Re: [syzbot] [lsm?] general protection fault in smack_inode_permission (4)

From: Tetsuo Handa

Date: Wed Oct 07 2026 - 11:23:42 EST


C repro is at https://syzkaller.appspot.com/ai_job?id=35b0b5a6-7e19-40a7-af3b-871da805fc98

#syz set subsystems: jfs

On 2026/10/04 11:47, syzbot wrote:
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit: ce1e0223d8ad Merge tag 'devicetree-fixes-for-7.3-2' of git..
> git tree: upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=12555b15580000
> kernel config: https://syzkaller.appspot.com/x/.config?x=718e346eb0b8f38
> dashboard link: https://syzkaller.appspot.com/bug?extid=fc1d5d9a7ebabbc27458
> compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
>
> Unfortunately, I don't have any reproducer for this issue yet.
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/4167e1ad25c1/disk-ce1e0223.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/a0a74c8dec59/vmlinux-ce1e0223.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/f6caa72edd70/bzImage-ce1e0223.xz
>
> IMPORTANT: if you fix the issue, please add the following tag to the commit:
> Reported-by: syzbot+fc1d5d9a7ebabbc27458@xxxxxxxxxxxxxxxxxxxxxxxxx
>
> ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
> ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5
> ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 6
> Oops: general protection fault, probably for non-canonical address 0xdffffc018bd1a30b: 0000 [#1] SMP KASAN PTI
> KASAN: probably user-memory-access in range [0x0000000c5e8d1858-0x0000000c5e8d185f]
> CPU: 1 UID: 0 PID: 5607 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)}
> Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026