Re: [syzbot] KASAN: use-after-free Read in udl_get_urb_timeout

From: Takashi Iwai
Date: Mon Aug 22 2022 - 08:26:59 EST


On Mon, 22 Aug 2022 11:09:31 +0200,
syzbot wrote:
>
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit: 5b6a4bf680d6 Add linux-next specific files for 20220818
> git tree: linux-next
> console+strace: https://syzkaller.appspot.com/x/log.txt?x=12341a3d080000
> kernel config: https://syzkaller.appspot.com/x/.config?x=ead6107a3bbe3c62
> dashboard link: https://syzkaller.appspot.com/bug?extid=f24934fe125a19d77eae
> compiler: gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12731867080000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=165b64f3080000
>
> The issue was bisected to:
>
> commit e25d5954264d1871ab2792c7ca2298b811462500
> Author: Takashi Iwai <tiwai@xxxxxxx>
> Date: Thu Aug 4 07:58:25 2022 +0000
>
> drm/udl: Kill pending URBs at suspend and disconnect

FYI, the fix including the revert of this commit was already
submitted, waiting for review & merge:
https://lore.kernel.org/r/20220816153655.27526-1-tiwai@xxxxxxx


thanks,

Takashi