syzbot


KASAN: slab-out-of-bounds Read in ntfs_attr_find
Status: upstream: reported C repro on 2018/04/02 17:01
Reported-by: syzbot+aed06913f36eff9b544e@syzkaller.appspotmail.com
Fix commit: ntfs: add check for mft record size in superblock
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 905d, last: 6h34m

Cause bisection: introduced by (bisect log):

commit 9dd068a4b85a68733213c874d08ef768bbec8d01
Author: Matthias Brugger <matthias.bgg@gmail.com>
Date: Fri Jul 31 15:03:13 2015 +0000

  soc: mediatek: Fix SCPSYS compilation

Crash: BUG: unable to handle kernel paging request in ntfs_attr_find (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.14 KASAN: slab-out-of-bounds Read in ntfs_attr_find C 1 8h08m 8h07m 0/1 upstream: reported C repro on 2020/09/23 12:14
Patch testing requests:
Created Duration User Patch Repo Result
2020/08/22 22:56 14m rkovhaev@gmail.com patch upstream report log
2020/08/08 01:21 8m rkovhaev@gmail.com upstream report log

Sample crash report:

Fix bisection attempts:
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info
ci-upstream-kasan-gce-root 2020/07/26 14:35 upstream 04300d66 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2020/06/15 15:18 upstream b3a9e3b9 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2020/05/16 14:10 upstream 12bf0b63 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2020/04/16 13:53 upstream 00086336 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2020/03/16 23:09 upstream fb33c651 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2020/02/11 22:09 upstream 0a679e13 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2020/01/12 21:49 upstream 040a3c33 dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2019/12/10 14:50 upstream 6794862a dc889257 .config log report syz C
ci-upstream-kasan-gce-root 2019/08/01 03:49 upstream 0adb3285 dc889257 .config log report syz C
Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-kasan-gce-root 2018/04/02 08:04 upstream 0adb3285 dc889257 .config log report syz C anton@tuxera.com, linux-kernel@vger.kernel.org, linux-ntfs-dev@lists.sourceforge.net
ci-upstream-kasan-gce-root 2020/09/23 13:47 upstream 805c6d3c 287cd75a .config log report info anton@tuxera.com, linux-kernel@vger.kernel.org, linux-ntfs-dev@lists.sourceforge.net
ci-upstream-kasan-gce-selinux-root 2020/09/22 06:50 upstream 98477740 9e1fa68e .config log report info anton@tuxera.com, linux-kernel@vger.kernel.org, linux-ntfs-dev@lists.sourceforge.net
ci-upstream-kasan-gce-selinux-root 2020/09/21 12:01 upstream ba4f184e 9e1fa68e .config log report info anton@tuxera.com, linux-kernel@vger.kernel.org, linux-ntfs-dev@lists.sourceforge.net