9a8 df8642b0 de34f800 df8642b0 de34f984 df8642b0 de34f800
kernel: Call Trace:
kernel: [device_release+91/96] device_release+0x5b/0x60
kernel: [kobject_cleanup+152/160] kobject_cleanup+0x98/0xa0
kernel: [__crc_sk_stream_mem_schedule+311347/1457199] scsi_request_fn+0x242/0x420 [scsi_mod]
kernel: [blk_insert_request+185/224] blk_insert_request+0xb9/0xe0
kernel: [__crc_sk_stream_mem_schedule+306268/1457199] scsi_queue_insert+0x8b/0xe0 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+304371/1457199] scsi_eh_flush_done_q+0x72/0x100 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+304665/1457199] scsi_unjam_host+0x98/0x210 [scsi_mod]
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [__crc_sk_stream_mem_schedule+305305/1457199] scsi_error_handler+0x108/0x1c0 [scsi_mod]
kernel: [__crc_sk_stream_mem_schedule+305041/1457199] scsi_error_handler+0x0/0x1c0 [scsi_mod]
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Code: 89 01 89 48 04 b8 00 01 10 00 c7 43 04 00 02 20 00 8d 9a 8c
kernel: <6>note: scsi_eh_2[3203] exited with preempt_count 1
kernel: Badness in kobject_get at lib/kobject.c:433
kernel: [kobject_get+79/96] kobject_get+0x4f/0x60
kernel: [get_device+24/32] get_device+0x18/0x20
kernel: [__crc_sk_stream_mem_schedule+310806/1457199] scsi_request_fn+0x25/0x420 [scsi_mod]
kernel: [elv_next_request+22/272] elv_next_request+0x16/0x110
kernel: [__generic_unplug_device+65/80] __generic_unplug_device+0x41/0x50
kernel: [generic_unplug_device+30/64] generic_unplug_device+0x1e/0x40
kernel: [blk_unplug_work+16/32] blk_unplug_work+0x10/0x20
kernel: [worker_thread+473/672] worker_thread+0x1d9/0x2a0
kernel: [blk_unplug_work+0/32] blk_unplug_work+0x0/0x20
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [worker_thread+0/672] worker_thread+0x0/0x2a0
kernel: [kthread+170/176] kthread+0xaa/0xb0
kernel: [kthread+0/176] kthread+0x0/0xb0
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Unable to handle kernel paging request at virtual address 00200200
kernel: printing eip:
kernel: e0868c60
kernel: *pde = 1b79f067
kernel: *pte = 00000000
kernel: Oops: 0002 [#2]
kernel: PREEMPT
kernel: Modules linked in: sg nfsd exportfs lockd sunrpc ipv6 e100 e1000 capability commoncap ext3 jbd mbcache pcspkr mii dm_mod parport_pc lp parport rtc usblp hw_random shpchp pciehp pci_hotplug intel_agp intel_mch_agp agpgart tsdev mousedev evdev psmouse ds yenta_socket pcmcia_core sr_mod sd_mod ide_cd cdrom ide_disk ide_generic pdc202xx_new aec62xx alim15x3 amd74xx atiixp cmd64x cs5520 cs5530 cy82c693 generic hpt34x ns87415 opti621 pdc202xx_old rz1000 sc1200 serverworks siimage sis5513 slc90e66 triflex trm290 via82cxxx floppy piix fbcon vga16fb vgastate usbserial usbhid usbkbd ehci_hcd uhci_hcd thermal processor fan usb_storage usbcore ide_core ata_piix libata scsi_mod unix font vesafb cfbcopyarea cfbimgblt cfbfillrect
kernel: CPU: 0
kernel: EIP: 0060:[__crc_sk_stream_mem_schedule+320913/1457199] Not tainted
kernel: EFLAGS: 00010002 (2.6.8-3-686)
kernel: EIP is at scsi_device_dev_release+0x30/0x120 [scsi_mod]
kernel: eax: 00100100 ebx: de34f808 ecx: 00200200 edx: de34f984
kernel: esi: de34f800 edi: 00000286 ebp: df8654b4 esp: df845ec0
kernel: ds: 007b es: 007b ss: 0068
kernel: Process kblockd/0 (pid: 42, threadinfo=df844000 task=df8436f0)
kernel: Stack: 00000000 de34f9a8 c02ff3e8 c02ff400 df8654d8 c01f711b de34f984 de34f9a8
kernel: c02ff3e8 c02ff400 c01a5e58 de34f9a8 df844000 de34f800 df844000 df844000
kernel: e0866702 de34f9a8 df8642b0 c01fbbc6 d463ec6c de34f984 d463ec6c df844000
kernel: Call Trace:
kernel: [device_release+91/96] device_release+0x5b/0x60
kernel: [kobject_cleanup+152/160] kobject_cleanup+0x98/0xa0
kernel: [__crc_sk_stream_mem_schedule+311347/1457199] scsi_request_fn+0x242/0x420 [scsi_mod]
kernel: [elv_next_request+22/272] elv_next_request+0x16/0x110
kernel: [__generic_unplug_device+65/80] __generic_unplug_device+0x41/0x50
kernel: [generic_unplug_device+30/64] generic_unplug_device+0x1e/0x40
kernel: [blk_unplug_work+16/32] blk_unplug_work+0x10/0x20
kernel: [worker_thread+473/672] worker_thread+0x1d9/0x2a0
kernel: [blk_unplug_work+0/32] blk_unplug_work+0x0/0x20
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [worker_thread+0/672] worker_thread+0x0/0x2a0
kernel: [kthread+170/176] kthread+0xaa/0xb0
kernel: [kthread+0/176] kthread+0x0/0xb0
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Code: 89 01 89 48 04 b8 00 01 10 00 c7 43 04 00 02 20 00 8d 9a 8c
kernel: <6>note: kblockd/0[42] exited with preempt_count 1
#######################################################################
The syslog messages since the connection until the crash in server B were:
#######################################################################
kernel: usb 1-1: new full speed USB device using address 3
kernel: SCSI subsystem initialized
kernel: Initializing USB Mass Storage driver...
kernel: scsi0 : SCSI emulation for USB Mass Storage devices
kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17
kernel: Type: Direct-Access ANSI SCSI revision: 02
kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17
kernel: Type: CD-ROM ANSI SCSI revision: 02
kernel: USB Mass Storage device found at 3
kernel: usbcore: registered new driver usb-storage
kernel: USB Mass Storage support registered.
usb.agent[7310]: usb-storage: loaded successfully
kernel: SCSI device sda: 1994751 512-byte hdwr sectors (1021 MB)
kernel: sda: assuming Write Enabled
kernel: sda: assuming drive cache: write through
kernel: /dev/scsi/host0/bus0/target0/lun0: p1
scsi.agent[7351]: sd_mod: loaded sucessfully (for disk)
kernel: Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0
scsi.agent[7364]: sr_mod: loaded sucessfully (for cdrom)
kernel: sr0: scsi3-mmc drive: 8x/40x writer xa/form2 cdda tray
kernel: Attached scsi CD-ROM sr0 at scsi0, channel 0, id 0, lun 1
scsi.agent[7364]: sg: loaded sucessfully (for cdrom)
kernel: Attached scsi generic sg0 at scsi0, channel 0, id 0, lun 0, type 0
kernel: Attached scsi generic sg1 at scsi0, channel 0, id 0, lun 1, type 5
kernel: usb 1-1: USB disconnect, address 3
kernel: scsi: Device offlined - not ready after error recovery: host 0 channel 0 id 0 lun 1
kernel: sr 0:0:0:1: Illegal state transition cancel->offline
kernel: Badness in scsi_device_set_state at drivers/scsi/scsi_lib.c:1643
kernel: [__crc_steal_locks+1205093/1994085] scsi_device_set_state+0xc9/0x120 [scsi_mod]
kernel: [__crc_steal_locks+1195130/1994085] scsi_eh_offline_sdevs+0x6e/0x90 [scsi_mod]
kernel: [__crc_steal_locks+1196744/1994085] scsi_unjam_host+0xcc/0x210 [scsi_mod]
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [__crc_steal_locks+1197332/1994085] scsi_error_handler+0x108/0x1c0 [scsi_mod]
kernel: [__crc_steal_locks+1197068/1994085] scsi_error_handler+0x0/0x1c0 [scsi_mod]
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Unable to handle kernel paging request at virtual address 8cf05e78
kernel: printing eip:
kernel: c0204565
kernel: *pde = 00000000
kernel: Oops: 0002 [#1]
kernel: PREEMPT
kernel: Modules linked in: sg sr_mod sd_mod usb_storage scsi_mod iptable_nat ipt_LOG ipt_state ip_conntrack iptable_filter ip_tables af_packet ipv6 analog ns558 gameport opl3sa2 ad1848 mpu401 sound soundcore parport_pc parport floppy pcspkr 8139cp pci_hotplug intel_agp usbhid uhci_hcd usbcore tulip 8139too mii agpgart tsdev mousedev evdev dm_mod capability commoncap psmouse ide_cd cdrom genrtc xfs ext2 ext3 jbd mbcache ide_generic piix ide_disk ide_core unix font vesafb cfbcopyarea cfbimgblt cfbfillrect
kernel: CPU: 0
kernel: EIP: 0060:[as_requeue_request+149/240] Not tainted
kernel: EFLAGS: 00010083 (2.6.8-3-686)
kernel: EIP is at as_requeue_request+0x95/0xf0
kernel: eax: c70bac8c ebx: 00000000 ecx: c6e421ec edx: 8cf05e74
kernel: esi: c771aab0 edi: c7fd51e0 ebp: 00000202 esp: c1e59ee0
kernel: ds: 007b es: 007b ss: 0068
kernel: Process scsi_eh_0 (pid: 7343, threadinfo=c1e58000 task=c76c8c10)
kernel: Stack: c012c99e 00000000 00000000 c0106cfd c771aab0 c15b4000 c6e421ec c01fba56
kernel: c6e421ec c771aab0 c771aab0 c15b4000 c01fe3dd c6e421ec c771aab0 c0ce50a8
kernel: 00000286 c0ce5040 c15b4000 c138ae00 00001057 c8b5432b c6e421ec c771aab0
kernel: Call Trace:
kernel: [__kernel_text_address+46/64] __kernel_text_address+0x2e/0x40
kernel: [print_context_stack+45/112] print_context_stack+0x2d/0x70
kernel: [elv_requeue_request+38/96] elv_requeue_request+0x26/0x60
kernel: [blk_insert_request+221/224] blk_insert_request+0xdd/0xe0
kernel: [__crc_steal_locks+1198295/1994085] scsi_queue_insert+0x8b/0xe0 [scsi_mod]
kernel: [__crc_steal_locks+1196398/1994085] scsi_eh_flush_done_q+0x72/0x100 [scsi_mod]
kernel: [__crc_steal_locks+1196692/1994085] scsi_unjam_host+0x98/0x210 [scsi_mod]
kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20
kernel: [__crc_steal_locks+1197332/1994085] scsi_error_handler+0x108/0x1c0 [scsi_mod]
kernel: [__crc_steal_locks+1197068/1994085] scsi_error_handler+0x0/0x1c0 [scsi_mod]
kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18
kernel: Code: 89 72 04 89 16 89 46 04 89 30 8b 5c 24 10 89 7c 24 20 8b 74
kernel: <6>note: scsi_eh_0[7343] exited with preempt_count 1
#######################################################################
The crash only ocurred with memorex pendrives.
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-3-686
Locale: LANG=pt_BR, LC_CTYPE=pt_BR (charmap=ISO-8859-1)
Versions of packages kernel-image-2.6.8-3-686 depends on:
ii coreutils [fileutils] 5.2.1-2 The GNU core utilities
ii initrd-tools 0.1.81.1 tools to create initrd image for p
ii module-init-tools 3.2-pre1-2 tools for managing Linux kernel mo
-- no debconf information
Reply to: