syzbot


KASAN: use-after-free Read in disk_part_iter_next (2)
Status: upstream: reported C repro on 2021/03/14 11:08
Reported-by: syzbot+8fede7e30c7cee0de139@syzkaller.appspotmail.com
Fix commit: e82fc7855749 block: don't create too many partitions
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 135d, last: 113d

Cause bisection: introduced by (bisect log) :
commit a33df75c6328bf40078b35f2040d8e54d574c357
Author: Christoph Hellwig <hch@lst.de>
Date: Sun Jan 24 10:02:41 2021 +0000

  block: use an xarray for disk->part_tbl

Crash: KASAN: use-after-free Read in disk_part_iter_next (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in disk_part_iter_next C unreliable 243 135d 223d 21/22 fixed on 2021/03/10 01:49
Patch testing requests:
Created Duration User Patch Repo Result
2021/03/26 08:35 18m tom.leiming@gmail.com https://github.com/ming1/linux.git v5.12-block-test report log
2021/03/24 13:05 12m hch@lst.de git://git.infradead.org/users/hch/block.git 079274f2cf123f9a85972db1043d689c74c0787f report log
2021/03/24 09:49 10m hch@lst.de git://git.infradead.org/users/hch/block.git part-iter-fix report log
2021/03/22 08:51 17m tom.leiming@gmail.com https://github.com/ming1/linux.git v5.12-block-test report log
2021/03/22 07:49 10m dvyukov@google.com patch upstream report log
2021/03/21 21:26 12m bvanassche@acm.org https://github.com/bvanassche/linux a5f35387ebdc report log

Sample crash report:

Crashes (327):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/03/20 20:52 upstream 1c273e10bc0c 17810eae .config log report syz C KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/28 17:11 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/28 12:43 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/28 01:58 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/27 16:13 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/27 10:49 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/27 09:40 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/27 08:06 upstream 0f4498cef9f5 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/27 06:52 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/27 03:31 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/27 01:37 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/26 21:38 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/26 18:36 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/26 17:29 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/26 16:26 upstream db24726bfefa a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/26 13:53 upstream db24726bfefa 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/26 10:57 upstream db24726bfefa 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/26 09:32 upstream db24726bfefa 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-qemu-upstream 2021/03/26 05:40 upstream 002322402daf 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-qemu-upstream 2021/03/26 01:24 upstream 002322402daf 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/25 20:06 upstream e138138003eb 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/25 17:56 upstream e138138003eb 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/25 16:06 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/25 09:59 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/25 09:57 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/25 04:49 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/25 03:36 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/25 00:49 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/24 23:37 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/24 22:04 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-selinux-root 2021/03/24 21:01 upstream 4ee998b0ef8b 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/24 19:05 upstream 7acac4b3196c 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-smack-root 2021/03/24 17:54 upstream 7acac4b3196c 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/24 17:08 upstream 7acac4b3196c 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/24 16:02 upstream 7acac4b3196c 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-qemu-upstream 2021/03/14 05:44 upstream 280d542f6ffa 4a003785 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/04/01 12:22 linux-next 931294922e65 6a81331a .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/31 22:51 linux-next 931294922e65 6a81331a .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/30 03:45 linux-next 931294922e65 6a81331a .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/29 20:13 linux-next 931294922e65 6a81331a .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/29 18:09 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/29 17:59 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/29 10:57 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/29 09:49 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/28 19:38 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/27 08:39 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/26 19:43 linux-next 931294922e65 a8529b82 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/26 12:58 linux-next b4f20b70784a 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/25 23:35 linux-next b4f20b70784a 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/25 21:18 linux-next b4f20b70784a 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/25 19:21 linux-next b4f20b70784a 6a383ecf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/25 02:18 linux-next 20f1b5f9c07c 607e3baf .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-linux-next-kasan-gce-root 2021/03/10 10:57 linux-next 3aa6f5082286 26967e35 .config log report info KASAN: use-after-free Read in disk_part_iter_next
ci-upstream-kasan-gce-root 2021/03/23 18:52 upstream 7acac4b3196c e613994b .config log report info KFENCE: use-after-free in disk_part_iter_next