syzbot


Applied filters: Label=subsystems:sound (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2) sound C 4 7d00h 21d 22/28 never 93a81ca06577 ALSA: pcm: Fix race of buffer access at PCM OSS layer
BUG: sleeping function called from invalid context in snd_card_locked sound 1 88d 84d 27/28 never c9ce148ea753 ALSA: seq: Avoid module auto-load handling at event delivery
KCSAN: data-race in snd_seq_poll / snd_seq_pool_init sound 3 67d 80d 27/28 never e3cd33ab17c3 ALSA: seq: Improve data consistency at polling
possible deadlock in __snd_timer_user_ioctl sound 1 68d 64d 27/28 never 3424c8f53bc6 ALSA: timer: Don't take register_mutex with copy_from/to_user()
WARNING: ODEBUG bug in snd_rawmidi_free sound usb C error 1 20d 16d 1/28 never ALSA: usb-audio: Kill timer properly at removal
kernel BUG in filemap_fault sound C done 114 1d14h 85d 27/28 never 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
BUG: sleeping function called from invalid context in vfree sound 1 180d 180d 28/28 18d 20c0c49720dc ALSA: rawmidi: Fix kvfree() call in spinlock
WARNING in snd_ctl_led_register sound 1 170d 166d 28/28 18d b2e538a9827d ALSA: control: Avoid WARN() for symlink errors
kernel BUG in snd_pcm_mmap_data_fault sound 1 249d 245d 28/28 18d d2913a07d903 ALSA: pcm: Add sanity NULL check for the default mmap fault handler
INFO: task hung in snd_card_free sound C error 24 187d 203d 28/28 159d dafb28f02be4 ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
KMSAN: uninit-value in line6_midibuf_read usb sound C 357 242d 305d 28/28 233d 15b7a03205b3 ALSA: line6: Fix racy access to midibuf
UBSAN: shift-out-of-bounds in parse_audio_unit sound C error 3 315d 314d 27/28 283d 2f38cf730cae ALSA: usb: Fix UBSAN warning in parse_audio_unit()
inconsistent lock state in valid_state (2) sound C inconclusive 57405 348d 473d 25/28 347d b79491896151 dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
INFO: rcu detected stall in snd_timer_user_release (3) sound C inconclusive 3 381d 390d 25/28 347d 4a63bd179fa8 ALSA: timer: Set lower bound of start tick time
KMSAN: uninit-value in line6_pod_process_message sound C 5 417d 418d 25/28 367d c4e51e424e2c ALSA: line6: Zero-initialize message buffers
inconsistent lock state in snd_hrtimer_callback (2) sound C 2600 404d 405d 25/28 397d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in snd_timer_close_locked (2) sound C done 3036 404d 405d 25/28 397d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt (3) sound C 710 404d 408d 25/28 397d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
INFO: rcu detected stall in snd_timer_user_release (2) sound C 7 398d 411d 25/28 397d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in _snd_pcm_stream_lock_irqsave (5) sound C 5210 404d 405d 25/28 397d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt (2) sound C done 208 408d 409d 25/28 408d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
KMSAN: uninit-value in bcmp (2) sound btrfs C 7 474d 496d 25/28 409d fde2497d2bc3 fat: fix uninitialized field in nostale filehandles
possible deadlock in _snd_pcm_stream_lock_irqsave (4) sound C 24677 409d 432d 25/28 409d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in snd_pcm_period_elapsed (4) sound C done 90659 409d 435d 25/28 409d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt sound C 1927 409d 432d 25/28 409d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
memory leak in snd_seq_create_port sound C 1 682d 678d 23/28 590d 057849ccc3d8 ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
possible deadlock in snd_timer_interrupt (2) sound C error 29 1019d 1280d 22/28 820d 95cc637c1afd ALSA: timer: Use deferred fasync helper
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek sound usb syz error 48 1022d 1132d 22/28 820d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
KASAN: use-after-free Read in snd_rawmidi_transmit usb sound C done done 7 1088d 1122d 22/28 820d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
possible deadlock in __snd_pcm_lib_xfer sound C unreliable 3 1153d 1152d 22/28 820d bc55cfd5718c ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence sound C unreliable 8 997d 1142d 22/28 820d 2f7a26abb824 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
KASAN: use-after-free Read in __snd_rawmidi_transmit_ack sound 1 1099d 1095d 22/28 820d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2) sound C done 2 1169d 1165d 22/28 820d efb6402c3c4a ALSA: oss: Fix PCM OSS buffer allocation overflow
possible deadlock in snd_pcm_period_elapsed (3) sound C inconclusive 23 1017d 1242d 22/28 820d 96b097091c66 ALSA: pcm: Use deferred fasync helper
KASAN: use-after-free Read in snd_mixer_oss_get_volume1 sound C inconclusive 1 1316d 1312d 20/28 1173d 411cef6adfb3 ALSA: mixer: oss: Fix racy access to slots
WARNING: kmalloc bug in snd_pcm_plugin_alloc sound 4 1193d 1276d 20/28 1173d 9d2479c96087 ALSA: pcm: oss: Fix negative period/buffer sizes 8839c8c0f77a ALSA: pcm: oss: Limit the period size to 16MB
possible deadlock in snd_mixer_oss_ioctl1 sound C done 149 1305d 1309d 20/28 1173d 3ab799201845 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
INFO: rcu detected stall in snd_seq_write (2) sound syz done 21 1288d 1301d 20/28 1173d 6fadb494a638 ALSA: seq: Set upper limit of processed events
KMSAN: uninit-value in snd_rawmidi_ioctl sound C 1506 1191d 1253d 20/28 1173d 39a8fc4971a0 ALSA: rawmidi - fix the uninitalized user_pversion
possible deadlock in snd_timer_interrupt sound C done 41 1299d 1399d 20/28 1291d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
KASAN: use-after-free Read in snd_seq_timer_interrupt (2) sound C inconclusive 2 1449d 1447d 20/28 1291d 83e197a8414c ALSA: seq: Fix race of snd_seq_timer_open()
UBSAN: shift-out-of-bounds in snd_timer_user_ccallback sound 1 1457d 1453d 20/28 1291d 9c1fe96bded9 ALSA: timer: Fix master timer notification
general protection fault in usb_audio_probe usb sound C done 360 1536d 1538d 20/28 1506d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
KASAN: use-after-free Read in usb_audio_disconnect sound usb C done 15 1536d 1537d 20/28 1506d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
KCSAN: data-race in snd_rawmidi_transmit / snd_rawmidi_write sound 232 1570d 1746d 19/28 1536d 88a06d6fd6b3 ALSA: rawmidi: Access runtime->avail always in spinlock
UBSAN: shift-out-of-bounds in parse_audio_format_i sound usb C error 19 1622d 1627d 19/28 1536d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
KCSAN: data-race in snd_rawmidi_poll / snd_rawmidi_proceed sound 378 1621d 1747d 19/28 1536d 88a06d6fd6b3 ALSA: rawmidi: Access runtime->avail always in spinlock
KMSAN: uninit-value in snd_seq_oss_synth_make_info (2) sound 1 1595d 1590d 19/28 1536d 217bfbb8b0bf ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked sound C unreliable 225 1613d 1627d 19/28 1536d 11cb881bf075 ALSA: pcm: oss: Fix a few more UBSAN fixes
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue (3) sound 111 1621d 1767d 19/28 1536d 4ebd47037027 ALSA: seq: Use bool for snd_seq_queue internal flags
KASAN: use-after-free Read in snd_pcm_oss_release sound 1 1731d 1731d 15/28 1702d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_plugin_build_mulaw sound C done 4 1729d 1726d 15/28 1702d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
general protection fault in snd_ctl_release sound syz done 4 1725d 1725d 15/28 1702d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs sound 2 1779d 1793d 15/28 1711d 68359a1ad844 ALSA: line6: Sync the pending work cancel at disconnection
KASAN: use-after-free Read in delete_and_unsubscribe_port (2) sound syz done 4 1755d 1780d 15/28 1711d 80982c7e834e ALSA: seq: oss: Serialize ioctls
WARNING in submit_audio_out_urb/usb_submit_urb sound usb syz 2 1780d 1780d 15/28 1711d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
KASAN: invalid-free in snd_seq_port_disconnect sound syz done 9 1754d 1759d 15/28 1711d 80982c7e834e ALSA: seq: oss: Serialize ioctls
WARNING in snd_info_get_line sound C done 36 1767d 1772d 15/28 1711d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound C done 39 1791d 1796d 15/28 1772d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt sound usb C done 5 1794d 1796d 15/28 1772d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
linux-next test error: WARNING in snd_pcm_plug_alloc sound 3 1899d 1899d 15/28 1865d 5461e0530c22 ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue sound 97 1866d 1964d 15/28 1865d bb51e669fa49 ALSA: seq: Avoid concurrent access to queue flags
KCSAN: data-race in queue_access_lock / snd_seq_check_queue sound 58 1905d 1947d 15/28 1865d bb51e669fa49 ALSA: seq: Avoid concurrent access to queue flags
KCSAN: data-race in __snd_rawmidi_transmit_ack / snd_rawmidi_write sound 168 1866d 1992d 15/28 1865d dfa9a5efe8b9 ALSA: rawmidi: Avoid bit fields for state flags
KASAN: slab-out-of-bounds Read in resample_shrink sound C done 5 1887d 1905d 15/28 1865d f2ecf903ef06 ALSA: pcm: oss: Avoid plugin buffer overflow
KCSAN: data-race in snd_seq_prioq_cell_out / snd_seq_timer_interrupt sound 118 1866d 1960d 15/28 1865d dc7497795e01 ALSA: seq: Fix concurrent access to queue current tick/time
memory leak in snd_pcm_hw_params sound C 25 1934d 1942d 15/28 1922d 66f2d19f8116 ALSA: pcm: Fix memory leak at closing a stream without hw_free
KASAN: use-after-free Read in snd_timer_resolution sound C 5 1938d 1956d 15/28 1922d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
WARNING in azx_rirb_get_response sound 4 1984d 1986d 15/28 1926d 475feec0c41a ALSA: hda - Downgrade error message for single-cmd fallback
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb C 1 2026d 2025d 15/28 1948d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: slab-out-of-bounds Read in linear_transfer (3) sound C done 5 1997d 1998d 15/28 1963d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
KASAN: use-after-free Read in snd_timer_open sound C done 87 2020d 2021d 15/28 1990d 0c4f09ceec3d ALSA: timer: Fix the breakage of slave link open
general protection fault in snd_usb_create_mixer sound usb C 1 2012d 2011d 15/28 1990d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
KMSAN: use-after-free in build_audio_procunit usb sound C 2 2041d 2041d 14/28 2003d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in get_min_max_with_quirks sound usb C 11 2036d 2024d 14/28 2003d 167beb175679 ALSA: usb-audio: Fix missing error check at mixer resolution test
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound C 6 2032d 2041d 13/28 2026d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: use-after-free Read in snd_seq_ioctl_get_client_pool sound 1 2105d 2102d 12/28 2087d 75545304eba6 ALSA: seq: Fix potential concurrent access to the deleted pool
INFO: task hung in snd_seq_write sound 6 2256d 2462d 12/28 2110d ede34f397ddb ALSA: seq: Break too long mutex context in the write loop
general protection fault in snd_usb_pipe_sanity_check usb sound C 72 2112d 2126d 12/28 2110d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
INFO: rcu detected stall in snd_seq_write sound syz error 18 2131d 2462d 12/28 2110d ede34f397ddb ALSA: seq: Break too long mutex context in the write loop
KASAN: slab-out-of-bounds Read in linear_transfer (2) sound 1 2232d 2223d 12/28 2161d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
KASAN: use-after-free Write in check_and_subscribe_port sound 1 2216d 2209d 12/28 2161d 7c32ae35fbf9 ALSA: seq: Cover unsubscribe_port() in list_mutex
WARNING: proc registration bug in snd_info_card_register usb sound C 453 2190d 2234d 12/28 2161d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
KASAN: slab-out-of-bounds Write in default_read_copy_kernel sound C done 3 2281d 2357d 12/28 2161d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb C 185 2174d 2189d 12/28 2167d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
KASAN: use-after-free Read in snd_seq_timer_interrupt sound 1 2404d 2404d 12/28 2171d fe1b26c93d43 ALSA: timer: Make snd_timer_close() really kill pending actions
INFO: task hung in snd_seq_kernel_client_ctl sound C done 554 2234d 2235d 12/28 2171d f0654ba94e33 Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
KASAN: use-after-free Read in snd_timer_process_callbacks sound C done 4 2236d 2237d 12/28 2171d df55531b8b0e ALSA: timer: Revert active callback sync check at close
KASAN: use-after-free Read in snd_seq_ioctl_get_subscription sound 2 2395d 2427d 12/28 2171d 2eabc5ec8ab4 ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
BUG: sleeping function called from invalid context in line6_pcm_acquire sound 119 2189d 2208d 12/28 2171d 7f84ff68be05 ALSA: line6: toneport: Fix broken usage of timer for delayed execution
WARNING in port_delete sound syz done 22 2294d 2509d 12/28 2171d 7c32ae35fbf9 ALSA: seq: Cover unsubscribe_port() in list_mutex feb689025fbb ALSA: seq: Protect in-kernel ioctl calls with mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound C 47 2201d 2232d 12/28 2189d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in default_write_copy_kernel sound C done 366 2250d 2373d 12/28 2234d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
INFO: rcu detected stall in snd_pcm_oss_read sound C 2 2343d 2343d 11/28 2271d e190161f96b8 ALSA: pcm: Fix tight loop of OSS capture stream
KASAN: use-after-free Read in snd_ctl_elem_add sound 1 2383d 2382d 11/28 2352d e1a7bfe38079 ALSA: control: Fix race between adding and removing a user element
KMSAN: uninit-value in linear_transfer (2) sound C 7 2366d 2389d 11/28 2360d 65766ee0bf7f ALSA: oss: Use kvzalloc() for local buffer allocations
KMSAN: uninit-value in snd_midi_event_encode_byte sound C 3 2455d 2456d 10/28 2432d 5a7b44a8df82 ALSA: rawmidi: Initialize allocated buffers
INFO: rcu detected stall in snd_pcm_oss_prepare sound 4 2601d 2603d 8/28 2453d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
BUG: soft lockup in snd_virmidi_output_trigger sound 3 2501d 2602d 8/28 2461d 50e9ffb1996a ALSA: virmidi: Fix too long output trigger loop
WARNING in __snd_rawmidi_transmit_ack (2) sound C 6 2467d 2475d 8/28 2461d 82fd4b05d704 ALSA: seq: virmidi: Fix discarding the unsubscribed output
WARNING in __snd_rawmidi_transmit_ack sound syz 2 2505d 2505d 8/28 2482d 39675f7a7c7e ALSA: rawmidi: Change resized buffers atomically
WARNING in __snd_pcm_lib_xfer sound syz 6 2577d 2579d 5/28 2564d f13876e2c33a ALSA: pcm: Check PCM state at xfern compat ioctl
BUG: unable to handle kernel paging request in memset_erms (2) sound C 11 2666d 2682d 5/28 2568d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
KASAN: null-ptr-deref Write in linear_transfer sound C 116 2613d 2696d 5/28 2568d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
INFO: rcu detected stall in io_playback_transfer sound 9 2600d 2605d 5/28 2573d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
general protection fault in snd_rawmidi_ioctl_compat sound 1 2600d 2592d 5/28 2573d 8a56ef4f3ffb ALSA: rawmidi: Fix missing input substream checks in compat ioctls
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence sound syz 11 2573d 2600d 5/28 2573d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
WARNING in snd_pcm_hw_params sound C 56 2600d 2606d 5/28 2573d e1a3a981e320 ALSA: pcm: Remove WARN_ON() at snd_pcm_hw_params() error
INFO: rcu detected stall in __snd_pcm_lib_xfer (2) sound C 1064 2600d 2605d 5/28 2573d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
general protection fault in loopback_pos_update sound C 4 2681d 2679d 5/28 2573d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
KASAN: use-after-free Read in snd_pcm_timer_resolution sound C 3 2613d 2613d 5/28 2573d a820ccbe21e8 ALSA: pcm: Fix UAF at PCM release via PCM timer access
KASAN: use-after-free Read in snd_pcm_oss_get_formats sound C 3 2633d 2633d 4/28 2619d 01c0b4265cc1 ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
INFO: rcu detected stall in memcpy sound 12 2693d 2697d 4/28 2656d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
BUG: looking up invalid subclass: 8 sound C 5 2756d 2756d 4/28 2669d 3510c7aa069a ALSA: seq: Avoid invalid lockdep class warning
WARNING in snd_interval_mulkdiv sound C 21 2685d 2691d 4/28 2679d 23b19b7b50fe ALSA: pcm: Remove yet superfluous WARN_ON()
BUG: unable to handle kernel paging request in memset_erms sound C 35 2683d 2697d 3/28 2682d b088b53e20c7 ALSA: aloop: Fix inconsistent format due to incomplete rule
WARNING in snd_pcm_hw_param_first sound C 2905 2691d 2701d 3/28 2682d fe08f34d066f ALSA: pcm: Remove incorrect snd_BUG_ON() usages
INFO: task hung in snd_pcm_oss_write sound syz 2 2691d 2691d 3/28 2682d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
INFO: rcu detected stall in snd_pcm_plug_write_transfer sound 1 2691d 2691d 3/28 2682d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
suspicious RCU usage at sound/core/pcm_lib.c:LINE sound 1 2698d 2697d 3/28 2682d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
INFO: rcu detected stall in mulaw_transfer sound 37 2693d 2696d 3/28 2682d 898dfe4687f4 ALSA: aloop: Fix racy hw constraints adjustment
BUG: soft lockup (2) sound C 29 2693d 2722d 3/28 2682d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
BUG: unable to handle kernel paging request in match_subs_info sound 1 2728d 2723d 3/28 2698d 7fb983b4dd56 x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
WARNING in initialize_timer sound 2 2732d 2732d 3/28 2711d 43a354287032 ALSA: seq: Remove spurious WARN_ON() at timer check
WARNING in snd_timer_user_info_compat sound C 174 2738d 2741d 3/28 2734d 3d4e8303f2c7 ALSA: timer: Remove kernel warning at compat ioctl error paths
KASAN: use-after-free Read in snd_timer_user_info_compat sound syz 2 2776d 2766d 3/28 2740d 79fb0518fec8 ALSA: timer: Add missing mutex lock for compat ioctls