syzbot


KCSAN: data-race in snd_pcm_oss_ioctl / snd_pcm_oss_make_ready

Status: auto-closed as invalid on 2020/06/18 14:03
Subsystems: sound
[Documentation on labels]
First crash: 1578d, last: 1439d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in snd_pcm_oss_ioctl / snd_pcm_oss_make_ready

write to 0xffff888094857b00 of 1 bytes by task 21051 on cpu 0:
 snd_pcm_oss_set_fragment1 sound/core/oss/pcm_oss.c:1948 [inline]
 snd_pcm_oss_set_fragment sound/core/oss/pcm_oss.c:1966 [inline]
 snd_pcm_oss_ioctl+0x115f/0x2020 sound/core/oss/pcm_oss.c:2653
 vfs_ioctl fs/ioctl.c:47 [inline]
 ksys_ioctl+0x101/0x150 fs/ioctl.c:763
 __do_sys_ioctl fs/ioctl.c:772 [inline]
 __se_sys_ioctl fs/ioctl.c:770 [inline]
 __x64_sys_ioctl+0x47/0x60 fs/ioctl.c:770
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888094857b00 of 1 bytes by task 21029 on cpu 1:
 snd_pcm_oss_make_ready+0xb7/0x120 sound/core/oss/pcm_oss.c:1144
 snd_pcm_oss_set_trigger.isra.0+0x2c5/0x4e0 sound/core/oss/pcm_oss.c:2047
 snd_pcm_oss_poll+0x425/0x5f0 sound/core/oss/pcm_oss.c:2831
 vfs_poll include/linux/poll.h:90 [inline]
 do_select+0x7cf/0x1020 fs/select.c:534
 core_sys_select+0x2c7/0x5f0 fs/select.c:677
 do_pselect.constprop.0+0x125/0x160 fs/select.c:759
 __do_sys_pselect6 fs/select.c:784 [inline]
 __se_sys_pselect6 fs/select.c:769 [inline]
 __x64_sys_pselect6+0x12a/0x160 fs/select.c:769
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 21029 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/05/11 00:02 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 8742a2b9 .config console log report ci2-upstream-kcsan-gce
2020/04/28 07:29 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 0ce7569e .config console log report ci2-upstream-kcsan-gce
2020/03/11 06:32 https://github.com/google/ktsan.git kcsan 941e0d917bbf 35f53e45 .config console log report ci2-upstream-kcsan-gce
2020/02/15 23:10 https://github.com/google/ktsan.git kcsan b12d66a6c34f 5d7b90f1 .config console log report ci2-upstream-kcsan-gce
2020/01/19 23:36 https://github.com/google/ktsan.git kcsan 245a43005292 0342f8c7 .config console log report ci2-upstream-kcsan-gce
2020/01/14 16:16 https://github.com/google/ktsan.git kcsan 245a43005292 32881205 .config console log report ci2-upstream-kcsan-gce
2019/12/24 02:18 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.