Re: [syzbot] [f2fs?] KASAN: slab-use-after-free Read in destroy_device_list

From: Eric Biggers
Date: Wed Jan 17 2024 - 22:58:55 EST


On Sat, Jan 13, 2024 at 08:59:04PM -0800, syzbot wrote:
> syzbot has bisected this issue to:
>
> commit 275dca4630c165edea9abe27113766bc1173f878
> Author: Eric Biggers <ebiggers@xxxxxxxxxx>
> Date: Wed Dec 27 17:14:28 2023 +0000
>
> f2fs: move release of block devices to after kill_block_super()
>
> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=10639913e80000
> start commit: 052d534373b7 Merge tag 'exfat-for-6.8-rc1' of git://git.ke..
> git tree: upstream
> final oops: https://syzkaller.appspot.com/x/report.txt?x=12639913e80000
> console output: https://syzkaller.appspot.com/x/log.txt?x=14639913e80000
> kernel config: https://syzkaller.appspot.com/x/.config?x=878a2a4af11180a7
> dashboard link: https://syzkaller.appspot.com/bug?extid=a5e651ca75fa0260acd5
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=167b0f47e80000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11255313e80000
>
> Reported-by: syzbot+a5e651ca75fa0260acd5@xxxxxxxxxxxxxxxxxxxxxxxxx
> Fixes: 275dca4630c1 ("f2fs: move release of block devices to after kill_block_super()")
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection
>

#syz fix: f2fs: fix double free of f2fs_sb_info