From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1753339AbdCTJCW (ORCPT <rfc822;w@1wt.eu>);
        Mon, 20 Mar 2017 05:02:22 -0400
Received: from mail-vk0-f41.google.com ([209.85.213.41]:33837 "EHLO
        mail-vk0-f41.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S1752780AbdCTJCT (ORCPT
        <rfc822;linux-kernel@vger.kernel.org>);
        Mon, 20 Mar 2017 05:02:19 -0400
MIME-Version: 1.0
In-Reply-To: <s5ha88gl8m5.wl-tiwai@suse.de>
References: <CACT4Y+aqqy8bZA1fFieifNxR2fAfFQQABcBHj801+u5ePV0URw@mail.gmail.com>
 <CACT4Y+Y17sfHrUS+Sxp1L3z6+01230qs6-TumtH7YkDAOcc8-g@mail.gmail.com> <s5ha88gl8m5.wl-tiwai@suse.de>
From: Dmitry Vyukov <dvyukov@google.com>
Date: Mon, 20 Mar 2017 10:01:56 +0100
Message-ID: <CACT4Y+bYqx=HprGxe4dnQPmODJ9OiKTpVQspnqxZxsGHPdZv5Q@mail.gmail.com>
Subject: Re: sound: another deadlock in snd_seq_pool_done
To: Takashi Iwai <tiwai@suse.de>
Cc: alsa-devel@alsa-project.org, Jaroslav Kysela <perex@perex.cz>,
        LKML <linux-kernel@vger.kernel.org>,
        syzkaller <syzkaller@googlegroups.com>
Content-Type: text/plain; charset=UTF-8
Sender: linux-kernel-owner@vger.kernel.org
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Mon, Mar 20, 2017 at 8:17 AM, Takashi Iwai <tiwai@suse.de> wrote:
> On Fri, 10 Mar 2017 10:19:13 +0100,
> Dmitry Vyukov wrote:
>>
>> On Sat, Mar 4, 2017 at 5:31 PM, Dmitry Vyukov <dvyukov@google.com> wrote:
>> > Hello,
>> >
>> > The following program creates processes deadlocked in snd_seq_pool_done:
>> >
>> > https://gist.githubusercontent.com/dvyukov/97efc9cb6d63b1b2c7b737b82cc8b0d6/raw/3546b133ae0b2d3e1190ae7c1f4e240ce7ce132e/gistfile1.txt
>> >
>> > After few seconds I get:
>> >
>> > # ps afxu | grep a.out
>> > root      8660  2.0  0.0      0     0 pts/0    Zl   16:27   0:00
>> > [a.out] <defunct>
>> >
>> > # kill -9 8660
>> >
>> > # cat /proc/8660/status
>> > Name: a.out
>> > State: Z (zombie)
>> > Tgid: 8660
>> > Ngid: 0
>> > Pid: 8660
>> > PPid: 1
>> > TracerPid: 0
>> > Uid: 0 0 0 0
>> > Gid: 0 0 0 0
>> > FDSize: 0
>> > Groups: 0
>> > NStgid: 8660
>> > NSpid: 8660
>> > NSpgid: 8660
>> > NSsid: 2971
>> > Threads: 2
>> > SigQ: 1/3304
>> > SigPnd: 0000000000000000
>> > ShdPnd: 0000000000000100
>> > SigBlk: 0000000000000000
>> > SigIgn: 0000000180000000
>> > SigCgt: 0000000000000440
>> > CapInh: 0000000000000000
>> > CapPrm: 0000003fffffffff
>> > CapEff: 0000003fffffffff
>> > CapBnd: 0000003fffffffff
>> > CapAmb: 0000000000000000
>> > NoNewPrivs: 0
>> > Seccomp: 0
>> > Cpus_allowed: f
>> > Cpus_allowed_list: 0-3
>> > Mems_allowed: 00000000,00000001
>> > Mems_allowed_list: 0
>> > voluntary_ctxt_switches: 12
>> > nonvoluntary_ctxt_switches: 0
>> >
>> > # cat /proc/8660/task/*/stack
>> > [<ffffffff835406db>] snd_seq_pool_done+0x31b/0x620
>> > sound/core/seq/seq_memory.c:436
>> > [<ffffffff8353a11e>] snd_seq_ioctl_set_client_pool+0x1ae/0x600
>> > sound/core/seq/seq_clientmgr.c:1836
>> > [<ffffffff835382ba>] snd_seq_ioctl+0x2da/0x4d0
>> > sound/core/seq/seq_clientmgr.c:2130
>> > [<ffffffff81aced2f>] vfs_ioctl fs/ioctl.c:45 [inline]
>> > [<ffffffff81aced2f>] do_vfs_ioctl+0x1bf/0x1790 fs/ioctl.c:685
>> > [<ffffffff81ad038f>] SYSC_ioctl fs/ioctl.c:700 [inline]
>> > [<ffffffff81ad038f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691
>> > [<ffffffff8457dc41>] entry_SYSCALL_64_fastpath+0x1f/0xc2
>>
>>
>> A friendly ping.
>
> Sorry for the delay, I've been on vacation for over the last two
> weeks.  (And I have a deja vu feeing, as if I so often receive your
> syzkaller bug reports during or just before my vacation in the past,
> too... :)
>
> Will take a look at this soon after digesting the pending mails.

I swear I don't stack them up to send right before your vacation :)

From mboxrd@z Thu Jan  1 00:00:00 1970
From: Dmitry Vyukov <dvyukov@google.com>
Subject: Re: sound: another deadlock in snd_seq_pool_done
Date: Mon, 20 Mar 2017 10:01:56 +0100
Message-ID: <CACT4Y+bYqx=HprGxe4dnQPmODJ9OiKTpVQspnqxZxsGHPdZv5Q@mail.gmail.com>
References: <CACT4Y+aqqy8bZA1fFieifNxR2fAfFQQABcBHj801+u5ePV0URw@mail.gmail.com>
 <CACT4Y+Y17sfHrUS+Sxp1L3z6+01230qs6-TumtH7YkDAOcc8-g@mail.gmail.com>
 <s5ha88gl8m5.wl-tiwai@suse.de>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <alsa-devel-bounces@alsa-project.org>
Received: from mail-vk0-f51.google.com (mail-vk0-f51.google.com
 [209.85.213.51])
 by alsa0.perex.cz (Postfix) with ESMTP id CE826266D04
 for <alsa-devel@alsa-project.org>; Mon, 20 Mar 2017 10:02:18 +0100 (CET)
Received: by mail-vk0-f51.google.com with SMTP id d188so66469517vka.0
 for <alsa-devel@alsa-project.org>; Mon, 20 Mar 2017 02:02:18 -0700 (PDT)
In-Reply-To: <s5ha88gl8m5.wl-tiwai@suse.de>
List-Unsubscribe: <http://mailman.alsa-project.org/mailman/options/alsa-devel>,
 <mailto:alsa-devel-request@alsa-project.org?subject=unsubscribe>
List-Archive: <http://mailman.alsa-project.org/pipermail/alsa-devel/>
List-Post: <mailto:alsa-devel@alsa-project.org>
List-Help: <mailto:alsa-devel-request@alsa-project.org?subject=help>
List-Subscribe: <http://mailman.alsa-project.org/mailman/listinfo/alsa-devel>,
 <mailto:alsa-devel-request@alsa-project.org?subject=subscribe>
Errors-To: alsa-devel-bounces@alsa-project.org
Sender: alsa-devel-bounces@alsa-project.org
To: Takashi Iwai <tiwai@suse.de>
Cc: alsa-devel@alsa-project.org, syzkaller <syzkaller@googlegroups.com>, LKML <linux-kernel@vger.kernel.org>
List-Id: alsa-devel@alsa-project.org

On Mon, Mar 20, 2017 at 8:17 AM, Takashi Iwai <tiwai@suse.de> wrote:
> On Fri, 10 Mar 2017 10:19:13 +0100,
> Dmitry Vyukov wrote:
>>
>> On Sat, Mar 4, 2017 at 5:31 PM, Dmitry Vyukov <dvyukov@google.com> wrote:
>> > Hello,
>> >
>> > The following program creates processes deadlocked in snd_seq_pool_done:
>> >
>> > https://gist.githubusercontent.com/dvyukov/97efc9cb6d63b1b2c7b737b82cc8b0d6/raw/3546b133ae0b2d3e1190ae7c1f4e240ce7ce132e/gistfile1.txt
>> >
>> > After few seconds I get:
>> >
>> > # ps afxu | grep a.out
>> > root      8660  2.0  0.0      0     0 pts/0    Zl   16:27   0:00
>> > [a.out] <defunct>
>> >
>> > # kill -9 8660
>> >
>> > # cat /proc/8660/status
>> > Name: a.out
>> > State: Z (zombie)
>> > Tgid: 8660
>> > Ngid: 0
>> > Pid: 8660
>> > PPid: 1
>> > TracerPid: 0
>> > Uid: 0 0 0 0
>> > Gid: 0 0 0 0
>> > FDSize: 0
>> > Groups: 0
>> > NStgid: 8660
>> > NSpid: 8660
>> > NSpgid: 8660
>> > NSsid: 2971
>> > Threads: 2
>> > SigQ: 1/3304
>> > SigPnd: 0000000000000000
>> > ShdPnd: 0000000000000100
>> > SigBlk: 0000000000000000
>> > SigIgn: 0000000180000000
>> > SigCgt: 0000000000000440
>> > CapInh: 0000000000000000
>> > CapPrm: 0000003fffffffff
>> > CapEff: 0000003fffffffff
>> > CapBnd: 0000003fffffffff
>> > CapAmb: 0000000000000000
>> > NoNewPrivs: 0
>> > Seccomp: 0
>> > Cpus_allowed: f
>> > Cpus_allowed_list: 0-3
>> > Mems_allowed: 00000000,00000001
>> > Mems_allowed_list: 0
>> > voluntary_ctxt_switches: 12
>> > nonvoluntary_ctxt_switches: 0
>> >
>> > # cat /proc/8660/task/*/stack
>> > [<ffffffff835406db>] snd_seq_pool_done+0x31b/0x620
>> > sound/core/seq/seq_memory.c:436
>> > [<ffffffff8353a11e>] snd_seq_ioctl_set_client_pool+0x1ae/0x600
>> > sound/core/seq/seq_clientmgr.c:1836
>> > [<ffffffff835382ba>] snd_seq_ioctl+0x2da/0x4d0
>> > sound/core/seq/seq_clientmgr.c:2130
>> > [<ffffffff81aced2f>] vfs_ioctl fs/ioctl.c:45 [inline]
>> > [<ffffffff81aced2f>] do_vfs_ioctl+0x1bf/0x1790 fs/ioctl.c:685
>> > [<ffffffff81ad038f>] SYSC_ioctl fs/ioctl.c:700 [inline]
>> > [<ffffffff81ad038f>] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:691
>> > [<ffffffff8457dc41>] entry_SYSCALL_64_fastpath+0x1f/0xc2
>>
>>
>> A friendly ping.
>
> Sorry for the delay, I've been on vacation for over the last two
> weeks.  (And I have a deja vu feeing, as if I so often receive your
> syzkaller bug reports during or just before my vacation in the past,
> too... :)
>
> Will take a look at this soon after digesting the pending mails.

I swear I don't stack them up to send right before your vacation :)