syzbot


Applied filters: Label=subsystems:alsa (drop)
Title Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
memory leak in snd_seq_create_port alsa C 1 79d 75d 24/25 never 057849ccc3d8 ALSA: seq: Fix memory leak at error path in snd_seq_create_port()
possible deadlock in snd_timer_interrupt (2) alsa C error 29 416d 676d 24/25 217d 95cc637c1afd ALSA: timer: Use deferred fasync helper
WARNING in snd_usbmidi_output_open alsa usb C done 37 314d 321d 24/25 217d ad72c3c3f6eb ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
KASAN: use-after-free Read in __snd_rawmidi_transmit_peek usb alsa syz error 48 418d 529d 24/25 217d 0665886ad139 ALSA: usb-audio: Clear MIDI port active flag after draining
KASAN: use-after-free Read in snd_rawmidi_transmit alsa usb C done done 7 485d 519d 24/25 217d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
possible deadlock in __snd_pcm_lib_xfer alsa C unreliable 3 549d 548d 24/25 217d bc55cfd5718c ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
KASAN: null-ptr-deref Write in snd_pcm_format_set_silence alsa C unreliable 8 393d 538d 24/25 217d 2f7a26abb824 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
KASAN: use-after-free Read in __snd_rawmidi_transmit_ack alsa 1 496d 492d 24/25 217d 0125de38122f ALSA: usb-audio: Cancel pending work at closing a MIDI substream
WARNING: kmalloc bug in snd_pcm_plugin_alloc (2) alsa C done 2 565d 561d 24/25 217d efb6402c3c4a ALSA: oss: Fix PCM OSS buffer allocation overflow
possible deadlock in snd_pcm_period_elapsed (3) alsa C inconclusive 23 414d 639d 24/25 217d 96b097091c66 ALSA: pcm: Use deferred fasync helper
KASAN: use-after-free Read in snd_mixer_oss_get_volume1 alsa C inconclusive 1 712d 708d 22/25 569d 411cef6adfb3 ALSA: mixer: oss: Fix racy access to slots
WARNING: kmalloc bug in snd_pcm_plugin_alloc alsa 4 590d 672d 22/25 569d 9d2479c96087 ALSA: pcm: oss: Fix negative period/buffer sizes 8839c8c0f77a ALSA: pcm: oss: Limit the period size to 16MB
possible deadlock in snd_mixer_oss_ioctl1 alsa C done 149 702d 705d 22/25 569d 3ab799201845 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
INFO: rcu detected stall in snd_seq_write (2) alsa syz done 21 685d 697d 22/25 569d 6fadb494a638 ALSA: seq: Set upper limit of processed events
KMSAN: uninit-value in snd_rawmidi_ioctl alsa C 1506 587d 650d 22/25 569d 39a8fc4971a0 ALSA: rawmidi - fix the uninitalized user_pversion
possible deadlock in snd_timer_interrupt alsa C done 41 695d 796d 22/25 688d f671a691e299 fcntl: fix potential deadlocks for &fown_struct.lock
KASAN: use-after-free Read in snd_seq_timer_interrupt (2) alsa C inconclusive 2 845d 843d 22/25 688d 83e197a8414c ALSA: seq: Fix race of snd_seq_timer_open()
UBSAN: shift-out-of-bounds in snd_timer_user_ccallback alsa 1 853d 849d 22/25 688d 9c1fe96bded9 ALSA: timer: Fix master timer notification
KASAN: slab-out-of-bounds Read in snd_usbmidi_get_ms_info alsa usb C 10 867d 872d 22/25 688d e84749a78dc8 ALSA: usb-audio: Validate MS endpoint descriptors
general protection fault in usb_audio_probe alsa usb C done 360 933d 934d 22/25 902d 30dea07180de ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
KASAN: use-after-free Read in usb_audio_disconnect alsa usb C done 15 933d 934d 22/25 902d c5aa956eaeb0 ALSA: usb-audio: fix use after free in usb_audio_disconnect
KCSAN: data-race in snd_rawmidi_transmit / snd_rawmidi_write alsa 232 966d 1142d 21/25 933d 88a06d6fd6b3 ALSA: rawmidi: Access runtime->avail always in spinlock
UBSAN: shift-out-of-bounds in parse_audio_format_i alsa usb C error 19 1018d 1024d 21/25 933d 175b8d89fe29 ALSA: pcm: oss: Fix potential out-of-bounds shift 43d5ca88dfcd ALSA: usb-audio: Fix potential out-of-bounds shift
KCSAN: data-race in snd_rawmidi_poll / snd_rawmidi_proceed alsa 378 1017d 1143d 21/25 933d 88a06d6fd6b3 ALSA: rawmidi: Access runtime->avail always in spinlock
KMSAN: uninit-value in snd_seq_oss_synth_make_info (2) alsa 1 991d 987d 21/25 933d 217bfbb8b0bf ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
UBSAN: shift-out-of-bounds in snd_usbmidi_get_ms_info alsa usb C error 9 991d 1010d 21/25 933d c06ccf3ebb75 ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
UBSAN: shift-out-of-bounds in snd_pcm_oss_change_params_locked alsa C unreliable 225 1009d 1024d 21/25 933d 11cb881bf075 ALSA: pcm: oss: Fix a few more UBSAN fixes
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue (3) alsa 111 1018d 1163d 21/25 933d 4ebd47037027 ALSA: seq: Use bool for snd_seq_queue internal flags
KASAN: use-after-free Read in snd_pcm_oss_release alsa 1 1128d 1127d 17/25 1099d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
WARNING in snd_pcm_plugin_build_mulaw alsa C done 4 1126d 1123d 17/25 1099d 949a1ebe8cea ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
general protection fault in snd_ctl_release alsa syz done 4 1121d 1122d 17/25 1099d 77f4689de17c fix regression in "epoll: Keep a reference on files added to the check list"
KASAN: use-after-free Read in line6_submit_audio_in_all_urbs alsa 2 1175d 1189d 17/25 1107d 68359a1ad844 ALSA: line6: Sync the pending work cancel at disconnection
KASAN: use-after-free Read in delete_and_unsubscribe_port (2) alsa syz done 4 1151d 1177d 17/25 1107d 80982c7e834e ALSA: seq: oss: Serialize ioctls
WARNING in submit_audio_out_urb/usb_submit_urb alsa usb syz 2 1177d 1177d 17/25 1107d 6e8a914ad619 ALSA: line6: Perform sanity check for each URB creation
KASAN: invalid-free in snd_seq_port_disconnect alsa syz done 9 1151d 1156d 17/25 1107d 80982c7e834e ALSA: seq: oss: Serialize ioctls
WARNING in snd_usbmidi_submit_urb/usb_submit_urb usb alsa C done 42 1191d 1215d 17/25 1107d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
WARNING in snd_info_get_line alsa C done 36 1163d 1169d 17/25 1107d 60379ba08532 ALSA: info: Drop WARN_ON() from buffer NULL sanity check
WARNING in snd_usbmidi_input_start/usb_submit_urb usb alsa C done 231 1168d 1211d 17/25 1107d 9b7e5208a941 ALSA: usb-audio: Fix race against the error recovery URB submission
KASAN: slab-out-of-bounds Write in snd_usb_mixer_notify_id usb alsa C done 39 1187d 1192d 17/25 1168d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
KASAN: slab-out-of-bounds Write in snd_usb_mixer_interrupt alsa usb C done 5 1191d 1192d 17/25 1168d 220345e98f1c ALSA: usb-audio: Fix OOB access of mixer element list
linux-next test error: WARNING in snd_pcm_plug_alloc alsa 3 1296d 1295d 17/25 1261d 5461e0530c22 ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks
KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue alsa 97 1262d 1360d 17/25 1261d bb51e669fa49 ALSA: seq: Avoid concurrent access to queue flags
KCSAN: data-race in queue_access_lock / snd_seq_check_queue alsa 58 1301d 1343d 17/25 1261d bb51e669fa49 ALSA: seq: Avoid concurrent access to queue flags
KCSAN: data-race in __snd_rawmidi_transmit_ack / snd_rawmidi_write alsa 168 1262d 1388d 17/25 1261d dfa9a5efe8b9 ALSA: rawmidi: Avoid bit fields for state flags
KASAN: slab-out-of-bounds Read in resample_shrink alsa C done 5 1283d 1302d 17/25 1261d f2ecf903ef06 ALSA: pcm: oss: Avoid plugin buffer overflow
KCSAN: data-race in snd_seq_prioq_cell_out / snd_seq_timer_interrupt alsa 118 1262d 1357d 17/25 1261d dc7497795e01 ALSA: seq: Fix concurrent access to queue current tick/time
memory leak in snd_pcm_hw_params alsa C 25 1331d 1338d 16/25 1319d 66f2d19f8116 ALSA: pcm: Fix memory leak at closing a stream without hw_free
KASAN: use-after-free Read in snd_timer_resolution alsa C 5 1335d 1352d 16/25 1319d 60adcfde92fa ALSA: seq: Fix racy access for queue timer in proc read
WARNING in azx_rirb_get_response alsa 4 1381d 1383d 16/25 1323d 475feec0c41a ALSA: hda - Downgrade error message for single-cmd fallback
KASAN: slab-out-of-bounds Read in build_audio_procunit (2) alsa usb C 1 1422d 1421d 16/25 1344d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KASAN: slab-out-of-bounds Read in linear_transfer (3) alsa C done 5 1394d 1395d 16/25 1360d 4cc8d6505ab8 ALSA: pcm: oss: Avoid potential buffer overflows
KASAN: use-after-free Read in snd_timer_open alsa C done 87 1417d 1417d 16/25 1386d 0c4f09ceec3d ALSA: timer: Fix the breakage of slave link open
general protection fault in snd_usb_create_mixer alsa usb C 1 1409d 1407d 16/25 1386d 9435f2bb6687 ALSA: usb-audio: Fix NULL dereference at parsing BADD
KMSAN: use-after-free in build_audio_procunit alsa usb C 2 1437d 1437d 15/25 1399d 976a68f06b2e ALSA: usb-audio: Fix incorrect size check for processing/extension units
KMSAN: uninit-value in get_min_max_with_quirks alsa usb C 11 1432d 1420d 15/25 1399d 167beb175679 ALSA: usb-audio: Fix missing error check at mixer resolution test
KASAN: slab-out-of-bounds Read in build_audio_procunit usb alsa C 6 1429d 1438d 14/25 1423d ba8bf0967a15 ALSA: usb-audio: Fix copy&paste error in the validator
KASAN: use-after-free Read in snd_seq_ioctl_get_client_pool alsa 1 1501d 1499d 13/25 1483d 75545304eba6 ALSA: seq: Fix potential concurrent access to the deleted pool
INFO: task hung in snd_seq_write alsa 6 1653d 1858d 13/25 1507d ede34f397ddb ALSA: seq: Break too long mutex context in the write loop
general protection fault in snd_usb_pipe_sanity_check usb alsa C 72 1509d 1522d 13/25 1507d 5d78e1c2b7f4 ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
INFO: rcu detected stall in snd_seq_write alsa syz error 18 1528d 1858d 13/25 1507d ede34f397ddb ALSA: seq: Break too long mutex context in the write loop
KASAN: slab-out-of-bounds Read in linear_transfer (2) alsa 1 1628d 1619d 13/25 1557d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
KASAN: use-after-free Write in check_and_subscribe_port alsa 1 1612d 1606d 13/25 1557d 7c32ae35fbf9 ALSA: seq: Cover unsubscribe_port() in list_mutex
WARNING: proc registration bug in snd_info_card_register usb alsa C 453 1586d 1631d 13/25 1557d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
KASAN: slab-out-of-bounds Write in default_read_copy_kernel alsa C done 3 1677d 1754d 13/25 1557d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
KASAN: null-ptr-deref Write in submit_audio_out_urb alsa usb C 185 1570d 1585d 13/25 1563d 0b074ab7fc0d ALSA: line6: Assure canceling delayed work at disconnection
KASAN: use-after-free Read in snd_seq_timer_interrupt alsa 1 1801d 1801d 13/25 1567d fe1b26c93d43 ALSA: timer: Make snd_timer_close() really kill pending actions
INFO: task hung in snd_seq_kernel_client_ctl alsa C done 554 1631d 1631d 13/25 1567d f0654ba94e33 Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
KASAN: use-after-free Read in snd_timer_process_callbacks alsa C done 4 1633d 1634d 13/25 1567d df55531b8b0e ALSA: timer: Revert active callback sync check at close
KASAN: use-after-free Read in snd_seq_ioctl_get_subscription alsa 2 1792d 1824d 13/25 1567d 2eabc5ec8ab4 ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
BUG: sleeping function called from invalid context in line6_pcm_acquire alsa 119 1586d 1605d 13/25 1567d 7f84ff68be05 ALSA: line6: toneport: Fix broken usage of timer for delayed execution
WARNING in port_delete alsa syz done 22 1691d 1905d 13/25 1567d 7c32ae35fbf9 ALSA: seq: Cover unsubscribe_port() in list_mutex feb689025fbb ALSA: seq: Protect in-kernel ioctl calls with mutex
KASAN: use-after-free Read in snd_info_free_entry usb alsa C 47 1598d 1628d 13/25 1586d 2a3f7221acdd ALSA: core: Fix card races between register and disconnect 8c2f870890fd ALSA: info: Fix racy addition/deletion of nodes
KASAN: slab-out-of-bounds Read in default_write_copy_kernel alsa C done 366 1646d 1769d 13/25 1631d ca0214ee2802 ALSA: pcm: Fix possible OOB access in PCM oss plugins
INFO: rcu detected stall in snd_pcm_oss_read alsa C 2 1740d 1739d 12/25 1668d e190161f96b8 ALSA: pcm: Fix tight loop of OSS capture stream
KASAN: use-after-free Read in snd_ctl_elem_add alsa 1 1780d 1778d 12/25 1748d e1a7bfe38079 ALSA: control: Fix race between adding and removing a user element
KMSAN: uninit-value in linear_transfer (2) alsa C 7 1762d 1785d 12/25 1757d 65766ee0bf7f ALSA: oss: Use kvzalloc() for local buffer allocations
KMSAN: uninit-value in snd_midi_event_encode_byte alsa C 3 1852d 1852d 11/25 1828d 5a7b44a8df82 ALSA: rawmidi: Initialize allocated buffers
INFO: rcu detected stall in snd_pcm_oss_prepare alsa 4 1997d 2000d 9/25 1850d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
BUG: soft lockup in snd_virmidi_output_trigger alsa 3 1897d 1999d 9/25 1857d 50e9ffb1996a ALSA: virmidi: Fix too long output trigger loop
WARNING in __snd_rawmidi_transmit_ack (2) alsa C 6 1864d 1872d 9/25 1857d 82fd4b05d704 ALSA: seq: virmidi: Fix discarding the unsubscribed output
WARNING in __snd_rawmidi_transmit_ack alsa syz 2 1901d 1901d 9/25 1879d 39675f7a7c7e ALSA: rawmidi: Change resized buffers atomically
WARNING in __snd_pcm_lib_xfer alsa syz 6 1974d 1976d 6/25 1961d f13876e2c33a ALSA: pcm: Check PCM state at xfern compat ioctl
BUG: unable to handle kernel paging request in memset_erms (2) alsa C 11 2063d 2078d 6/25 1964d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
KASAN: null-ptr-deref Write in linear_transfer alsa C 116 2010d 2093d 6/25 1965d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
INFO: rcu detected stall in __snd_pcm_lib_xfer (2) alsa C 1064 1997d 2002d 6/25 1969d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
WARNING in snd_pcm_hw_params alsa C 56 1997d 2002d 6/25 1969d e1a3a981e320 ALSA: pcm: Remove WARN_ON() at snd_pcm_hw_params() error
general protection fault in loopback_pos_update alsa C 4 2077d 2075d 6/25 1969d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
general protection fault in snd_rawmidi_ioctl_compat alsa 1 1997d 1988d 6/25 1969d 8a56ef4f3ffb ALSA: rawmidi: Fix missing input substream checks in compat ioctls
KASAN: use-after-free Read in snd_pcm_timer_resolution alsa C 3 2009d 2009d 6/25 1969d a820ccbe21e8 ALSA: pcm: Fix UAF at PCM release via PCM timer access
INFO: rcu detected stall in io_playback_transfer alsa 9 1997d 2002d 6/25 1969d e15dc99dbb9c ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
BUG: unable to handle kernel paging request in snd_pcm_format_set_silence alsa syz 11 1970d 1996d 6/25 1969d 02a5d6925cd3 ALSA: pcm: Avoid potential races between OSS ioctls and read/write
KASAN: use-after-free Read in snd_pcm_oss_get_formats alsa C 3 2029d 2029d 4/25 2015d 01c0b4265cc1 ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
INFO: rcu detected stall in memcpy alsa 12 2090d 2094d 4/25 2052d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
BUG: looking up invalid subclass: 8 alsa C 5 2152d 2152d 4/25 2066d 3510c7aa069a ALSA: seq: Avoid invalid lockdep class warning
WARNING in snd_interval_mulkdiv alsa C 21 2081d 2087d 4/25 2076d 23b19b7b50fe ALSA: pcm: Remove yet superfluous WARN_ON()
INFO: rcu detected stall in mulaw_transfer alsa 37 2090d 2093d 3/25 2079d 898dfe4687f4 ALSA: aloop: Fix racy hw constraints adjustment
BUG: unable to handle kernel paging request in memset_erms alsa C 35 2079d 2094d 3/25 2079d b088b53e20c7 ALSA: aloop: Fix inconsistent format due to incomplete rule
INFO: task hung in snd_pcm_oss_write alsa syz 2 2087d 2087d 3/25 2079d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
WARNING in snd_pcm_hw_param_first alsa C 2905 2087d 2097d 3/25 2079d fe08f34d066f ALSA: pcm: Remove incorrect snd_BUG_ON() usages
INFO: rcu detected stall in snd_pcm_plug_write_transfer alsa 1 2087d 2087d 3/25 2079d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
BUG: soft lockup (2) alsa C 29 2090d 2119d 3/25 2079d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
suspicious RCU usage at sound/core/pcm_lib.c:LINE alsa 1 2095d 2094d 3/25 2079d 29159a4ed704 ALSA: pcm: Abort properly at pending signal in OSS read/write loops
BUG: unable to handle kernel paging request in match_subs_info alsa 1 2125d 2120d 3/25 2095d 7fb983b4dd56 x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
WARNING in initialize_timer alsa 2 2128d 2129d 3/25 2108d 43a354287032 ALSA: seq: Remove spurious WARN_ON() at timer check
WARNING in snd_timer_user_info_compat alsa C 174 2135d 2137d 3/25 2131d 3d4e8303f2c7 ALSA: timer: Remove kernel warning at compat ioctl error paths
KASAN: use-after-free Read in snd_timer_user_info_compat alsa syz 2 2173d 2163d 3/25 2137d 79fb0518fec8 ALSA: timer: Add missing mutex lock for compat ioctls