From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from m16.mail.163.com (m16.mail.163.com [117.135.210.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 817BA1A9FA0 for ; Wed, 11 Mar 2026 02:57:04 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=117.135.210.4 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773197827; cv=none; b=ItuxGrxjc96ZUbCAXgeYduuMQ8tfU0eycVKRHAL4/1A3U8vIQ6PfVqRI+73SYyCnaW+LdX24iIynPkM01LLbLyJ+cLoxBnnPSIbL4Y9zB1oIE05QkoOI0LjH9LHmBOuXMREfoWC7lPcJ3pnJmLObuvvnhbH0qzCYI53TqBtLAUw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773197827; c=relaxed/simple; bh=6XbYUOUr4VIrBdFRw7pR7saFxderEONFAddPtJwG7CI=; h=Date:From:To:Subject:Content-Type:MIME-Version:Message-ID; b=NtKlWnBVtNkYa2V/FOE7xkb1GY2ajjimQg1Y1yXLFzO7NsOzkvY1s0oyEqphEq8gtPQNGFEHBiEw9n43BDddy4dzDt12D1EPTRpSBq0Wt8KiRurhp0t/wMW1/8mM7h6c4d1iFI+ZXmyp8O5zK4K9Fnn4fblI18seu+5ixqz1SFU= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=163.com; spf=pass smtp.mailfrom=163.com; dkim=pass (1024-bit key) header.d=163.com header.i=@163.com header.b=Ukhw5dT9; arc=none smtp.client-ip=117.135.210.4 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=163.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=163.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=163.com header.i=@163.com header.b="Ukhw5dT9" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version: Message-ID; bh=6XbYUOUr4VIrBdFRw7pR7saFxderEONFAddPtJwG7CI=; b=U khw5dT9pRkEbhKHq/kMp86bMfaf0nskGXbBXSpf9ZIPqnlGcd8V2RcGVCU0brtxH ZukEkgET+WjDbogYDox31UozUy11/l2JRkwV1iCSvyaRRV8shLT3vAJkHDiqHd4H W3cVLpWL2u2TAX0FkrGyE4OFdE+PslSDGFs/zn11sc= Received: from luckd0g$163.com ( [183.205.138.18] ) by ajax-webmail-wmsvr-40-146 (Coremail) ; Wed, 11 Mar 2026 10:56:37 +0800 (CST) Date: Wed, 11 Mar 2026 10:56:37 +0800 (CST) From: "Jianzhou Zhao" To: jfs-discussion@lists.sourceforge.net, liaoyuanhong@vivo.com, shaggy@kernel.org, linux-kernel@vger.kernel.org Subject: KASAN: slab-use-after-free in txEnd during umount X-Priority: 3 X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build 20251222(83accb85) Copyright (c) 2002-2026 www.mailtech.cn 163com X-NTES-SC: AL_Qu2cAf2SuE8i4SefYekfmU4Rhug7UMO3uf8n24JfPJ9wjCzr5C4MZHpGN2Py3OuVMC+gqhiXXAlB7sV7cJNobacN8oCkL8IqHJXv9WAcy5W+Ug== Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=GBK Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-ID: <11adc2bb.2dc4.19cdad3299e.Coremail.luckd0g@163.com> X-Coremail-Locale: zh_CN X-CM-TRANSID:kigvCgD3P2vm2bBp9uB1AA--.40765W X-CM-SenderInfo: poxfyvkqj6il2tof0z/xtbC9gY2wGmw2eYb4gAA3Z X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU== CgpTdWJqZWN0OiBbQlVHXSBqZnM6IEtBU0FOOiBzbGFiLXVzZS1hZnRlci1mcmVlIGluIHR4RW5k IGR1cmluZyB1bW91bnQgKGBqZnNfc2JfaW5mb2ApCgpEZWFyIE1haW50YWluZXJzLAoKT3VyIGZ1 enppbmcgdG9vbCwgUmFjZVBpbG90LCBoYXMgZGV0ZWN0ZWQgYW5vdGhlciBzbGFiLXVzZS1hZnRl ci1mcmVlIGJ1ZyBpbiB0aGUgSkZTIHN1YnN5c3RlbSBvbiBhIDYuMTgga2VybmVsIHZlcnNpb24g KGA2LjE4LjAtMDg2OTEtZzIwNjFmMThhZDc2ZS1kaXJ0eWApLiAKClRoaXMgaXNzdWUgaXMgY2xv c2VseSByZWxhdGVkIHRvIHRoZSBwcmV2aW91c2x5IHJlcG9ydGVkIFVBRiBpbiBgbG1Mb2dTeW5j YC4gSXQgc2hhcmVzIHRoZSBzYW1lIHJvb3QgY2F1c2U6IHRoZSBgamZzX2ZsdXNoX2pvdXJuYWxg IGZ1bmN0aW9uIGZhaWxpbmcgdG8gd2FpdCBmb3IgbGF6eSB0cmFuc2FjdGlvbnMgaGFuZGxlZCBi eSB0aGUgYGpmc19sYXp5Y29tbWl0YCB0aHJlYWQgYmVmb3JlIGFsbG93aW5nIHRoZSB1bm1vdW50 IHByb2Nlc3MgdG8gY29udGludWUuIEluIHRoaXMgc3BlY2lmaWMgdHJhY2UsIGl0IG1hbmlmZXN0 cyBhcyBhIFVzZS1BZnRlci1GcmVlIG9uIHRoZSBgamZzX3NiX2luZm9gIChgc2JpYCkgc3RydWN0 dXJlIGluc2lkZSBgdHhFbmQoKWAsIHJhdGhlciB0aGFuIG9uIHRoZSBgamZzX2xvZ2Agc3RydWN0 dXJlLgoKIyMjIENhbGwgVHJhY2UgJiBDb250ZXh0ClRoZSBLQVNBTiBzcGxhdCByZXZlYWxzIGEg cmVhZCB1c2UtYWZ0ZXItZnJlZSBvbiBhbiBvYmplY3QgY29uc3RydWN0ZWQgYnkgYGpmc19maWxs X3N1cGVyYC4gKE5vdGU6IER1ZSB0byBzb3VyY2UtbGV2ZWwgaW5zdHJ1bWVudGF0aW9uIHdpdGgg UmFjZVBpbG90LCB0aGUgbGluZSBudW1iZXJzIGluIHRoZSB0cmFjZSBjb3JyZXNwb25kIHRvIHRo ZSBpbnN0cnVtZW50ZWQgc291cmNlIGJsb2NrIHByb3ZpZGVkIGJlbG93KS4KCmBgYApCVUc6IEtB U0FOOiBzbGFiLXVzZS1hZnRlci1mcmVlIGluIHR4RW5kKzB4NTNlLzB4NWEwIGZzL2pmcy9qZnNf dHhubWdyLmM6NTA3ClJlYWQgb2Ygc2l6ZSA4IGF0IGFkZHIgZmZmZjg4ODA0Zjg1MGMzMCBieSB0 YXNrIGpmc0NvbW1pdC8xMjEKCkNQVTogMCBVSUQ6IDAgUElEOiAxMjEgQ29tbTogamZzQ29tbWl0 IFRhaW50ZWQ6IEcgICAgICAgICAgICAgTCAgICAgIDYuMTguMC0wODY5MS1nMjA2MWYxOGFkNzZl LWRpcnR5ICM0MyBQUkVFTVBUKGZ1bGwpIApDYWxsIFRyYWNlOgogdHhFbmQrMHg1M2UvMHg1YTAg ZnMvamZzL2pmc190eG5tZ3IuYzo1MDcKIHR4TGF6eUNvbW1pdCBmcy9qZnMvamZzX3R4bm1nci5j OjI2ODUgW2lubGluZV0KIGpmc19sYXp5Y29tbWl0KzB4NmYwLzB4YjEwIGZzL2pmcy9qZnNfdHhu bWdyLmM6MjczNAoga3RocmVhZCsweDNkMC8weDc4MCBrZXJuZWwva3RocmVhZC5jOjQ2MwoKQWxs b2NhdGVkIGJ5IHRhc2sgMjc5OTEgKG1vdW50KToKIC4uLgogamZzX2ZpbGxfc3VwZXIrMHhkMS8w eDEwMzAgZnMvamZzL3N1cGVyLmM6NDUyCiBnZXRfdHJlZV9iZGV2X2ZsYWdzKzB4Mzg5LzB4NjIw IGZzL3N1cGVyLmM6MTY5OQogLi4uCgpGcmVlZCBieSB0YXNrIDk4OTUgKHVtb3VudCk6CiAuLi4K IGtmcmVlKzB4MmNhLzB4NmQwIG1tL3NsdWIuYzo2ODcxCiBnZW5lcmljX3NodXRkb3duX3N1cGVy KzB4MTU2LzB4MzkwIGZzL3N1cGVyLmM6NjQzCiBraWxsX2Jsb2NrX3N1cGVyKzB4M2IvMHg5MCBm cy9zdXBlci5jOjE3MzAKIC4uLgpgYGAKCiMjIyMgRXhlY3V0aW9uIEZsb3cgJiBDb2RlIENvbnRl eHQ6CgoqKjEuIFRoZSBGcmVlaW5nIFBhdGggKGBnZW5lcmljX3NodXRkb3duX3N1cGVyYCAtPiBg amZzX3B1dF9zdXBlcmApKioKCkR1cmluZyB1bm1vdW50LCBgamZzX3Vtb3VudGAgZmx1c2hlcyB0 aGUgam91cm5hbCB2aWEgYGpmc19mbHVzaF9qb3VybmFsKGxvZywgMilgLiBIb3dldmVyLCBgamZz X2ZsdXNoX2pvdXJuYWxgIChgZnMvamZzL2pmc190eG5tZ3IuY2ApIHByZW1hdHVyZWx5IHJldHVy bnMgaWYgYGxvZy0+Y3F1ZXVlYCBhbmQgYGxvZy0+c3luY2xpc3RgIGFyZSBlbXB0eS4gSXQgZmFp bHMgdG8gY2hlY2sgaWYgdGhlcmUgYXJlIHJlbWFpbmluZyB0cmFuc2FjdGlvbnMgaW4gdGhlIGxh enkgY29tbWl0IHF1ZXVlIChgVHhBbmNob3IudW5sb2NrX3F1ZXVlYCk6CmBgYGMKMTQ5ODogLyoK MTQ5OTogICogTkFNRToJamZzX2ZsdXNoX2pvdXJuYWwoKQouLi4KMTU3NzogCWlmICgoIWxpc3Rf ZW1wdHkoJmxvZy0+Y3F1ZXVlKSkgfHwgIWxpc3RfZW1wdHkoJmxvZy0+c3luY2xpc3QpKSB7Ci4u LgoxNTgxOiAJCQlpZiAobGlzdF9lbXB0eSgmbG9nLT5jcXVldWUpICYmCjE1ODI6IAkJCSAgICBs aXN0X2VtcHR5KCZsb2ctPnN5bmNsaXN0KSkKMTU4MzogCQkJCWJyZWFrOyAvLyA8LS0tIFByZW1h dHVyZSByZXR1cm4KYGBgCgpCZWNhdXNlIGBqZnNfZmx1c2hfam91cm5hbGAgcmV0dXJucyBlYXJs eSwgdGhlIHVubW91bnQgcHJvY2VzcyByZXN1bWVzIGFuZCBldmVudHVhbGx5IGludm9rZXMgYGdl bmVyaWNfc2h1dGRvd25fc3VwZXJgLCBjYWxsaW5nIHRoZSBmaWxlc3lzdGVtJ3MgYHB1dF9zdXBl cmAgY2FsbGJhY2sgKGBqZnNfcHV0X3N1cGVyYCBpbiBgZnMvamZzL3N1cGVyLmNgKS4gVGhpcyBn cmFjZWZ1bGx5IGZyZWVzIHRoZSBgamZzX3NiX2luZm9gIG1lbW9yeSBhbGxvY2F0aW9uIChga2Zy ZWUoc2JpKWApOgpgYGBjCjE5MDogc3RhdGljIHZvaWQgamZzX3B1dF9zdXBlcihzdHJ1Y3Qgc3Vw ZXJfYmxvY2sgKnNiKQoxOTE6IHsKLi4uCjE5NDogCWtmcmVlKHNiaSk7IC8vIDwtLS0gc2JpIGlz IGZyZWVkIGhlcmUKMTk1OiB9CmBgYAoKKioyLiBUaGUgQWNjZXNzIFBhdGggKGBqZnNfbGF6eWNv bW1pdGAgLT4gYHR4RW5kYCkqKgoKQ29uY3VycmVudGx5LCBhIGJhY2tncm91bmQgYGpmc19sYXp5 Y29tbWl0YCB0aHJlYWQgKGBmcy9qZnMvamZzX3R4bm1nci5jYCkgaXMgc3RpbGwgcHJvY2Vzc2lu ZyB0cmFuc2FjdGlvbnMgcHVzaGVkIHRvIHRoZSBgVHhBbmNob3IudW5sb2NrX3F1ZXVlYCBiZWZv cmUgdW5tb3VudDoKYGBgYwoyNjk5OiBpbnQgamZzX2xhenljb21taXQodm9pZCAqYXJnKQoyNzAw OiB7Ci4uLgoyNzEwOiAJCXdoaWxlICghbGlzdF9lbXB0eSgmVHhBbmNob3IudW5sb2NrX3F1ZXVl KSkgewouLi4KMjczMjogCQkJCUxBWllfVU5MT0NLKGZsYWdzKTsKMjczMzogCQkJCXR4TGF6eUNv bW1pdCh0YmxrKTsKYGBgCgpXaGVuIGZpbmlzaGluZyB0aGUgbGF6aWx5IGV4ZWN1dGVkIHRyYW5z YWN0aW9uLCBgdHhMYXp5Q29tbWl0YCBpbnZva2VzIGB0eEVuZCgpYC4KYGBgYwoyNjUxOiBzdGF0 aWMgdm9pZCB0eExhenlDb21taXQoc3RydWN0IHRibG9jayAqIHRibGspCjI2NTI6IHsKLi4uCjI2 ODQ6IAkJdGJsay0+ZmxhZyAmPSB+dGJsa0dDX0xBWlk7CjI2ODU6IAkJdHhFbmQodGJsayAtIFR4 QmxvY2spOwkvKiBDb252ZXJ0IGJhY2sgdG8gdGlkICovCmBgYAoKRmluYWxseSwgYHR4RW5kYCAo YGZzL2pmcy9qZnNfdHhubWdyLmNgKSBhdHRlbXB0cyB0byBmZXRjaCB0aGUgYGxvZ2Agb2JqZWN0 IHBvaW50ZXIgYnkgZGVyZWZlcmVuY2luZyB0aGUgcHJpdmF0ZSBgc2ItPnNfZnNfaW5mb2AgcG9p bnRlciAoYHNiaWApLiBTaW5jZSBgc2JpYCB3YXMgYWxyZWFkeSBmcmVlZCBpbiBgamZzX3B1dF9z dXBlcigpYCwgdGhpcyB0cmlnZ2VycyB0aGUgS0FTQU4gVXNlLUFmdGVyLUZyZWU6CmBgYGMKNDkz OiB2b2lkIHR4RW5kKHRpZF90IHRpZCkKNDk0OiB7Ci4uLgo1MDc6IAlsb2cgPSBKRlNfU0JJKHRi bGstPnNiKS0+bG9nOyAvLyA8LS0tIFVBRiBhY2Nlc3MgdG8gZnJlZWQgc2JpIGJsb2NrCmBgYAoK IyMjIFJvb3QgQ2F1c2UgQW5hbHlzaXMKClRoaXMgYnVnIHNoYXJlcyB0aGUgZXhhY3QgaWRlbnRp Y2FsIHJvb3QgY2F1c2Ugd2l0aCB0aGUgcHJldmlvdXNseSByZXBvcnRlZCBgbG1Mb2dTeW5jYCBV QUYgYnVnLiBgamZzX2ZsdXNoX2pvdXJuYWwobG9nLCAyKWAgZmFpbHMgdG8gcHJvcGVybHkgY2hl Y2sgYFR4QW5jaG9yLnVubG9ja19xdWV1ZWAgKG9yIGFjdGl2ZSB0cmFuc2FjdGlvbnMgaGFuZGxl ZCBieSB0aGUgbGF6eSB0aHJlYWQpIGJlZm9yZSByZXR1cm5pbmcgZHVyaW5nIHRoZSB1bm1vdW50 IHByb2Nlc3MuIEJlY2F1c2Ugb2YgdGhpcyByYWNlIGNvbmRpdGlvbiwgdmFyeWluZyB0aW1pbmcg Y2FuIGxlYWQgdG8gYGpmc19sYXp5Y29tbWl0YCBlaXRoZXIgZGVyZWZlcmVuY2luZyB0aGUgZnJl ZWQgYHNiaWAgKHdoZW4gYHR4RW5kYCBzdGFydHMgZXhlY3V0aW9uKSBvciB0aGUgZnJlZWQgYGxv Z2AgbWV0YWRhdGEgKHN1YnNlcXVlbnRseSBpbiBgdHhFbmRgKS4gUmVncmV0dGFibHksIHdlIHdl cmUgdW5hYmxlIHRvIGNyZWF0ZSBhIHJlcHJvZHVjdGlvbiBwcm9ncmFtIGZvciB0aGlzIGJ1Zy4K CiMjIyBQb3RlbnRpYWwgSW1wYWN0CgpTaW1pbGFyIHRvIHRoZSBwcmV2aW91cyByZXBvcnQsIHRo ZSBwcmltYXJ5IGhhemFyZCBib2lscyBkb3duIHRvIGEgbG9jYWwgRGVuaWFsIG9mIFNlcnZpY2Ug KG1lbW9yeSBjb3JydXB0aW9uL3NwbGF0KSBpZiBsYXp5IHRyYW5zYWN0aW9ucyBjb2luY2lkZSBp bnRlbnNlbHkgd2l0aCBmaWxlc3lzdGVtIHVubW91bnRpbmcgb3BlcmF0aW9ucy4gV2UgZ2F1Z2Ug dGhlIGV4cGxvaXRhYmlsaXR5IHJpc2sgdG8gYmUgbG93LCBhcyBzdGFuZGFyZCBpbnRlcmFjdGlv bnMgYXJvdW5kIHRoZSBmaWxlc3lzdGVtIGxpZmVjeWNsZSB1bm1vdW50IG1lY2hhbmlzbSBoZWF2 aWx5IHJlc3RyYWluIHRoZSBzY29wZSB0byB0cmlnZ2VyIGFyYml0cmFyeSBleGVjdXRpb24sIHJl c3VsdGluZyBpbiBwcmVkb21pbmFudGx5IGEgbG9jYWwgY3Jhc2ggcmlzay4KCiMjIyBQcm9wb3Nl ZCBGaXgKCkp1c3QgYXMgYmVmb3JlLCByZXNvbHZpbmcgdGhlIGVhcmx5IHJldHVybiBvZiBgamZz X2ZsdXNoX2pvdXJuYWxgIGVmZmVjdGl2ZWx5IHJlc29sdmVzIHRoaXMgVUFGIGFzIHdlbGwsIHNp bmNlIGl0IGNvcnJlY3RseSBibG9ja3MgdGhlIHVtb3VudCBzZXF1ZW5jZSB1bnRpbCB0aGUgYGpm c19sYXp5Y29tbWl0YCB0aHJlYWQgaGFzIGZpbmlzaGVkIHByb2Nlc3Npbmcgb24gYm90aCBgbG9n YCBhbmQgYHNiaWAuIAoKV2UgY2FuIGV2YWx1YXRlIGBsb2ctPmFjdGl2ZWAgaW5zaWRlIGBqZnNf Zmx1c2hfam91cm5hbGAgdG8gZnVsbHkgY2FwdHVyZSBhbnkgdHJhbnNhY3Rpb25zIGhhbmRsZWQg YnkgYGpmc19sYXp5Y29tbWl0YCBiZWZvcmUgcGVybWl0dGluZyB0aGUgdW5tb3VudCB0byBwcm9j ZWVkLgoKYGBgZGlmZgotLS0gYS9mcy9qZnMvamZzX3R4bm1nci5jCisrKyBiL2ZzL2pmcy9qZnNf dHhubWdyLmMKQEAgLTE1NzQsMTEgKzE1NzQsMTIgQEAgdm9pZCBqZnNfZmx1c2hfam91cm5hbChz dHJ1Y3QgamZzX2xvZyAqbG9nLCBpbnQgd2FpdCkKICAgICAgICAvKgogICAgICAgICAqIElmIHRo ZXJlIHdhcyByZWNlbnQgYWN0aXZpdHksIHdlIG1heSBuZWVkIHRvIHdhaXQKICAgICAgICAgKiBm b3IgdGhlIGxhenljb21taXQgdGhyZWFkIHRvIGNhdGNoIHVwCiAgICAgICAgICovCi0gICAgICAg aWYgKCghbGlzdF9lbXB0eSgmbG9nLT5jcXVldWUpKSB8fCAhbGlzdF9lbXB0eSgmbG9nLT5zeW5j bGlzdCkpIHsKKyAgICAgICBpZiAoKCFsaXN0X2VtcHR5KCZsb2ctPmNxdWV1ZSkpIHx8ICFsaXN0 X2VtcHR5KCZsb2ctPnN5bmNsaXN0KSB8fAorICAgICAgICAgICBsb2ctPmFjdGl2ZSkgewogICAg ICAgICAgICAgICAgZm9yIChpID0gMDsgaSA8IDIwMDsgaSsrKSB7ICAgICAvKiBUb28gbXVjaD8g Ki8KICAgICAgICAgICAgICAgICAgICAgICAgbXNsZWVwKDI1MCk7CiAgICAgICAgICAgICAgICAg ICAgICAgIHdyaXRlX3NwZWNpYWxfaW5vZGVzKGxvZywgZmlsZW1hcF9mZGF0YXdyaXRlKTsKICAg ICAgICAgICAgICAgICAgICAgICAgaWYgKGxpc3RfZW1wdHkoJmxvZy0+Y3F1ZXVlKSAmJgotICAg ICAgICAgICAgICAgICAgICAgICAgICAgbGlzdF9lbXB0eSgmbG9nLT5zeW5jbGlzdCkpCisgICAg ICAgICAgICAgICAgICAgICAgICAgICBsaXN0X2VtcHR5KCZsb2ctPnN5bmNsaXN0KSAmJgorICAg ICAgICAgICAgICAgICAgICAgICAgICAgIWxvZy0+YWN0aXZlKQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICAgICAgICAgfQogICAgICAgIH0KYGBgCgpXZSB3 b3VsZCBiZSBoaWdobHkgaG9ub3JlZCBpZiB0aGlzIGNvdWxkIGJlIG9mIGFueSBoZWxwLgoKQmVz dCByZWdhcmRzLApSYWNlUGlsb3QgVGVhbQo=