syzbot


KASAN: use-after-free Read in bdev_del_partition
Status: fixed on 2020/09/25 01:17
Reported-by: syzbot+6448f3c229bc52b82f69@syzkaller.appspotmail.com
Fix commit: 08fc1ab6 block: fix locking in bdev_del_partition
First crash: 28d, last: 28d

Cause bisection: introduced by (bisect log):

commit cddae808aeb77e5c29d22a8e0dfbdaed413f9e04
Author: Christoph Hellwig <hch@lst.de>
Date: Tue Apr 14 07:28:54 2020 +0000

  block: pass a hd_struct to delete_partition

Crash: KASAN: use-after-free Read in delete_partition (log)
Repro: C syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2020/09/02 09:19 17m yepeilin.cs@gmail.com patch upstream OK
2020/09/02 05:12 9m anant.thazhemadam@gmail.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master report log

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-smack-root 2020/08/31 16:13 upstream dcc5c6f0 d5a3ae1f .config log report syz C axboe@kernel.dk, johannes.thumshirn@wdc.com, linux-block@vger.kernel.org, linux-kernel@vger.kernel.org