Bug#634023: linux-source-2.6.32: Kernel panic when inserting usb stick
Netconsole output:
BUG: unable to handle kernel NULL pointer dereference at 0000000000000040
IP: [<ffffffff81128b5b>] elv_queue_empty+0x1b/0x30
PGD 12a8cc067 PUD 12ae62067 PMD 0
Oops: 0000 [#1]
sd 6:0:0:0: [sdb] 1994752 512-byte logical blocks: (1.02 GB/974 MiB)
SMP
last sysfs file:
/sys/devices/pci0000:00/0000:00:13.5/usb1/1-10/1-10:1.0/host6/scsi_host/host6/uevent
CPU 1
Modules linked in: usb_storage uvcvideo videodev v4l1_compat
sd 6:0:0:0: [sdb] Write Protect is off
sd 6:0:0:0: [sdb] Mode Sense: 43 00 00 00
sd 6:0:0:0: [sdb] Assuming drive cache: write through
usb-storage: device scan complete
v4l2_compat_ioctl32 netconsole powernow_k8 fuse nfsd exportfs nfs lockd
auth_rpcgss sunrpc psmouse sha256_generic ansi_cprng krng eseqiv rng
aes_x86_64 aes_generic cbc cryptomgr crypto_hash aead pcompress dm_crypt
crypto_blkcipher crypto_algapi crypto dm_mod usbhid snd_hda_codec_realtek
snd_hda_intel snd_hda_codec snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_dummy
snd_seq_oss snd_seq_midi_event snd_seq sg
sd 6:0:0:0: [sdb] Assuming drive cache: write through
sdb: snd_timer snd_seq_device sr_mod firewire_ohci firewire_core snd cdrom
r8169 bitrev soundcore crc_itu_t crc32 sdb1
ohci_hcd ehci_hcd rtc_cmos snd_page_alloc usbcore pata_atiixp evdev
rtc_core mii ide_pci_generic rtc_lib k10temp hwmon button processor sd_mod
thermal thermal_sys [last unloaded: nvidia]
Pid: 7, comm: ksoftirqd/1 Tainted: P 2.6.32-20110716 #1 MS-7388
RIP: 0010:[<ffffffff81128b5b>] [<ffffffff81128b5b>] elv_queue_empty+0x1b/0x30
RSP: 0018:ffff880028283e18 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88012ccf71c0 RCX: ffff88012aafd6d0
RDX: ffff88012a8e1900 RSI: 0000000000000246 RDI: ffff88012ccf71c0
RBP: 0000000000000292 R08: ffff88012aafd6e0 R09: ffff88012f8c4c50
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88012ccf71c0
R13: ffff880028283e68 R14: ffff88012fbbe900 R15: ffff88012fa33840
FS: 00007f429e058700(0000) GS:ffff880028280000(0000) knlGS:0000000000000000
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 0000000000000040 CR3: 000000012e83e000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process ksoftirqd/1 (pid: 7, threadinfo ffff88012f892000, task
ffff88012f88f1d0)
Stack:
ffff88012ccf71c0 ffffffff8112c22a ffff88012ccf71c0 ffffffff8112c438
<0> ffff88012fa33840 ffff88012fa33800 ffff880028283e68 ffffffff811d5e6a
<0> ffff88012fa33828 0000000000000246 ffff880028283e68 ffff880028283e68
Call Trace:
<IRQ>
[<ffffffff8112c22a>] ? __blk_run_queue+0x1a/0x150
[<ffffffff8112c438>] ? blk_run_queue+0x28/0x50
[<ffffffff811d5e6a>] ? scsi_run_queue+0xda/0x360
[<ffffffff811d6e0b>] ? scsi_next_command+0x3b/0x60
[<ffffffff811d79cf>] ? scsi_io_completion+0x32f/0x510
[<ffffffff8113110d>] ? blk_done_softirq+0x6d/0x80
[<ffffffff8104238d>] ? __do_softirq+0x9d/0x130
[<ffffffff8100c27c>] ? call_softirq+0x1c/0x30
<EOI>
[<ffffffff8100e15d>] ? do_softirq+0x4d/0x80
[<ffffffff81041f8f>] ? ksoftirqd+0x6f/0xf0
[<ffffffff81041f20>] ? ksoftirqd+0x0/0xf0
[<ffffffff8105245e>] ? kthread+0x8e/0xa0
[<ffffffff8100c17a>] ? child_rip+0xa/0x20
[<ffffffff810523d0>] ? kthread+0x0/0xa0
[<ffffffff8100c170>] ? child_rip+0x0/0x20
Code: eb 94 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 08 31 c0 48 3b
3f 48 8b 57 18 74 09 48 83 c4 08 c3 0f 1f 40 00 48 8b 02 <48> 8b 50 40 b8 01
00 00 00 48 85 d2 74 e6 48 83 c4 08 ff e2 90
RIP [<ffffffff81128b5b>] elv_queue_empty+0x1b/0x30
RSP <ffff880028283e18>
CR2: 0000000000000040
---[ end trace dd18fad6b2c0435a ]---
Kernel panic - not syncing: Fatal exception in interrupt
Pid: 7, comm: ksoftirqd/1 Tainted: P D 2.6.32-20110716 #1
Call Trace:
<IRQ> [<ffffffff81288d8f>] ? panic+0x7a/0x12f
[<ffffffff81288e84>] ? printk+0x40/0x4c
[<ffffffff8103d0f3>] ? release_console_sem+0x193/0x1e0
[<ffffffff8100f6cb>] ? oops_end+0x9b/0xa0
[<ffffffff81025ac2>] ? no_context+0xf2/0x260
[<ffffffff8128be8f>] ? page_fault+0x1f/0x30
[<ffffffff81128b5b>] ? elv_queue_empty+0x1b/0x30
[<ffffffff8112c22a>] ? __blk_run_queue+0x1a/0x150
[<ffffffff8112c438>] ? blk_run_queue+0x28/0x50
[<ffffffff811d5e6a>] ? scsi_run_queue+0xda/0x360
[<ffffffff811d6e0b>] ? scsi_next_command+0x3b/0x60
[<ffffffff811d79cf>] ? scsi_io_completion+0x32f/0x510
[<ffffffff8113110d>] ? blk_done_softirq+0x6d/0x80
[<ffffffff8104238d>] ? __do_softirq+0x9d/0x130
[<ffffffff8100c27c>] ? call_softirq+0x1c/0x30
<EOI> [<ffffffff8100e15d>] ? do_softirq+0x4d/0x80
[<ffffffff81041f8f>] ? ksoftirqd+0x6f/0xf0
[<ffffffff81041f20>] ? ksoftirqd+0x0/0xf0
[<ffffffff8105245e>] ? kthread+0x8e/0xa0
[<ffffffff8100c17a>] ? child_rip+0xa/0x20
[<ffffffff810523d0>] ? kthread+0x0/0xa0
[<ffffffff8100c170>] ? child_rip+0x0/0x20
Reply to: