Package: kernel-image-2.6.8-3-686 Version: 2.6.8-16sarge5 Followup-For: Bug #311187
Two servers running debian stable crashed with kernel panic today in my organization. The kernel pannic ocurred after the pendrive "Memorex travel drive" (1GB) be removed. It was not necessary mount the device. Only the connect and disconnect were enough to crash the servers. The syslog messages since the connection until the crash in server A were: ####################################################################### kernel: usb 3-1: new high speed USB device using address 3 kernel: scsi2 : SCSI emulation for USB Mass Storage devices kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17 kernel: Type: Direct-Access ANSI SCSI revision: 02 kernel: Attached scsi removable disk sdb at scsi2, channel 0, id 0, lun 0 kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17 kernel: Type: CD-ROM ANSI SCSI revision: 02 kernel: sr0: scsi3-mmc drive: 8x/40x writer xa/form2 cdda tray kernel: Uniform CD-ROM driver Revision: 3.20 kernel: Attached scsi CD-ROM sr0 at scsi2, channel 0, id 0, lun 1 udev[3268]: configured rule in '/etc/udev/rules.d/z_hal-plugdev.rules[2]' applied, 'sdb' becomes '%k' kernel: USB Mass Storage device found at 3 udev[3268]: creating device node '/dev/sdb' scsi.agent[3306]: sd_mod: loaded sucessfully (for disk) udev[3282]: configured rule in '/etc/udev/rules.d/cd-aliases.rules[8]' applied, added symlink '%c{1} %c{2} %c{3} %c{4} %c{5} %c{6}' udev[3282]: configured rule in '/etc/udev/rules.d/udev.rules[20]' applied, added symlink 'sr%n' udev[3282]: configured rule in '/etc/udev/rules.d/udev.rules[20]' applied, 'sr0' becomes 'scd%n' udev[3282]: creating device node '/dev/scd0' scsi.agent[3373]: sr_mod: loaded sucessfully (for cdrom) scsi.agent[3373]: sg: loaded sucessfully (for cdrom) usb.agent[3358]: usb-storage: already loaded kernel: Attached scsi generic sg0 at scsi0, channel 0, id 0, lun 0, type 0 kernel: Attached scsi generic sg1 at scsi2, channel 0, id 0, lun 0, type 0 kernel: Attached scsi generic sg2 at scsi2, channel 0, id 0, lun 1, type 5 udev[3420]: creating device node '/dev/sg0' udev[3424]: creating device node '/dev/sg1' udev[3428]: creating device node '/dev/sg2' kernel: SCSI device sdb: 1994751 512-byte hdwr sectors (1021 MB) kernel: sdb: assuming Write Enabled kernel: sdb: assuming drive cache: write through kernel: SCSI device sdb: 1994751 512-byte hdwr sectors (1021 MB) kernel: sdb: assuming Write Enabled kernel: sdb: assuming drive cache: write through kernel: /dev/scsi/host2/bus0/target0/lun0: p1 udev[3466]: configured rule in '/etc/udev/rules.d/z_hal-plugdev.rules[2]' applied, 'sdb1' becomes '%k' udev[3466]: creating device node '/dev/sdb1' kernel: usb 3-1: USB disconnect, address 3 udev[3484]: removing device node '/dev/sg1' udev[3498]: removing device node '/dev/sdb1' udev[3553]: symlink '/dev/' points to a different device, skip removal udev[3553]: removing device node '/dev/scd0' udev[3523]: removing device node '/dev/sg2' udev[3562]: removing device node '/dev/sdb' kernel: scsi: Device offlined - not ready after error recovery: host 2 channel 0 id 0 lun 1 kernel: sr 2:0:0:1: Illegal state transition cancel->offline kernel: Badness in scsi_device_set_state at drivers/scsi/scsi_lib.c:1643 kernel: [__crc_sk_stream_mem_schedule+313066/1457199] scsi_device_set_state+0xc9/0x120 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+303103/1457199] scsi_eh_offline_sdevs+0x6e/0x90 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+304717/1457199] scsi_unjam_host+0xcc/0x210 [scsi_mod] kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [__crc_sk_stream_mem_schedule+305305/1457199] scsi_error_handler+0x108/0x1c0 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+305041/1457199] scsi_error_handler+0x0/0x1c0 [scsi_mod] kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Badness in kobject_get at lib/kobject.c:433 kernel: [kobject_get+79/96] kobject_get+0x4f/0x60 kernel: [get_device+24/32] get_device+0x18/0x20 kernel: [__crc_sk_stream_mem_schedule+310806/1457199] scsi_request_fn+0x25/0x420 [scsi_mod] kernel: [blk_insert_request+185/224] blk_insert_request+0xb9/0xe0 kernel: [__crc_sk_stream_mem_schedule+306268/1457199] scsi_queue_insert+0x8b/0xe0 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+304371/1457199] scsi_eh_flush_done_q+0x72/0x100 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+304665/1457199] scsi_unjam_host+0x98/0x210 [scsi_mod] kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [__crc_sk_stream_mem_schedule+305305/1457199] scsi_error_handler+0x108/0x1c0 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+305041/1457199] scsi_error_handler+0x0/0x1c0 [scsi_mod] kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Unable to handle kernel paging request at virtual address 00200200 kernel: printing eip: kernel: e0868c60 kernel: *pde = 1b79f067 kernel: *pte = 00000000 kernel: Oops: 0002 [#1] kernel: PREEMPT kernel: Modules linked in: sg nfsd exportfs lockd sunrpc ipv6 e100 e1000 capability commoncap ext3 jbd mbcache pcspkr mii dm_mod parport_pc lp parport rtc usblp hw_random shpchp pciehp pci_hotplug intel_agp intel_mch_agp agpgart tsdev mousedev evdev psmouse ds yenta_socket pcmcia_core sr_mod sd_mod ide_cd cdrom ide_disk ide_generic pdc202xx_new aec62xx alim15x3 amd74xx atiixp cmd64x cs5520 cs5530 cy82c693 generic hpt34x ns87415 opti621 pdc202xx_old rz1000 sc1200 serverworks siimage sis5513 slc90e66 triflex trm290 via82cxxx floppy piix fbcon vga16fb vgastate usbserial usbhid usbkbd ehci_hcd uhci_hcd thermal processor fan usb_storage usbcore ide_core ata_piix libata scsi_mod unix font vesafb cfbcopyarea cfbimgblt cfbfillrect kernel: CPU: 0 kernel: EIP: 0060:[__crc_sk_stream_mem_schedule+320913/1457199] Not tainted kernel: EFLAGS: 00010002 (2.6.8-3-686) kernel: EIP is at scsi_device_dev_release+0x30/0x120 [scsi_mod] kernel: eax: 00100100 ebx: de34f808 ecx: 00200200 edx: de34f984 kernel: esi: de34f800 edi: 00000282 ebp: df8654b4 esp: d4611ea8 kernel: ds: 007b es: 007b ss: 0068 kernel: Process scsi_eh_2 (pid: 3203, threadinfo=d4610000 task=d4fce030) kernel: Stack: 00000000 de34f9a8 c02ff3e8 c02ff400 df8654d8 c01f711b de34f984 de34f9a8 kernel: c02ff3e8 c02ff400 c01a5e58 de34f9a8 d4610000 de34f800 d4610000 d4610000 kernel: e0866702 de34f9a8 df8642b0 de34f800 df8642b0 de34f984 df8642b0 de34f800 kernel: Call Trace: kernel: [device_release+91/96] device_release+0x5b/0x60 kernel: [kobject_cleanup+152/160] kobject_cleanup+0x98/0xa0 kernel: [__crc_sk_stream_mem_schedule+311347/1457199] scsi_request_fn+0x242/0x420 [scsi_mod] kernel: [blk_insert_request+185/224] blk_insert_request+0xb9/0xe0 kernel: [__crc_sk_stream_mem_schedule+306268/1457199] scsi_queue_insert+0x8b/0xe0 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+304371/1457199] scsi_eh_flush_done_q+0x72/0x100 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+304665/1457199] scsi_unjam_host+0x98/0x210 [scsi_mod] kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [__crc_sk_stream_mem_schedule+305305/1457199] scsi_error_handler+0x108/0x1c0 [scsi_mod] kernel: [__crc_sk_stream_mem_schedule+305041/1457199] scsi_error_handler+0x0/0x1c0 [scsi_mod] kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Code: 89 01 89 48 04 b8 00 01 10 00 c7 43 04 00 02 20 00 8d 9a 8c kernel: <6>note: scsi_eh_2[3203] exited with preempt_count 1 kernel: Badness in kobject_get at lib/kobject.c:433 kernel: [kobject_get+79/96] kobject_get+0x4f/0x60 kernel: [get_device+24/32] get_device+0x18/0x20 kernel: [__crc_sk_stream_mem_schedule+310806/1457199] scsi_request_fn+0x25/0x420 [scsi_mod] kernel: [elv_next_request+22/272] elv_next_request+0x16/0x110 kernel: [__generic_unplug_device+65/80] __generic_unplug_device+0x41/0x50 kernel: [generic_unplug_device+30/64] generic_unplug_device+0x1e/0x40 kernel: [blk_unplug_work+16/32] blk_unplug_work+0x10/0x20 kernel: [worker_thread+473/672] worker_thread+0x1d9/0x2a0 kernel: [blk_unplug_work+0/32] blk_unplug_work+0x0/0x20 kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [worker_thread+0/672] worker_thread+0x0/0x2a0 kernel: [kthread+170/176] kthread+0xaa/0xb0 kernel: [kthread+0/176] kthread+0x0/0xb0 kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Unable to handle kernel paging request at virtual address 00200200 kernel: printing eip: kernel: e0868c60 kernel: *pde = 1b79f067 kernel: *pte = 00000000 kernel: Oops: 0002 [#2] kernel: PREEMPT kernel: Modules linked in: sg nfsd exportfs lockd sunrpc ipv6 e100 e1000 capability commoncap ext3 jbd mbcache pcspkr mii dm_mod parport_pc lp parport rtc usblp hw_random shpchp pciehp pci_hotplug intel_agp intel_mch_agp agpgart tsdev mousedev evdev psmouse ds yenta_socket pcmcia_core sr_mod sd_mod ide_cd cdrom ide_disk ide_generic pdc202xx_new aec62xx alim15x3 amd74xx atiixp cmd64x cs5520 cs5530 cy82c693 generic hpt34x ns87415 opti621 pdc202xx_old rz1000 sc1200 serverworks siimage sis5513 slc90e66 triflex trm290 via82cxxx floppy piix fbcon vga16fb vgastate usbserial usbhid usbkbd ehci_hcd uhci_hcd thermal processor fan usb_storage usbcore ide_core ata_piix libata scsi_mod unix font vesafb cfbcopyarea cfbimgblt cfbfillrect kernel: CPU: 0 kernel: EIP: 0060:[__crc_sk_stream_mem_schedule+320913/1457199] Not tainted kernel: EFLAGS: 00010002 (2.6.8-3-686) kernel: EIP is at scsi_device_dev_release+0x30/0x120 [scsi_mod] kernel: eax: 00100100 ebx: de34f808 ecx: 00200200 edx: de34f984 kernel: esi: de34f800 edi: 00000286 ebp: df8654b4 esp: df845ec0 kernel: ds: 007b es: 007b ss: 0068 kernel: Process kblockd/0 (pid: 42, threadinfo=df844000 task=df8436f0) kernel: Stack: 00000000 de34f9a8 c02ff3e8 c02ff400 df8654d8 c01f711b de34f984 de34f9a8 kernel: c02ff3e8 c02ff400 c01a5e58 de34f9a8 df844000 de34f800 df844000 df844000 kernel: e0866702 de34f9a8 df8642b0 c01fbbc6 d463ec6c de34f984 d463ec6c df844000 kernel: Call Trace: kernel: [device_release+91/96] device_release+0x5b/0x60 kernel: [kobject_cleanup+152/160] kobject_cleanup+0x98/0xa0 kernel: [__crc_sk_stream_mem_schedule+311347/1457199] scsi_request_fn+0x242/0x420 [scsi_mod] kernel: [elv_next_request+22/272] elv_next_request+0x16/0x110 kernel: [__generic_unplug_device+65/80] __generic_unplug_device+0x41/0x50 kernel: [generic_unplug_device+30/64] generic_unplug_device+0x1e/0x40 kernel: [blk_unplug_work+16/32] blk_unplug_work+0x10/0x20 kernel: [worker_thread+473/672] worker_thread+0x1d9/0x2a0 kernel: [blk_unplug_work+0/32] blk_unplug_work+0x0/0x20 kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [worker_thread+0/672] worker_thread+0x0/0x2a0 kernel: [kthread+170/176] kthread+0xaa/0xb0 kernel: [kthread+0/176] kthread+0x0/0xb0 kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Code: 89 01 89 48 04 b8 00 01 10 00 c7 43 04 00 02 20 00 8d 9a 8c kernel: <6>note: kblockd/0[42] exited with preempt_count 1 ####################################################################### The syslog messages since the connection until the crash in server B were: ####################################################################### kernel: usb 1-1: new full speed USB device using address 3 kernel: SCSI subsystem initialized kernel: Initializing USB Mass Storage driver... kernel: scsi0 : SCSI emulation for USB Mass Storage devices kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17 kernel: Type: Direct-Access ANSI SCSI revision: 02 kernel: Vendor: Memorex Model: Mini TravelDrive Rev: 6.17 kernel: Type: CD-ROM ANSI SCSI revision: 02 kernel: USB Mass Storage device found at 3 kernel: usbcore: registered new driver usb-storage kernel: USB Mass Storage support registered. usb.agent[7310]: usb-storage: loaded successfully kernel: SCSI device sda: 1994751 512-byte hdwr sectors (1021 MB) kernel: sda: assuming Write Enabled kernel: sda: assuming drive cache: write through kernel: /dev/scsi/host0/bus0/target0/lun0: p1 scsi.agent[7351]: sd_mod: loaded sucessfully (for disk) kernel: Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0 scsi.agent[7364]: sr_mod: loaded sucessfully (for cdrom) kernel: sr0: scsi3-mmc drive: 8x/40x writer xa/form2 cdda tray kernel: Attached scsi CD-ROM sr0 at scsi0, channel 0, id 0, lun 1 scsi.agent[7364]: sg: loaded sucessfully (for cdrom) kernel: Attached scsi generic sg0 at scsi0, channel 0, id 0, lun 0, type 0 kernel: Attached scsi generic sg1 at scsi0, channel 0, id 0, lun 1, type 5 kernel: usb 1-1: USB disconnect, address 3 kernel: scsi: Device offlined - not ready after error recovery: host 0 channel 0 id 0 lun 1 kernel: sr 0:0:0:1: Illegal state transition cancel->offline kernel: Badness in scsi_device_set_state at drivers/scsi/scsi_lib.c:1643 kernel: [__crc_steal_locks+1205093/1994085] scsi_device_set_state+0xc9/0x120 [scsi_mod] kernel: [__crc_steal_locks+1195130/1994085] scsi_eh_offline_sdevs+0x6e/0x90 [scsi_mod] kernel: [__crc_steal_locks+1196744/1994085] scsi_unjam_host+0xcc/0x210 [scsi_mod] kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [__crc_steal_locks+1197332/1994085] scsi_error_handler+0x108/0x1c0 [scsi_mod] kernel: [__crc_steal_locks+1197068/1994085] scsi_error_handler+0x0/0x1c0 [scsi_mod] kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Unable to handle kernel paging request at virtual address 8cf05e78 kernel: printing eip: kernel: c0204565 kernel: *pde = 00000000 kernel: Oops: 0002 [#1] kernel: PREEMPT kernel: Modules linked in: sg sr_mod sd_mod usb_storage scsi_mod iptable_nat ipt_LOG ipt_state ip_conntrack iptable_filter ip_tables af_packet ipv6 analog ns558 gameport opl3sa2 ad1848 mpu401 sound soundcore parport_pc parport floppy pcspkr 8139cp pci_hotplug intel_agp usbhid uhci_hcd usbcore tulip 8139too mii agpgart tsdev mousedev evdev dm_mod capability commoncap psmouse ide_cd cdrom genrtc xfs ext2 ext3 jbd mbcache ide_generic piix ide_disk ide_core unix font vesafb cfbcopyarea cfbimgblt cfbfillrect kernel: CPU: 0 kernel: EIP: 0060:[as_requeue_request+149/240] Not tainted kernel: EFLAGS: 00010083 (2.6.8-3-686) kernel: EIP is at as_requeue_request+0x95/0xf0 kernel: eax: c70bac8c ebx: 00000000 ecx: c6e421ec edx: 8cf05e74 kernel: esi: c771aab0 edi: c7fd51e0 ebp: 00000202 esp: c1e59ee0 kernel: ds: 007b es: 007b ss: 0068 kernel: Process scsi_eh_0 (pid: 7343, threadinfo=c1e58000 task=c76c8c10) kernel: Stack: c012c99e 00000000 00000000 c0106cfd c771aab0 c15b4000 c6e421ec c01fba56 kernel: c6e421ec c771aab0 c771aab0 c15b4000 c01fe3dd c6e421ec c771aab0 c0ce50a8 kernel: 00000286 c0ce5040 c15b4000 c138ae00 00001057 c8b5432b c6e421ec c771aab0 kernel: Call Trace: kernel: [__kernel_text_address+46/64] __kernel_text_address+0x2e/0x40 kernel: [print_context_stack+45/112] print_context_stack+0x2d/0x70 kernel: [elv_requeue_request+38/96] elv_requeue_request+0x26/0x60 kernel: [blk_insert_request+221/224] blk_insert_request+0xdd/0xe0 kernel: [__crc_steal_locks+1198295/1994085] scsi_queue_insert+0x8b/0xe0 [scsi_mod] kernel: [__crc_steal_locks+1196398/1994085] scsi_eh_flush_done_q+0x72/0x100 [scsi_mod] kernel: [__crc_steal_locks+1196692/1994085] scsi_unjam_host+0x98/0x210 [scsi_mod] kernel: [default_wake_function+0/32] default_wake_function+0x0/0x20 kernel: [__crc_steal_locks+1197332/1994085] scsi_error_handler+0x108/0x1c0 [scsi_mod] kernel: [__crc_steal_locks+1197068/1994085] scsi_error_handler+0x0/0x1c0 [scsi_mod] kernel: [kernel_thread_helper+5/24] kernel_thread_helper+0x5/0x18 kernel: Code: 89 72 04 89 16 89 46 04 89 30 8b 5c 24 10 89 7c 24 20 8b 74 kernel: <6>note: scsi_eh_0[7343] exited with preempt_count 1 ####################################################################### The crash only ocurred with memorex pendrives. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.8-3-686 Locale: LANG=pt_BR, LC_CTYPE=pt_BR (charmap=ISO-8859-1) Versions of packages kernel-image-2.6.8-3-686 depends on: ii coreutils [fileutils] 5.2.1-2 The GNU core utilities ii initrd-tools 0.1.81.1 tools to create initrd image for p ii module-init-tools 3.2-pre1-2 tools for managing Linux kernel mo -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]