Disconnecting USB headset while audio playing results in kernel panic

Bug #715318 reported by Cody A.W. Somerville
34
This bug affects 4 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Maverick
Invalid
Undecided
Unassigned
Natty
Fix Released
Undecided
Unassigned

Bug Description

Recently in Maverick, disconnecting my USB headset (Platronic) while audio is playing has started resulting in kernel panics. This is 100% reproducible.

ProblemType: KernelCrash
DistroRelease: Ubuntu 10.10
Package: linux-image-2.6.35-25-generic 2.6.35-25.44
Regression: Yes
Reproducible: Yes
ProcVersionSignature: Ubuntu 2.6.35-25.44-generic 2.6.35.10
Uname: Linux 2.6.35-25-generic x86_64
NonfreeKernelModules: nvidia wl
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.23.
AplayDevices:
 **** List of PLAYBACK Hardware Devices ****
 card 0: Intel [HDA Intel], device 0: STAC92xx Analog [STAC92xx Analog]
   Subdevices: 1/1
   Subdevice #0: subdevice #0
Architecture: amd64
ArecordDevices:
 **** List of CAPTURE Hardware Devices ****
 card 0: Intel [HDA Intel], device 0: STAC92xx Analog [STAC92xx Analog]
   Subdevices: 2/2
   Subdevice #0: subdevice #0
   Subdevice #1: subdevice #1
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: cody-somerville 1801 F.... xfce4-volumed
                      cody-somerville 1814 F.... pulseaudio
                      cody-somerville 1844 F.... xfce4-mixer-plu
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info:
 Card hw:0 'Intel'/'HDA Intel at 0xf3300000 irq 48'
   Mixer name : 'IDT 92HD81B1C5'
   Components : 'HDA:111d76d5,102802bc,00100302'
   Controls : 14
   Simple ctrls : 8
Date: Tue Feb 8 12:46:24 2011
HibernationDevice: RESUME=UUID=a7e620fa-14d8-40ad-a2b0-d7a075f6ea12
MachineType: Dell Inc. Vostro 1520
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.35-25-generic root=UUID=02124c02-cd15-48f0-879a-42110a537f2c ro crashkernel=384M-2G:64M,2G-:128M quiet splash
RelatedPackageVersions: linux-firmware 1.38.3
RfKill:

SourcePackage: linux
dmi.bios.date: 04/08/2009
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A02
dmi.board.name: 0T808J
dmi.board.vendor: Dell Inc.
dmi.chassis.type: 8
dmi.chassis.vendor: Dell Inc.
dmi.chassis.version: N/A
dmi.modalias: dmi:bvnDellInc.:bvrA02:bd04/08/2009:svnDellInc.:pnVostro1520:pvrNull:rvnDellInc.:rn0T808J:rvr:cvnDellInc.:ct8:cvrN/A:
dmi.product.name: Vostro 1520
dmi.product.version: Null
dmi.sys.vendor: Dell Inc.

Revision history for this message
Cody A.W. Somerville (cody-somerville) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Crash report cannot be processed

Thank you for your report!

However, processing it in order to get sufficient information for the
developers failed (it does not generate an useful symbolic stack trace). This
might be caused by some outdated packages which were installed on your system
at the time of the report:

linux

Please upgrade your system to the latest package versions. If you still
encounter the crash, please file a new report.

Thank you for your understanding, and sorry for the inconvenience!

Changed in linux (Ubuntu):
status: New → Invalid
tags: removed: need-amd64-retrace
Revision history for this message
Cody A.W. Somerville (cody-somerville) wrote :
Download full text (3.4 KiB)

PID: 2510 TASK: ffff8801372916e0 CPU: 0 COMMAND: "udevd"
 #0 [ffff880001e07e60] crash_nmi_callback at ffffffff810292b6
 #1 [ffff880001e07e70] notifier_call_chain at ffffffff8158e7b6
 #2 [ffff880001e07eb0] atomic_notifier_call_chain at ffffffff8158e81a
 #3 [ffff880001e07ec0] notify_die at ffffffff8158e84e
 #4 [ffff880001e07ef0] default_do_nmi at ffffffff8158b988
 #5 [ffff880001e07f30] do_nmi at ffffffff8158bbf0
 #6 [ffff880001e07f50] nmi at ffffffff8158b340
    [exception RIP: __slab_free+39]
    RIP: ffffffff811424b7 RSP: ffff880100179b68 RFLAGS: 00000082
    RAX: ffff880001e186f8 RBX: ffffea0003803c98 RCX: ffffffff81129af8
    RDX: ffff880100115ab0 RSI: ffffea0003803c98 RDI: ffff88013fc03240
    RBP: ffff880100179b98 R8: dead000000200200 R9: dead000000100100
    R10: 000000006efef848 R11: 00000000a48661fb R12: ffff88013fc03240
    R13: ffff880100115ab0 R14: 0000000000000000 R15: ffff8801001844c0
    ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018
--- <NMI exception stack> ---
 #7 [ffff880100179b68] __slab_free at ffffffff811424b7
 #8 [ffff880100179ba0] kmem_cache_free at ffffffff81142680
 #9 [ffff880100179bd0] anon_vma_chain_free at ffffffff81129af8
#10 [ffff880100179be0] unlink_anon_vmas at ffffffff81129b8b
#11 [ffff880100179c30] free_pgtables at ffffffff8111ea91
#12 [ffff880100179c80] exit_mmap at ffffffff81123e41
#13 [ffff880100179cc0] mmput at ffffffff8105e67d
#14 [ffff880100179ce0] exec_mmap at ffffffff811591e6
#15 [ffff880100179d30] flush_old_exec at ffffffff81159309
#16 [ffff880100179d60] load_elf_binary at ffffffff8119dfd2
#17 [ffff880100179e50] search_binary_handler at ffffffff8115a634
#18 [ffff880100179eb0] do_execve at ffffffff8115abc1
#19 [ffff880100179f20] sys_execve at ffffffff810127ca
#20 [ffff880100179f50] stub_execve at ffffffff8100a54a
    RIP: 00007f699963d5b7 RSP: 00007fffb93773e8 RFLAGS: 00000217
    RAX: 000000000000003b RBX: 00007f699bb83010 RCX: ffffffffffffffff
    RDX: 00007f699bc07920 RSI: 00007fffb9377440 RDI: 00007fffb9378900
    RBP: 0000000000000004 R8: 0000000000000281 R9: 0000000000000281
    R10: 0000000000000008 R11: 0000000000000217 R12: 00007f6999f720b0
    R13: 00007f6999f72001 R14: 0000000000000000 R15: 00007fffb9379160
    ORIG_RAX: 000000000000003b CS: 0033 SS: 002b

PID: 1773 TASK: ffff88011a4496e0 CPU: 1 COMMAND: "xfce4-power-man"
 #0 [ffff880001f03d30] usb_hcd_giveback_urb at ffffffff81406234
 #1 [ffff880001f03d60] uhci_giveback_urb at ffffffff814279c5
 #2 [ffff880001f03dc0] uhci_scan_qh at ffffffff81427e97
 #3 [ffff880001f03e10] uhci_scan_schedule at ffffffff814282bd
 #4 [ffff880001f03e70] uhci_irq at ffffffff8142a571
 #5 [ffff880001f03eb0] usb_hcd_irq at ffffffff81405880
 #6 [ffff880001f03ed0] handle_IRQ_event at ffffffff810c9d10
 #7 [ffff880001f03f20] handle_fasteoi_irq at ffffffff810cc5c9
 #8 [ffff880001f03f60] handle_irq at ffffffff8100cb12
 #9 [ffff880001f03f80] do_IRQ at ffffffff815921ec
--- <IRQ stack> ---
#10 [ffff88011a78df58] ret_from_intr at ffffffff8158add3
    RIP: 00007fddc66d8510 RSP: 00007fff2980c9d8 RFLAGS: 00000202
    RAX: 00007fddc7595c50 RBX: 0000000001fa0250 RCX: 00007fddc7caa640
    RDX: 0000000001fa07b0 RSI: 0000000000000001 RDI:...

Read more...

Changed in linux (Ubuntu):
status: Invalid → Confirmed
Revision history for this message
Cody A.W. Somerville (cody-somerville) wrote :
Download full text (4.8 KiB)

[ 326.030107] usb 4-1: new full speed USB device using uhci_hcd and address 2
[ 326.486825] input: Plantronics Plantronics .Audio 646 DSP as /devices/pci0000:00/0000:00:1a.1/usb4/4-1/4-1:1.3/input/input10
[ 326.487127] generic-usb 0003:047F:C001.0002: input,hiddev96,hidraw1: USB HID v1.00 Device [Plantronics Plantronics .Audio 646 DSP] on usb-0000:00:1a.1-1/input3
[ 326.534574] 2:1:1: endpoint lacks sample rate attribute bit, cannot set.
[ 326.536551] 2:2:1: endpoint lacks sample rate attribute bit, cannot set.
[ 326.591457] usbcore: registered new interface driver snd-usb-audio
[ 326.658655] 2:1:1: endpoint lacks sample rate attribute bit, cannot set.
[ 326.667640] 2:2:1: endpoint lacks sample rate attribute bit, cannot set.
[ 326.694685] 2:2:1: endpoint lacks sample rate attribute bit, cannot set.
[ 326.699725] 2:1:1: endpoint lacks sample rate attribute bit, cannot set.
[ 326.730675] 2:2:1: endpoint lacks sample rate attribute bit, cannot set.
[ 327.040229] usb 4-1: USB disconnect, address 2
[ 327.043831] BUG: unable to handle kernel NULL pointer dereference at 0000000000000098
[ 327.043846] IP: [<ffffffffa0de2a6b>] snd_complete_urb+0x6b/0xd0 [snd_usb_audio]
[ 327.043871] PGD 11a5ba067 PUD 127f31067 PMD 0
[ 327.043883] Oops: 0000 [#1] SMP
[ 327.043890] last sysfs file: /sys/devices/pci0000:00/0000:00:1a.1/usb4/4-1/4-1:1.0/sound/card1/uevent
[ 327.043899] CPU 1
[ 327.043902] Modules linked in: snd_usb_audio snd_usbmidi_lib binfmt_misc ip6table_filter ip6_tables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT xt_tcpudp iptable_filter ip_tables x_tables bridge stp kvm_intel kvm parport_pc ppdev dm_crypt snd_hda_codec_idt nvidia(P) snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi lib80211_crypt_tkip snd_seq_midi_event wl(P) snd_seq dell_wmi_aio dcdbas psmouse serio_raw joydev snd_timer snd_seq_device snd lp soundcore lib80211 snd_page_alloc parport usbhid sdhci_pci hid video output ahci libahci r8169 mii sdhci led_class firewire_ohci firewire_core crc_itu_t intel_agp
[ 327.044021]
[ 327.044029] Pid: 1773, comm: xfce4-power-man Tainted: P 2.6.35-25-generic #44-Ubuntu 0T808J/Vostro 1520
[ 327.044036] RIP: 0010:[<ffffffffa0de2a6b>] [<ffffffffa0de2a6b>] snd_complete_urb+0x6b/0xd0 [snd_usb_audio]
[ 327.044056] RSP: 0000:ffff880001f03d08 EFLAGS: 00010002
[ 327.044062] RAX: 0000000000000200 RBX: ffff880037a69aa0 RCX: 0000000000000002
[ 327.044068] RDX: ffff88012744af00 RSI: 0000000000000000 RDI: ffff88012744af00
[ 327.044074] RBP: ffff880001f03d28 R08: 0000000000000206 R09: ffff88003780a930
[ 327.044080] R10: ffff880136004e90 R11: 0000000000000001 R12: ffff880037a69bb8
[ 327.044086] R13: ffff88012744af00 R14: 0000000000000000 R15: ffff880137155000
[ 327.044093] FS: 00007fddc8f47920(0000) GS:ffff880001f00000(0000) knlGS:0000000000000000
[ 327.044101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 327.044107] CR2: 0000000000000098 CR3: 000000011a5b3000 CR4: 00000000000406e0
[ 327.044113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 327.044120] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000...

Read more...

visibility: private → public
Revision history for this message
David Henningsson (diwic) wrote :

A patch, for testing, has been posted upstream, let me know if you need help testing it: http://mailman.alsa-project.org/pipermail/alsa-devel/2011-February/037097.html

Changed in linux (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Cody A.W. Somerville (cody-somerville) wrote :

If you could build a patched kernel in a PPA, I'd be happy to test.

Revision history for this message
Cody A.W. Somerville (cody-somerville) wrote :

I've tested the patch and can confirm it appears to fix the issue. :-)

Revision history for this message
David Henningsson (diwic) wrote :

Thanks!

Meanwhile the fix has been committed as http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git;a=commit;h=382225e62bdb8059b7f915b133426425516dd300 and cc:ed to stable, so it should reach Natty soon.

Changed in linux (Ubuntu):
status: Incomplete → Fix Committed
tags: added: regression-release
removed: regression-potential
Changed in linux (Ubuntu Maverick):
status: New → Triaged
Revision history for this message
Andy Whitcroft (apw) wrote :

This fix hit mainline in v2.6.38-rc7 which is now in the Natty source repository, and will be in the next upload. Fix Committed.

tags: removed: needs-upstream-testing
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 2.6.38-6.33

---------------
linux (2.6.38-6.33) natty; urgency=low

  [ Andy Whitcroft ]

  * d-i -- enable speakup-modules udeb
    - LP: #672699
  * rebase to 493f3358cb289ccf716c5a14fa5bb52ab75943e5
  * [Config] debian PPC64 configuration
  * [Config] cleanup powerpc config fixing unexpected inconsistancies
  * [Config] resync ppc64 configuration
  * SAUCE: match up ENTRY/END naming for 32/64 bit
  * rebase to fb62c00a6d8942775abc23d1621db1252e2d93d1
  * [Config] update configs after rebase to
    fb62c00a6d8942775abc23d1621db1252e2d93d1
  * [Config] pps_gen_parport no longer built

  [ Corentin Chary ]

  * SAUCE: (drop after 2.6.38) eeepc-wmi: reorder keymap
    - LP: #689393
  * SAUCE: (drop after 2.6.38) eeepc-wmi: add wlan key found on 1015P
    - LP: #689393

  [ John Johansen ]

  * SAUCE: Fix aufs calling of security_path_mknod
    - LP: #724456

  [ Kees Cook ]

  * SAUCE: proc: hide kernel addresses via %pK in /proc/<pid>/stack

  [ Tim Gardner ]

  * rebase to 2.6.38-rc7

  [ Upstream Kernel Changes ]

  * Revert "drm/i915: fix corruptions on i8xx due to relaxed fencing"

  [ Major Kernel Changes ]

  * rebase from v2.6.38-rc6 to v2.6.38-rc7 +
    fb62c00a6d8942775abc23d1621db1252e2d93d1
    - LP: #721389
    - LP: #722925
    - LP: #723672
    - LP: #723676
    - LP: #715318
 -- Andy Whitcroft <email address hidden> Mon, 07 Mar 2011 15:33:17 +0000

Changed in linux (Ubuntu):
status: Fix Committed → Fix Released
Revision history for this message
Julian Wiedmann (jwiedmann) wrote :

This release has reached end-of-life [0].

[0] https://wiki.ubuntu.com/Releases

Changed in linux (Ubuntu Maverick):
status: Triaged → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.