syzbot


WARNING in p9pdu_vwritef

Status: premoderation: reported C repro on 2025/07/04 15:23
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+96db718300281f44b5a1@syzkaller.appspotmail.com
First crash: 78d, last: 64d
Bug presence (2)
Date Name Commit Repro Result
2025/07/04 lts (merge base) e0e2f7824338 C [report] WARNING in p9pdu_vwritef
2025/07/04 upstream (ToT) c435a4f487e8 C [report] INFO: task hung in v9fs_evict_inode
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in p9pdu_vwritef v9fs -1 C 62 243d 354d 0/29 upstream: reported C repro on 2024/10/01 16:24
Last patch testing requests (2)
Created Duration User Patch Repo Result
2025/07/18 23:25 7m retest repro android16-6.12 report log
2025/07/18 23:25 11m retest repro android16-6.12 report log

Sample crash report:
RBP: 0000000000000001 R08: 0000000000008000 R09: 0000000000000004
R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000100
R13: 00007f4aef948081 R14: 0000000000000001 R15: 0000000000000001
 </TASK>
------------[ cut here ]------------
WARNING: CPU: 1 PID: 300 at lib/iov_iter.c:255 _copy_from_iter+0x2b0/0x14b0 lib/iov_iter.c:255
Modules linked in:
CPU: 1 UID: 0 PID: 300 Comm: syz-executor195 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:_copy_from_iter+0x2b0/0x14b0 lib/iov_iter.c:255
Code: 48 3b 84 24 00 01 00 00 0f 85 ef 04 00 00 4c 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c0 f0 e2 fe <0f> 0b 45 31 ff 48 bb 00 00 00 00 00 fc ff df eb 94 e8 aa f0 e2 fe
RSP: 0018:ffffc9000125ed00 EFLAGS: 00010293
RAX: ffffffff82a2b270 RBX: ffff88810a277b3a RCX: ffff88812e1c1300
RDX: 0000000000000000 RSI: 000000000000000a RDI: ffff888104aa2e17
RBP: ffffc9000125ee50 R08: ffff88812e1c1300 R09: 0000000000000002
R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff11020663f49
R13: ffff88810a277b38 R14: 000000000000000a R15: dffffc0000000000
FS:  000055558d981380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 000000011fe60000 CR4: 00000000003526b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 copy_from_iter include/linux/uio.h:219 [inline]
 copy_from_iter_full include/linux/uio.h:236 [inline]
 pdu_write_u net/9p/protocol.c:234 [inline]
 p9pdu_vwritef+0x1b2f/0x2720 net/9p/protocol.c:614
 p9_client_prepare_req+0x6b6/0xa10 net/9p/client.c:651
 p9_client_rpc+0x189/0xb40 net/9p/client.c:691
 p9_client_write+0x33b/0x790 net/9p/client.c:1646
 v9fs_issue_write+0xd8/0x150 fs/9p/vfs_addr.c:59
 netfs_do_issue_write fs/netfs/write_issue.c:233 [inline]
 netfs_issue_write+0x114/0x260 fs/netfs/write_issue.c:260
 netfs_write_folio+0x10af/0x19b0 fs/netfs/write_issue.c:-1
 netfs_end_writethrough+0x62/0x2f0 fs/netfs/write_issue.c:672
 netfs_perform_write+0x1b2d/0x1e00 fs/netfs/buffered_write.c:385
 netfs_buffered_write_iter_locked+0xa3/0x1c0 fs/netfs/buffered_write.c:445
 netfs_file_write_iter+0x189/0x440 fs/netfs/buffered_write.c:484
 v9fs_file_write_iter+0xac/0xe0 fs/9p/vfs_file.c:407
 do_iter_readv_writev+0x4f5/0x6a0 fs/read_write.c:-1
 vfs_writev+0x485/0xcf0 fs/read_write.c:1076
 do_pwritev fs/read_write.c:1177 [inline]
 __do_sys_pwritev2 fs/read_write.c:1236 [inline]
 __se_sys_pwritev2+0x1ad/0x2b0 fs/read_write.c:1227
 __x64_sys_pwritev2+0xc3/0xf0 fs/read_write.c:1227
 x64_sys_call+0x2938/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:329
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f4aef906969
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff69b18a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
RAX: ffffffffffffffda RBX: 00007fff69b18ac0 RCX: 00007f4aef906969
RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006
RBP: 0000000000000001 R08: 0000000000008000 R09: 0000000000000004
R10: 0000000000000008 R11: 0000000000000246 R12: 0000200000000100
R13: 00007f4aef948081 R14: 0000000000000001 R15: 0000000000000001
 </TASK>
---[ end trace 0000000000000000 ]---

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/04 16:37 android16-6.12 e2bf362ee23b d869b261 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in p9pdu_vwritef
2025/07/04 16:01 android16-6.12 e2bf362ee23b d869b261 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in p9pdu_vwritef
2025/07/04 15:22 android16-6.12 e2bf362ee23b d869b261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in p9pdu_vwritef
* Struck through repros no longer work on HEAD.