Most recent kernel where this bug did *NOT* occur: None, as the hardware was not supported before Distribution: Mandriva cooker Hardware Environment: i586 Software Environment: 2.6.19.1 ( vanilla, without patch ) Problem Description: Steps to reproduce: Plug the usb hardware ( two usb speakers, usb id pasted after ) $ alsaplayer -o alsa -d hw:1,0 Zelda_LinkAwake_SeasideLullaby_\(Windfish_Ballade\)_OC_ReMix.mp3 error on snd_pcm_hw_par/ams_any Unavailable hw params: ACCESS: MMAP_INTERLEAVED RW_INTERLEAVED FORMAT: S16_LE SUBFORMAT: STD SAMPLE_BITS: 16 FRAME_BITS: 32 CHANNELS: 2 RATE: NONE PERIOD_TIME: (1002 2796203) PERIOD_SIZE: [47 131072] PERIOD_BYTES: [188 524288] PERIODS: [2 1024] BUFFER_TIME: (2005 5592406) BUFFER_SIZE: [94 262144] BUFFER_BYTES: [376 1048576] TICK_TIME: 4000 zsh: segmentation fault alsaplayer -o alsa -d hw:1,0 running dmesg show this : ohci_hcd 0000:00:03.0: auto-wakeup usb 1-2: new full speed USB device using ohci_hcd and address 2 usb 1-2: configuration #1 chosen from 1 choice input: USB Audio Device as /class/input/input2 input: USB HID v1.00 Device [USB Audio Device] on usb-0000:00:03.0-2 usbcore: registered new interface driver snd-usb-audio BUG: unable to handle kernel paging request at virtual address fe22a940 printing eip: dcc75ee7 *pde = 00000000 Oops: 0000 [#1] Modules linked in: snd_usb_audio snd_usb_lib snd_rawmidi snd_hwdep ip_queue iptable_raw xt_policy xt_multiport ipt_ULOG ipt_TTL ipt_ttl ipt_TOS ipt_tos ipt_TCPMSS ipt_SAME ipt_REJECT ipt_REDIRECT ipt_recent ipt_owner ipt_NETMAP ipt_MASQUERADE ipt_LOG ipt_iprange ipt_hashlimit ipt_ECN ipt_ecn ipt_CLUSTERIP ipt_ah ipt_addrtype ip_nat_tftp ip_nat_snmp_basic ip_nat_pptp ip_nat_irc ip_nat_ftp ip_nat_amanda ip_conntrack_tftp ip_conntrack_pptp ip_conntrack_netbios_ns ip_conntrack_irc ip_conntrack_ftp ts_kmp ip_conntrack_amanda xt_tcpmss xt_pkttype xt_physdev bridge xt_NFQUEUE xt_MARK xt_mark xt_mac xt_limit xt_length xt_helper xt_dccp xt_conntrack xt_CONNMARK xt_connmark xt_CLASSIFY xt_tcpudp xt_state nfsd iptable_nat exportfs ip_nat ip_conntrack iptable_mangle lockd nfnetlink nfs_acl sunrpc ipv6 iptable_filter ip_tables x_tables capability commoncap sis900 mii snd_seq_dummy snd_seq_oss snd_seq_midi_event 8021q snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss af_packet snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_pcm snd_timer snd_page_alloc snd soundcore ide_cd cdrom binfmt_misc loop ntfs nls_iso8859_15 nls_cp850 vfat fat ext3 jbd dm_mod cpufreq_ondemand cpufreq_conservative cpufreq_powersave freq_table processor sis_agp agpgart tsdev evdev usbmouse usbhid ff_memless ehci_hcd ohci_hcd usbcore xfs CPU: 0 EIP: 0060:[<dcc75ee7>] Not tainted VLI EFLAGS: 00210286 (2.6.19.1-1mdv #1) EIP is at snd_interval_list+0x63/0xaa [snd_pcm] eax: 80000000 ebx: c72a18e0 ecx: cc6d53ff edx: fe22a940 esi: cc6d5404 edi: 00000001 ebp: c4fedca8 esp: c4fedc9c ds: 007b es: 007b ss: 0068 Process alsaplayer (pid: 22952, ti=c4fec000 task=c535a050 task.ti=c4fec000) Stack: c4fede38 c72a17b8 c72a17b8 c4fedcbc dcc77d2d c031e950 c9461bc4 00000017 c4fedde4 dcc73dfd dbc34000 dbc69584 00000000 00000002 00000003 00000004 00000005 00000006 00000007 00000008 00000009 0000000a 0000000b 0000000c Call Trace: [<dcc77d2d>] snd_pcm_hw_rule_list+0x28/0x2d [snd_pcm] [<dcc73dfd>] snd_pcm_hw_refine+0x260/0x3b5 [snd_pcm] [<dcc7437c>] snd_pcm_hw_refine_user+0x42/0x6e [snd_pcm] [<dcc74539>] snd_pcm_common_ioctl1+0x191/0xf95 [snd_pcm] [<dcc75a9a>] snd_pcm_playback_ioctl1+0x39a/0x3b4 [snd_pcm] [<dcc75b43>] snd_pcm_playback_ioctl+0x2e/0x3b [snd_pcm] [<c016acdc>] do_ioctl+0x1c/0x50 [<c016af10>] vfs_ioctl+0x200/0x217 [<c016af70>] sys_ioctl+0x49/0x61 [<c0102cdd>] sysenter_past_esp+0x56/0x99 [<b7f30410>] 0xb7f30410 ======================= Code: eb 60 80 63 08 fe bf 01 00 00 00 89 03 eb 02 31 ff 8d 54 b2 fc 89 f1 eb 26 83 7d 08 00 74 0c b8 01 00 00 00 d3 e0 85 45 08 74 11 <8b> 02 39 43 04 75 08 f6 43 08 02 75 04 eb 19 77 0b 83 ea 04 49 EIP: [<dcc75ee7>] snd_interval_list+0x63/0xaa [snd_pcm] SS:ESP 0068:c4fedc9c $ uname -a Linux volrath.local 2.6.19.1-1mdv #1 Tue Dec 12 17:34:09 EST 2006 i686 AMD Sempron(tm) 2400+ GNU/Linux $ lsusb Bus 003 Device 001: ID 0000:0000 Bus 002 Device 003: ID 046d:c00e Logitech, Inc. M-BJ69 Optical Wheel Mouse Bus 002 Device 001: ID 0000:0000 Bus 001 Device 002: ID 0e6a:0310 Megawin Technology Co., Ltd Bus 001 Device 001: ID 0000:0000 is there any other information i can give ?
I have also reproduced on another computer, running 2.6.19 : ~ $ uname -a Linux takara 2.6.19-3mdv #1 Wed Dec 6 08:49:45 EST 2006 x86_64 AMD Athlon(tm) 64 Processor 3200+ GNU/Linux $ mplayer -ao alsa:device=hw=2.0 ./Zelda_LinkAwake_SeasideLullaby_\(Windfish_Ballade\)_OC_ReMix.mp3 Unable to handle kernel paging request at ffff810108414684 RIP: [<ffffffff881b44b2>] :snd_pcm:snd_interval_list+0x5f/0xa5 PGD 8063 PUD 0 Oops: 0000 [1] CPU 0 Modules linked in: nls_utf8 udf snd_usb_audio snd_usb_lib snd_hwdep autofs4 ipv6 snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq eepro100 mii forcedeth snd_ens1371 gameport snd_rawmidi snd_seq_device snd_ac97_codec snd_ac97_bus snd_pcm_oss snd_mixer_oss snd_hda_intel snd_hda_codec af_packet snd_pcm snd_timer snd_page_alloc snd soundcore video thermal sbs i2c_ec i2c_core fan container button battery ac ide_cd binfmt_misc loop sata_nv libata scsi_mod dm_mod cpufreq_ondemand cpufreq_conservative cpufreq_powersave powernow_k8 freq_table processor tsdev evdev usbmouse usbhid ff_memless ohci1394 ieee1394 ehci_hcd ohci_hcd usbcore ext3 jbd Pid: 3920, comm: mplayer Not tainted 2.6.19-3mdv #1 RIP: 0010:[<ffffffff881b44b2>] [<ffffffff881b44b2>] :snd_pcm:snd_interval_list+0x5f/0xa5 RSP: 0018:ffff8100124f7b28 EFLAGS: 00210202 RAX: 0000000034d9dae7 RBX: ffff81002314c908 RCX: 0000000034d9dae7 RDX: ffff810034d9dae8 RSI: 0000000034d9dae8 RDI: ffff81002314ca30 RBP: ffff8100124f7b28 R08: 00000000124f7cd8 R09: 0000000000000001 R10: 0000000000555555 R11: 00000000ffffffff R12: ffff810038f4ab98 R13: 0000000000000017 R14: 0000000000000019 R15: 0000000000000017 FS: 00002adf5903d910(0000) GS:ffffffff8059c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff810108414684 CR3: 000000002e3ef000 CR4: 00000000000006e0 Process mplayer (pid: 3920, threadinfo ffff8100124f6000, task ffff810016e930c0) Stack: ffff8100124f7b38 ffffffff881b67dd ffff8100124f7ca8 ffffffff881b210d ffff810000000030 0000000300000002 0000000500000004 0000000700000006 0000000900000008 0000000b0000000a 0000000d0000000c 0000000f0000000e Call Trace: [<ffffffff881b67dd>] :snd_pcm:snd_pcm_hw_rule_list+0x29/0x2b [<ffffffff881b210d>] :snd_pcm:snd_pcm_hw_refine+0x292/0x3d9 [<ffffffff881b26cb>] :snd_pcm:snd_pcm_hw_refine_user+0x50/0x87 [<ffffffff881b288e>] :snd_pcm:snd_pcm_common_ioctl1+0x18c/0xd4c [<ffffffff881b3869>] :snd_pcm:snd_pcm_playback_ioctl1+0x1e4/0x201 [<ffffffff881b4136>] :snd_pcm:snd_pcm_playback_ioctl+0x2e/0x38 [<ffffffff8023f0d8>] do_ioctl+0x1b/0x50 [<ffffffff8022e629>] vfs_ioctl+0x224/0x236 [<ffffffff802489a1>] sys_ioctl+0x5f/0x82 [<ffffffff8025b11e>] system_call+0x7e/0x83 [<00002adf56675097>] Code: 8b 04 82 39 47 04 75 08 f6 47 08 02 75 04 eb 18 77 09 ff c9 RIP [<ffffffff881b44b2>] :snd_pcm:snd_interval_list+0x5f/0xa5 RSP <ffff8100124f7b28> CR2: ffff810108414684
I have the same error and same backtrace with 2.6.20-rc5, on the same hardware as comment 1. If that may help, I have found a photo of the hardware ( http://www.titor.net/module-dpGallery-display-id_img-126.html ), but I still do not know who created it. dmesg show this : input: USB Audio Device as /class/input/input2 input: USB HID v1.00 Device [USB Audio Device] on usb-0000:00:03.1-2 usbcore: registered new interface driver snd-usb-audio BUG: unable to handle kernel paging request at virtual address 09fa9284 printing eip: dcc62ea3 *pde = 00000000 Oops: 0000 [#1] Modules linked in: snd_usb_audio snd_usb_lib snd_rawmidi snd_hwdep nfsd exportfs lockd nfs_acl sunrpc ipv6 capability commoncap sis900 mii snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device 8021q snd_pcm_oss snd_mixer_oss snd_intel8x0 snd_ac97_codec af_packet ac97_bus snd_pcm snd_timer snd_page_alloc snd soundcore ide_cd cdrom binfmt_misc loop ntfs nls_iso8859_15 nls_cp850 vfat fat ext3 jbd dm_mod cpufreq_ondemand cpufreq_conservative cpufreq_powersave freq_table processor sis_agp agpgart evdev tsdev usbmouse usbhid hid ff_memless ehci_hcd ohci_hcd usbcore xfs CPU: 0 EIP: 0060:[<dcc62ea3>] Not tainted VLI EFLAGS: 00210202 (2.6.20-0.rc5-1mdv #1) EIP is at snd_interval_list+0x63/0xaa [snd_pcm] eax: 00000004 ebx: d057c650 ecx: cecbb5e2 edx: 09fa9284 esi: cecbb5e4 edi: 00000001 ebp: c9225ca4 esp: c9225c98 ds: 007b es: 007b ss: 0068 Process alsaplayer (pid: 4416, ti=c9224000 task=ca28cad0 task.ti=c9224000) Stack: c9225e34 d057c528 d057c528 c9225cb8 dcc64cbf c9225e64 ca632828 00000017 c9225de0 dcc60dd1 00000002 00000003 00000004 00000005 00000006 00000007 00000008 00000009 0000000a 0000000b 0000000c 0000000d 0000000e 0000000f Call Trace: [<c010425c>] show_trace_log_lvl+0x1a/0x2f [<c010430c>] show_stack_log_lvl+0x9b/0xa3 [<c01044a6>] show_registers+0x192/0x268 [<c0104666>] die+0xea/0x1ff [<c02c0eb3>] do_page_fault+0x457/0x536 [<c02bf864>] error_code+0x74/0x80 [<dcc64cbf>] snd_pcm_hw_rule_list+0x28/0x2d [snd_pcm] [<dcc60dd1>] snd_pcm_hw_refine+0x260/0x3b5 [snd_pcm] [<dcc6134f>] snd_pcm_hw_refine_user+0x42/0x6e [snd_pcm] [<dcc6150c>] snd_pcm_common_ioctl1+0x191/0xf91 [snd_pcm] [<dcc62a69>] snd_pcm_playback_ioctl1+0x39a/0x3b4 [snd_pcm] [<dcc62b12>] snd_pcm_playback_ioctl+0x2e/0x38 [snd_pcm] [<c016950c>] do_ioctl+0x1c/0x50 [<c0169740>] vfs_ioctl+0x200/0x217 [<c01697a0>] sys_ioctl+0x49/0x61 [<c0102c76>] sysenter_past_esp+0x5f/0x99 ======================= Code: eb 60 80 63 08 fe bf 01 00 00 00 89 03 eb 02 31 ff 8d 54 b2 fc 89 f1 eb 26 83 7d 08 00 74 0c b8 01 00 00 00 d3 e0 85 45 08 74 11 <8b> 02 39 43 04 75 08 f6 43 08 02 75 04 eb 19 77 0b 83 ea 04 49 EIP: [<dcc62ea3>] snd_interval_list+0x63/0xaa [snd_pcm] SS:ESP 0068:c9225c98
eww, longstanding kernel oops coming out of usb-audio, multiple reporters. I don't suppose anyone can tell us that this is fixed in 2.6.20-rc7?
I have just tested on i586 with 2.6.20 final, i have the same backtrace.
This is not limited to usb-audio: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=227938
The fix for usb-audio was missing in 2.6.20. They are in stable queue.
It is happening here: int snd_interval_list(struct snd_interval *i, unsigned int count, unsigned int *list, unsigned int mask) { unsigned int k; int changed = 0; for (k = 0; k < count; k++) { if (mask && !(mask & (1 << k))) continue; if (i->min == list[k] && !i->openmin) <================ goto _l1; 'list' is not a valid address
Could you check whether this happens with 2.6.21-rc1 kernel? There are tons of fixes (because most patches missed 2.6.20-merge window mistakenly). I guess this has been already fixed there.
It no longer crash on i586, but I do not have any sound coming from the speaker. I tried to raise the volume without sucess, I will test on another computer and report.
Please test with latest (2.6.22-rc5 and above) Is the problem still there? Thanks.
Michael, I suppose your problem has been fixed. Please reopen if confirmed with latest kernel.
For the record, I no longer have access to the hardware since 8 months unfortunatly, so yes, the crash is fixed per comment #9, but I do not know if there is hardware is working fine ( ie if there is sound ).
Thanks for the update. Hmm, it's not the best resolution if the problem still untested. If you will get in touch with that hardware again, please let us know how it works. We'll wait for someone to confirm or reopen this bug I guess.