syzbot


KASAN: use-after-free Read in io_worker_handle_work
Status: upstream: reported on 2021/05/19 06:08
Reported-by: syzbot+6cb11ade52aa17095297@syzkaller.appspotmail.com
Fix commit: 3743c1723bfc io-wq: Fix UAF when wakeup wqe in hash waitqueue
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 72d, last: 41d

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2021/05/19 04:36 upstream 8ac91e6c6033 a343ba6b .config log report info KASAN: use-after-free Read in io_worker_handle_work
ci-upstream-linux-next-kasan-gce-root 2021/06/18 12:52 linux-next a1f92694393a aba2b2fb .config log report info KASAN: use-after-free Read in io_worker_handle_work