lkml.org 
[lkml]   [2011]   [Jul]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Linux 3.0 oopses when pulling a USB CDROM
On Sat, 2 Jul 2011, Andi Kleen wrote:

> > And the transition after unplug goes
> >
> > 13->12->10->8->7->6->5->3
> >
> > implying we're missing put events.
>
> Don't know why. I used this check (with trace_scsi_dev containing the name)
> in put_device:
>
> if (trace_scsi && dev->type == &scsi_dev_type &&
> trace_scsi_dev[0] == 0 || !strcmp(dev_name(dev), trace_scsi_dev))) {
> dev_printk ...

These extra puts could be coming from deep inside the device-model
core, where they operate directly on the underlying kobject instead of
going through put_device(). For example, removal of sysfs symlinks
could have this effect.

> If you want instrumentation somewhere else please let me know.
>
> Maybe there simply isn't a put_device to 0 and the NULL pointer happens
> for some other reason?

On my system, at least, the scsi_device's refcount dropped to 0 at the
right time. That wasn't the problem. The NULL pointer occurs because
the request_queue is used after the scsi_device has been removed from
visibility; among other things, __scsi_remove_device() sets
sdev->request_queue->queuedata to NULL.

As the comment says, this causes the request function to reject all I/O
requests -- but not before trying to dereference the NULL pointer!

Alan Stern



\
 
 \ /
  Last update: 2011-07-02 22:07    [W:0.105 / U:0.064 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site