syzbot


KASAN: use-after-free Read in vgem_gem_dumb_create
Status: fixed on 2020/04/15 17:19
Reported-by: syzbot+0dc4444774d419e916c8@syzkaller.appspotmail.com
Fix commit: 4b848f20eda5 drm/vgem: Close use-after-free race in vgem_gem_create
First crash: 678d, last: 665d

Cause bisection: introduced by (bisect log) :
commit 7611750784664db46d0db95631e322aeb263dde7
Author: Alex Deucher <alexander.deucher@amd.com>
Date: Wed Jun 21 16:31:41 2017 +0000

  drm/amdgpu: use kernel is_power_of_2 rather than local version

Crash: BUG: sleeping function called from invalid context in tap_get_minor (log)
Repro: syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in vgem_gem_dumb_create C 171 4d00h 677d 0/1 upstream: reported C repro on 2020/01/31 14:46
linux-4.19 KASAN: use-after-free Read in vgem_gem_dumb_create C 187 12d 677d 0/1 upstream: reported C repro on 2020/01/31 21:57

Sample crash report:

Crashes (15):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2020/02/02 04:37 upstream 94f2630b1897 2274ad39 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/12 10:19 upstream 359c92c02bfa a75b198c .config log report syz
ci-upstream-kasan-gce-smack-root 2020/02/11 07:22 upstream 0a679e13ea30 084454ae .config log report syz
ci-upstream-kasan-gce-root 2020/02/10 08:39 upstream d1ea35f4cdd4 35f5e45e .config log report syz
ci-upstream-kasan-gce-smack-root 2020/02/08 21:24 upstream f757165705e9 06150bf1 .config log report syz
ci-upstream-kasan-gce-smack-root 2020/02/08 04:27 upstream 41dcd67e8868 06150bf1 .config log report syz
ci-upstream-kasan-gce-root 2020/02/07 13:42 upstream 90568ecf5615 06150bf1 .config log report syz
ci-upstream-kasan-gce-smack-root 2020/02/06 03:25 upstream 6992ca0dd017 662cf49a .config log report syz
ci-upstream-kasan-gce-root 2020/02/04 00:12 upstream 754beeec1d90 93e5e335 .config log report syz
ci-upstream-kasan-gce-selinux-root 2020/02/03 06:43 upstream 46d6b7becb1d 93e5e335 .config log report syz
ci-upstream-kasan-gce-selinux-root 2020/02/02 11:36 upstream 94f2630b1897 2274ad39 .config log report syz
ci-upstream-kasan-gce-smack-root 2020/02/01 00:35 upstream ccaaaf6fe5a5 c30117b2 .config log report syz
ci-upstream-kasan-gce 2020/01/30 17:45 upstream 39bed42de2e7 5ed23f9a .config log report syz
ci-upstream-kasan-gce-smack-root 2020/02/12 18:41 upstream 359c92c02bfa 84f4fc8a .config log report
ci-upstream-kasan-gce 2020/01/30 17:13 upstream 39bed42de2e7 5ed23f9a .config log report