Re: [syzbot] KASAN: use-after-free Write in io_queue_worker_create

Jens Axboe
2021-12-10T05:26:23Z

On 12/9/21 10:21 PM, syzbot wrote:
> syzbot has found a reproducer for the following issue on:
>
> HEAD commit: c741e49150db Merge tag 'for-linus' of git://git.kernel.org..
> git tree: upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=125600bab00000
> kernel config: https://syzkaller.appspot.com/x/.config?x=221ffc09e39ebbd1
> dashboard link: https://syzkaller.appspot.com/bug?extid=b60c982cb0efc5e05a47
> compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1686906db00000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1539a9b9b00000
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+b60c982cb0efc5e05a47@syzkaller.appspotmail.com

#syz test git://git.kernel.dk/linux-block io_uring-5.16

--
Jens Axboe