From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7538CC46CD4 for ; Wed, 27 Dec 2023 07:26:36 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 8B3B08D0003; Wed, 27 Dec 2023 02:26:35 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 863508D0001; Wed, 27 Dec 2023 02:26:35 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 72B618D0003; Wed, 27 Dec 2023 02:26:35 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by kanga.kvack.org (Postfix) with ESMTP id 63A318D0001 for ; Wed, 27 Dec 2023 02:26:35 -0500 (EST) Received: from smtpin06.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay05.hostedemail.com (Postfix) with ESMTP id 2619640671 for ; Wed, 27 Dec 2023 07:26:35 +0000 (UTC) X-FDA: 81611765550.06.A0CC1E9 Received: from verein.lst.de (verein.lst.de [213.95.11.211]) by imf04.hostedemail.com (Postfix) with ESMTP id 1C37F40012 for ; Wed, 27 Dec 2023 07:26:32 +0000 (UTC) Authentication-Results: imf04.hostedemail.com; dkim=none; dmarc=none; spf=pass (imf04.hostedemail.com: domain of hch@lst.de designates 213.95.11.211 as permitted sender) smtp.mailfrom=hch@lst.de ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1703661993; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=gl9nL6QQo6WTdQwrrV+HwAPPNht0CLDX3kbCeMiY0bk=; b=AybH1AEIfV9IgH4cpZwuwikQEfhcaxlQyZRT6j+FqHly854jNOs7m73V1GS7/NX2bzVABH hVK8nsH6GomwVip36Xfh/u1Bs15TEkmlW2U5qzF05tmv3jeAeHIzy9/QHCOk3qNuF8J1MO 5M5rHLqXRYf48ThUPNMQtBoqM49XVO8= ARC-Authentication-Results: i=1; imf04.hostedemail.com; dkim=none; dmarc=none; spf=pass (imf04.hostedemail.com: domain of hch@lst.de designates 213.95.11.211 as permitted sender) smtp.mailfrom=hch@lst.de ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1703661993; a=rsa-sha256; cv=none; b=yNFDbvtPi88KwYLge3N3Cr3BLBch+nYhqOpTsRqGQLeJCIG21pIXF8rFR6ntw/qWg/vxV7 OGc6rex6gDCH0fsst3HJ90XR5Hg1Sp7kDfB+FJXlL00OlOlfcG0zsrpRiDP1oau/d9PaGi wugF1/mCeo46cbTiYHYNJw2ZzvGXjkQ= Received: by verein.lst.de (Postfix, from userid 2407) id 7236268B05; Wed, 27 Dec 2023 08:26:28 +0100 (CET) Date: Wed, 27 Dec 2023 08:26:28 +0100 From: Christoph Hellwig To: kernel test robot Cc: Christoph Hellwig , oe-lkp@lists.linux.dev, lkp@intel.com, Linux Memory Management List , Chandan Babu R , "Darrick J. Wong" , linux-xfs@vger.kernel.org Subject: Re: [linux-next:master] [xfs] 7f2f7531e0: BUG:KASAN:slab-use-after-free_in_xfs_defer_finish_recovery Message-ID: <20231227072628.GA21175@lst.de> References: <202312271458.851834a0-oliver.sang@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <202312271458.851834a0-oliver.sang@intel.com> User-Agent: Mutt/1.5.17 (2007-11-01) X-Rspamd-Server: rspam09 X-Rspamd-Queue-Id: 1C37F40012 X-Stat-Signature: 181ruzkh9kbauwqnuaeogi4a8gw8ipcx X-Rspam-User: X-HE-Tag: 1703661992-617910 X-HE-Meta: U2FsdGVkX1+AYrdE7ASSnqea3MYzZ9t0vq3d/896hTFnzqlFclyCn3cVQ7zZPSMcfMG7ADSvmSqrXgCgRIrgZm0HXLQk43/B6XRuvN+t0GdIUoGXkKx0d4/GrYMehhdo+pb8NVfJ3+HYRIEtWjCIrOKvNehN5PmSYvG0iHw+nFQAvbnkBYGfvQkR+0X94Ta+vkIsQXy+Ymyqkg0wO8ln2GeXVcTA+VZVhgBLPNszOC2y9lEuzAAOvBE0TZYu3RredGndZ97jjlpMfhnC7LuDw607xCf9J31j5sv7C74JOyigC7WK96GhkFHBLCJfS5Gd/5TGr+rCcKdHyCwpsj7b+wnCdoE8ESnPPs+xXBv/O8NgthLJTkvddD2ySdI6pEU/p3U7dUk5+u5a35SzTlhfl1QTvhEOpQAL/U/iDS5FbzK0gMHioE9UrJCsRqjdTUCWsz75qbv05rkqoyGti6e3mHl/FmUH2v4dYRPQ/Zujebi0xJbgk5GQb49kzHAD1UJlgfWt8nXX07IoxReQBXcVy3eLM3foxqzXDC/ZQx29g9e4r5Sd4kx0Qbpbro8SYbhNfovQ8Zszzd/i+Uj7gmiFCCuNXmhTqTMHPKP0I0A+KmLstsiVMFbbDqnWKq73aO797szTVCdFEkwzGdNREGgO6o2i5BZbEM4oY5IpIm79E6n/Tv8MKTZztKP/zJkiKCcWiIzjYCVuWIqdaTBsChhu35bB/2qHiqsOwGai0ewoFj5go9N6+PyhIBQCR5AcuPb8YMjkPdGV/mwiZF9xcrqBx4uWpqgmbBXZEY1z7SOhobCJfOJ6FXhkhENBQy3rFaKeC1ynfOkRu9dqis4g/fomqCYXiZzKueZ4U3nr3DUY57gQL7u/BuhXtpdjNCupkCGBBiwfS6U/mATccSFERrkaQh4zgAakevEVtS2vcZ6Z5mIynwBKX7gh5iZgRfQwofFULaUzcJH8/WD0GyWl7Av 1cI69Kwa Erg9RyHjhJSMNpc1FfooKKrJDsTRaxRv1uimPqTYs3oJaPg+fAA1mkeLOe/JjaNnabk3ybo1prpOaAIxLaffPY0TeTjvW7aJtDrbTDw/hrdnF1H8= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: It looks like the tracepoint will access dfp after it has already been freed. The fix is to simply add (back) a local variable for ops. I'll cook up a patch.