syzbot


WARNING in jfs_symlink

Status: fixed on 2023/02/24 13:50
Subsystems: jfs
[Documentation on labels]
Reported-by: syzbot+5fc38b2ddbbca7f5c680@syzkaller.appspotmail.com
Fix commit: ebe060369f8d jfs: Fix fortify moan in symlink
First crash: 779d, last: 769d
Discussions (5)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 6.1 01/22] fs: jfs: fix shift-out-of-bounds in dbAllocAG 24 (24) 2022/12/18 11:28
[PATCH AUTOSEL 6.0 01/16] fs: jfs: fix shift-out-of-bounds in dbAllocAG 18 (18) 2022/12/18 11:26
[PATCH AUTOSEL 5.15 01/10] fs: jfs: fix shift-out-of-bounds in dbAllocAG 10 (10) 2022/12/17 15:29
[PATCH] jfs: Fix fortify moan in symlink 7 (7) 2022/11/01 21:57
[syzbot] WARNING in jfs_symlink 0 (1) 2022/10/15 19:21
Cause bisection attempts (1)
Created Duration User Patch Repo Result
2022/10/16 03:53 (20) bisect upstream OK (0)

Sample crash report:
------------[ cut here ]------------
memcpy: detected field-spanning write (size 132) of single field "ip->i_link" at fs/jfs/namei.c:950 (size 18446744073709551615)
WARNING: CPU: 1 PID: 3620 at fs/jfs/namei.c:950 jfs_symlink+0xd0f/0x1120 fs/jfs/namei.c:950
Modules linked in:
CPU: 1 PID: 3620 Comm: syz-executor161 Not tainted 6.1.0-rc2-syzkaller-00070-g4dc12f37a8e9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
RIP: 0010:jfs_symlink+0xd0f/0x1120 fs/jfs/namei.c:950
Code: ff e8 a5 32 a3 fe 48 c7 c1 ff ff ff ff 4c 89 e6 48 c7 c2 80 a1 29 8a 48 c7 c7 e0 a1 29 8a c6 05 5c fe f2 0a 01 e8 ed 53 70 06 <0f> 0b 48 8b 95 b8 fd ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea
RSP: 0018:ffffc90003fafb90 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff888058ac3270 RCX: 0000000000000000
RDX: ffff88801e8157c0 RSI: ffffffff81621b98 RDI: fffff520007f5f64
RBP: ffffc90003fafe10 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000080000000 R11: 203a7970636d656d R12: 0000000000000084
R13: ffff888058b88430 R14: ffff888058b882b0 R15: ffff888077b9e620
FS:  0000555556bd63c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000021000000 CR3: 0000000070fcf000 CR4: 0000000000350ee0
Call Trace:
 <TASK>
 vfs_symlink fs/namei.c:4400 [inline]
 vfs_symlink+0x365/0x5b0 fs/namei.c:4385
 do_symlinkat+0x261/0x2e0 fs/namei.c:4429
 __do_sys_symlink fs/namei.c:4451 [inline]
 __se_sys_symlink fs/namei.c:4449 [inline]
 __x64_sys_symlink+0x75/0x90 fs/namei.c:4449
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa5b21d8999
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd415ba248 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
RAX: ffffffffffffffda RBX: 00007ffd415ba258 RCX: 00007fa5b21d8999
RDX: 0000000000fff340 RSI: 00000000200000c0 RDI: 0000000020000040
RBP: 00007ffd415ba250 R08: 00007ffd415ba250 R09: 00007fa5b2196910
R10: 00007ffd415ba250 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/26 04:50 upstream 4dc12f37a8e9 1984aebd .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-kasan-gce-root WARNING in jfs_symlink
2022/10/15 14:45 upstream 55be6084c8e0 67cb024c .config strace log report syz C [disk image] [vmlinux] [mounted in repro] ci-upstream-kasan-gce-selinux-root WARNING in jfs_symlink
2022/10/15 14:49 linux-next aaa11ce2ffc8 67cb024c .config strace log report syz C [disk image] [vmlinux] [mounted in repro] ci-upstream-linux-next-kasan-gce-root WARNING in jfs_symlink
2022/10/21 00:56 upstream 55be6084c8e0 a0fd4dab .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in jfs_symlink
2022/10/21 00:56 upstream 55be6084c8e0 a0fd4dab .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in jfs_symlink
2022/10/21 00:23 upstream 55be6084c8e0 a0fd4dab .config console log report info ci-upstream-kasan-gce-root WARNING in jfs_symlink
2022/10/20 23:55 upstream 55be6084c8e0 a0fd4dab .config console log report info ci-upstream-kasan-gce-root WARNING in jfs_symlink
2022/10/15 20:48 upstream 55be6084c8e0 67cb024c .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-selinux-root WARNING in jfs_symlink
2022/10/15 14:03 upstream 55be6084c8e0 67cb024c .config console log report info [disk image] [vmlinux] ci-upstream-kasan-gce-selinux-root WARNING in jfs_symlink
2022/10/20 22:12 linux-next acee3e83b493 a0fd4dab .config console log report info [disk image] [vmlinux] ci-upstream-linux-next-kasan-gce-root WARNING in jfs_symlink
2022/10/20 22:12 linux-next acee3e83b493 a0fd4dab .config console log report info [disk image] [vmlinux] ci-upstream-linux-next-kasan-gce-root WARNING in jfs_symlink
2022/10/15 14:09 linux-next aaa11ce2ffc8 67cb024c .config console log report info [disk image] [vmlinux] ci-upstream-linux-next-kasan-gce-root WARNING in jfs_symlink
* Struck through repros no longer work on HEAD.