From mboxrd@z Thu Jan 1 00:00:00 1970 From: syzbot Subject: KASAN: use-after-free Read in p9_fd_poll Date: Wed, 11 Jul 2018 12:54:01 -0700 Message-ID: <000000000000afbebb0570be9bf3@google.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Content-Transfer-Encoding: base64 To: davem@davemloft.net, ericvh@gmail.com, linux-kernel@vger.kernel.org, lucho@ionkov.net, netdev@vger.kernel.org, rminnich@sandia.gov, syzkaller-bugs@googlegroups.com, v9fs-developer@lists.sourceforge.net Return-path: Received: from mail-it0-f69.google.com ([209.85.214.69]:32879 "EHLO mail-it0-f69.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1732787AbeGKT7y (ORCPT ); Wed, 11 Jul 2018 15:59:54 -0400 Received: by mail-it0-f69.google.com with SMTP id p82-v6so109350itc.0 for ; Wed, 11 Jul 2018 12:54:01 -0700 (PDT) Sender: netdev-owner@vger.kernel.org List-ID: SGVsbG8sDQoNCnN5emJvdCBmb3VuZCB0aGUgZm9sbG93aW5nIGNyYXNoIG9uOg0KDQpIRUFEIGNv bW1pdDogICAgMzBjMmMzMmQ3ZjcwIE1lcmdlIHRhZyAnZHJtLWZpeGVzLTIwMTgtMDctMTAnIG9m IGdpdDovL2Fuby4uDQpnaXQgdHJlZTogICAgICAgdXBzdHJlYW0NCmNvbnNvbGUgb3V0cHV0OiBo dHRwczovL3N5emthbGxlci5hcHBzcG90LmNvbS94L2xvZy50eHQ/eD0xNjYyYzViMjQwMDAwMA0K a2VybmVsIGNvbmZpZzogIGh0dHBzOi8vc3l6a2FsbGVyLmFwcHNwb3QuY29tL3gvLmNvbmZpZz94 PTI1ODU2ZmFjNGU1ODBhYTcNCmRhc2hib2FyZCBsaW5rOiBodHRwczovL3N5emthbGxlci5hcHBz cG90LmNvbS9idWc/ZXh0aWQ9MDQ0MmU2ZTJmN2UxZTMzYjEwMzcNCmNvbXBpbGVyOiAgICAgICBn Y2MgKEdDQykgOC4wLjEgMjAxODA0MTMgKGV4cGVyaW1lbnRhbCkNCg0KVW5mb3J0dW5hdGVseSwg SSBkb24ndCBoYXZlIGFueSByZXByb2R1Y2VyIGZvciB0aGlzIGNyYXNoIHlldC4NCg0KSU1QT1JU QU5UOiBpZiB5b3UgZml4IHRoZSBidWcsIHBsZWFzZSBhZGQgdGhlIGZvbGxvd2luZyB0YWcgdG8g dGhlIGNvbW1pdDoNClJlcG9ydGVkLWJ5OiBzeXpib3QrMDQ0MmU2ZTJmN2UxZTMzYjEwMzdAc3l6 a2FsbGVyLmFwcHNwb3RtYWlsLmNvbQ0KDQo5cG5ldDogcDlfZXJyc3RyMmVycm5vOiBzZXJ2ZXIg cmVwb3J0ZWQgdW5rbm93biBlcnJvciBldHowZSbvv73vv70/77+9ZCQ13LFJFjPvv70eEw0KUUFU OiBJbnZhbGlkIGlvY3RsDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0NCkJVRzogS0FTQU46IHVzZS1hZnRlci1mcmVlIGlu IHA5X2ZkX3BvbGwrMHgyODAvMHgyYjAgbmV0LzlwL3RyYW5zX2ZkLmM6MjM4DQpSZWFkIG9mIHNp emUgOCBhdCBhZGRyIGZmZmY4ODAxYzY0N2VjODAgYnkgdGFzayBrd29ya2VyLzE6My81MDA1DQoN CkNQVTogMSBQSUQ6IDUwMDUgQ29tbToga3dvcmtlci8xOjMgTm90IHRhaW50ZWQgNC4xOC4wLXJj NCsgIzE0MA0KSGFyZHdhcmUgbmFtZTogR29vZ2xlIEdvb2dsZSBDb21wdXRlIEVuZ2luZS9Hb29n bGUgQ29tcHV0ZSBFbmdpbmUsIEJJT1MgIA0KR29vZ2xlIDAxLzAxLzIwMTENCldvcmtxdWV1ZTog ZXZlbnRzIHA5X3BvbGxfd29ya2ZuDQpDYWxsIFRyYWNlOg0KICBfX2R1bXBfc3RhY2sgbGliL2R1 bXBfc3RhY2suYzo3NyBbaW5saW5lXQ0KICBkdW1wX3N0YWNrKzB4MWM5LzB4MmI0IGxpYi9kdW1w X3N0YWNrLmM6MTEzDQogIHByaW50X2FkZHJlc3NfZGVzY3JpcHRpb24rMHg2Yy8weDIwYiBtbS9r YXNhbi9yZXBvcnQuYzoyNTYNCiAga2FzYW5fcmVwb3J0X2Vycm9yIG1tL2thc2FuL3JlcG9ydC5j OjM1NCBbaW5saW5lXQ0KICBrYXNhbl9yZXBvcnQuY29sZC43KzB4MjQyLzB4MmZlIG1tL2thc2Fu L3JlcG9ydC5jOjQxMg0KICBfX2FzYW5fcmVwb3J0X2xvYWQ4X25vYWJvcnQrMHgxNC8weDIwIG1t L2thc2FuL3JlcG9ydC5jOjQzMw0KICBwOV9mZF9wb2xsKzB4MjgwLzB4MmIwIG5ldC85cC90cmFu c19mZC5jOjIzOA0KICBwOV9wb2xsX211eCBuZXQvOXAvdHJhbnNfZmQuYzo2MTcgW2lubGluZV0N CiAgcDlfcG9sbF93b3JrZm4rMHg0NjMvMHg2ZDAgbmV0LzlwL3RyYW5zX2ZkLmM6MTEwNw0KICBw cm9jZXNzX29uZV93b3JrKzB4YzczLzB4MWJhMCBrZXJuZWwvd29ya3F1ZXVlLmM6MjE1Mw0KICB3 b3JrZXJfdGhyZWFkKzB4MTg5LzB4MTNjMCBrZXJuZWwvd29ya3F1ZXVlLmM6MjI5Ng0KICBrdGhy ZWFkKzB4MzQ1LzB4NDEwIGtlcm5lbC9rdGhyZWFkLmM6MjQ2DQogIHJldF9mcm9tX2ZvcmsrMHgz YS8weDUwIGFyY2gveDg2L2VudHJ5L2VudHJ5XzY0LlM6NDEyDQoNCkFsbG9jYXRlZCBieSB0YXNr IDI5MTIxOg0KICBzYXZlX3N0YWNrKzB4NDMvMHhkMCBtbS9rYXNhbi9rYXNhbi5jOjQ0OA0KICBz ZXRfdHJhY2sgbW0va2FzYW4va2FzYW4uYzo0NjAgW2lubGluZV0NCiAga2FzYW5fa21hbGxvYysw eGM0LzB4ZTAgbW0va2FzYW4va2FzYW4uYzo1NTMNCiAga21lbV9jYWNoZV9hbGxvY190cmFjZSsw eDE1Mi8weDc4MCBtbS9zbGFiLmM6MzYyMA0KICBrbWFsbG9jIGluY2x1ZGUvbGludXgvc2xhYi5o OjUxMyBbaW5saW5lXQ0KICBremFsbG9jIGluY2x1ZGUvbGludXgvc2xhYi5oOjcwNyBbaW5saW5l XQ0KICBwOV9mZF9vcGVuIG5ldC85cC90cmFuc19mZC5jOjc5NiBbaW5saW5lXQ0KICBwOV9mZF9j cmVhdGUrMHgxYTcvMHgzZjAgbmV0LzlwL3RyYW5zX2ZkLmM6MTAzNg0KICBwOV9jbGllbnRfY3Jl YXRlKzB4OTE1LzB4MTZjOSBuZXQvOXAvY2xpZW50LmM6MTA2Mg0KICB2OWZzX3Nlc3Npb25faW5p dCsweDIxYS8weDFhODAgZnMvOXAvdjlmcy5jOjQwMA0KICB2OWZzX21vdW50KzB4N2MvMHg5MDAg ZnMvOXAvdmZzX3N1cGVyLmM6MTM1DQogIG1vdW50X2ZzKzB4YWUvMHgzMjggZnMvc3VwZXIuYzox Mjc3DQogIHZmc19rZXJuX21vdW50LnBhcnQuMzQrMHhkYy8weDRlMCBmcy9uYW1lc3BhY2UuYzox MDM3DQogIHZmc19rZXJuX21vdW50IGZzL25hbWVzcGFjZS5jOjEwMjcgW2lubGluZV0NCiAgZG9f bmV3X21vdW50IGZzL25hbWVzcGFjZS5jOjI1MTggW2lubGluZV0NCiAgZG9fbW91bnQrMHg1ODEv MHgzMGUwIGZzL25hbWVzcGFjZS5jOjI4NDgNCiAga3N5c19tb3VudCsweDEyZC8weDE0MCBmcy9u YW1lc3BhY2UuYzozMDY0DQogIF9fZG9fc3lzX21vdW50IGZzL25hbWVzcGFjZS5jOjMwNzggW2lu bGluZV0NCiAgX19zZV9zeXNfbW91bnQgZnMvbmFtZXNwYWNlLmM6MzA3NSBbaW5saW5lXQ0KICBf X3g2NF9zeXNfbW91bnQrMHhiZS8weDE1MCBmcy9uYW1lc3BhY2UuYzozMDc1DQogIGRvX3N5c2Nh bGxfNjQrMHgxYjkvMHg4MjAgYXJjaC94ODYvZW50cnkvY29tbW9uLmM6MjkwDQogIGVudHJ5X1NZ U0NBTExfNjRfYWZ0ZXJfaHdmcmFtZSsweDQ5LzB4YmUNCg0KRnJlZWQgYnkgdGFzayAyOTEyMToN CiAgc2F2ZV9zdGFjaysweDQzLzB4ZDAgbW0va2FzYW4va2FzYW4uYzo0NDgNCiAgc2V0X3RyYWNr IG1tL2thc2FuL2thc2FuLmM6NDYwIFtpbmxpbmVdDQogIF9fa2FzYW5fc2xhYl9mcmVlKzB4MTFh LzB4MTcwIG1tL2thc2FuL2thc2FuLmM6NTIxDQogIGthc2FuX3NsYWJfZnJlZSsweGUvMHgxMCBt bS9rYXNhbi9rYXNhbi5jOjUyOA0KICBfX2NhY2hlX2ZyZWUgbW0vc2xhYi5jOjM0OTggW2lubGlu ZV0NCiAga2ZyZWUrMHhkOS8weDI2MCBtbS9zbGFiLmM6MzgxMw0KICBwOV9mZF9jbG9zZSsweDQx Ni8weDViMCBuZXQvOXAvdHJhbnNfZmQuYzo4OTMNCiAgcDlfY2xpZW50X2NyZWF0ZSsweGFjMi8w eDE2YzkgbmV0LzlwL2NsaWVudC5jOjEwNzYNCiAgdjlmc19zZXNzaW9uX2luaXQrMHgyMWEvMHgx YTgwIGZzLzlwL3Y5ZnMuYzo0MDANCiAgdjlmc19tb3VudCsweDdjLzB4OTAwIGZzLzlwL3Zmc19z dXBlci5jOjEzNQ0KICBtb3VudF9mcysweGFlLzB4MzI4IGZzL3N1cGVyLmM6MTI3Nw0KICB2ZnNf a2Vybl9tb3VudC5wYXJ0LjM0KzB4ZGMvMHg0ZTAgZnMvbmFtZXNwYWNlLmM6MTAzNw0KICB2ZnNf a2Vybl9tb3VudCBmcy9uYW1lc3BhY2UuYzoxMDI3IFtpbmxpbmVdDQogIGRvX25ld19tb3VudCBm cy9uYW1lc3BhY2UuYzoyNTE4IFtpbmxpbmVdDQogIGRvX21vdW50KzB4NTgxLzB4MzBlMCBmcy9u YW1lc3BhY2UuYzoyODQ4DQogIGtzeXNfbW91bnQrMHgxMmQvMHgxNDAgZnMvbmFtZXNwYWNlLmM6 MzA2NA0KICBfX2RvX3N5c19tb3VudCBmcy9uYW1lc3BhY2UuYzozMDc4IFtpbmxpbmVdDQogIF9f c2Vfc3lzX21vdW50IGZzL25hbWVzcGFjZS5jOjMwNzUgW2lubGluZV0NCiAgX194NjRfc3lzX21v dW50KzB4YmUvMHgxNTAgZnMvbmFtZXNwYWNlLmM6MzA3NQ0KICBkb19zeXNjYWxsXzY0KzB4MWI5 LzB4ODIwIGFyY2gveDg2L2VudHJ5L2NvbW1vbi5jOjI5MA0KICBlbnRyeV9TWVNDQUxMXzY0X2Fm dGVyX2h3ZnJhbWUrMHg0OS8weGJlDQoNClRoZSBidWdneSBhZGRyZXNzIGJlbG9uZ3MgdG8gdGhl IG9iamVjdCBhdCBmZmZmODgwMWM2NDdlYzgwDQogIHdoaWNoIGJlbG9uZ3MgdG8gdGhlIGNhY2hl IGttYWxsb2MtNTEyIG9mIHNpemUgNTEyDQpUaGUgYnVnZ3kgYWRkcmVzcyBpcyBsb2NhdGVkIDAg Ynl0ZXMgaW5zaWRlIG9mDQogIDUxMi1ieXRlIHJlZ2lvbiBbZmZmZjg4MDFjNjQ3ZWM4MCwgZmZm Zjg4MDFjNjQ3ZWU4MCkNClRoZSBidWdneSBhZGRyZXNzIGJlbG9uZ3MgdG8gdGhlIHBhZ2U6DQpw YWdlOmZmZmZlYTAwMDcxOTFmODAgY291bnQ6MSBtYXBjb3VudDowIG1hcHBpbmc6ZmZmZjg4MDFk YTgwMDk0MCBpbmRleDoweDANCmZsYWdzOiAweDJmZmZjMDAwMDAwMDEwMChzbGFiKQ0KcmF3OiAw MmZmZmMwMDAwMDAwMTAwIGZmZmZlYTAwMDZhOGNjNDggZmZmZmVhMDAwNzRiZTU0OCBmZmZmODgw MWRhODAwOTQwDQpyYXc6IDAwMDAwMDAwMDAwMDAwMDAgZmZmZjg4MDFjNjQ3ZTAwMCAwMDAwMDAw MTAwMDAwMDA2IDAwMDAwMDAwMDAwMDAwMDANCnBhZ2UgZHVtcGVkIGJlY2F1c2U6IGthc2FuOiBi YWQgYWNjZXNzIGRldGVjdGVkDQoNCk1lbW9yeSBzdGF0ZSBhcm91bmQgdGhlIGJ1Z2d5IGFkZHJl c3M6DQogIGZmZmY4ODAxYzY0N2ViODA6IGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZj IGZjIGZjIGZjIGZjIGZjDQogIGZmZmY4ODAxYzY0N2VjMDA6IGZjIGZjIGZjIGZjIGZjIGZjIGZj IGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjIGZjDQo+IGZmZmY4ODAxYzY0N2VjODA6IGZiIGZiIGZi IGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiIGZiDQogICAgICAgICAgICAgICAg ICAgIF4NCiAgZmZmZjg4MDFjNjQ3ZWQwMDogZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIg ZmIgZmIgZmIgZmIgZmIgZmINCiAgZmZmZjg4MDFjNjQ3ZWQ4MDogZmIgZmIgZmIgZmIgZmIgZmIg ZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmIgZmINCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KDQoNCi0tLQ0KVGhpcyBi dWcgaXMgZ2VuZXJhdGVkIGJ5IGEgYm90LiBJdCBtYXkgY29udGFpbiBlcnJvcnMuDQpTZWUgaHR0 cHM6Ly9nb28uZ2wvdHBzbUVKIGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IHN5emJvdC4NCnN5 emJvdCBlbmdpbmVlcnMgY2FuIGJlIHJlYWNoZWQgYXQgc3l6a2FsbGVyQGdvb2dsZWdyb3Vwcy5j b20uDQoNCnN5emJvdCB3aWxsIGtlZXAgdHJhY2sgb2YgdGhpcyBidWcgcmVwb3J0LiBTZWU6DQpo dHRwczovL2dvby5nbC90cHNtRUojYnVnLXN0YXR1cy10cmFja2luZyBmb3IgaG93IHRvIGNvbW11 bmljYXRlIHdpdGggIA0Kc3l6Ym90Lg0K