From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S264938AbTFWHzT (ORCPT ); Mon, 23 Jun 2003 03:55:19 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S264953AbTFWHzT (ORCPT ); Mon, 23 Jun 2003 03:55:19 -0400 Received: from ns.virtualhost.dk ([195.184.98.160]:26303 "EHLO virtualhost.dk") by vger.kernel.org with ESMTP id S264938AbTFWHzN (ORCPT ); Mon, 23 Jun 2003 03:55:13 -0400 Date: Mon, 23 Jun 2003 10:09:12 +0200 From: Jens Axboe To: Pavel Roskin Cc: linux-ide@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: Linux 2.5.73 - panic (freed memory) on CD-Recorder errors Message-ID: <20030623080912.GA7383@suse.de> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Jun 23 2003, Pavel Roskin wrote: > Hello! > > I have been experiencing kernel panics with 2.5.x kernels when writing > oversized images like Knoppix to low-quality CDs using the IDE driver > without SCSI emulation. > > Finally I have found a very simple way to reproduce the panic immediately > and without sacrificing a blank CD. Just try writing over a recorded disc > in the dummy mode (i.e. with the laser turned off). > > I have captured the panic on the serial console. cdrecord was running on > that terminal as well, so you see the order in which it happened. The > kernel .config file and the kernel messages (without serial console being > active) are attached. > > This panic occurred on Linux 2.5.73, but I remember the same function > names in the stack trace with older 2.5.x kernels when I was writing > Knoppix. > > Note 6b6b6b6b in the eax and esi registers and on the stack. That must be > freed memory. __end_that_request_first() is a static function in > drivers/block/ll_rw_blk.c That doesn't look good. I'll try and reproduce + fix here, thanks for the report. -- Jens Axboe