Kernel oops - mmc_ioctl_cdrom_read_audio+0x212/0x3b0 (CDROMREADAUDIO ioctl while ejecting)

[Matthew Hoops]

While executing the CDROMREADAUDIO ioctl and the disc is ejected, the kernel oops happens. This is similar to bug #1580776, but the stack trace is different.

dmesg snippet:
[ 333.283022] BUG: unable to handle kernel NULL pointer dereference at 0000000000000002
[ 333.283105] IP: [<ffffffff8160a112>] mmc_ioctl_cdrom_read_audio+0x212/0x3b0
[ 333.283174] PGD 38275e067 PUD 382750067 PMD 0
[ 333.283223] Oops: 0000 [#1] SMP

I'm attaching a program to small demonstrate the issue. The disc should be ejected after "Beginning to read audio" is written to stdout.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: linux-image-4.4.0-36-generic 4.4.0-36.55
ProcVersionSignature: Ubuntu 4.4.0-36.55-generic 4.4.16
Uname: Linux 4.4.0-36-generic x86_64
NonfreeKernelModules: nvidia_uvm nvidia_modeset nvidia
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: clone2727 4085 F.... pulseaudio
 /dev/snd/controlC1: clone2727 4085 F.... pulseaudio
CurrentDesktop: GNOME-Flashback:Unity
Date: Wed Sep 7 19:58:41 2016
HibernationDevice: RESUME=UUID=8125cf86-bf3f-4fd5-b488-ada316ef39e1
InstallationDate: Installed on 2015-08-14 (390 days ago)
InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Release amd64 (20150422)
MachineType: ASUSTeK COMPUTER INC. G551JW
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.4.0-36-generic.efi.signed root=UUID=e148a51e-0e19-43d7-95b7-bd6be2bd4adb ro quiet splash vt.handoff=7
RelatedPackageVersions:
 linux-restricted-modules-4.4.0-36-generic N/A
 linux-backports-modules-4.4.0-36-generic N/A
 linux-firmware 1.157.3
SourcePackage: linux
UpgradeStatus: Upgraded to xenial on 2016-04-27 (133 days ago)
dmi.bios.date: 01/16/2015
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: G551JW.202
dmi.board.asset.tag: ATN12345678901234567
dmi.board.name: G551JW
dmi.board.vendor: ASUSTeK COMPUTER INC.
dmi.board.version: 1.0
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK COMPUTER INC.
dmi.chassis.version: 1.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrG551JW.202:bd01/16/2015:svnASUSTeKCOMPUTERINC.:pnG551JW:pvr1.0:rvnASUSTeKCOMPUTERINC.:rnG551JW:rvr1.0:cvnASUSTeKCOMPUTERINC.:ct10:cvr1.0:
dmi.product.name: G551JW
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK COMPUTER INC.

[Brad Figg (brad-figg)]

This change was made by a bot.