KCSAN: data-race in snd_rawmidi_kernel_write1 / snd_rawmidi_write

Status: auto-closed as invalid on 2020/05/09 17:19
Subsystems: sound
[Documentation on labels]
First crash: 2464d, last: 2355d
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in snd_rawmidi_kernel_write1 / snd_rawmidi_write (2) sound 6 5 2257d 2283d 0/29 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in snd_rawmidi_kernel_write1 / snd_rawmidi_write (3) sound 6 5 2217d 2239d 0/29 auto-closed as invalid on 2020/08/20 11:35

Sample crash report:
==================================================================
BUG: KCSAN: data-race in snd_rawmidi_kernel_write1 / snd_rawmidi_write

write to 0xffff88809975e038 of 8 bytes by task 17419 on cpu 1:
 snd_rawmidi_kernel_write1+0x1e6/0x440 sound/core/rawmidi.c:1356
 snd_rawmidi_write+0x1c3/0x740 sound/core/rawmidi.c:1429
 __vfs_write+0x58/0xb0 fs/read_write.c:494
 __kernel_write+0xb0/0x230 fs/read_write.c:515
 write_pipe_buf+0xad/0xe0 fs/splice.c:809
 splice_from_pipe_feed fs/splice.c:512 [inline]
 __splice_from_pipe+0x298/0x4a0 fs/splice.c:636
 splice_from_pipe+0xc2/0x100 fs/splice.c:671
 default_file_splice_write+0x41/0x90 fs/splice.c:821
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x97/0xb0 fs/splice.c:1037
 splice_direct_to_actor+0x22f/0x540 fs/splice.c:992
 do_splice_direct+0x152/0x1d0 fs/splice.c:1080
 do_sendfile+0x396/0x810 fs/read_write.c:1520
 __do_sys_sendfile64 fs/read_write.c:1581 [inline]
 __se_sys_sendfile64 fs/read_write.c:1567 [inline]
 __x64_sys_sendfile64+0x121/0x140 fs/read_write.c:1567
 do_syscall_64+0xc7/0x390 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88809975e038 of 8 bytes by task 17431 on cpu 0:
 snd_rawmidi_write+0x311/0x740 sound/core/rawmidi.c:1452
 __vfs_write+0x58/0xb0 fs/read_write.c:494
 __kernel_write+0xb0/0x230 fs/read_write.c:515
 write_pipe_buf+0xad/0xe0 fs/splice.c:809
 splice_from_pipe_feed fs/splice.c:512 [inline]
 __splice_from_pipe+0x298/0x4a0 fs/splice.c:636
 splice_from_pipe+0xc2/0x100 fs/splice.c:671
 default_file_splice_write+0x41/0x90 fs/splice.c:821
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0x97/0xb0 fs/splice.c:1037
 splice_direct_to_actor+0x22f/0x540 fs/splice.c:992
 do_splice_direct+0x152/0x1d0 fs/splice.c:1080
 do_sendfile+0x396/0x810 fs/read_write.c:1520
 __do_sys_sendfile64 fs/read_write.c:1581 [inline]
 __se_sys_sendfile64 fs/read_write.c:1567 [inline]
 __x64_sys_sendfile64+0x121/0x140 fs/read_write.c:1567
 do_syscall_64+0xc7/0x390 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 17431 Comm: syz-executor.3 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (16):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/29 17:12 https://github.com/google/ktsan.git kcsan 766d004d1b85 c88c7b75 .config console log report ci2-upstream-kcsan-gce
2020/02/21 13:08 https://github.com/google/ktsan.git kcsan 766d004d1b85 bd2a74a3 .config console log report ci2-upstream-kcsan-gce
2020/02/18 18:54 https://github.com/google/ktsan.git kcsan b12d66a6c34f 012fbc32 .config console log report ci2-upstream-kcsan-gce
2020/02/06 16:46 https://github.com/google/ktsan.git kcsan 245a43005292 5be3a391 .config console log report ci2-upstream-kcsan-gce
2020/02/03 18:07 https://github.com/google/ktsan.git kcsan 245a43005292 93e5e335 .config console log report ci2-upstream-kcsan-gce
2020/01/25 03:48 https://github.com/google/ktsan.git kcsan 245a43005292 2e95ab33 .config console log report ci2-upstream-kcsan-gce
2020/01/20 11:59 https://github.com/google/ktsan.git kcsan 245a43005292 c40da18c .config console log report ci2-upstream-kcsan-gce
2020/01/19 16:18 https://github.com/google/ktsan.git kcsan 245a43005292 0342f8c7 .config console log report ci2-upstream-kcsan-gce
2020/01/14 02:28 https://github.com/google/ktsan.git kcsan 245a43005292 32881205 .config console log report ci2-upstream-kcsan-gce
2020/01/12 18:39 https://github.com/google/ktsan.git kcsan 245a43005292 31290a45 .config console log report ci2-upstream-kcsan-gce
2020/01/09 23:53 https://github.com/google/ktsan.git kcsan 245a43005292 4de4e9f0 .config console log report ci2-upstream-kcsan-gce
2020/01/05 04:15 https://github.com/google/ktsan.git kcsan 245a43005292 68256974 .config console log report ci2-upstream-kcsan-gce
2019/12/18 17:47 https://github.com/google/ktsan.git kcsan 245a43005292 79b211f7 .config console log report ci2-upstream-kcsan-gce
2019/12/04 20:24 https://github.com/google/ktsan.git kcsan ef798c30ba4e b2088328 .config console log report ci2-upstream-kcsan-gce
2019/11/18 10:22 https://github.com/google/ktsan.git kcsan 5863cc791e4c d5696d51 .config console log report ci2-upstream-kcsan-gce
2019/11/12 14:20 https://github.com/google/ktsan.git kcsan 7f2955e0d056 048f2d49 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.