Bug 7681 - backtrace with snd-usb-audio on 2.6.19.1
Summary: backtrace with snd-usb-audio on 2.6.19.1
Status: CLOSED PATCH_ALREADY_AVAILABLE
Alias: None
Product: Drivers
Classification: Unclassified
Component: Sound(ALSA) (show other bugs)
Hardware: i386 Linux
: P2 normal
Assignee: Jaroslav Kysela
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-12-14 03:13 UTC by Michael Scherer
Modified: 2008-04-13 23:09 UTC (History)
3 users (show)

See Also:
Kernel Version: 2.6.19.1 vanilla
Subsystem:
Regression: ---
Bisected commit-id:


Attachments

Description Michael Scherer 2006-12-14 03:13:17 UTC
Most recent kernel where this bug did *NOT* occur: None, as the hardware was 
not supported before
Distribution: Mandriva cooker 
Hardware Environment: i586
Software Environment: 2.6.19.1 ( vanilla, without patch )
Problem Description:


Steps to reproduce:
Plug the usb hardware ( two usb speakers, usb id pasted after )

$ alsaplayer -o alsa -d hw:1,0   
Zelda_LinkAwake_SeasideLullaby_\(Windfish_Ballade\)_OC_ReMix.mp3
error on snd_pcm_hw_par/ams_any
Unavailable hw params:
ACCESS:  MMAP_INTERLEAVED RW_INTERLEAVED
FORMAT:  S16_LE
SUBFORMAT:  STD
SAMPLE_BITS: 16
FRAME_BITS: 32
CHANNELS: 2
RATE: NONE
PERIOD_TIME: (1002 2796203)
PERIOD_SIZE: [47 131072]
PERIOD_BYTES: [188 524288]
PERIODS: [2 1024]
BUFFER_TIME: (2005 5592406)
BUFFER_SIZE: [94 262144]
BUFFER_BYTES: [376 1048576]
TICK_TIME: 4000
zsh: segmentation fault  alsaplayer -o alsa -d hw:1,0

running dmesg show this :

ohci_hcd 0000:00:03.0: auto-wakeup
usb 1-2: new full speed USB device using ohci_hcd and address 2
usb 1-2: configuration #1 chosen from 1 choice
input: USB Audio Device as /class/input/input2
input: USB HID v1.00 Device [USB Audio Device] on usb-0000:00:03.0-2
usbcore: registered new interface driver snd-usb-audio
BUG: unable to handle kernel paging request at virtual address fe22a940
 printing eip:
dcc75ee7
*pde = 00000000
Oops: 0000 [#1]
Modules linked in: snd_usb_audio snd_usb_lib snd_rawmidi snd_hwdep ip_queue 
iptable_raw xt_policy xt_multiport ipt_ULOG ipt_TTL ipt_ttl ipt_TOS ipt_tos 
ipt_TCPMSS ipt_SAME ipt_REJECT ipt_REDIRECT ipt_recent ipt_owner ipt_NETMAP 
ipt_MASQUERADE ipt_LOG ipt_iprange ipt_hashlimit ipt_ECN ipt_ecn ipt_CLUSTERIP 
ipt_ah ipt_addrtype ip_nat_tftp ip_nat_snmp_basic ip_nat_pptp ip_nat_irc 
ip_nat_ftp ip_nat_amanda ip_conntrack_tftp ip_conntrack_pptp 
ip_conntrack_netbios_ns ip_conntrack_irc ip_conntrack_ftp ts_kmp 
ip_conntrack_amanda xt_tcpmss xt_pkttype xt_physdev bridge xt_NFQUEUE xt_MARK 
xt_mark xt_mac xt_limit xt_length xt_helper xt_dccp xt_conntrack xt_CONNMARK 
xt_connmark xt_CLASSIFY xt_tcpudp xt_state nfsd iptable_nat exportfs ip_nat 
ip_conntrack iptable_mangle lockd nfnetlink nfs_acl sunrpc ipv6 iptable_filter 
ip_tables x_tables capability commoncap sis900 mii snd_seq_dummy snd_seq_oss 
snd_seq_midi_event 8021q snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss 
af_packet snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_pcm snd_timer 
snd_page_alloc snd soundcore ide_cd cdrom binfmt_misc loop ntfs nls_iso8859_15 
nls_cp850 vfat fat ext3 jbd dm_mod cpufreq_ondemand cpufreq_conservative 
cpufreq_powersave freq_table processor sis_agp agpgart tsdev evdev usbmouse 
usbhid ff_memless ehci_hcd ohci_hcd usbcore xfs
CPU:    0
EIP:    0060:[<dcc75ee7>]    Not tainted VLI
EFLAGS: 00210286   (2.6.19.1-1mdv #1)
EIP is at snd_interval_list+0x63/0xaa [snd_pcm]
eax: 80000000   ebx: c72a18e0   ecx: cc6d53ff   edx: fe22a940
esi: cc6d5404   edi: 00000001   ebp: c4fedca8   esp: c4fedc9c
ds: 007b   es: 007b   ss: 0068
Process alsaplayer (pid: 22952, ti=c4fec000 task=c535a050 task.ti=c4fec000)
Stack: c4fede38 c72a17b8 c72a17b8 c4fedcbc dcc77d2d c031e950 c9461bc4 00000017
       c4fedde4 dcc73dfd dbc34000 dbc69584 00000000 00000002 00000003 00000004
       00000005 00000006 00000007 00000008 00000009 0000000a 0000000b 0000000c
Call Trace:
 [<dcc77d2d>] snd_pcm_hw_rule_list+0x28/0x2d [snd_pcm]
 [<dcc73dfd>] snd_pcm_hw_refine+0x260/0x3b5 [snd_pcm]
 [<dcc7437c>] snd_pcm_hw_refine_user+0x42/0x6e [snd_pcm]
 [<dcc74539>] snd_pcm_common_ioctl1+0x191/0xf95 [snd_pcm]
 [<dcc75a9a>] snd_pcm_playback_ioctl1+0x39a/0x3b4 [snd_pcm]
 [<dcc75b43>] snd_pcm_playback_ioctl+0x2e/0x3b [snd_pcm]
 [<c016acdc>] do_ioctl+0x1c/0x50
 [<c016af10>] vfs_ioctl+0x200/0x217
 [<c016af70>] sys_ioctl+0x49/0x61
 [<c0102cdd>] sysenter_past_esp+0x56/0x99
 [<b7f30410>] 0xb7f30410
 =======================
Code: eb 60 80 63 08 fe bf 01 00 00 00 89 03 eb 02 31 ff 8d 54 b2 fc 89 f1 eb 
26 83 7d 08 00 74 0c b8 01 00 00 00 d3 e0 85 45 08 74 11 <8b> 02 39 43 04 75 
08 f6 43 08 02 75 04 eb 19 77 0b 83 ea 04 49
EIP: [<dcc75ee7>] snd_interval_list+0x63/0xaa [snd_pcm] SS:ESP 0068:c4fedc9c

$ uname -a
Linux volrath.local 2.6.19.1-1mdv #1 Tue Dec 12 17:34:09 EST 2006 i686 AMD 
Sempron(tm) 2400+ GNU/Linux

$ lsusb
Bus 003 Device 001: ID 0000:0000
Bus 002 Device 003: ID 046d:c00e Logitech, Inc. M-BJ69 Optical Wheel Mouse
Bus 002 Device 001: ID 0000:0000
Bus 001 Device 002: ID 0e6a:0310 Megawin Technology Co., Ltd
Bus 001 Device 001: ID 0000:0000

is there any other information i can give ?
Comment 1 Michael Scherer 2006-12-14 09:24:36 UTC
I have also reproduced on another computer, running 2.6.19 :

~ $ uname -a 
Linux takara 2.6.19-3mdv #1 Wed Dec 6 08:49:45 EST 2006 x86_64 AMD Athlon(tm) 64
Processor 3200+ GNU/Linux
$ mplayer -ao alsa:device=hw=2.0
./Zelda_LinkAwake_SeasideLullaby_\(Windfish_Ballade\)_OC_ReMix.mp3  


Unable to handle kernel paging request at ffff810108414684 RIP: 
 [<ffffffff881b44b2>] :snd_pcm:snd_interval_list+0x5f/0xa5
PGD 8063 PUD 0 
Oops: 0000 [1] 
CPU 0 
Modules linked in: nls_utf8 udf snd_usb_audio snd_usb_lib snd_hwdep autofs4 ipv6
snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq eepro100 mii forcedeth
snd_ens1371 gameport snd_rawmidi snd_seq_device snd_ac97_codec snd_ac97_bus
snd_pcm_oss snd_mixer_oss snd_hda_intel snd_hda_codec af_packet snd_pcm
snd_timer snd_page_alloc snd soundcore video thermal sbs i2c_ec i2c_core fan
container button battery ac ide_cd binfmt_misc loop sata_nv libata scsi_mod
dm_mod cpufreq_ondemand cpufreq_conservative cpufreq_powersave powernow_k8
freq_table processor tsdev evdev usbmouse usbhid ff_memless ohci1394 ieee1394
ehci_hcd ohci_hcd usbcore ext3 jbd
Pid: 3920, comm: mplayer Not tainted 2.6.19-3mdv #1
RIP: 0010:[<ffffffff881b44b2>]  [<ffffffff881b44b2>]
:snd_pcm:snd_interval_list+0x5f/0xa5
RSP: 0018:ffff8100124f7b28  EFLAGS: 00210202
RAX: 0000000034d9dae7 RBX: ffff81002314c908 RCX: 0000000034d9dae7
RDX: ffff810034d9dae8 RSI: 0000000034d9dae8 RDI: ffff81002314ca30
RBP: ffff8100124f7b28 R08: 00000000124f7cd8 R09: 0000000000000001
R10: 0000000000555555 R11: 00000000ffffffff R12: ffff810038f4ab98
R13: 0000000000000017 R14: 0000000000000019 R15: 0000000000000017
FS:  00002adf5903d910(0000) GS:ffffffff8059c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff810108414684 CR3: 000000002e3ef000 CR4: 00000000000006e0
Process mplayer (pid: 3920, threadinfo ffff8100124f6000, task ffff810016e930c0)
Stack:  ffff8100124f7b38 ffffffff881b67dd ffff8100124f7ca8 ffffffff881b210d
 ffff810000000030 0000000300000002 0000000500000004 0000000700000006
 0000000900000008 0000000b0000000a 0000000d0000000c 0000000f0000000e
Call Trace:
 [<ffffffff881b67dd>] :snd_pcm:snd_pcm_hw_rule_list+0x29/0x2b
 [<ffffffff881b210d>] :snd_pcm:snd_pcm_hw_refine+0x292/0x3d9
 [<ffffffff881b26cb>] :snd_pcm:snd_pcm_hw_refine_user+0x50/0x87
 [<ffffffff881b288e>] :snd_pcm:snd_pcm_common_ioctl1+0x18c/0xd4c
 [<ffffffff881b3869>] :snd_pcm:snd_pcm_playback_ioctl1+0x1e4/0x201
 [<ffffffff881b4136>] :snd_pcm:snd_pcm_playback_ioctl+0x2e/0x38
 [<ffffffff8023f0d8>] do_ioctl+0x1b/0x50
 [<ffffffff8022e629>] vfs_ioctl+0x224/0x236
 [<ffffffff802489a1>] sys_ioctl+0x5f/0x82
 [<ffffffff8025b11e>] system_call+0x7e/0x83
 [<00002adf56675097>]


Code: 8b 04 82 39 47 04 75 08 f6 47 08 02 75 04 eb 18 77 09 ff c9 
RIP  [<ffffffff881b44b2>] :snd_pcm:snd_interval_list+0x5f/0xa5
 RSP <ffff8100124f7b28>
CR2: ffff810108414684
 
Comment 2 Michael Scherer 2007-01-16 05:40:12 UTC
I have the same error and same backtrace with 2.6.20-rc5, on the same hardware 
as comment 1. If that may help, I have found a photo of the hardware ( 
http://www.titor.net/module-dpGallery-display-id_img-126.html ), but I still 
do not know who created it.

dmesg show this :

input: USB Audio Device as /class/input/input2
input: USB HID v1.00 Device [USB Audio Device] on usb-0000:00:03.1-2
usbcore: registered new interface driver snd-usb-audio
BUG: unable to handle kernel paging request at virtual address 09fa9284
 printing eip:
dcc62ea3
*pde = 00000000
Oops: 0000 [#1]
Modules linked in: snd_usb_audio snd_usb_lib snd_rawmidi snd_hwdep nfsd 
exportfs lockd nfs_acl sunrpc ipv6 capability commoncap sis900 mii 
snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device 8021q 
snd_pcm_oss snd_mixer_oss snd_intel8x0 snd_ac97_codec af_packet ac97_bus 
snd_pcm snd_timer snd_page_alloc snd soundcore ide_cd cdrom binfmt_misc loop 
ntfs nls_iso8859_15 nls_cp850 vfat fat ext3 jbd dm_mod cpufreq_ondemand 
cpufreq_conservative cpufreq_powersave freq_table processor sis_agp agpgart 
evdev tsdev usbmouse usbhid hid ff_memless ehci_hcd ohci_hcd usbcore xfs
CPU:    0
EIP:    0060:[<dcc62ea3>]    Not tainted VLI
EFLAGS: 00210202   (2.6.20-0.rc5-1mdv #1)
EIP is at snd_interval_list+0x63/0xaa [snd_pcm]
eax: 00000004   ebx: d057c650   ecx: cecbb5e2   edx: 09fa9284
esi: cecbb5e4   edi: 00000001   ebp: c9225ca4   esp: c9225c98
ds: 007b   es: 007b   ss: 0068
Process alsaplayer (pid: 4416, ti=c9224000 task=ca28cad0 task.ti=c9224000)
Stack: c9225e34 d057c528 d057c528 c9225cb8 dcc64cbf c9225e64 ca632828 00000017
       c9225de0 dcc60dd1 00000002 00000003 00000004 00000005 00000006 00000007
       00000008 00000009 0000000a 0000000b 0000000c 0000000d 0000000e 0000000f
Call Trace:
 [<c010425c>] show_trace_log_lvl+0x1a/0x2f
 [<c010430c>] show_stack_log_lvl+0x9b/0xa3
 [<c01044a6>] show_registers+0x192/0x268
 [<c0104666>] die+0xea/0x1ff
 [<c02c0eb3>] do_page_fault+0x457/0x536
 [<c02bf864>] error_code+0x74/0x80
 [<dcc64cbf>] snd_pcm_hw_rule_list+0x28/0x2d [snd_pcm]
 [<dcc60dd1>] snd_pcm_hw_refine+0x260/0x3b5 [snd_pcm]
 [<dcc6134f>] snd_pcm_hw_refine_user+0x42/0x6e [snd_pcm]
 [<dcc6150c>] snd_pcm_common_ioctl1+0x191/0xf91 [snd_pcm]
 [<dcc62a69>] snd_pcm_playback_ioctl1+0x39a/0x3b4 [snd_pcm]
 [<dcc62b12>] snd_pcm_playback_ioctl+0x2e/0x38 [snd_pcm]
 [<c016950c>] do_ioctl+0x1c/0x50
 [<c0169740>] vfs_ioctl+0x200/0x217
 [<c01697a0>] sys_ioctl+0x49/0x61
 [<c0102c76>] sysenter_past_esp+0x5f/0x99
 =======================
Code: eb 60 80 63 08 fe bf 01 00 00 00 89 03 eb 02 31 ff 8d 54 b2 fc 89 f1 eb 
26 83 7d 08 00 74 0c b8 01 00 00 00 d3 e0 85 45 08 74 11 <8b> 02 39 43 04 75 
08 f6 43 08 02 75 04 eb 19 77 0b 83 ea 04 49
EIP: [<dcc62ea3>] snd_interval_list+0x63/0xaa [snd_pcm] SS:ESP 0068:c9225c98
Comment 3 Andrew Morton 2007-01-31 00:17:39 UTC
eww, longstanding kernel oops coming out of usb-audio, multiple reporters.

I don't suppose anyone can tell us that this is fixed in 2.6.20-rc7?
Comment 4 Michael Scherer 2007-02-09 07:19:26 UTC
I have just tested on i586 with 2.6.20 final, i have the same backtrace.

Comment 5 Chuck Ebbert 2007-02-23 07:40:52 UTC
This is not limited to usb-audio:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=227938
Comment 6 Takashi Iwai 2007-02-23 07:49:34 UTC
The fix for usb-audio was missing in 2.6.20.  They are in stable queue.
Comment 7 Chuck Ebbert 2007-02-23 09:18:44 UTC
It is happening here:

int snd_interval_list(struct snd_interval *i, unsigned int count, unsigned int
*list, unsigned int mask)
{
        unsigned int k;
        int changed = 0;
        for (k = 0; k < count; k++) {
                if (mask && !(mask & (1 << k)))
                        continue;
                if (i->min == list[k] && !i->openmin) <================
                        goto _l1;

'list' is not a valid address
Comment 8 Takashi Iwai 2007-02-23 10:18:53 UTC
Could you check whether this happens with 2.6.21-rc1 kernel?  There are tons of
fixes (because most patches missed 2.6.20-merge window mistakenly).
I guess this has been already fixed there.
Comment 9 Michael Scherer 2007-02-26 02:47:37 UTC
It no longer crash on i586, but I do not have any sound coming from the 
speaker. I tried to raise the volume without sucess, I will test on another 
computer and report.
Comment 10 Natalie Protasevich 2007-06-19 03:27:18 UTC
Please test with latest (2.6.22-rc5 and above)
Is the problem still there?
Thanks.
Comment 11 Natalie Protasevich 2008-04-13 17:51:44 UTC
Michael, I suppose your problem has been fixed. Please reopen if confirmed with latest kernel.
Comment 12 Michael Scherer 2008-04-13 22:43:29 UTC
For the record, I no longer have access to the hardware since 8 months unfortunatly, so yes, the crash is fixed per comment #9, but I do not know if there is hardware is working fine ( ie if there is sound ).
Comment 13 Natalie Protasevich 2008-04-13 23:09:24 UTC
Thanks for the update. Hmm, it's not the best resolution if the problem still untested. If you will get in touch with that hardware again, please let us know how it works. We'll wait for someone to confirm or reopen this bug I guess.

Note You need to log in before you can comment on or make changes to this bug.