syzbot


KASAN: use-after-free Read in io_async_task_func
Status: fixed on 2020/09/16 22:51
Reported-by: syzbot+9b260fc33297966f5a8e@syzkaller.appspotmail.com
Fix commit: 6d816e08 io_uring: hold 'ctx' reference around task_work queue + execute
First crash: 42d, last: 42d

Cause bisection: failed (bisect log)
duplicates (2):
Title Repro Bisected Count Last Reported Patched Status
KASAN: use-after-free Read in idr_for_each C 4 21d 39d 0/17 closed as dup on 2020/08/13 18:43
KASAN: use-after-free Read in __io_req_task_submit C cause 1 41d 41d 0/17 closed as dup on 2020/08/12 02:44

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-smack-root 2020/08/11 03:01 upstream fc80c51f 7adc7b65 .config log report syz axboe@kernel.dk, io-uring@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk