KASAN: use-after-free Read in p9_fd_poll
Status: fixed on 2019/11/20 22:01
Fix commit: 430ac66eb4c5 net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
First crash: 1243d, last: 1209d

Fix bisection: fixed by (bisect log) :
commit 430ac66eb4c5b5c4eb846b78ebf65747510b30f1
Author: Tomas Bortoli <>
Date: Fri Jul 20 09:27:30 2018 +0000

  net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()

similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 KASAN: use-after-free Read in p9_fd_poll 3 1194d 1210d 0/3 auto-closed as invalid on 2019/02/24 05:39

Sample crash report:

Crashes (8):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2018/07/23 19:40 upstream d72e90f33aa4 f69c5fcd .config log report syz C
ci-upstream-kasan-gce-root 2018/08/13 01:26 upstream d6dd6431591b 7a88b141 .config log report
ci-upstream-kasan-gce-root 2018/08/10 18:34 upstream f313b43be461 1fb62d58 .config log report
ci-upstream-kasan-gce-root 2018/08/03 16:26 upstream 0585df468e8f cc4f6d0a .config log report
ci-upstream-kasan-gce-root 2018/08/02 11:00 upstream 6b4703768268 0a7cf4ec .config log report
ci-upstream-kasan-gce-root 2018/08/01 16:31 upstream c1d61e7fe376 1477993e .config log report
ci-upstream-kasan-gce-root 2018/07/10 23:04 upstream 30c2c32d7f70 2e0e3130 .config log report
ci-upstream-linux-next-kasan-gce-root 2018/07/23 04:27 linux-next 89cf55353308 8cc079c3 .config log report