Applied filters: WithRepro (drop) Label=subsystems:sound (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
BUG: unable to handle kernel NULL pointer dereference in snd_ctl_led_get prio:low sound 10 C 3 58d 58d 27/29 never 74e3b979ce8b ALSA: control: Don't add invalid kcontrols to LED layer
KASAN: use-after-free Read in release_card_device prio:high sound 19 C 65 65d 80d 27/29 never 5ae1a690c522 ALSA: core: Fix use-after-free in snd_card_do_free()
UBSAN: array-index-out-of-bounds in snd_dummy_probe prio:normal sound 15 syz, C 14 80d 79d 27/29 never 02442d5fe8ee ALSA: dummy: Check card index validity at probe
BUG: unable to handle kernel paging request in azx_probe_work prio:high sound 8 syz, C 69 68d 79d 27/29 never 9895573b0185 ALSA: hda/intel: Add sanity check for BAR0 size
BUG: unable to handle kernel paging request in snd_hdac_bus_parse_capabilities prio:high sound 8 C 8 73d 74d 27/29 never 9895573b0185 ALSA: hda/intel: Add sanity check for BAR0 size
BUG: scheduling while atomic in wait_clear_urbs sound usb prio:high 5 syz, C 14 8d03h 4d18h 2/29 never ALSA: pcm: Call snd_pcm_sync_stop outside spinlock in snd_pcm_drop()
WARNING: ODEBUG bug in dummy_pcm_close prio:high sound -1 syz, C error 26 23d 58d 27/29 never acac7b5e0734 ALSA: pcm: Fix race between non-atomic ops and trigger-start
possible deadlock in rawmidi_release_priv prio:high sound 4 syz 18 56d 60d 27/29 never 58c1c30074a8 ALSA: rawmidi: Another workaround for false-positive mutex lockdep warning
INFO: task hung in odev_open (5) prio:high sound 1 syz 19 54d 58d 2/29 never ALSA: rawmidi: give up draining output when the device stops draining
BUG: scheduling while atomic in drain_urb_queue prio:high sound 5 C 15 55d 62d 27/29 never 46094a7708b7 locking: Revert switching guards to _irq_{disable,enable}()
general protection fault in snd_scarlett2_controls_create sound 2 syz, C 5 234d 230d 29/29 170d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
KASAN: slab-out-of-bounds Write in copy_to_urb (2) usb sound 21 syz, C 5 286d 284d 29/29 170d ef5749ef8b30 ALSA: usb-audio: Prevent excessive number of frames
general protection fault in snd_scarlett2_init sound 2 syz, C 3 234d 230d 29/29 170d df1d8abf36ca ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
KASAN: slab-use-after-free Read in snd_pcm_stop sound 19 syz, C error 29 177d 270d 29/29 170d 826af7fa62e3 ALSA: aloop: Fix racy access at PCM trigger
KASAN: slab-out-of-bounds Write in copy_to_urb usb sound 21 syz, C 33 293d 352d 29/29 290d 05a1fc5efdd8 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
possible deadlock in __snd_pcm_lib_xfer (2) sound 4 syz, C done 9 399d 420d 29/29 359d 9fc4a3da9a02 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
general protection fault in snd_usbmidi_do_output usb sound 2 syz, C error 8 389d 396d 29/29 359d 9f2c0ac1423d ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
possible deadlock in snd_pcm_drop sound 4 syz, C error 4 391d 389d 29/29 359d 9fc4a3da9a02 ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence (2) sound 8 syz, C 4 524d 538d 29/29 473d 93a81ca06577 ALSA: pcm: Fix race of buffer access at PCM OSS layer
WARNING: ODEBUG bug in snd_rawmidi_free sound usb -1 syz, C error 1 538d 534d 29/29 473d 0718a78f6a9f ALSA: usb-audio: Kill timer properly at removal
kernel BUG in filemap_fault sound -1 syz, C done 138 505d 603d 28/29 500d 10a77965760c batman-adv: Fix double-hold of meshif when getting enabled
INFO: task hung in snd_card_free sound 1 syz, C error 24 705d 720d 28/29 677d dafb28f02be4 ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
KMSAN: uninit-value in line6_midibuf_read usb sound 7 syz, C 357 760d 822d 28/29 750d 15b7a03205b3 ALSA: line6: Fix racy access to midibuf
UBSAN: shift-out-of-bounds in parse_audio_unit sound -1 syz, C error 3 833d 831d 27/29 801d 2f38cf730cae ALSA: usb: Fix UBSAN warning in parse_audio_unit()
inconsistent lock state in valid_state (2) sound 4 syz, C inconclusive 57405 865d 990d 25/29 865d b79491896151 dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
INFO: rcu detected stall in snd_timer_user_release (3) sound 1 syz, C inconclusive 3 899d 907d 25/29 865d 4a63bd179fa8 ALSA: timer: Set lower bound of start tick time
KMSAN: uninit-value in line6_pod_process_message sound 7 syz, C 5 935d 935d 25/29 884d c4e51e424e2c ALSA: line6: Zero-initialize message buffers
inconsistent lock state in snd_hrtimer_callback (2) sound 4 syz, C 2600 921d 923d 25/29 915d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in snd_timer_close_locked (2) sound 4 syz, C done 3036 921d 923d 25/29 915d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt (3) sound 4 syz, C 710 921d 925d 25/29 915d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
INFO: rcu detected stall in snd_timer_user_release (2) sound 1 syz, C 7 915d 928d 25/29 915d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in _snd_pcm_stream_lock_irqsave (5) sound 4 syz, C 5210 921d 923d 25/29 915d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt (2) sound 4 syz, C done 208 926d 927d 25/29 926d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
KMSAN: uninit-value in bcmp (2) sound 7 syz, C 7 992d 1014d 25/29 927d fde2497d2bc3 fat: fix uninitialized field in nostale filehandles
possible deadlock in _snd_pcm_stream_lock_irqsave (4) sound 4 syz, C 24677 927d 949d 25/29 927d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
possible deadlock in snd_pcm_period_elapsed (4) sound 4 syz, C done 90659 927d 953d 25/29 927d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
inconsistent lock state in snd_timer_interrupt sound 4 syz, C 1927 927d 949d 25/29 927d 587d67fd929a ALSA: timer: Fix missing irq-disable at closing
memory leak in snd_seq_create_port sound 3 syz, C 1 1200d 1196d 23/29 1108d 057849ccc3d8 ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
possible deadlock in snd_timer_interrupt (2) sound 4 syz, C error 29 1537d 1797d 22/29 1338d 95cc637c1afd ALSA: timer: Use deferred fasync helper
WARNING in snd_usbmidi_output_open sound usb -1 syz, C done 37 1435d 1442d 22/29 1338d ad72c3c3f6eb ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek sound usb 19 syz error 48 1539d 1650d 22/29 1338d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
KASAN: use-after-free Read in snd_rawmidi_transmit sound usb 19 syz, C done done 7 1606d 1640d 22/29 1338d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
possible deadlock in __snd_pcm_lib_xfer sound 4 syz, C unreliable 3 1670d 1669d 22/29 1338d bc55cfd5718c ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence sound 12 syz, C unreliable 8 1514d 1659d 22/29 1338d 2f7a26abb824 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2) sound -1 syz, C done 2 1686d 1682d 22/29 1338d efb6402c3c4a ALSA: oss: Fix PCM OSS buffer allocation overflow
possible deadlock in snd_pcm_period_elapsed (3) sound 4 syz, C inconclusive 23 1535d 1760d 22/29 1338d 96b097091c66 ALSA: pcm: Use deferred fasync helper
KASAN: use-after-free Read in snd_mixer_oss_get_volume1 sound 19 syz, C inconclusive 1 1833d 1829d 20/29 1690d 411cef6adfb3 ALSA: mixer: oss: Fix racy access to slots
possible deadlock in snd_mixer_oss_ioctl1 sound 4 syz, C done 149 1823d 1826d 20/29 1690d 3ab799201845 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
INFO: rcu detected stall in snd_seq_write (2) sound 1 syz done 21 1806d 1818d 20/29 1690d 6fadb494a638 ALSA: seq: Set upper limit of processed events
KMSAN: uninit-value in snd_rawmidi_ioctl sound 7 syz, C 1506 1708d 1771d 20/29 1690d 39a8fc4971a0 ALSA: rawmidi - fix the uninitalized user_pversion
possible deadlock in snd_timer_interrupt sound 4 syz, C done 41 1816d 1917d 20/29 1809d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
KASAN: use-after-free Read in snd_seq_timer_interrupt (2) sound 19 syz, C inconclusive 2 1966d 1964d 20/29 1809d 83e197a8414c ALSA: seq: Fix race of snd_seq_timer_open()
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info sound usb 17 syz, C 10 1988d 1993d 20/29 1809d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
general protection fault in usb_audio_probe sound usb 2 syz, C done 360 2054d 2055d 20/29 2023d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
KASAN: use-after-free Read in usb_audio_disconnect sound usb 19 syz, C done 15 2054d 2055d 20/29 2023d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
UBSAN: shift-out-of-bounds in parse_audio_format_i usb sound -1 syz, C error 19 2139d 2145d 19/29 2054d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info sound usb -1 syz, C error 9 2112d 2131d 19/29 2054d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked sound -1 syz, C unreliable 225 2130d 2145d 19/29 2054d 11cb881bf075 ALSA: pcm: oss: Fix a few more UBSAN fixes
WARNING in snd_pcm_plugin_build_mulaw sound -1 syz, C done 4 2247d 2244d 15/29 2220d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
general protection fault in snd_ctl_release sound 2 syz done 4 2242d 2243d 15/29 2220d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in delete_and_unsubscribe_port (2) sound 19 syz done 4 2272d 2298d 15/29 2228d 80982c7e834e ALSA: seq: oss: Serialize ioctls
WARNING in submit_audio_out_urb/usb_submit_urb sound usb -1 syz 2 2298d 2298d 15/29 2228d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
KASAN: invalid-free in snd_seq_port_disconnect sound 24 syz done 9 2272d 2277d 15/29 2228d 80982c7e834e ALSA: seq: oss: Serialize ioctls
WARNING in snd_usbmidi_submit_urb/usb_submit_urb usb sound -1 syz, C done 42 2312d 2336d 15/29 2228d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
WARNING in snd_info_get_line sound -1 syz, C done 36 2284d 2290d 15/29 2228d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
WARNING in snd_usbmidi_input_start/usb_submit_urb usb sound -1 syz, C done 231 2289d 2332d 15/29 2228d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb sound 21 syz, C done 39 2308d 2313d 15/29 2289d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt sound usb 21 syz, C done 5 2312d 2313d 15/29 2289d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Read in resample_shrink sound 17 syz, C done 5 2404d 2423d 15/29 2382d f2ecf903ef06 ALSA: pcm: oss: Avoid plugin buffer overflow
memory leak in snd_pcm_hw_params sound 3 syz, C 25 2452d 2459d 15/29 2440d 66f2d19f8116 ALSA: pcm: Fix memory leak at closing a stream without hw_free
KASAN: use-after-free Read in snd_timer_resolution sound 19 syz, C 5 2456d 2473d 15/29 2440d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) sound usb 17 syz, C 1 2543d 2542d 15/29 2465d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: slab-out-of-bounds Read in linear_transfer (3) sound 17 syz, C done 5 2515d 2516d 15/29 2481d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
KASAN: use-after-free Read in snd_timer_open sound 19 syz, C done 87 2538d 2538d 15/29 2507d 0c4f09ceec3d ALSA: timer: Fix the breakage of slave link open
general protection fault in snd_usb_create_mixer usb sound 2 syz, C 1 2530d 2528d 15/29 2507d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
KMSAN: use-after-free in build_audio_procunit sound usb 18 syz, C 2 2558d 2558d 14/29 2520d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in get_min_max_with_quirks sound usb 7 syz, C 11 2553d 2541d 14/29 2520d 167beb175679 ALSA: usb-audio: Fix missing error check at mixer resolution test
KASAN: slab-out-of-bounds Read in build_audio_procunit usb sound 17 syz, C 6 2550d 2558d 13/29 2544d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
general protection fault in snd_usb_pipe_sanity_check usb sound 2 syz, C 72 2630d 2643d 12/29 2628d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
INFO: rcu detected stall in snd_seq_write sound 1 syz error 18 2649d 2979d 12/29 2628d ede34f397ddb ALSA: seq: Break too long mutex context in the write loop
WARNING: proc registration bug in snd_info_card_register usb sound -1 syz, C 453 2707d 2752d 12/29 2678d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
KASAN: slab-out-of-bounds Write in default_read_copy_kernel sound 21 syz, C done 3 2798d 2875d 12/29 2678d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
KASAN: null-ptr-deref Write in submit_audio_out_urb sound usb 12 syz, C 185 2691d 2706d 12/29 2684d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
INFO: task hung in snd_seq_kernel_client_ctl sound 1 syz, C done 554 2752d 2752d 12/29 2688d f0654ba94e33 Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
KASAN: use-after-free Read in snd_timer_process_callbacks sound 19 syz, C done 4 2754d 2755d 12/29 2688d df55531b8b0e ALSA: timer: Revert active callback sync check at close
WARNING in port_delete sound -1 syz done 22 2812d 3026d 12/29 2688d 7c32ae35fbf9 ALSA: seq: Cover unsubscribe_port() in list_mutex feb689025fbb ALSA: seq: Protect in-kernel ioctl calls with mutex
KASAN: use-after-free Read in snd_info_free_entry usb sound 19 syz, C 47 2719d 2749d 12/29 2707d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in default_write_copy_kernel sound 17 syz, C done 366 2767d 2890d 12/29 2752d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
INFO: rcu detected stall in snd_pcm_oss_read sound 1 syz, C 2 2861d 2860d 11/29 2789d e190161f96b8 ALSA: pcm: Fix tight loop of OSS capture stream
KMSAN: uninit-value in linear_transfer (2) sound 7 syz, C 7 2883d 2906d 11/29 2878d 65766ee0bf7f ALSA: oss: Use kvzalloc() for local buffer allocations
KMSAN: uninit-value in snd_midi_event_encode_byte sound 7 syz, C 3 2973d 2973d 10/29 2949d 5a7b44a8df82 ALSA: rawmidi: Initialize allocated buffers
WARNING in __snd_rawmidi_transmit_ack (2) sound -1 syz, C 6 2985d 2993d 8/29 2978d 82fd4b05d704 ALSA: seq: virmidi: Fix discarding the unsubscribed output
WARNING in __snd_rawmidi_transmit_ack sound -1 syz 2 3022d 3022d 8/29 3000d 39675f7a7c7e ALSA: rawmidi: Change resized buffers atomically
WARNING in __snd_pcm_lib_xfer sound -1 syz 6 3095d 3097d 5/29 3082d f13876e2c33a ALSA: pcm: Check PCM state at xfern compat ioctl
BUG: unable to handle kernel paging request in memset_erms (2) sound 8 syz, C 11 3184d 3199d 5/29 3085d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
KASAN: null-ptr-deref Write in linear_transfer sound 12 syz, C 116 3131d 3214d 5/29 3086d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
KASAN: use-after-free Read in snd_pcm_timer_resolution sound 19 syz, C 3 3130d 3130d 5/29 3090d a820ccbe21e8 ALSA: pcm: Fix UAF at PCM release via PCM timer access
general protection fault in loopback_pos_update sound 2 syz, C 4 3198d 3196d 5/29 3090d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
WARNING in snd_pcm_hw_params sound -1 syz, C 56 3118d 3123d 5/29 3090d e1a3a981e320 ALSA: pcm: Remove WARN_ON() at snd_pcm_hw_params() error
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence sound 8 syz 11 3091d 3117d 5/29 3090d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
INFO: rcu detected stall in __snd_pcm_lib_xfer (2) sound 1 syz, C 1064 3118d 3123d 5/29 3090d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
KASAN: use-after-free Read in snd_pcm_oss_get_formats sound 19 syz, C 3 3150d 3150d 4/29 3136d 01c0b4265cc1 ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
BUG: looking up invalid subclass: 8 sound -1 syz, C 5 3273d 3273d 4/29 3187d 3510c7aa069a ALSA: seq: Avoid invalid lockdep class warning
WARNING in snd_interval_mulkdiv sound -1 syz, C 21 3202d 3208d 4/29 3197d 23b19b7b50fe ALSA: pcm: Remove yet superfluous WARN_ON()
BUG: soft lockup (2) sound -1 syz, C 29 3211d 3240d 3/29 3200d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
WARNING in snd_pcm_hw_param_first sound -1 syz, C 2905 3208d 3218d 3/29 3200d fe08f34d066f ALSA: pcm: Remove incorrect snd_BUG_ON() usages
BUG: unable to handle kernel paging request in memset_erms sound 8 syz, C 35 3200d 3215d 3/29 3200d b088b53e20c7 ALSA: aloop: Fix inconsistent format due to incomplete rule
INFO: task hung in snd_pcm_oss_write sound 1 syz 2 3208d 3208d 3/29 3200d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
WARNING in snd_timer_user_info_compat sound -1 syz, C 174 3256d 3258d 3/29 3252d 3d4e8303f2c7 ALSA: timer: Remove kernel warning at compat ioctl error paths
KASAN: use-after-free Read in snd_timer_user_info_compat sound 19 syz 2 3294d 3284d 3/29 3258d 79fb0518fec8 ALSA: timer: Add missing mutex lock for compat ioctls