Re: [syzbot] [f2fs?] KASAN: slab-use-after-free Read in kill_f2fs_super

From: Eric Biggers
Date: Wed Jan 17 2024 - 22:59:26 EST


On Fri, Jan 12, 2024 at 10:38:04PM -0800, syzbot wrote:
> syzbot has bisected this issue to:
>
> commit 275dca4630c165edea9abe27113766bc1173f878
> Author: Eric Biggers <ebiggers@xxxxxxxxxx>
> Date: Wed Dec 27 17:14:28 2023 +0000
>
> f2fs: move release of block devices to after kill_block_super()
>
> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=16071613e80000
> start commit: 70d201a40823 Merge tag 'f2fs-for-6.8-rc1' of git://git.ker..
> git tree: upstream
> final oops: https://syzkaller.appspot.com/x/report.txt?x=15071613e80000
> console output: https://syzkaller.appspot.com/x/log.txt?x=11071613e80000
> kernel config: https://syzkaller.appspot.com/x/.config?x=4607bc15d1c4bb90
> dashboard link: https://syzkaller.appspot.com/bug?extid=8f477ac014ff5b32d81f
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=112b660be80000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14c1df5de80000
>
> Reported-by: syzbot+8f477ac014ff5b32d81f@xxxxxxxxxxxxxxxxxxxxxxxxx
> Fixes: 275dca4630c1 ("f2fs: move release of block devices to after kill_block_super()")
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection

#syz fix: f2fs: fix double free of f2fs_sb_info