Re: [syzbot] KASAN: invalid-free in io_clean_op

[Pavel Begunkov]

On 9/25/22 18:54, Pavel Begunkov wrote:
> On 9/25/22 18:29, syzbot wrote:
> > Hello,
> >
> > syzbot found the following issue on:
> >
> > HEAD commit:    aaa11ce2ffc8 Add linux-next specific files for 20220923
> > git tree:       linux-next
> > console+strace: https://syzkaller.appspot.com/x/log.txt?x=1608cadf080000
> > kernel config:  https://syzkaller.appspot.com/x/.config?x=186d1ff305f10294
> > dashboard link: https://syzkaller.appspot.com/bug?extid=edfd15cd4246a3fc615a
> > compiler:       gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
> > syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=144acdef080000
> > C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=10686540880000
> >
> > IMPORTANT: if you fix the issue, please add the following tag to the commit:
> > Reported-by: syzbot+edfd15cd4246a3fc615a@xxxxxxxxxxxxxxxxxxxxxxxxx
>
> #syz test: git://git.kernel.dk/linux.git for-6.1/io_uring

Should be similar to the previous net/op_clean problem but
now zc and because of that we set CLEANUP too early. Just
a guess, will take a look at the repro

--
Pavel Begunkov