syzbot


WARNING in blk_rq_map_user_iov

Status: fixed on 2024/03/29 22:49
Subsystems: block
[Documentation on labels]
Reported-by: syzbot+a532b03fdfee2c137666@syzkaller.appspotmail.com
Fix commit: 13f3956eb568 block: Fix WARNING in _copy_from_iter
First crash: 256d, last: 110d
Cause bisection: introduced by (bisect log) :
commit a41dad905e5a388f88435a517de102e9b2c8e43d
Author: Al Viro <viro@zeniv.linux.org.uk>
Date: Fri Sep 16 00:11:15 2022 +0000

  iov_iter: saner checks for attempt to copy to/from iterator

Crash: WARNING in blk_rq_map_user_iov (log)
Repro: C syz .config
  
Discussions (8)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 6.1 07/15] block: Fix WARNING in _copy_from_iter 1 (1) 2024/02/02 18:40
[PATCH AUTOSEL 6.6 09/21] block: Fix WARNING in _copy_from_iter 1 (1) 2024/02/02 18:39
[PATCH AUTOSEL 6.7 10/23] block: Fix WARNING in _copy_from_iter 1 (1) 2024/02/02 18:39
[PATCH] block: Fix WARNING in _copy_from_iter 3 (3) 2024/01/23 15:57
[syzbot] Monthly block report (Jan 2024) 0 (1) 2024/01/09 18:20
[syzbot] Monthly block report (Dec 2023) 0 (1) 2023/12/10 10:05
[syzbot] Monthly block report (Oct 2023) 0 (1) 2023/10/09 09:23
[syzbot] [block?] WARNING in blk_rq_map_user_iov 1 (3) 2023/09/12 10:17
Last patch testing requests (1)
Created Duration User Patch Repo Result
2023/09/12 08:35 1h14m ricardo@marliere.net patch upstream OK log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5056 at lib/iov_iter.c:274 _copy_from_iter+0x38c/0x10f0 lib/iov_iter.c:274
Modules linked in:
CPU: 0 PID: 5056 Comm: syz-executor838 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:_copy_from_iter+0x38c/0x10f0 lib/iov_iter.c:274
Code: 79 fd 0f 01 cb 4c 89 f9 4c 89 f7 48 89 de e8 ab 40 19 06 48 89 cb 0f 01 ca 4d 89 fc 49 29 cc e9 db fe ff ff e8 35 fb 21 fd 90 <0f> 0b 90 45 31 e4 e9 25 ff ff ff e8 24 fb 21 fd 48 8b 14 24 4c 89
RSP: 0018:ffffc90003b6f668 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84661298
RDX: ffff888023820000 RSI: ffffffff8466156b RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff81df5804 R12: 000000000000007e
R13: ffffea0001351800 R14: ffffc90003b6f880 R15: 000000000000007e
FS:  000055555703b380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9bbd1f2304 CR3: 00000000227bc000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 copy_page_from_iter lib/iov_iter.c:441 [inline]
 copy_page_from_iter+0xa5/0x120 lib/iov_iter.c:430
 bio_copy_from_iter block/blk-map.c:56 [inline]
 bio_copy_user_iov block/blk-map.c:211 [inline]
 blk_rq_map_user_iov+0x9e7/0x1840 block/blk-map.c:661
 blk_rq_map_user block/blk-map.c:690 [inline]
 blk_rq_map_user_io+0x202/0x230 block/blk-map.c:723
 sg_start_req drivers/scsi/sg.c:1817 [inline]
 sg_common_write.constprop.0+0xd61/0x1c90 drivers/scsi/sg.c:803
 sg_new_write.isra.0+0x546/0xaa0 drivers/scsi/sg.c:770
 sg_ioctl_common drivers/scsi/sg.c:935 [inline]
 sg_ioctl+0x1814/0x2760 drivers/scsi/sg.c:1160
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:871 [inline]
 __se_sys_ioctl fs/ioctl.c:857 [inline]
 __x64_sys_ioctl+0x18f/0x210 fs/ioctl.c:857
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f73db7931e9
Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd1ba27088 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007ffd1ba27258 RCX: 00007f73db7931e9
RDX: 0000000020000480 RSI: 0000000000002285 RDI: 0000000000000003
RBP: 00007f73db806610 R08: 002367732f766564 R09: 00007ffd1ba27258
R10: 00007f73db7ce863 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd1ba27248 R14: 0000000000000001 R15: 0000000000000001
 </TASK>

Crashes (3546):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/17 20:57 upstream 052d534373b7 915053c7 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2023/12/18 16:31 upstream ceb6a6f023fd 3222d10c .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in blk_rq_map_user_iov
2023/12/05 22:26 upstream bee0e7762ad2 f819d6f7 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2023/09/07 19:39 upstream 7ba2090ca64e 72324844 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2023/09/04 15:44 upstream 708283abf896 8bc9053e .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2023/10/18 10:10 linux-next 2dac75696c6d 342b9c55 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/27 13:07 upstream 168174d78157 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in blk_rq_map_user_iov
2024/01/27 03:07 upstream 168174d78157 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/27 01:33 upstream 168174d78157 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/26 23:27 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/26 22:15 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/26 19:43 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/26 17:41 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in blk_rq_map_user_iov
2024/01/26 08:38 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in blk_rq_map_user_iov
2024/01/26 05:52 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/26 04:26 upstream 6098d87eaf31 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in blk_rq_map_user_iov
2024/01/26 04:26 upstream 6098d87eaf31 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in blk_rq_map_user_iov
2024/01/26 00:51 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/25 11:07 upstream 443b349019f2 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in blk_rq_map_user_iov
2024/01/25 05:58 upstream 443b349019f2 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in blk_rq_map_user_iov
2024/01/25 01:55 upstream 443b349019f2 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/24 23:45 upstream 443b349019f2 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/24 19:00 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/24 17:10 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in blk_rq_map_user_iov
2024/01/24 15:47 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in blk_rq_map_user_iov
2024/01/24 11:48 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/24 11:32 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/24 10:31 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/24 05:11 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/24 04:03 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in blk_rq_map_user_iov
2024/01/24 03:20 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in blk_rq_map_user_iov
2024/01/24 02:13 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/23 23:15 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/23 19:05 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/23 18:52 upstream 7ed2632ec7d7 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/23 12:24 upstream 610347effc2e 1c0ecc51 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/23 10:48 upstream 610347effc2e 1c0ecc51 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in blk_rq_map_user_iov
2024/01/19 16:47 upstream 9d1694dc91ce 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs WARNING in blk_rq_map_user_iov
2024/01/26 20:55 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in blk_rq_map_user_iov
2024/01/26 14:22 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in blk_rq_map_user_iov
2024/01/25 02:17 upstream 443b349019f2 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in blk_rq_map_user_iov
2024/01/24 20:59 upstream 615d30064886 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in blk_rq_map_user_iov
2024/01/26 12:02 upstream ecb1b8288dc7 cc4a4020 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in blk_rq_map_user_iov
2024/01/25 23:30 upstream 6098d87eaf31 cc4a4020 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in blk_rq_map_user_iov
2024/01/25 14:10 upstream 6098d87eaf31 1e153dc8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in blk_rq_map_user_iov
2024/01/25 21:44 upstream 6098d87eaf31 cc4a4020 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in blk_rq_map_user_iov
2024/01/25 12:59 upstream 6098d87eaf31 1e153dc8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in blk_rq_map_user_iov
2024/01/24 08:29 upstream 615d30064886 1e153dc8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in blk_rq_map_user_iov
2024/01/23 14:48 upstream 7ed2632ec7d7 74d5594c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in blk_rq_map_user_iov
2024/01/28 13:51 linux-next 01af33cc9894 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/28 10:47 linux-next 01af33cc9894 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/27 23:49 linux-next 01af33cc9894 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/27 20:20 linux-next 01af33cc9894 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/27 16:20 linux-next 01af33cc9894 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/27 15:17 linux-next 01af33cc9894 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/25 10:18 linux-next 01af33cc9894 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/25 04:00 linux-next 8bf1262c53f5 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/24 17:01 linux-next 8bf1262c53f5 1e153dc8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
2024/01/23 12:24 linux-next ad5c60d66016 1c0ecc51 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in blk_rq_map_user_iov
* Struck through repros no longer work on HEAD.