IDE crash on inserting PCMCIA IDE device

Bug #44599 reported by Paul Sladen
10
Affects Status Importance Assigned to Milestone
linux-source-2.6.15 (Ubuntu)
Invalid
Medium
Unassigned

Bug Description

IDE crash upon inserting PCMCIA IDE reader, inside rescan_partitions():

EIP: 0060:[<c01a2b70>] Not tainted VLI
EFLAGS: 00210282 (2.6.15-21-386)
EIP is at create_dir+0x10/0x1c0
eax: db2df448 ebx: c8856750 ecx: c8856750 edx: 00000000
esi: c8856750 edi: dad3ec10 ebp: db1239d8 esp: db1239b0
ds: 007b es: 007b ss: 0068
Process pccardd (pid: 3190, threadinfo=db122000 task=dacca550)
Stack: dad3eb80 c8856750 c8856750 dad3ec10 dad3eb80 c01a2d68 c8856750 db2df448
       c8856754 db1239d8 00000000 c8856750 c01d9972 c8856750 c8856750 c8856740
       c01d9bd1 c8856750 c8856750 c8856740 dad3ec18 c01d9c56 c8856750 c8856750
Call Trace:
 [<c01a2d68>] sysfs_create_dir+0x28/0x70
 [<c01d9972>] create_dir+0x12/0x50
 [<c01d9bd1>] kobject_add+0x71/0xe0
 [<c01d9c56>] kobject_register+0x16/0x60
 [<c019c04c>] add_partition+0xac/0xd0
 [<c019c248>] rescan_partitions+0xe8/0x140
 [<c0168679>] do_open+0x309/0x370
 [<c0168748>] blkdev_get+0x68/0x80
 [<c019c149>] register_disk+0x99/0xb0
 [<c01cf97e>] add_disk+0x2e/0x40
 [<c01cf920>] exact_match+0x0/0x10
 [<c01cf930>] exact_lock+0x0/0x20
 [<e045a1ca>] ide_disk_probe+0x10a/0x13f [ide_disk]
 [<c0243aeb>] driver_probe_device+0x3b/0xc0
 [<c0243b70>] __device_attach+0x0/0x10
 [<c02432e8>] bus_for_each_drv+0x48/0x80
 [<c0243bd4>] device_attach+0x54/0x60
 [<c0243b70>] __device_attach+0x0/0x10
 [<c0243421>] bus_add_device+0x21/0xa0
 [<c024241d>] device_add+0xdd/0x140
 [<c025543b>] probe_hwif_init_with_fixup+0x6b/0x90
 [<c024e759>] ide_register_hw_with_fixup+0x189/0x1a0
 [<c0254e70>] ide_undecoded_slave+0x0/0xa0
 [<e03fc1cf>] idecs_register+0x6f/0xb0 [ide_cs]
 [<c0254e70>] ide_undecoded_slave+0x0/0xa0
 [<e03fc707>] ide_config+0x4f7/0x620 [ide_cs]
 [<e03218ef>] pccard_read_tuple+0x4f/0xa0 [pcmcia_core]
 [<e03fc96a>] ide_event+0xda/0xe0 [ide_cs]
 [<e042560c>] pcmcia_register_client+0x1dc/0x2c0 [pcmcia]
 [<c01a2b00>] init_dir+0x0/0x20
 [<c017a221>] alloc_inode+0x181/0x1a0
 [<c017a186>] alloc_inode+0xe6/0x1a0
 [<c01a2b00>] init_dir+0x0/0x20
 [<c017ab86>] new_inode+0x16/0x90
 [<c01490e1>] kzalloc+0x11/0x40
 [<e03fc083>] ide_attach+0x83/0xc0 [ide_cs]
 [<c01d9dd2>] kobject_get+0x12/0x20
 [<e042446b>] pcmcia_device_probe+0x6b/0x120 [pcmcia]
 [<c0243aeb>] driver_probe_device+0x3b/0xc0
 [<c0243b70>] __device_attach+0x0/0x10
 [<c02432e8>] bus_for_each_drv+0x48/0x80
 [<c0243bd4>] device_attach+0x54/0x60
 [<c0243b70>] __device_attach+0x0/0x10
 [<c0243421>] bus_add_device+0x21/0xa0
 [<c024241d>] device_add+0xdd/0x140
 [<e04248e6>] pcmcia_device_add+0x136/0x1e0 [pcmcia]
 [<e0424a00>] pcmcia_card_add+0x70/0x90 [pcmcia]
 [<c011cba5>] release_console_sem+0xd5/0xf0
 [<c011c8d3>] vprintk+0x1d3/0x340
 [<c01d9dd2>] kobject_get+0x12/0x20
 [<c0244ff1>] class_device_get+0x11/0x20
 [<e042540d>] ds_event+0xad/0xd0 [pcmcia]
 [<e031e744>] send_event+0x74/0xd0 [pcmcia_core]
 [<e031eb12>] socket_insert+0xb2/0x180 [pcmcia_core]
 [<e031ee12>] socket_detect_change+0x32/0x90 [pcmcia_core]
 [<e031effc>] pccardd+0x18c/0x1e0 [pcmcia_core]
 [<c0118940>] default_wake_function+0x0/0x20
 [<e031ee70>] pccardd+0x0/0x1e0 [pcmcia_core]
 [<c0101385>] kernel_thread_helper+0x5/0x10
Code: 80 8c 00 00 00 e0 ac 33 c0 31 c0 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 55 57 56 53 55 8b 6c 24 24 8b 44 24 1c 8b 50 08 <ff> 4a 70 0f 88 ae 0c 00 00 31 c0 b9 ff ff ff ff 8b 7c 24 20 f2

Tags: kernel-oops
Revision history for this message
Paul Sladen (sladen) wrote :

Following this; ejecting and reinserting the card again kills the kernel *hard*. (No Caps-lock or SysRq response).

Revision history for this message
Jason Simpson (xiojason) wrote :
Download full text (5.6 KiB)

I'm seeing the same basic problem on my IBM Thinkpad T40 running 2.6.15-27-686 #1 SMP PREEMPT Sat Sep 16 02:13:27 UTC 2006 i686 GNU/Linux.

If the IDE device (CF card) is inserted at boot, the device works ok. If ejected and reinserted, this Oops occurs:

pccard: card ejected from slot 0
enabled 0001
pccard: PCMCIA card inserted into slot 0
pcmcia: registering new device pcmcia0.0
Probing IDE interface ide2...
hde: Flash Card, CFA DISK drive
ide2 at 0x4100-0x4107,0x410e on irq 3
hde: max request size: 128KiB
hde: 4062240 sectors (2079 MB) w/0KiB Cache, CHS=4030/16/63
hde: cache flushes not supported
 hde: hde1
Unable to handle kernel NULL pointer dereference at virtual address 00000078
 printing eip:
c01bcb83
*pde = 00000000
Oops: 0002 [#1]
PREEMPT SMP
Modules linked in: rfcomm l2cap nvram uinput ppdev speedstep_centrino cpufreq_userspace cpufreq_stats freq_table cpufreq_powersave cpufreq_ondemand cpufreq_conservative video tc1100_wmi sony_acpi pcc_acpi ibm_acpi hotkey dev_acpi container button acpi_sbs battery ac i2c_acpi_ec i2c_core nls_iso8859_1 nls_cp437 vfat ipv6 fat dm_mod md_mod fglrx lp af_packet arc4 ieee80211_crypt_wep ide_cs pcmcia joydev tsdev ipw2100 ieee80211 ieee80211_crypt e1000 irtty_sir snd_intel8x0 yenta_socket rsrc_nonstatic pcmcia_core sir_dev nsc_ircc hci_usb snd_ac97_codec snd_ac97_bus irda bluetooth snd_pcm_oss snd_mixer_oss crc_ccitt pcspkr parport_pc parport psmouse floppy serio_raw snd_pcm snd_timer snd soundcore snd_page_alloc intel_agp agpgart shpchp pci_hotplug evdev ext3 jbd ide_generic ehci_hcd uhci_hcd usbcore ide_disk piix generic thermal processor fan capability commoncap vga16fb vgastate fbcon tileblit font bitblit softcursor
CPU: 0
EIP: 0060:[create_dir+35/464] Tainted: P VLI
EFLAGS: 00210286 (2.6.15-27-686)
EIP is at create_dir+0x23/0x1d0
eax: f79a3a18 ebx: f6e311d4 ecx: c0326677 edx: 00000000
esi: f6e311d0 edi: f79c5450 ebp: f7a7f93c esp: f7a7f900
ds: 007b es: 007b ss: 0068
Process pccardd (pid: 3155, threadinfo=f7a7e000 task=f7a9ba90)
Stack: c01b571b f75c10c0 00000001 00000001 ffffffff f6e311d7 f6e311d0 f6e311d0
       f79c5450 f79c53c0 c01bcd96 f6e311d0 f79a3a18 f6e311d4 f7a7f93c 00000000
       00000000 c01f92ef f6e311d0 f6e311d0 fffffffe c01f95ad f6e311d0 f6e311d0
Call Trace:
 [read_dev_sector+155/208] read_dev_sector+0x9b/0xd0
 [sysfs_create_dir+54/128] sysfs_create_dir+0x36/0x80
 [create_dir+31/96] create_dir+0x1f/0x60
 [kobject_add+125/224] kobject_add+0x7d/0xe0
 [kobject_register+40/128] kobject_register+0x28/0x80
 [add_partition+207/288] add_partition+0xcf/0x120
 [rescan_partitions+282/368] rescan_partitions+0x11a/0x170
 [do_open+861/960] do_open+0x35d/0x3c0
 [acpi_os_acquire_object+29/74] acpi_os_acquire_object+0x1d/0x4a
 [blkdev_get+148/192] blkdev_get+0x94/0xc0
 [register_disk+193/224] register_disk+0xc1/0xe0
 [add_disk+73/96] add_disk+0x49/0x60
 [exact_match+0/16] exact_match+0x0/0x10
 [exact_lock+0/32] exact_lock+0x0/0x20
 [pg0+943933151/1069167616] ide_disk_probe+0x14f/0x18b [ide_disk]
 [driver_probe_device+84/240] driver_probe_device+0x54/0xf0
 [__device_attach+0/16] __device_attach+0x0/0x10
 [bus_for_each_drv+93/128] bus_for_each_drv+0x5d/0x80
 [device_at...

Read more...

Revision history for this message
Ben Collins (ben-collins) wrote :

This is a known problem. It's fixed in edgy by using the pata_pcmcia module. It likely wont get fixed in dapper.

Changed in linux-source-2.6.15:
status: Unconfirmed → Confirmed
Revision history for this message
Chuck Short (zulcss) wrote :

Closing then

Changed in linux-source-2.6.15:
status: Confirmed → Rejected
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.