From: Edward Adam Davis <eadavis@sina.com>
To: syzbot+baa24e4b7e349e388442@syzkaller.appspotmail.com
Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [ecryptfs?] KASAN: slab-use-after-free Read in ecryptfs_destroy_mount_crypt_stat
Date: Thu, 17 Sep 2026 17:01:34 +0800 [thread overview]
Message-ID: <20260917090134.1003642-1-eadavis@sina.com> (raw)
In-Reply-To: <6aab8055.71f81b7d.278072.0015.GAE@google.com>
From: Edward Aadm Davis <eadavis@sina.com>
#syz test: upstream 238650ef6c7c
diff --git a/fs/ecryptfs/main.c b/fs/ecryptfs/main.c
index 5f37cddb956f..6b82c077c0d6 100644
--- a/fs/ecryptfs/main.c
+++ b/fs/ecryptfs/main.c
@@ -441,7 +441,7 @@ static int ecryptfs_get_tree(struct fs_context *fc)
const char *err = "Getting sb failed";
struct inode *inode;
struct path path;
- int rc;
+ int rc, active;
if (!fc->source) {
rc = -EINVAL;
@@ -468,6 +468,7 @@ static int ecryptfs_get_tree(struct fs_context *fc)
goto out;
}
+ active = atomic_read(&s->s_active);
rc = super_setup_bdi(s);
if (rc)
goto out1;
@@ -562,7 +563,7 @@ static int ecryptfs_get_tree(struct fs_context *fc)
out1:
deactivate_locked_super(s);
out:
- if (sbi)
+ if (sbi && active > 1)
ecryptfs_destroy_mount_crypt_stat(&sbi->mount_crypt_stat);
printk(KERN_ERR "%s; rc = [%d]\n", err, rc);
next prev parent reply other threads:[~2026-09-17 9:01 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-17 5:53 syzbot
2026-09-17 9:01 ` Edward Adam Davis [this message]
2026-09-17 9:25 ` syzbot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260917090134.1003642-1-eadavis@sina.com \
--to=eadavis@sina.com \
--cc=linux-kernel@vger.kernel.org \
--cc=syzbot+baa24e4b7e349e388442@syzkaller.appspotmail.com \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®