KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain

KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain_init (4)
Status: auto-closed as invalid on 2021/03/18 12:09
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 188d, last: 163d

similar bugs (3):
Kernel	Title	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain_init (2)	1	279d	279d	0/22	auto-closed as invalid on 2020/11/22 00:04
upstream	KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain_init (3)	1	229d	229d	0/22	auto-closed as invalid on 2021/01/11 09:19
upstream	KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain_init	1	323d	323d	0/22	auto-closed as invalid on 2020/10/09 11:40

Sample crash report:

==================================================================
BUG: KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain_init

write to 0xffff888022f57000 of 4 bytes by task 16896 on cpu 0:
 snd_pcm_do_drain_init+0x289/0x5b0 sound/core/pcm_native.c:1958
 snd_pcm_action_single sound/core/pcm_native.c:1212 [inline]
 snd_pcm_action sound/core/pcm_native.c:1295 [inline]
 snd_pcm_drain+0x956/0xa90 sound/core/pcm_native.c:2034
 snd_pcm_kernel_ioctl+0x217/0xda0 sound/core/pcm_native.c:3338
 snd_pcm_oss_sync+0xaf/0x6a0 sound/core/oss/pcm_oss.c:1703
 snd_pcm_oss_ioctl+0x61a/0x29d0 sound/core/oss/pcm_oss.c:2600
 vfs_ioctl fs/ioctl.c:48 [inline]
 __do_sys_ioctl fs/ioctl.c:753 [inline]
 __se_sys_ioctl+0xcb/0x140 fs/ioctl.c:739
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:739
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888022f57000 of 4 bytes by task 16828 on cpu 1:
 pcm_sanity_check sound/core/pcm_lib.c:2067 [inline]
 __snd_pcm_lib_xfer+0xe9/0x11e0 sound/core/pcm_lib.c:2130
 snd_pcm_oss_write3+0x197/0x230 sound/core/oss/pcm_oss.c:1227
 io_playback_transfer+0x7a/0x2d0 sound/core/oss/io.c:47
 snd_pcm_plug_write_transfer+0x1d0/0x360 sound/core/oss/pcm_plugin.c:624
 snd_pcm_oss_write2+0xe0/0x250 sound/core/oss/pcm_oss.c:1359
 snd_pcm_oss_write1 sound/core/oss/pcm_oss.c:1425 [inline]
 snd_pcm_oss_write+0x322/0x8b0 sound/core/oss/pcm_oss.c:2775
 vfs_write+0x21a/0x7e0 fs/read_write.c:603
 ksys_write+0xce/0x180 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write fs/read_write.c:667 [inline]
 __x64_sys_write+0x3e/0x50 fs/read_write.c:667
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 16828 Comm: syz-executor.1 Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-upstream-kcsan-gce	2021/02/11 12:04	upstream	291009f656e8	a52ee10a	.config	log	report			info	KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_do_drain_init
ci2-upstream-kcsan-gce	2021/01/17 00:19	upstream	54c6247d06f1	65a7a854	.config	log	report			info