From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from m16.mail.163.com (m16.mail.163.com [117.135.210.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 469632DC32A for ; Wed, 11 Mar 2026 08:18:14 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=117.135.210.5 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773217099; cv=none; b=CESuvrQW6j6CRf84hms7FSjiu1EG7DWpeX8d4mnItbF65saaiyn0Y5KdykOe0gHpFFW/qt5ZN/yaYeaBTDF6h2hLu9VUQ+yJQITGsknkL3f1fTPmFmeuSQeAMpHv2zs2dKqQW2CJFdpjbV7YlVGxi7yWbo5s1gUiR67ZF0BeMdo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773217099; c=relaxed/simple; bh=KA9un1C1kAaGof0CdqU9ZVlnhJu+EIL+XsgDgAimTmU=; h=Date:From:To:Cc:Subject:Content-Type:MIME-Version:Message-ID; b=KeZninWGrDiBRyIK/eqsCqO6y2XCCcFPrONXOFEUaTZeiqB19j4qkTCb6CgTD7Gwz0Uky+9QBzvNpfoOKj3YHWOXbNZsjTws+RjgPf0zcQrWLKt0rRekXVsVXQj6w3Coyz9qESFeekQezeeluZ77ibdccpzfjnAUORDSQnz14+g= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=163.com; spf=pass smtp.mailfrom=163.com; dkim=pass (1024-bit key) header.d=163.com header.i=@163.com header.b=RAL+Um3x; arc=none smtp.client-ip=117.135.210.5 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=163.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=163.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=163.com header.i=@163.com header.b="RAL+Um3x" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version: Message-ID; bh=KA9un1C1kAaGof0CdqU9ZVlnhJu+EIL+XsgDgAimTmU=; b=R AL+Um3xpJGbjA276vfCruVxsW1pzvxTH7vk2XBPOzyqs3AdAkxNJ7dT5SluTvhLP wwid92jdRvtm1ELmh6xwpu4GAYqlNdNNMjiCbDbpoW+HjXNAgyaCTls+90DqjSMM 5oKTufdpmc9ujAokoUCbsXDJgBT9bBOGOpn+K3IEdA= Received: from luckd0g$163.com ( [183.205.138.18] ) by ajax-webmail-wmsvr-40-127 (Coremail) ; Wed, 11 Mar 2026 16:17:51 +0800 (CST) Date: Wed, 11 Mar 2026 16:17:51 +0800 (CST) From: "Jianzhou Zhao" To: shaggy@kernel.org, liaoyuanhong@vivo.com, jfs-discussion@lists.sourceforge.net Cc: linux-kernel@vger.kernel.org Subject: KASAN: slab-use-after-free Read in write_special_inodes X-Priority: 3 X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build 20251222(83accb85) Copyright (c) 2002-2026 www.mailtech.cn 163com X-NTES-SC: AL_Qu2cAf6auEgs5yiaYOkfmU4Rhug7UMO3uf8n24JfPJ9wjA/p2yseUUF9NmPf88CwFTuXvxiGfTNO1/ZAU5Bifrwx+fMRoQ7MEEUgmHAtHSzQ9Q== Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=GBK Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-ID: <1e07e041.7151.19cdbf942da.Coremail.luckd0g@163.com> X-Coremail-Locale: zh_CN X-CM-TRANSID:fygvCgD3_rsvJbFppsl2AA--.39011W X-CM-SenderInfo: poxfyvkqj6il2tof0z/xtbC9g8bpWmxJS8-VQAA3- X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU== CgpTdWJqZWN0OiBbQlVHXSBqZnM6IEtBU0FOOiBzbGFiLXVzZS1hZnRlci1mcmVlIGluIHdyaXRl X3NwZWNpYWxfaW5vZGVzCgpEZWFyIE1haW50YWluZXJzLAoKV2UgYXJlIHdyaXRpbmcgdG8gcmVw b3J0IGEgc2xhYiB1c2UtYWZ0ZXItZnJlZSAoVUFGKSB2dWxuZXJhYmlsaXR5IGRpc2NvdmVyZWQg aW4gdGhlIEpGUyBmaWxlc3lzdGVtJ3MgdW5tb3VudCBwYXRoLiBUaGlzIGJ1ZyB3YXMgZm91bmQg Ynkgb3VyIGN1c3RvbSBmdXp6aW5nIHRvb2wsIFJhY2VQaWxvdC4gVGhlIFVBRiBpcyB0cmlnZ2Vy ZWQgZHVyaW5nIGEgZmFpbGVkIGZpbGVzeXN0ZW0gbW91bnQvdW5tb3VudCBzZXF1ZW5jZSB3aGVy ZSBgamZzX3B1dF9zdXBlcigpYCBwcmVtYXR1cmVseSBmcmVlcyB0aGUgYHNiaS0+ZGlyZWN0X2lu b2RlYCBiZWZvcmUgZmx1c2hpbmcgdGhlIGpvdXJuYWwsIGxlYWRpbmcgdG8gYSBmYXRhbCBtZW1v cnkgZmF1bHQgaW4gYHdyaXRlX3NwZWNpYWxfaW5vZGVzKClgLiBXZSBvYnNlcnZlZCB0aGlzIGJ1 ZyBvbiB0aGUgTGludXgga2VybmVsIHZlcnNpb24gNi4xOC4wLTA4NjkxLWcyMDYxZjE4YWQ3NmUt ZGlydHkuCgpDYWxsIFRyYWNlICYgQ29udGV4dAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KQlVHOiBLQVNBTjogc2xhYi11 c2UtYWZ0ZXItZnJlZSBpbiB3cml0ZV9zcGVjaWFsX2lub2RlcysweDEzMS8weDE3MCBmcy9qZnMv amZzX2xvZ21nci5jOjIwNgpSZWFkIG9mIHNpemUgOCBhdCBhZGRyIGZmZmY4ODgwMTM3NzRhMzgg YnkgdGFzayBzeXotZXhlY3V0b3IvOTg4MQoKQ1BVOiAwIFVJRDogMCBQSUQ6IDk4ODEgQ29tbTog c3l6LWV4ZWN1dG9yIFRhaW50ZWQ6IEcgICAgICAgICAgICAgTCAgICAgIDYuMTguMC0wODY5MS1n MjA2MWYxOGFkNzZlLWRpcnR5ICM0MyBQUkVFTVBUKGZ1bGwpIAouLi4KQ2FsbCBUcmFjZToKIDxU QVNLPgogd3JpdGVfc3BlY2lhbF9pbm9kZXMrMHgxMzEvMHgxNzAgZnMvamZzL2pmc19sb2dtZ3Iu YzoyMDYKIGpmc19mbHVzaF9qb3VybmFsKzB4MmI4LzB4OTYwIGZzL2pmcy9qZnNfbG9nbWdyLmM6 MTU4MQogamZzX3Vtb3VudCsweDE3YS8weDQ0MCBmcy9qZnMvamZzX3Vtb3VudC5jOjU4CiBqZnNf cHV0X3N1cGVyKzB4ODUvMHgxZDAgZnMvamZzL3N1cGVyLmM6MTk0CiBnZW5lcmljX3NodXRkb3du X3N1cGVyKzB4MTU2LzB4MzkwIGZzL3N1cGVyLmM6NjQzCiBraWxsX2Jsb2NrX3N1cGVyKzB4M2Iv MHg5MCBmcy9zdXBlci5jOjE3MzAKIGRlYWN0aXZhdGVfbG9ja2VkX3N1cGVyKzB4YmYvMHgxYTAg ZnMvc3VwZXIuYzo0NzQKIC4uLgoKQWxsb2NhdGVkIGJ5IHRhc2sgNDUxNzE6CiBqZnNfZmlsbF9z dXBlcisweGQxLzB4MTAzMCBmcy9qZnMvc3VwZXIuYzo0NTIKIGdldF90cmVlX2JkZXZfZmxhZ3Mr MHgzODkvMHg2MjAgZnMvc3VwZXIuYzoxNjk5CiB2ZnNfZ2V0X3RyZWUrMHg5My8weDM0MCBmcy9z dXBlci5jOjE3NTkKIC4uLgoKRnJlZWQgYnkgdGFzayAzODY1MDoKIGtmcmVlKzB4MmNhLzB4NmQw IG1tL3NsdWIuYzo2ODcxCiBnZW5lcmljX3NodXRkb3duX3N1cGVyKzB4MTU2LzB4MzkwIGZzL3N1 cGVyLmM6NjQzCiBraWxsX2Jsb2NrX3N1cGVyKzB4M2IvMHg5MCBmcy9zdXBlci5jOjE3MzAKIC4u Lgo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KCkV4ZWN1dGlvbiBGbG93ICYgQ29kZSBDb250ZXh0CldoZW4gYSBgamZzYCB1 bm1vdW50IG9jY3VycyAob3IgYSBmYWlsZWQgbW91bnQgYWJvcnRzIGNhdXNpbmcgYGpmc19wdXRf c3VwZXJgKSwgdGhlIGtlcm5lbCBpbnZva2VzIGBqZnNfdW1vdW50KClgIGR5bmFtaWNhbGx5Ogpg YGBjCi8vIGZzL2pmcy9zdXBlci5jCnN0YXRpYyB2b2lkIGpmc19wdXRfc3VwZXIoc3RydWN0IHN1 cGVyX2Jsb2NrICpzYikKewoJc3RydWN0IGpmc19zYl9pbmZvICpzYmkgPSBKRlNfU0JJKHNiKTsK CWludCByYzsKCglqZnNfaW5mbygiSW4gamZzX3B1dF9zdXBlciIpOwoKCWpmc19xdW90YV9vZmZf dW1vdW50KHNiKTsKCglyYyA9IGpmc191bW91bnQoc2IpOwoJaWYgKHJjKQoJCWpmc19lcnIoImpm c191bW91bnQgZmFpbGVkIHdpdGggcmV0dXJuIGNvZGUgJWQiLCByYyk7CgoJdW5sb2FkX25scyhz YmktPm5sc190YWIpOwoKCXRydW5jYXRlX2lub2RlX3BhZ2VzKHNiaS0+ZGlyZWN0X2lub2RlLT5p X21hcHBpbmcsIDApOwoJaXB1dChzYmktPmRpcmVjdF9pbm9kZSk7CgoJa2ZyZWUoc2JpKTsKfQpg YGAKClRoZSB1bm1vdW50IHBoYXNlIGV2ZW50dWFsbHkgZmx1c2hlcyB0aGUgZmlsZXN5c3RlbSBq b3VybmFsIHN5bmNocm9ub3VzbHkgdG8gZmluYWxpemUgb3V0LW9mLWJhbmQgSS9PIHRyYW5zYWN0 aW9uczoKYGBgYwovLyBmcy9qZnMvamZzX3Vtb3VudC5jCmludCBqZnNfdW1vdW50KHN0cnVjdCBz dXBlcl9ibG9jayAqc2IpCnsKICAgIC4uLgoJaWYgKChsb2cgPSBzYmktPmxvZykpCgkJLyoKCQkg KiBXYWl0IGZvciBvdXRzdGFuZGluZyB0cmFuc2FjdGlvbnMgdG8gYmUgd3JpdHRlbiB0byBsb2c6 CgkJICovCgkJamZzX2ZsdXNoX2pvdXJuYWwobG9nLCAyKTsKICAgIC4uLgpgYGAKCkhvd2V2ZXIs IGluc2lkZSBgamZzX2ZsdXNoX2pvdXJuYWwoKWAsIHRoZSBiYWNrZW5kIGxvZ2dlciB0cmllcyBp dGVyYXRpbmcgb3ZlciBzcGVjaWFsIGZpbGVzeXN0ZW0gbWFwcGluZ3MgbGlua2VkIGluc2lkZSB0 aGUgYGpmc19zYl9pbmZvYCBsYXlvdXQ6CmBgYGMKLy8gZnMvamZzL2pmc19sb2dtZ3IuYwpzdGF0 aWMgdm9pZCB3cml0ZV9zcGVjaWFsX2lub2RlcyhzdHJ1Y3QgamZzX2xvZyAqbG9nLAoJCQkJIGlu dCAoKndyaXRlcikoc3RydWN0IGFkZHJlc3Nfc3BhY2UgKikpCnsKCXN0cnVjdCBqZnNfc2JfaW5m byAqc2JpOwoKCWxpc3RfZm9yX2VhY2hfZW50cnkoc2JpLCAmbG9nLT5zYl9saXN0LCBsb2dfbGlz dCkgewoJCXdyaXRlcihzYmktPmlwYm1hcC0+aV9tYXBwaW5nKTsKCQl3cml0ZXIoc2JpLT5pcGlt YXAtPmlfbWFwcGluZyk7CgkJd3JpdGVyKHNiaS0+ZGlyZWN0X2lub2RlLT5pX21hcHBpbmcpOyAv LyA8LS0gS0FTQU4gdHJpZ2dlcnMgVXNlLUFmdGVyLUZyZWUgZXhjZXB0aW9uIGhlcmUKCX0KfQpg YGAKClJvb3QgQ2F1c2UgQW5hbHlzaXMKQSBLQVNBTiBTbGFiIFVzZS1BZnRlci1GcmVlIGJ1ZyBl bWVyZ2VzIGluc2lkZSBgd3JpdGVfc3BlY2lhbF9pbm9kZXMoKWAuIFdoZW4gdGhlIFZGUyBhYnN0 cmFjdGlvbiBpbnZva2VzIGBnZW5lcmljX3NodXRkb3duX3N1cGVyYCwgYGpmc19wdXRfc3VwZXIo KWAgZnVuY3Rpb25zIGNsZWFubHkgdW5sZXNzIHRoZSBiYWNrZW5kIHZvbHVtZSBkcm9wcyBlYXJs eSBjYWNoZSBpbnZhbGlkYXRpb24gZHVyaW5nIGZhdWx0IHRlYXJkb3ducy4gRHVyaW5nIG5vcm1h bCBgamZzX3B1dF9zdXBlcmAsIGBqZnNfdW1vdW50YCBjb21wbGV0ZXMsIGBzYmktPmRpcmVjdF9p bm9kZWAgaXMgY2xlYW5lZCB1cCB2aWEgYGlwdXQoc2JpLT5kaXJlY3RfaW5vZGUpYCBhbmQgbWVt b3J5IHN0cnVjdHVyZXMgYmVnaW4gYnJlYWtpbmcgZG93bi4KCkhvd2V2ZXIsIGlmIGBzYmlgIHdh cyBpbmhlcmVudGx5IHRpZWQgaW50byBtdWx0aS1tb3VudCBzaGFyaW5nIHRoZSBzYW1lIGV4dGVy bmFsIGBqZnNfbG9nYCBzdWJzeXN0ZW0gZ2xvYmFsbHksIHRoZW4gcGFyYWxsZWwgYWN0aW9ucyBm bHVzaGluZyB0aGUgc2FtZSBnbG9iYWwgam91cm5hbCBleGVjdXRlIGBqZnNfZmx1c2hfam91cm5h bCgpYC4gQmVjYXVzZSBgbGlzdF9mb3JfZWFjaF9lbnRyeSgmbG9nLT5zYl9saXN0KWAgbmF2aWdh dGVzIGFsbCBib3VuZCBzdXBlcmJsb2NrcyBhdHRhY2hlZCB0byB0aGUgbG9nIHdpdGhvdXQgc3Ry aWN0bHkgdmFsaWRhdGluZyBtZW1vcnkgc3RhdGVzLCBpdCBoaXRzIHRoZSBjdXJyZW50bHktZGVn cmFkZWQgYHNiaWAgYXJyYXkgYmVsb25naW5nIHRvIHRoZSB0ZWFyaW5nLWRvd24gbW91bnQsIGlt cHJvcGVybHkgYWNjZXNzaW5nIGBzYmktPmRpcmVjdF9pbm9kZS0+aV9tYXBwaW5nYCB3aGlsZSB0 aGUgc2xhYiBtZW1vcnkgYWxsb2NhdGlvbiAoYGtmcmVlYCBmb3IgYHNiaWApIGhhcyBhbHJlYWR5 IGRpc3NvbHZlZC4KVW5mb3J0dW5hdGVseSwgd2Ugd2VyZSB1bmFibGUgdG8gZ2VuZXJhdGUgYSBy ZXByb2R1Y2VyIGZvciB0aGlzIGJ1Zy4KClBvdGVudGlhbCBJbXBhY3QKVGhpcyBsb2dpYyBkaXNj cmVwYW5jeSBjYXVzZXMgaGlnaGx5LXByaXZpbGVnZWQgbG9jYWwga2VybmVsIGV4ZWN1dGlvbiBm YXVsdHMgKERvUyksIHRyaWdnZXJpbmcgdW5jb3JyZWN0YWJsZSBzeXN0ZW0td2lkZSBwYW5pY3Mg aW1wYWN0aW5nIHN0YW5kYXJkIG5hbWVzcGFjZSBpc29sYXRpb24gc2VjdXJpdHkgaWYgZXh0ZXJu YWwgam91cm5hbHMgZmFsbCBvdXQtb2Ytc3luYyBhZ2FpbnN0IG1vdW50aW5nL3VubW91bnRpbmcg ZGV2aWNlcyBzZXF1ZW50aWFsbHkuCgpQcm9wb3NlZCBGaXgKVG8gbWl0aWdhdGUgdGhpcyBsaWZl Y3ljbGUgbGFwc2UsIHRoZSB1bm1vdW50aW5nIHN1cGVyYmxvY2sgKGBzYmlgKSBtdXN0IGJlIGNs ZWFubHkgZGV0YWNoZWQgZnJvbSB0aGUgYGxvZy0+c2JfbGlzdGAgYmVmb3JlIGFueSBgamZzX2Zs dXNoX2pvdXJuYWxgIGNhbGxzIG9yIGJlZm9yZSBzdHJ1Y3R1cmFsIGZyZWVpbmcgdHJhbnNwaXJl cyBpbiBgamZzX3B1dF9zdXBlcigpYCB0byBlbnN1cmUgdGhlIGxvZyBwcm9jZXNzaW5nIGlnbm9y ZXMgZGFuZ2xpbmcgYm91bmRzOgoKYGBgZGlmZgotLS0gYS9mcy9qZnMvamZzX3Vtb3VudC5jCisr KyBiL2ZzL2pmcy9qZnNfdW1vdW50LmMKQEAgLTEwNyw2ICsxMDcsMTEgQEAgaW50IGpmc191bW91 bnQoc3RydWN0IHN1cGVyX2Jsb2NrICpzYikKIAlpZiAobG9nKSB7CQkvKiBsb2cgPSBOVUxMIGlm IHJlYWQtb25seSBtb3VudCAqLwogCQl1cGRhdGVTdXBlcihzYiwgRk1fQ0xFQU4pOwogCisJCS8q IFJlbW92ZSBmcm9tIGxvZyBsaXN0IGJlZm9yZSBmbHVzaGluZyByZXNpZHVhbCAqLworCQltdXRl eF9sb2NrKCZqZnNfbG9nX211dGV4KTsKKwkJbGlzdF9kZWxfaW5pdCgmc2JpLT5sb2dfbGlzdCk7 CisJCW11dGV4X3VubG9jaygmamZzX2xvZ19tdXRleCk7CisKIAkJLyoKIAkJICogY2xvc2UgbG9n OgogCQkgKgpgYGAKCldlIHdvdWxkIGJlIGhpZ2hseSBob25vcmVkIGlmIHRoaXMgY291bGQgYmUg b2YgYW55IGhlbHAuCgpCZXN0IHJlZ2FyZHMsClJhY2VQaWxvdCBUZWFtCg==