syzbot


KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (2)
Status: upstream: reported C repro on 2021/09/05 20:22
Reported-by: syzbot+272ce7abd8e49c0ddf42@syzkaller.appspotmail.com
First crash: 49d, last: 2d05h

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: INFO: task hung in vivid_stop_generating_vid_cap (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer 1 644d 644d 0/22 auto-closed as invalid on 2020/05/17 19:44
linux-4.19 BUG: unable to handle kernel paging request in tpg_fill_plane_buffer (2) syz 4 2d17h 83d 0/1 upstream: reported syz repro on 2021/08/02 00:51

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/10/04 23:43 upstream f6274b06e326 d236a457 .config log report syz C
Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2021/09/04 23:21 upstream f1583cb1be35 d236a457 .config log report syz C KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer
ci-upstream-kasan-gce 2021/10/22 06:44 upstream 2f111a6fd5b5 55f90bc6 .config log report info KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer
ci-upstream-kasan-gce-root 2021/10/18 03:13 upstream d999ade1cc86 0c5d9412 .config log report info KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer