From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.1 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id A6CB8C10F00 for ; Mon, 25 Mar 2019 01:25:52 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 74DA820989 for ; Mon, 25 Mar 2019 01:25:52 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1553477152; bh=ldQejEjFa9xJKrOj9ljoYTibC1Rfddw7L0VQ8tWj1hE=; h=References:In-Reply-To:From:Date:Subject:To:Cc:List-ID:From; b=tE41WSw6SA04XL7tIxHvCwzXK3PG5F765z3Fl2r3OP8JI0rvamG1JujRVnO0OBH0S mNHzBPP/LUtQAcOkvkGjfn5Ngky3aBSbgWcAUN2qBVAYA9iaEYiZP2MaLmMxlsMss9 aFUFcfXcy04crAPtLruV5PUmXBLeMpUTp8MNQ6EI= Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729231AbfCYBZu (ORCPT ); Sun, 24 Mar 2019 21:25:50 -0400 Received: from mail-lj1-f179.google.com ([209.85.208.179]:41821 "EHLO mail-lj1-f179.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729113AbfCYBZu (ORCPT ); Sun, 24 Mar 2019 21:25:50 -0400 Received: by mail-lj1-f179.google.com with SMTP id k8so6300103lja.8 for ; Sun, 24 Mar 2019 18:25:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux-foundation.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=/uZ6qBBZKN1B+WbB1dUcc49BomhgwJyztBbifYKKE3s=; b=Em5+t3QWQwF71xfeNyYkcnMQCeasPx4OswleLHwsu+iHNovb1LNZg7Hrk9thZKgy0s LWRG1FhbgPgclPJU+ZI3OXMERh2sJjnwIr3SnHPCzRwK4kNrCa4IrA71I4tNhx0mbZRt xdfUWl/6vBByi2Xe7lpQgaB8hoLGf1gmrbfaA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=/uZ6qBBZKN1B+WbB1dUcc49BomhgwJyztBbifYKKE3s=; b=tb2A+lBugpXrOLXvIpWu+bNRcG2dKZs3qwLeR/YgHDB/wnGRxcmgrrtMOsUuL8X/0n 9bqYxUYpDCg9Ud/msH132YnlTE4E+1EumyxUBrmTwSeAjAQblS3jMWX+EDUzoAMSzTqy 5OIOn9Rc77Nh9El7zL65MrxP4DBOFFHO276oaYVCfZtpIiK4Dw9hsV6f11eGKM6DVidq GT9ZBg8v3++g5mid1B2XkfCXw1x4Hf2B5ZTFCMTZx/ODMjLpqvFTXBB7SGv03dC5fkBC TNSZAQN+t8blBmcVmGgO16CKK+263jHObrNChQjSDws+cAsdecw+B6BFgX0akVdHec0J SL3g== X-Gm-Message-State: APjAAAWW2o8pIZ2mpXISyeSrGqjp1q2h99xBDrCtJdIBL+fEOgWfM5Qy h61JFZued53oS5zhtQCKCDjzUL5fZDo= X-Google-Smtp-Source: APXvYqyZ90tCLFC3macTNPGP2FVLZpTqb53Q2/tOIytgD9Xf+FErvEVMmI9xAcoWVb62s6eDAvWsuw== X-Received: by 2002:a2e:81c6:: with SMTP id s6mr11390296ljg.56.1553477147309; Sun, 24 Mar 2019 18:25:47 -0700 (PDT) Received: from mail-lf1-f43.google.com (mail-lf1-f43.google.com. [209.85.167.43]) by smtp.gmail.com with ESMTPSA id s24sm1739184ljs.30.2019.03.24.18.25.46 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 24 Mar 2019 18:25:46 -0700 (PDT) Received: by mail-lf1-f43.google.com with SMTP id a6so4796651lfl.5 for ; Sun, 24 Mar 2019 18:25:46 -0700 (PDT) X-Received: by 2002:a19:954b:: with SMTP id x72mr10791763lfd.67.1553477145866; Sun, 24 Mar 2019 18:25:45 -0700 (PDT) MIME-Version: 1.0 References: <0000000000006946d2057bbd0eef@google.com> <000000000000295e0d0584e08021@google.com> In-Reply-To: <000000000000295e0d0584e08021@google.com> From: Linus Torvalds Date: Sun, 24 Mar 2019 18:25:30 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: KASAN: use-after-free Read in path_lookupat To: syzbot Cc: dledford@redhat.com, Christoph Hellwig , Leon Romanovsky , linux-fsdevel , Linux List Kernel Mailing , Sagi Grimberg , syzkaller-bugs , Al Viro Content-Type: text/plain; charset="UTF-8" Sender: linux-fsdevel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-fsdevel@vger.kernel.org On Sun, Mar 24, 2019 at 5:44 PM syzbot wrote: > > syzbot has bisected this bug to: > > commit a435393acafbf0ecff4deb3e3cb554b34f0d0664 That's wrong. It might change some timing or something to make the race hit, but it looks entirely unrelated to the bpf path_lookupat problem. Linus