Received: by 2002:a05:6358:a55:b0:ec:fcf4:3ecf with SMTP id 21csp3402469rwb; Mon, 16 Jan 2023 07:34:24 -0800 (PST) X-Google-Smtp-Source: AMrXdXsJOY11xSc2PhBAKzZXWs8oChpq7hpOa/eum22HF6B4o6+e2x/DnbaAfux/eD3wajZHtLJO X-Received: by 2002:a17:906:85c5:b0:86b:1ccc:d434 with SMTP id i5-20020a17090685c500b0086b1cccd434mr11160196ejy.67.1673883264242; Mon, 16 Jan 2023 07:34:24 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1673883264; cv=none; d=google.com; s=arc-20160816; b=Dz2+6GOGqKNk/kTi0LrX4AvurvCsZNV37OMdDg3du90t64HuLKyM+wfVnqv59zX9IW pdVAaysa/XSUOPOgTOv8zRoOQcHG7fvQnZ/sHYRwH/vgFeu9Zhqgqtl3QYEoGnWjeM9K 3r1GMrsgjHSrIjFGXlOQcOvZtvDcZyu4wUPR6N8NT0KEmxFSMo9/ZjUo+YzhA2px65rK z1ifIiOzhJiWvRSekLjrVX00b1E38z3cNOnPolTQbynga8U6/OflXQjN4wJG6jQ+t4HW lhM86Jay1U/4my16c9DQTestTpl9thNwpvT1Nv3wN5UTmA4wlA8l0SGllb1wEn6yYm6Y qU9A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:in-reply-to:from :references:to:content-language:subject:user-agent:mime-version:date :message-id:dkim-signature; bh=BNSsmno8e8s9oFCMBiRbmu66VIEr5qjM0vt5oGHy2JU=; b=HN3Zf6ZLIp5n3pklPdLT4DQXre/FaQEJPPPE8sRJxlVWbks30zfehuDlhBAO6ffzHu GU4hUOKqNMh1HxAPyH6/U3JvWYNhqOiY2kHi+USs0VMJ7ihZbAlHrQ0wz5MCjSPVkh0w 3P0bHi/qM9cOtQzfBwpJbzBnsVvFYbEOYNlL1VSJcVCoPvZju+sxyXthGRUQZ+0TX6Em 98KkXmh6F/GkSbQTFQft7ifYOjbQOs340r/BPLq1xE/retI7zYFfK12QoZjvS3Hp+ycn QUQC3Tk7AxF6uHEAn0vDcXIoaJktE8bhewXNGfKBf2WiIixYUhaMGxOrY4Lf/BTQowBw goUA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel-dk.20210112.gappssmtp.com header.s=20210112 header.b=aAJ7bHoc; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id xb13-20020a170907070d00b0084d1310711dsi31266540ejb.315.2023.01.16.07.34.11; Mon, 16 Jan 2023 07:34:24 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel-dk.20210112.gappssmtp.com header.s=20210112 header.b=aAJ7bHoc; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230120AbjAPNoA (ORCPT + 50 others); Mon, 16 Jan 2023 08:44:00 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:57090 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231165AbjAPNn5 (ORCPT ); Mon, 16 Jan 2023 08:43:57 -0500 Received: from mail-pf1-x436.google.com (mail-pf1-x436.google.com [IPv6:2607:f8b0:4864:20::436]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 261751D93A for ; Mon, 16 Jan 2023 05:43:56 -0800 (PST) Received: by mail-pf1-x436.google.com with SMTP id x4so16827328pfj.1 for ; Mon, 16 Jan 2023 05:43:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel-dk.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=BNSsmno8e8s9oFCMBiRbmu66VIEr5qjM0vt5oGHy2JU=; b=aAJ7bHocMQ8t2p9/9nDJJWMlvaBtA/p7xcLuCk6+5H4U60Y+ahRYKaDENAtmBXJg2R Rzj9abrDPhI/PjkA1NWGCf5R2brQ5quq2fHOKZ67Meu2L7GQVNp4h+0+7lvrcSDDOyh0 DUj1+lQi8cM7c0+KE1iXPgBXktTBdJ7ecW6L9IhZqROSUIcxIQGFnahAbL3yjoKjpp7T cSYHP16YrxF5/xtCLLf9E79uPNnEEwAlTAMCWtMkcHukedu+TwLjeHBmAXfeHwKQaCA7 qSLST8E473ecUwRr9vvZWB7/dSHsZHrjtV/wCHKBsUHKPtOPag1kUOunUvnmjHj8/du9 ahaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=BNSsmno8e8s9oFCMBiRbmu66VIEr5qjM0vt5oGHy2JU=; b=3A4rG8vC902PkPr6aauM8U45ZB8owCo2p77HvavQyuuBgWFGxdy/wirWYnAqDZ8wRY BQeGqYChH0Fh89cHWjuqqRc71FcVLtMrWd0yKzC46FIIkGoI3ffJ8MS8cY5u5yqfsdyF /hGsG9oiaXPCu9icI//HruWiwlzxgphcJGazjf0671lJMUX44owAqLbakal+d+qTwW1Z 1rvs5YIUU/6gqjke7dYtwMUJIfPbQV+CA88GH7tqDx8TgHylDnZ6UmnzaZPkRXPeBgc9 T5jUTsO/mwOPzecLbSaCtxVEpkzSFsn+2ACrWG/jR3vI98DMHQmENPHciHQ73TzwbUYi NCtw== X-Gm-Message-State: AFqh2kp6bKxVve+6TE7/4jJUOuQ3xc4JuM1m5uOYsvbldWbgeXyfzpED InRdZKa2T3g6QZrZ5YVXcug75A== X-Received: by 2002:a05:6a00:781:b0:57f:d5d1:41d0 with SMTP id g1-20020a056a00078100b0057fd5d141d0mr20227289pfu.3.1673876635545; Mon, 16 Jan 2023 05:43:55 -0800 (PST) Received: from [192.168.1.136] ([198.8.77.157]) by smtp.gmail.com with ESMTPSA id y10-20020aa79aea000000b0058ba2ebee12sm2324129pfp.158.2023.01.16.05.43.54 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 16 Jan 2023 05:43:55 -0800 (PST) Message-ID: <4aabf060-e024-7e6f-2037-8b13a35531ca@kernel.dk> Date: Mon, 16 Jan 2023 06:43:53 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux aarch64; rv:102.0) Gecko/20100101 Thunderbird/102.6.0 Subject: Re: [syzbot] KASAN: use-after-free Read in io_poll_task_func Content-Language: en-US To: syzbot , asml.silence@gmail.com, io-uring@vger.kernel.org, linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com References: <000000000000b9f9fd05f25b74ff@google.com> From: Jens Axboe In-Reply-To: <000000000000b9f9fd05f25b74ff@google.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=1.3 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,NICE_REPLY_A,RCVD_IN_DNSWL_NONE,RCVD_IN_SBL_CSS, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 X-Spam-Level: * X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 1/15/23 11:11 PM, syzbot wrote: > Hello, > > syzbot found the following issue on: > > HEAD commit: 0a093b2893c7 Add linux-next specific files for 20230112 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=12fcd936480000 > kernel config: https://syzkaller.appspot.com/x/.config?x=835f3591019836d5 > dashboard link: https://syzkaller.appspot.com/bug?extid=cb95143d1d4d788c1941 > compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2 syz fix: io_uring/io-wq: only free worker if it was allocated for creation -- Jens Axboe