syzbot


KASAN: use-after-free Write in end_requests

Status: auto-closed as invalid on 2019/02/22 10:29
Subsystems: fuse
[Documentation on labels]
Reported-by: syzbot+b6b1597223fa59453438@syzkaller.appspotmail.com
First crash: 2096d, last: 2096d

Sample crash report:
Unknown ioctl 185
IPVS: set_ctl: invalid protocol: 2 172.20.20.27:20001
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
Unknown ioctl 185
==================================================================
BUG: KASAN: use-after-free in end_requests+0x37b/0x460 fs/fuse/dev.c:2042
Write of size 4 at addr ffff8801d34416e4 by task syz-executor0/29613

CPU: 1 PID: 29613 Comm: syz-executor0 Not tainted 4.18.0-rc6-next-20180725+ #18
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
 ? dump_stack_print_

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/28 18:21 linux-next d1e0b8e0cb7a ebf656d7 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.