syzbot


KASAN: use-after-free Read in snd_mixer_oss_get_volume1
Status: upstream: reported C repro on 2021/10/20 15:38
Reported-by: syzbot+9988f17cf72a1045a189@syzkaller.appspotmail.com
Fix commit: 411cef6adfb3 ALSA: mixer: oss: Fix racy access to slots
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 51d, last: 51d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: use-after-free Read in snd_mixer_oss_get_volume1 (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: use-after-free Read in snd_mixer_oss_get_volume1 C error 2 60d 90d 0/1 upstream: reported C repro on 2021/09/08 00:32

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-386 2021/10/16 15:28 upstream 8fe31e0995f0 0c5d9412 .config log report syz C KASAN: use-after-free Read in snd_mixer_oss_get_volume1