Comment # 1 on bug 966813 from Takashi Iwai

Hmm, the oops from this code path hasn't been reported yet, so it must be
something new.  The crash happens at clear_bit() acll, and it looks like some
memory corruption of such, but not sure from a quick glance.

Could you check vanilla kernel whether you can trigger the same issue?