April 2016 - Alsa-devel - mailman.alsa-project.org

[alsa-devel] [PATCH V5 0/2] ASoC: Add core API to register DMI names to card
by han.lu＠intel.com 06 Apr '16

06 Apr '16

From: "Lu, Han" <han.lu(a)intel.com> Share more product information, for user space utils such as PA and UCM to distinguish different products. 1. Add a core API to register DMI names to card. 2. Apply the API to bytcr-rt5640 driver. changes on V5: 1. Use independent space to store card long_name, to avoid irrelavant info sharing from card component 2. Use letter ';' instead of ':' to separate strings in long name, in case name strings may also contain ':' and confusing user 3. Fix error that vendor name and firmware name were not optional changes on V4: 1. Replace kmalloc() and snprintf() with ksaprintf() to simplify code changes on V3: 1. Split the core API and the API call to two patches 2. Replace misused strcat() with snprintf() 3. Code and comment fix Lu, Han (2): ASoC: core: add API for registering DMI card names ASoC: bytcr-rt5640: register DMI names for card include/sound/soc.h | 3 ++ sound/soc/intel/boards/bytcr_rt5640.c | 13 +++++++ sound/soc/soc-core.c | 67 +++++++++++++++++++++++++++++++++++ 3 files changed, 83 insertions(+) -- 2.5.0

3 7

[alsa-devel] [PATCH] ALSA: intel8x0: Drop superfluous VM checks
by Takashi Iwai 06 Apr '16

06 Apr '16

intel8x0 driver has the inside_vm check for skipping a buggy hardware workaround in the PCM pointer callback in the commit [228cf79376f1: ALSA: intel8x0: Improve performance in virtual environment]. This was originally applied to all devices on known VMs, but the code was switched to use the PCI ID matching for applying to only known devices (KVM and Parallels), in order to avoid applying wrongly to VT-d and other such cases, in the commit [7fb4f392bd27: ALSA: intel8x0: improve virtual environment detection]. Meanwhile, the original VM check was kept even after switching to the PCI ID matching. It was partly because we weren't 100% sure whether we had covered all well, and partly because this would help identifying the issue once when a user of another VM hit the same problem or a regression. Currently the VM check is used only for showing the kernel message that the VM-optimization isn't applied, and the VM check itself doesn't change the actual driver behavior at all. Despite the relatively safe driver behavior, the code caught attention of developers badly and brought many confusion / misunderstanding. Since we've got neither regression nor enhancement report for other VMs for five years long, it's likely safe to drop this superfluous VM check now. The module option is still kept, so if a user still needs to adjust, it can be applied as was. Cc: Andy Lutomirski <luto(a)amacapital.net> Cc: Luis R. Rodriguez <mcgrof(a)kernel.org> Cc: Konstantin Ozerkov <kozerkov(a)parallels.com> Signed-off-by: Takashi Iwai <tiwai(a)suse.de> --- sound/pci/intel8x0.c | 20 +++----------------- 1 file changed, 3 insertions(+), 17 deletions(-) diff --git a/sound/pci/intel8x0.c b/sound/pci/intel8x0.c index 8151318a69a2..9720a30dbfff 100644 --- a/sound/pci/intel8x0.c +++ b/sound/pci/intel8x0.c @@ -42,12 +42,6 @@ #include <asm/pgtable.h> #include <asm/cacheflush.h> -#ifdef CONFIG_KVM_GUEST -#include <linux/kvm_para.h> -#else -#define kvm_para_available() (0) -#endif - MODULE_AUTHOR("Jaroslav Kysela <perex(a)perex.cz>"); MODULE_DESCRIPTION("Intel 82801AA,82901AB,i810,i820,i830,i840,i845,MX440; SiS 7012; Ali 5455"); MODULE_LICENSE("GPL"); @@ -2972,25 +2966,17 @@ static int snd_intel8x0_inside_vm(struct pci_dev *pci) goto fini; } - /* detect KVM and Parallels virtual environments */ - result = kvm_para_available(); -#ifdef X86_FEATURE_HYPERVISOR - result = result || boot_cpu_has(X86_FEATURE_HYPERVISOR); -#endif - if (!result) - goto fini; - /* check for known (emulated) devices */ + result = 0; if (pci->subsystem_vendor == PCI_SUBVENDOR_ID_REDHAT_QUMRANET && pci->subsystem_device == PCI_SUBDEVICE_ID_QEMU) { /* KVM emulated sound, PCI SSID: 1af4:1100 */ msg = "enable KVM"; + result = 1; } else if (pci->subsystem_vendor == 0x1ab8) { /* Parallels VM emulated sound, PCI SSID: 1ab8:xxxx */ msg = "enable Parallels VM"; - } else { - msg = "disable (unknown or VT-d) VM"; - result = 0; + result = 1; } fini: -- 2.7.4

3 2

[alsa-devel] [PATCH 0/3 v3] Add I2S/ADV7511 audio support for ARC AXS10x boards
by Jose Abreu 05 Apr '16

05 Apr '16

ARC AXS10x platforms consist of a mainboard with several peripherals. One of those peripherals is an HDMI output port controlled by the ADV7511 transmitter. This patch set adds audio for the ADV7511 transmitter and I2S audio for the AXS10x platform. Changes v2 -> v3: * Removed pll_config functions (as suggested by Alexey Brodkin) * Removed HDMI start at adv7511_core (as suggested by Archit Taneja) * Use NOP functions for adv7511_audio (as suggested by Archit Taneja) * Added adv7511_audio_exit() function (as suggested by Archit Taneja) * Moved adv7511 to its own folder (as suggested by Archit Taneja) * Separated file rename of adv7511_core (as suggested by Emil Velikov) * Compile adv7511 as module if ALSA SoC is compiled as module * Load adv7511 audio only if declared in device tree (as suggested by Laurent Pinchart) * Dropped custom platform driver, using now ALSA DMA engine * Dropped IRQ handler for I2S Changes v1 -> v2: * DT bindings moved to separate patch (as suggested by Alexey Brodkin) * Removed defconfigs entries (as suggested by Alexey Brodkin) Jose Abreu (3): drm/i2c/adv7511: Rename and move to separate folder drm/i2c/adv7511: Add audio support ASoC: dwc: Unmask I2S interrupts only for enabled channels .../bindings/display/bridge/adi,adv7511.txt | 3 + drivers/gpu/drm/i2c/Kconfig | 6 +- drivers/gpu/drm/i2c/Makefile | 2 +- drivers/gpu/drm/i2c/adv7511/Kconfig | 18 ++ drivers/gpu/drm/i2c/adv7511/Makefile | 3 + drivers/gpu/drm/i2c/{ => adv7511}/adv7511.h | 53 ++++ drivers/gpu/drm/i2c/adv7511/adv7511_audio.c | 310 +++++++++++++++++++++ .../drm/i2c/{adv7511.c => adv7511/adv7511_core.c} | 43 +-- include/sound/soc-dai.h | 1 + sound/soc/dwc/designware_i2s.c | 5 +- 10 files changed, 406 insertions(+), 38 deletions(-) create mode 100644 drivers/gpu/drm/i2c/adv7511/Kconfig create mode 100644 drivers/gpu/drm/i2c/adv7511/Makefile rename drivers/gpu/drm/i2c/{ => adv7511}/adv7511.h (90%) create mode 100644 drivers/gpu/drm/i2c/adv7511/adv7511_audio.c rename drivers/gpu/drm/i2c/{adv7511.c => adv7511/adv7511_core.c} (97%) -- 1.9.1

2 5

[alsa-devel] [PATCH v2] ASoC: fsl-asoc-card: add wm8960 support
by Zidan Wang 05 Apr '16

05 Apr '16

add wm8960 support for fsl-asoc-card Signed-off-by: Zidan Wang <zidan.wang(a)freescale.com> --- sound/soc/fsl/fsl-asoc-card.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/sound/soc/fsl/fsl-asoc-card.c b/sound/soc/fsl/fsl-asoc-card.c index 040362f..5aeb6ed 100644 --- a/sound/soc/fsl/fsl-asoc-card.c +++ b/sound/soc/fsl/fsl-asoc-card.c @@ -23,6 +23,7 @@ #include "../codecs/sgtl5000.h" #include "../codecs/wm8962.h" +#include "../codecs/wm8960.h" #define RX 0 #define TX 1 @@ -479,6 +480,12 @@ static int fsl_asoc_card_probe(struct platform_device *pdev) priv->codec_priv.fll_id = WM8962_SYSCLK_FLL; priv->codec_priv.pll_id = WM8962_FLL; priv->dai_fmt |= SND_SOC_DAIFMT_CBM_CFM; + } else if (of_device_is_compatible(np, "fsl,imx-audio-wm8960")) { + codec_dai_name = "wm8960-hifi"; + priv->card.set_bias_level = fsl_asoc_card_set_bias_level; + priv->codec_priv.fll_id = WM8960_SYSCLK_AUTO; + priv->codec_priv.pll_id = WM8960_SYSCLK_AUTO; + priv->dai_fmt |= SND_SOC_DAIFMT_CBM_CFM; } else { dev_err(&pdev->dev, "unknown Device Tree compatible\n"); return -EINVAL; @@ -582,6 +589,7 @@ static const struct of_device_id fsl_asoc_card_dt_ids[] = { { .compatible = "fsl,imx-audio-cs42888", }, { .compatible = "fsl,imx-audio-sgtl5000", }, { .compatible = "fsl,imx-audio-wm8962", }, + { .compatible = "fsl,imx-audio-wm8960", }, {} }; -- 1.9.1

4 4

[alsa-devel] [RFC PATCH v2 0/5] Media Device Allocator API
by Shuah Khan 05 Apr '16

05 Apr '16

There are known problems with media device life time management. When media device is released while an media ioctl is in progress, ioctls fail with use-after-free errors and kernel hangs in some cases. Media Device can be in any the following states: - Allocated - Registered (could be tied to more than one driver) - Unregistered, not in use (media device file is not open) - Unregistered, in use (media device file is not open) - Released When media device belongs to more than one driver, registrations should be tracked to avoid unregistering when one of the drivers does unregister. A new num_drivers field in the struct media_device covers this case. The media device should be unregistered only when the last unregister occurs with num_drivers count zero. When a media device is in use when it is unregistered, it should not be released until the application exits when it detects the unregistered status. Media device that is in use when it is unregistered is moved to to_delete_list. When the last unregister occurs, media device is unregistered and becomes an unregistered, still allocated device. Unregister marks the device to be deleted. When media device belongs to more than one driver, as both drivers could be unbound/bound, driver should not end up getting stale media device that is on its way out. Moving the unregistered media device to to_delete_list helps this case as well. I ran bind/unbind loop tests on uvcvideo, au0828, and snd-usb-audio while running application that does ioctls. Didn't see any use-after-free errors on media device. A couple of known issues seen: 1. When application exits, cdev_put() gets called after media device is released. This is a known issue to resolve and Media Device Allocator can't solve this one. 2. When au0828 module is removed and then ioctls fail when cdev_get() looks for the owning module as au0828 is very often the module that owns the media devnode. This is a cdev related issue that needs to be resolved and Media Device Allocator can't solve this one. Shuah Khan (5): media: Add Media Device Allocator API media: Add driver count to keep track of media device registrations media: uvcvideo change to use Media Device Allocator API media: au0828 change to use Media Device Allocator API sound/usb: Use Media Controller API to share media resources drivers/media/Makefile | 3 +- drivers/media/media-dev-allocator.c | 154 ++++++++++++++++ drivers/media/media-device.c | 49 ++++- drivers/media/media-devnode.c | 10 +- drivers/media/usb/au0828/au0828-core.c | 40 +++-- drivers/media/usb/au0828/au0828.h | 1 + drivers/media/usb/uvc/uvc_driver.c | 36 ++-- drivers/media/usb/uvc/uvcvideo.h | 3 +- include/media/media-dev-allocator.h | 116 ++++++++++++ include/media/media-device.h | 31 ++++ sound/usb/Kconfig | 4 + sound/usb/Makefile | 2 + sound/usb/card.c | 14 ++ sound/usb/card.h | 3 + sound/usb/media.c | 320 +++++++++++++++++++++++++++++++++ sound/usb/media.h | 73 ++++++++ sound/usb/mixer.h | 3 + sound/usb/pcm.c | 28 ++- sound/usb/quirks-table.h | 1 + sound/usb/stream.c | 2 + sound/usb/usbaudio.h | 6 + 21 files changed, 862 insertions(+), 37 deletions(-) create mode 100644 drivers/media/media-dev-allocator.c create mode 100644 include/media/media-dev-allocator.h create mode 100644 sound/usb/media.c create mode 100644 sound/usb/media.h -- 2.5.0

3 8

[alsa-devel] [RFC PATCH 0/4] Media Device Allocator API
by Shuah Khan 05 Apr '16

05 Apr '16

There are known problems with media device life time management. When media device is released while an media ioctl is in progress, ioctls fail with use-after-free errors and kernel hangs in some cases. Media Device can be in any the following states: - Allocated - Registered (could be tied to more than one driver) - Unregistered, not in use (media device file is not open) - Unregistered, in use (media device file is not open) - Released When media device belongs to more than one driver, registrations should be refcounted to avoid unregistering when one of the drivers does unregister. A refcount field in the struct media_device covers this case. Unregister on a Media Allocator media device is a kref_put() call. The media device should be unregistered only when the last unregister occurs. When a media device is in use when it is unregistered, it should not be released until the application exits when it detects the unregistered status. Media device that is in use when it is unregistered is moved to to_delete_list. When the last unregister occurs, media device is unregistered and becomes an unregistered, still allocated device. Unregister marks the device to be deleted. When media device belongs to more than one driver, as both drivers could be unbound/bound, driver should not end up getting stale media device that is on its way out. Moving the unregistered media device to to_delete_list helps this case as well. I am sending this RFC series out for review. I tested to verify media ioctls don't fail when media device is unregistered and it gets released when the last reference goes. I still need to do more testing. I didb't fully test if the media device gets deleted in all cases. So please consider this as work in progress. I decided to send this out to get early review to see if this solution is viable. Shuah Khan (4): media: Add Media Device Allocator API media: Add Media Device Allocator API documentation media: Add refcount to keep track of media device registrations drivers: change au0828, uvcvideo, snd-usb-audio to use Media Device Allocator drivers/media/Makefile | 3 +- drivers/media/media-dev-allocator.c | 153 +++++++++++++++++++++++++++++++++ drivers/media/media-device.c | 53 ++++++++++++ drivers/media/media-devnode.c | 3 + drivers/media/usb/au0828/au0828-core.c | 7 +- drivers/media/usb/au0828/au0828.h | 1 + drivers/media/usb/uvc/uvc_driver.c | 32 ++++--- drivers/media/usb/uvc/uvcvideo.h | 3 +- include/media/media-dev-allocator.h | 113 ++++++++++++++++++++++++ include/media/media-device.h | 32 +++++++ sound/usb/media.c | 10 ++- sound/usb/media.h | 1 + 12 files changed, 390 insertions(+), 21 deletions(-) create mode 100644 drivers/media/media-dev-allocator.c create mode 100644 include/media/media-dev-allocator.h -- 2.5.0

3 15

[alsa-devel] [PATCH 0/3 v2] Add I2S/ADV7511 audio support for ARC AXS10x boards
by Jose Abreu 05 Apr '16

05 Apr '16

ARC AXS10x platforms consist of a mainboard with several peripherals. One of those peripherals is an HDMI output port controlled by the ADV7511 transmitter. This patch set adds audio for the ADV7511 transmitter and I2S audio for the AXS10x platform. Changes v1 -> v2: * DT bindings moved to separate patch (as suggested by Alexey Brodkin) * Removed defconfigs entries (as suggested by Alexey Brodkin) Jose Abreu (3): drm/i2c/adv7511: Add audio support ASoC: dwc: Add I2S HDMI audio support arc: axs10x: Add support for Designware I2S on DT arch/arc/boot/dts/axs10x_mb.dtsi | 49 +- drivers/gpu/drm/i2c/Kconfig | 11 + drivers/gpu/drm/i2c/Makefile | 2 + drivers/gpu/drm/i2c/adv7511.c | 1024 ----------------------------------- drivers/gpu/drm/i2c/adv7511.h | 41 ++ drivers/gpu/drm/i2c/adv7511_audio.c | 310 +++++++++++ drivers/gpu/drm/i2c/adv7511_core.c | 1005 ++++++++++++++++++++++++++++++++++ include/sound/soc-dai.h | 1 + sound/soc/dwc/Kconfig | 1 + sound/soc/dwc/designware_i2s.c | 385 ++++++++++++- 10 files changed, 1788 insertions(+), 1041 deletions(-) delete mode 100644 drivers/gpu/drm/i2c/adv7511.c create mode 100644 drivers/gpu/drm/i2c/adv7511_audio.c create mode 100644 drivers/gpu/drm/i2c/adv7511_core.c -- 1.9.1

6 21

[alsa-devel] [PATCH v2 0/7] topology: Add support for vendor tuples
by mengdong.lin＠linux.intel.com 05 Apr '16

05 Apr '16

From: Mengdong Lin <mengdong.lin(a)linux.intel.com> This series addes support for vendor tuples to topology, to avoid importing binary data blob from other files. Backward compatibility of ABI is not impacted. A kernel patch is also submitted "ASoC: topology: ABI - Define types for vendor tuples". The 1st patch is small code cleanup. The 2nd patch is a preparation, since tuples will need the type-specific free handler. History: v2: add check on string length, use strtol() to get hex value, and fix memory leak. Mengdong Lin (7): topology: Use the generic pointer to free an element's object topology: Define a free handler for the element topology: Add doc for vendor tuples topology: ABI - Define types for vendor tuples topology: Add support for vendor tokens topology: Add support for parsing vendor tuples topology: Build data objects with tuples include/sound/asoc.h | 42 +++- include/topology.h | 79 +++++++- src/topology/data.c | 496 +++++++++++++++++++++++++++++++++++++++++++++- src/topology/elem.c | 15 +- src/topology/parser.c | 24 +++ src/topology/tplg_local.h | 47 +++++ 6 files changed, 695 insertions(+), 8 deletions(-) -- 2.5.0

4 13

Re: [alsa-devel] [PATCH v2- ALSA 2/3] HDA - create headset mic jack which use headphone pin sense
by Justin Monk 05 Apr '16

05 Apr '16

Team, I was wondering when this patch would be available, I figured it would already be in the down stream. If not I would love to test it. I have minimal programming skills but would love to help. Kernel Bug Tracker – Bug 107851 4.2.0-18-generic currently running 4.4.6-300.fc23.x86_64 Thanks, Justin Monk

2 1

[alsa-devel] Sound: BUG: KASAN: use-after-free in kill_fasync
by Baozeng Ding 05 Apr '16

05 Apr '16

Hi all, I've got the following report (use-after-free in kill_fasync) while running syzkaller. Unfortunately no reproducer.The kernel version is 4.5 (on Mar 16 commit 09fd671ccb2475436bd5f597f751ca4a7d177aea). ================================================================== BUG: KASAN: use-after-free in kill_fasync+0x3fb/0x420 at addr ffff880067691d88 Read of size 8 by task swapper/2/0 ============================================================================= BUG kmalloc-2048 (Not tainted): kasan: bad access detected ----------------------------------------------------------------------------- Disabling lock debugging due to kernel taint INFO: Allocated in 0xbbbbbbbbbbbbbbbb age=18446678412249576073 cpu=2245704320 pid=-1 [< inline >] kmalloc /kernel/include/linux/slab.h:472 [< inline >] kzalloc /kernel/include/linux/slab.h:616 [< none >] snd_pcm_attach_substream+0x3b4/0xb10 /kernel/sound/core/pcm.c:966 [< none >] ___slab_alloc+0x4c7/0x500 /kernel/mm/slub.c:2446 [< none >] __slab_alloc+0x4c/0x90 /kernel/mm/slub.c:2475 [< inline >] slab_alloc_node /kernel/mm/slub.c:2538 [< inline >] slab_alloc /kernel/mm/slub.c:2580 [< none >] kmem_cache_alloc_trace+0x262/0x300 /kernel/mm/slub.c:2597 [< inline >] kmalloc /kernel/include/linux/slab.h:472 [< inline >] kzalloc /kernel/include/linux/slab.h:616 [< none >] snd_pcm_attach_substream+0x3b4/0xb10 /kernel/sound/core/pcm.c:966 [< none >] snd_pcm_open_substream+0x84/0x450 /kernel/sound/core/pcm_native.c:2262 [< inline >] snd_pcm_oss_open_file /kernel/sound/core/oss/pcm_oss.c:2346 [< none >] snd_pcm_oss_open.part.17+0x5a4/0x1100 /kernel/sound/core/oss/pcm_oss.c:2428 [< none >] snd_pcm_oss_open+0x35/0x50 /kernel/sound/core/oss/pcm_oss.c:2392 [< none >] soundcore_open+0x30f/0x640 /kernel/sound/sound_core.c:639 [< none >] chrdev_open+0x22a/0x4c0 /kernel/fs/char_dev.c:388 [< none >] do_dentry_open+0x6a2/0xcb0 /kernel/fs/open.c:736 [< none >] vfs_open+0x17b/0x1f0 /kernel/fs/open.c:853 [< inline >] do_last /kernel/fs/namei.c:3258 [< none >] path_openat+0x4837/0x5830 /kernel/fs/namei.c:3394 [< none >] do_filp_open+0x18e/0x250 /kernel/fs/namei.c:3429 [< none >] do_sys_open+0x201/0x420 /kernel/fs/open.c:1022 [< inline >] SYSC_open /kernel/fs/open.c:1040 [< none >] SyS_open+0x2d/0x40 /kernel/fs/open.c:1035 INFO: Freed in 0x10000b076 age=18446678416544543380 cpu=0 pid=0 [< none >] snd_pcm_detach_substream+0x134/0x280 /kernel/sound/core/pcm.c:1017 [< none >] __slab_free+0x1e8/0x300 /kernel/mm/slub.c:2657 [< inline >] slab_free /kernel/mm/slub.c:2810 [< none >] kfree+0x24e/0x2d0 /kernel/mm/slub.c:3661 [< none >] snd_pcm_detach_substream+0x134/0x280 /kernel/sound/core/pcm.c:1017 [< none >] snd_pcm_release_substream.part.38+0x219/0x2f0 /kernel/sound/core/pcm_native.c:2250 [< none >] snd_pcm_release_substream+0x59/0x70 /kernel/sound/core/pcm_native.c:2251 [< none >] snd_pcm_oss_release_file+0x45/0xb0 /kernel/sound/core/oss/pcm_oss.c:2305 [< none >] snd_pcm_oss_release+0xfa/0x250 /kernel/sound/core/oss/pcm_oss.c:2485 [< none >] __fput+0x236/0x780 /kernel/fs/file_table.c:208 [< none >] ____fput+0x15/0x20 /kernel/fs/file_table.c:244 [< none >] task_work_run+0x16b/0x200 /kernel/kernel/task_work.c:115 [< inline >] exit_task_work /kernel/include/linux/task_work.h:21 [< none >] do_exit+0x87f/0x2c90 /kernel/kernel/exit.c:748 [< none >] do_group_exit+0x108/0x330 /kernel/kernel/exit.c:878 [< inline >] SYSC_exit_group /kernel/kernel/exit.c:889 [< none >] SyS_exit_group+0x1d/0x20 /kernel/kernel/exit.c:887 [< none >] entry_SYSCALL_64_fastpath+0x23/0xc1 /kernel/arch/x86/entry/entry_64.S:207 INFO: Slab 0xffffea00019da400 objects=13 used=8 fp=0xffff880067691be0 flags=0x5fffc0000004080 INFO: Object 0xffff880067691bd8 @offset=7128 fp=0xbbbbbbbbbbbbbbbb Call Trace: <IRQ> [< inline >] __dump_stack /kernel/lib/dump_stack.c:15 <IRQ> [<ffffffff82945051>] dump_stack+0xb3/0x112 /kernel/lib/dump_stack.c:51 [<ffffffff817009ad>] print_trailer+0x10d/0x190 /kernel/mm/slub.c:668 [<ffffffff817074af>] object_err+0x2f/0x40 /kernel/mm/slub.c:675 [< inline >] print_address_description /kernel/mm/kasan/report.c:138 [<ffffffff81709ca5>] kasan_report_error+0x215/0x530 /kernel/mm/kasan/report.c:236 [< inline >] ? spin_lock /kernel/include/linux/spinlock.h:302 [<ffffffff84a1c550>] ? snd_pcm_stream_lock+0x80/0xd0 /kernel/sound/core/pcm_native.c:104 [< inline >] kasan_report /kernel/mm/kasan/report.c:259 [<ffffffff8170a0be>] __asan_report_load8_noabort+0x3e/0x40 /kernel/mm/kasan/report.c:280 [<ffffffff81792a0b>] ? kill_fasync+0x3fb/0x420 /kernel/fs/fcntl.c:729 [<ffffffff81792a0b>] kill_fasync+0x3fb/0x420 /kernel/fs/fcntl.c:729 [<ffffffff84a36e08>] snd_pcm_period_elapsed+0x1c8/0x230 /kernel/sound/core/pcm_lib.c:1890 [<ffffffff84b6e2e0>] ? get_bound_vga.isra.21.part.22+0x140/0x140 /kernel/sound/pci/hda/hda_intel.c:1327 [<ffffffff84b0637d>] stream_update+0xad/0xe0 /kernel/sound/pci/hda/hda_controller.c:923 [<ffffffff84c1583e>] snd_hdac_bus_handle_stream_irq+0x24e/0x350 /kernel/sound/hda/hdac_controller.c:449 [<ffffffff84b062d0>] ? azx_init_chip+0x100/0x100 /kernel/sound/pci/hda/hda_controller.c:890 [<ffffffff84b04d24>] ? azx_interrupt+0x14/0x4d0 /kernel/sound/pci/hda/hda_controller.c:929 [<ffffffff84b04eee>] azx_interrupt+0x1de/0x4d0 /kernel/sound/pci/hda/hda_controller.c:954 [<ffffffff84b04d10>] ? azx_stop_chip+0x20/0x20 /kernel/sound/pci/hda/hda_controller.c:908 [<ffffffff8143d9e3>] handle_irq_event_percpu+0xf3/0x790 /kernel/kernel/irq/handle.c:145 [<ffffffff8143e127>] handle_irq_event+0xa7/0x140 /kernel/kernel/irq/handle.c:192 [<ffffffff81447f81>] handle_edge_irq+0x1e1/0x8d0 /kernel/kernel/irq/chip.c:623 [< inline >] generic_handle_irq_desc /kernel/include/linux/irqdesc.h:146 [<ffffffff811ad739>] handle_irq+0x109/0x2a0 /kernel/arch/x86/kernel/irq_64.c:78 [< inline >] ? rcu_lock_release /kernel/include/linux/rcupdate.h:491 [< inline >] ? rcu_read_unlock /kernel/include/linux/rcupdate.h:926 [< inline >] ? __atomic_notifier_call_chain /kernel/kernel/notifier.c:184 [<ffffffff81369c4f>] ? atomic_notifier_call_chain+0xbf/0x140 /kernel/kernel/notifier.c:193 [<ffffffff81369b90>] ? __atomic_notifier_call_chain+0x150/0x150 /kernel/include/linux/rcupdate.h:922 [<ffffffff811ac36d>] do_IRQ+0x7d/0x1a0 /kernel/arch/x86/kernel/irq.c:240 [<ffffffff85dac40c>] common_interrupt+0x8c/0x8c /kernel/arch/x86/entry/entry_64.S:454 <EOI> [<ffffffff812245c6>] ? native_safe_halt+0x6/0x10 /kernel/./arch/x86/include/asm/irqflags.h:49 [<ffffffff81405ced>] ? trace_hardirqs_on+0xd/0x10 /kernel/kernel/locking/lockdep.c:2635 [< inline >] arch_safe_halt /kernel/./arch/x86/include/asm/paravirt.h:117 [<ffffffff811bf152>] default_idle+0x22/0x2d0 /kernel/arch/x86/kernel/process.c:307 [<ffffffff811c053a>] arch_cpu_idle+0xa/0x10 /kernel/arch/x86/kernel/process.c:298 [<ffffffff813eb618>] default_idle_call+0x48/0x70 /kernel/kernel/sched/idle.c:93 [< inline >] cpuidle_idle_call /kernel/kernel/sched/idle.c:151 [< inline >] cpu_idle_loop /kernel/kernel/sched/idle.c:242 [<ffffffff813ebaa7>] cpu_startup_entry+0x467/0x600 /kernel/kernel/sched/idle.c:291 [<ffffffff81201432>] start_secondary+0x2b2/0x380 /kernel/arch/x86/kernel/smpboot.c:259 [<ffffffff81201180>] ? set_cpu_sibling_map+0x18a0/0x18a0 /kernel/include/linux/topology.h:80 Memory state around the buggy address: ffff880067691c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff880067691d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb >ffff880067691d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff880067691e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff880067691e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ================================================================== It seems that in function snd_pcm_detach_substream, when freeing runtime structure, it did not handle its fasync data pointer. Any ideas? Thanks. Best Regards, Baozeng Ding

2 1