[lvc-project] syzbot: KASAN: slab-out-of-bounds Read in xlog_pack_data

[Andrey Kalachev]

Hi,

I found that the syzbot bug 'KASAN: slab-out-of-bounds Read in xlog_pack_data' [1]
has been fixed in master branch since v6.4-rc6-11-gf1e1765aad7d [2].
But, it still exist in LTS kernels: 5.4, 5.10, 5.15 [3], 6.1 [4]
Common c-reproducer code can be found here [5].

I've made backport f1e1765aad7d ("xfs: journal geometry is not properly bounds checked")
Patch for v5.15 & v6.1 is same with original upstream code.
Patches for v5.4 and v5.10 has some cosmetic variations:
`xfs_has_crc(mp)` call replaced by `xfs_sb_version_hascrc(&mp->m_sb)` at most.

I would be grateful for any assistance.

Regards,
AK

[1] https://syzkaller.appspot.com/bug?extid=b7854dc75e15ffc8c2ae
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f1e1765aad7de7a8b8102044fc6a44684bc36180
[3] https://syzkaller.appspot.com/bug?extid=66f256de193ab682584f
[4] https://syzkaller.appspot.com/bug?extid=904ffc7f25c759741787
[5] https://syzkaller.appspot.com/text?tag=ReproC&x=152f7343280000

Reported-by: syzbot+66f256de193ab682584f at syzkaller.appspotmail.com
Reported-by: syzbot+904ffc7f25c759741787 at syzkaller.appspotmail.com