[BUG] gfs2: allocation warning in gfs2_ri_update

[BUG] gfs2: allocation warning in gfs2_ri_update

[CJ]

Hi,


I am reporting that WARNING in gfs2_ri_update remains reproducible with a
migrated syzkaller reproducer on Linux 7.2-rc3. The tested HEAD commit is
a13c140cc289c0b7b3770bce5b3ad42ab35074aa.


The reproducer mounts a crafted GFS2 image and processes its resource-group
index during filesystem initialization.


Corrupted resource-index data causes gfs2_ri_update() to request an invalid
or excessive allocation, leading to a page allocator warning.


This looks like insufficient bounds validation of resource-index values
before they are converted into an allocation size.


This issue was previously reported at:


https://syzkaller.appspot.com/bug?extid=5c0ca4a146e6115b14f7


Reproducer:


syz reproducer: https://pastebin.com/raw/myTvycZy


console output: https://pastebin.com/raw/QjEkRSwz
kernel config: https://pastebin.com/raw/tu1S3js9


Kernel:


HEAD commit: a13c140cc289c0b7b3770bce5b3ad42ab35074aa
git tree: torvalds/linux
kernel version: 7.2.0-rc3 #1 PREEMPT(full)
tested tag: v7.2-rc3


Let me know if you need more details or testing.


Best regards