Received: by 2002:a05:6a10:22f:0:0:0:0 with SMTP id 15csp4767888pxk; Wed, 30 Sep 2020 11:08:25 -0700 (PDT) X-Google-Smtp-Source: ABdhPJx8ioA2ltdATgiZd4C8iue5Y4N+gGZHOhotzltF9qC9Q62i+nzZW8+PLkWFt6DgJRMe61eR X-Received: by 2002:aa7:df14:: with SMTP id c20mr4189369edy.334.1601489305166; Wed, 30 Sep 2020 11:08:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1601489305; cv=none; d=google.com; s=arc-20160816; b=pLzxyI07old0v/X/F64PW662qmaZEEMo0bpqxUbMIDtjkLWy00MW4oPxIFRscJNmC6 w4B4pQFzIM+IZO5sVrZlt2Vn1bq0aneenM7haxeZxspgO3orohpPgcEdb3ph5g1TQDD2 46juBiac6y+0yEyFoKM00Lb2p4668zPnWwjsH/NCyTQSrZluMpMULUXYYWJ1n02k4j+b mpGhYsuWEgKqEwbPcERyabaFRnpinBCSURlmfnOsO6VPug/8wKdPFUPWr6jaMbyNsFQ5 ZiE+uGftzIunbKW/1Kg2bMJF5AlVAtRm+oiy7KX0f1OoEHk57twGNDek/0PP6Je+QTwy q03Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:user-agent:in-reply-to:content-disposition :mime-version:references:mail-followup-to:reply-to:message-id :subject:to:from:date; bh=GJJFTk+i1cEehEg7SWhJzsjm/PL6HiBuWxVoSHa1vJI=; b=EpaHoEfPUGl8VapJYNBG8SMBDn0kscg0Kst0ihIK8XaPETngWAfKvDlBIQPQTiw2+P SYEo+oTKXBJGLWNBC/wCBZ8Nima9UX1GSnjzum6155/kqy7Unp3CJ9QTWYotYwXbinsk mOw7LLZRj85SaLA1kkT6blPFYTu6d3kzXXve/85Jb5elJ9uzmkntVWHXY9uzX5xdpqjV h0LG4phuGm1stToi3byehvhaNQW49BT7+L8HvOQyyn3QUX5FcoHf30TqDk8mKMUNUozj C1Dkli1/EXOwpLMyEIgK+CLLkRugSLOS+bG3fgB+9M5UR3IsQoloB3TCrb6MAhHU7y+3 lNqQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id u8si1651922edx.66.2020.09.30.11.08.01; Wed, 30 Sep 2020 11:08:25 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728076AbgI3SGo (ORCPT + 99 others); Wed, 30 Sep 2020 14:06:44 -0400 Received: from mx2.suse.de ([195.135.220.15]:34556 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725372AbgI3SGo (ORCPT ); Wed, 30 Sep 2020 14:06:44 -0400 X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.221.27]) by mx2.suse.de (Postfix) with ESMTP id BD4BEB269; Wed, 30 Sep 2020 18:06:42 +0000 (UTC) Received: by ds.suse.cz (Postfix, from userid 10065) id 0B3D3DA781; Wed, 30 Sep 2020 20:05:22 +0200 (CEST) Date: Wed, 30 Sep 2020 20:05:22 +0200 From: David Sterba To: dsterba@suse.cz, syzbot , clm@fb.com, dsterba@suse.com, josef@toxicpanda.com, linux-btrfs@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: KASAN: use-after-free Read in btrfs_scan_one_device Message-ID: <20200930180522.GR6756@twin.jikos.cz> Reply-To: dsterba@suse.cz Mail-Followup-To: dsterba@suse.cz, syzbot , clm@fb.com, dsterba@suse.com, josef@toxicpanda.com, linux-btrfs@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com References: <0000000000001fe79005afbf52ea@google.com> <20200930165756.GQ6756@twin.jikos.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200930165756.GQ6756@twin.jikos.cz> User-Agent: Mutt/1.5.23.1-rc1 (2014-03-12) Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Sep 30, 2020 at 06:57:56PM +0200, David Sterba wrote: > On Sun, Sep 20, 2020 at 07:12:14AM -0700, syzbot wrote: > > Hello, > > > > syzbot found the following issue on: > > > > HEAD commit: eb5f95f1 Merge tag 's390-5.9-6' of git://git.kernel.org/pu.. > > git tree: upstream > > console output: https://syzkaller.appspot.com/x/log.txt?x=10a0a8bb900000 > > kernel config: https://syzkaller.appspot.com/x/.config?x=ffe85b197a57c180 > > dashboard link: https://syzkaller.appspot.com/bug?extid=582e66e5edf36a22c7b0 > > compiler: gcc (GCC) 10.1.0-syz 20200507 > > > > Unfortunately, I don't have any reproducer for this issue yet. > > > > IMPORTANT: if you fix the issue, please add the following tag to the commit: > > Reported-by: syzbot+582e66e5edf36a22c7b0@syzkaller.appspotmail.com > > #syz fix: btrfs: fix overflow when copying corrupt csums for a message Johannes spotted that this is not the right fix for this report, I don't know how to tell syzbot to revert the 'fix:' command, there isn't 'unfix' (like there's 'undup').