linux-kernel - Re: [BUG] usb-storage: Error in queuecommand: us->srb = ffff88006a338480

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 5 Nov 2008 17:49:05 -0800
From:	Andrew Morton <akpm@...ux-foundation.org>
To:	Brian Kysela <bkysela@...il.com>
Cc:	linux-kernel@...r.kernel.org, Jens Axboe <jens.axboe@...cle.com>,
	linux-usb@...r.kernel.org
Subject: Re: [BUG] usb-storage: Error in queuecommand: us->srb =
 ffff88006a338480

On Thu, 30 Oct 2008 17:35:57 -0400
Brian Kysela <bkysela@...il.com> wrote:

> On kernels ranging from 2.6.26 - 2.6.28-rc2

So 2.6.25 was OK?

> on an Intel P4 3.2GHz HT x86-64
> cpu, I am seeing a bug that occurs about half the time when copying ~300MB
> data from a usb flash drive (FAT) to hard drive (XFS). There are three
> possible outcomes, so far, when I hit the bug:
> 
>     (1) The copy process hangs, cpu wait hits 100% and load avg climbs until
>         reboot;
>     (2) The copy process hangs and then recovers and then one of:
>         (a) the cpu wait & load avg both decline to normal; or
>         (b) cpu wait hovers at 100% and the load avg slowly climbs until reboot;
>     (3) Kernel bug reported and machine locks up.
> 
> Result (1) is the most frequent. Result (3) happened only twice out of about 40
> tests. I lose the full traces, but here are two relevant lines that I see on
> screen before the machine locks up:
> 
> kernel BUG at /home/brian/linux-2.6/block/elevator.c:841!
> invalid opcode: 0000 [#1] PREMPT SMP

It is unclear what kernel version produced that message, and that is
important information.  In 2.6.28-rc2, block/elevator.c:841 is

    void elv_dequeue_request(struct request_queue *q, struct request *rq)
    {
-->>	BUG_ON(list_empty(&rq->queuelist));
	BUG_ON(ELV_ON_HASH(rq));

please confirm that I have the correct line there.


I assume that you're hitting a bug in the USB storage code and this is
triggering consistency-checking code in the block layer.

> When (1) or (2b) occurs I pull the usb drive to see what happens. In two cases
> (3) occurred, but more often I get this in /var/log/syslog:

The other things you saw were most likely a consequence of the
BUG_ON().

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/