syzbot


KASAN: use-after-free Read in disk_release_events
Status: upstream: reported syz repro on 2021/12/14 10:53
Reported-by: syzbot+28a66a9fbc621c939000@syzkaller.appspotmail.com
Fix commit: 99d8690aae4b block: fix error unwinding in device_add_disk
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 45d, last: 45d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: kernel BUG in __phys_addr (log)
Repro: syz .config
Patch testing requests:
Created Duration User Patch Repo Result
2021/12/21 14:39 16m hch@infradead.org patch upstream OK
2021/12/16 15:39 16m penguin-kernel@i-love.sakura.ne.jp patch upstream OK
2021/12/16 11:51 15m penguin-kernel@i-love.sakura.ne.jp patch upstream OK

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/12/10 10:50 upstream c741e49150db 4d4ce9bc .config log report syz KASAN: use-after-free Read in disk_release_events