From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out203-205-221-245.mail.qq.com (out203-205-221-245.mail.qq.com [203.205.221.245]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 157F73126B2 for ; Fri, 17 Apr 2026 12:41:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=203.205.221.245 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776429685; cv=none; b=JQabDzzuZy9XzKvgKv1EpLOX+SKK9cOyEyeaJpMkSPKVN3GNAOFCS8YI+vf9kFQFUzqIHPyR4yu0+d/yVQlicJUSGYcs100MkbCPHPO0tqrqDTWODANQD8xhYcwO9Oiag4sn198PQ2vVwjqGVbFnzeggjMh4YUDGYNk7c9GOTMA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776429685; c=relaxed/simple; bh=4STOzvEUmb/iTciYhXkf1Q/8yIzEc9oF2Ed9XVpnS9E=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=TTd4oRbk6Y9X1es7ZYrEXlGdSFT8avjime9MvH2OHQfQpTXqaBXFdOmUn2Lu9stLk3q3lk7n5KJ5iCTpy26uLwtN5WOpj0onA6PrFZtW/shCy+Emx/aWJTJZiBoqFGdONYwojN5RouVruuAV5srH2N2UP3X39baxYMLJopGZzTA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=Ji8qcUUV; arc=none smtp.client-ip=203.205.221.245 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="Ji8qcUUV" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1776429673; bh=7deBnemkfVQMJaN3xmYDKLqevCeM1aPzZ0xNY3QeRzc=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=Ji8qcUUVnUjLdPjwB1IeopA4VSHLaZoH0zCM6hvxE73afigx4F0lOtejBFaUETnfX n9FfeCBfoc9XMCRWm6qp5p2+XrZ64FHUOdirOBX4frlkxml0jjMQW/UFZtCsj+VrgM M+MZujRqAFA8TjItjbsGhGxktM5vj/jsgYGHzKj0= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrszc50-0.qq.com (NewEsmtp) with SMTP id A4B8B22E; Fri, 17 Apr 2026 20:41:11 +0800 X-QQ-mid: xmsmtpt1776429671t4ejmsz5f Message-ID: X-QQ-XMAILINFO: MZtEYADUG4AgUxCqNVx+p6oy3CT/l4RJK7JidcALcFpL4HNDwu7XafIEPlOfQ0 O0YkjfrDMWM2DrMnzBnWgSI8H6HS/Or2hGI4slQQehpJKAso+dmGfNX37IGuElg/ivfDaRrCl9bj zFOHLWZwJX2o8oCKKPcRWelbtX+JzV09iK31gr6gT2WMj5diCFSKPfp3zmMHKUx+oWN6htnsMhHz 8QZGTYkYKOcw+kRUK+cn1F/c0da7WWx0kfMq8hjC5NouRC6d5I3/GI56PzJZWvbRNqsCHL+k2rMR YfHIM9mslmdFqJW8Jzyq3j5519rlI3B4u48XXxzzQHJdl72IePifPALuXb2sFJ8aywjrZPX3g3hX Hqi0WKu/SHlwkVtlma9XiA8sPGYLFL7WAm48mPyNdzJ5J+XO4NW/SO9it/FEFem2OhIUjVxw9P02 xdTQrQoW8mDtXgFAIg4kNd6bdcwELrV1pOnl2n8J8iji8JNeEZ9X0YtHydOrRErEGOiBVZJhFI6a qXBtHxIR3qN9No8oTaLZABiObnqr+6QHKjDjZ+pB/XSQ6KrR+cYO78RV6/F3eh7iUNOjpVez+//0 EWcUFlYuW6UrM0LbOguzjZE91BR/6WJUMQqbDBHu2coz35GGMfRQsollAnVt+G4+1040McCy2L1l D4Q8s5cwIJe3MjeNpNm0tC33jXg9NJEW8ccMKS4VNWhK1Ofi2xugFT7mvV35btEaLV+O4woH3n1t WymtGzPOPZefMR3qcTmQDaBIIS+DYdtLBSuKRbUuIFPFVHVjTKl7YBO0gJHPmVxP4NUEatfho/sZ eTHUdjKK18BNfVMtc4+iIZ45whxD0aadGyW3WDk7nZO29PQ0j7v7eeMfYCtKd9ZedAjalqnxgQsb M9z6OHQb3WAhrnVnKLsOwKB3xx6G8jN6bCUTkNttFFVAR5C96ExhX7UvuHAydluN5j3Rm9N+MlmC 7vBbFCcV67tZYBOjeiSqXT3LSw6VoBXDVphova2C8ztSr2KNqgGDk/jye8mV62Mm73YbJGycK8BC LmnctEUQ== X-QQ-XMRINFO: NyFYKkN4Ny6FuXrnB5Ye7Aabb3ujjtK+gg== From: Edward Adam Davis To: syzbot+ecf51a7ccb6b1394e90c@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [jfs?] KASAN: slab-use-after-free Read in lbmIODone Date: Fri, 17 Apr 2026 20:41:12 +0800 X-OQ-MSGID: <20260417124111.430905-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69df5517.a00a0220.468cb.0074.GAE@google.com> References: <69df5517.a00a0220.468cb.0074.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test: upstream master diff --git a/fs/jfs/jfs_logmgr.c b/fs/jfs/jfs_logmgr.c index 306165e61438..054cc01e4579 100644 --- a/fs/jfs/jfs_logmgr.c +++ b/fs/jfs/jfs_logmgr.c @@ -1984,7 +1984,7 @@ static int lbmRead(struct jfs_log * log, int pn, struct lbuf ** bpp) submit_bio(bio); } - wait_event(bp->l_ioevent, (bp->l_flag != lbmREAD)); + wait_event(bp->l_ioevent, (bp->l_flag == lbmDONE)); return 0; }