syzbot


WARNING in raw_ioctl

Status: upstream: reported C repro on 2025/10/24 23:11
Subsystems: usb mm
[Documentation on labels]
Reported-by: syzbot+d8fd35fa6177afa8c92b@syzkaller.appspotmail.com
Fix commit: usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-snapshot-upstream-root ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce]
First crash: 45d, last: 1d10h
Duplicate bugs (1)
duplicates (1):
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
WARNING in raw_alloc_io_data mm -1 C 2684 1d12h 42d 0/29 closed as dup on 2025/10/28 00:41
Discussions (2)
Title Replies (including bot) Last reply
[PATCH] usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE 4 (4) 2025/11/20 10:07
[syzbot] [mm?] WARNING in raw_ioctl 6 (13) 2025/10/28 16:56
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 WARNING in raw_ioctl origin:upstream -1 C 48 17h58m 40d 0/2 upstream: reported C repro on 2025/10/29 17:15
linux-6.1 WARNING in raw_ioctl origin:upstream -1 C 59 13h30m 40d 0/3 upstream: reported C repro on 2025/10/29 18:33
linux-5.15 WARNING in raw_ioctl origin:upstream -1 C 59 12h51m 40d 0/3 upstream: reported C repro on 2025/10/29 16:52
Last patch testing requests (6)
Created Duration User Patch Repo Result
2025/10/28 16:28 27m krishnagopi487@gmail.com patch linux-next OK log
2025/10/25 15:52 47m krishnagopi487@gmail.com patch linux-next OK log
2025/10/25 13:34 23m krishnagopi487@gmail.com patch linux-next OK log
2025/10/25 13:20 8m krishnagopi487@gmail.com patch linux-next error
2025/10/25 13:02 11m krishnagopi487@gmail.com patch linux-next error
2025/10/25 09:16 1h07m krishnagopi487@gmail.com patch linux-next OK log

Sample crash report:
------------[ cut here ]------------
WARNING: mm/page_alloc.c:5186 at __alloc_frozen_pages_noprof+0x2c8/0x370 mm/page_alloc.c:5186, CPU#0: syz.0.17/5983
Modules linked in:
CPU: 0 UID: 0 PID: 5983 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 mm/page_alloc.c:5186
Code: 74 10 4c 89 e7 89 54 24 0c e8 24 d9 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 7c 17 8f 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
RSP: 0018:ffffc90003467920 EFLAGS: 00010246
RAX: ffffc90003467900 RBX: 0000000000000013 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003467988
RBP: ffffc90003467a18 R08: ffffc90003467987 R09: 0000000000000000
R10: ffffc90003467960 R11: fffff5200068cf31 R12: 0000000000000000
R13: 1ffff9200068cf28 R14: 0000000000040cc0 R15: dffffc0000000000
FS:  0000555576900500(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000000100a CR3: 0000000078b10000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486
 ___kmalloc_large_node+0x5f/0x1b0 mm/slub.c:5595
 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:5626
 __do_kmalloc_node mm/slub.c:5642 [inline]
 __kmalloc_noprof+0x4c9/0x800 mm/slub.c:5666
 kmalloc_noprof include/linux/slab.h:961 [inline]
 raw_alloc_io_data drivers/usb/gadget/legacy/raw_gadget.c:673 [inline]
 raw_ioctl_ep_read drivers/usb/gadget/legacy/raw_gadget.c:1162 [inline]
 raw_ioctl+0x18cb/0x4050 drivers/usb/gadget/legacy/raw_gadget.c:1325
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7efcc398f6c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc2b19fcb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007efcc3be5fa0 RCX: 00007efcc398f6c9
RDX: 0000200000000500 RSI: 00000000c0085508 RDI: 0000000000000003
RBP: 00007efcc3a11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007efcc3be5fa0 R14: 00007efcc3be5fa0 R15: 0000000000000003
 </TASK>

Crashes (664):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/13 12:42 linux-next 6d7e7251d03f 07e030de .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/31 01:22 linux-next 131f3d9446a6 2c50b6a9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/30 23:27 linux-next 131f3d9446a6 2c50b6a9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/30 19:18 linux-next 131f3d9446a6 fd2207e7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/30 14:24 linux-next 131f3d9446a6 fd2207e7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/30 13:34 linux-next 131f3d9446a6 fd2207e7 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/27 10:12 linux-next 8fec172c82c2 c0460fcd .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/24 07:48 linux-next 72fb0170ef1f c0460fcd .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/10/24 07:16 linux-next 72fb0170ef1f c0460fcd .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/12/07 07:00 upstream 50471f8b7371 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in raw_ioctl
2025/12/07 03:13 upstream 416f99c3b16f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in raw_ioctl
2025/12/07 01:19 upstream 416f99c3b16f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/06 12:00 upstream 51d90a15fedf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/06 11:59 upstream 51d90a15fedf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/06 10:55 upstream 51d90a15fedf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/05 21:01 upstream 2061f18ad76e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/05 17:30 upstream 2061f18ad76e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/05 13:44 upstream 2061f18ad76e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in raw_ioctl
2025/12/05 11:59 upstream aa833fc394ba d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/05 10:37 upstream aa833fc394ba d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/05 07:04 upstream aa833fc394ba d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/04 18:03 upstream 559e608c4655 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/04 06:20 upstream a619fe35ab41 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in raw_ioctl
2025/12/03 16:09 upstream 3f9f0252130e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/03 13:58 upstream 3f9f0252130e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/03 00:57 upstream 4a26e7032d7d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/02 20:51 upstream 4a26e7032d7d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/02 10:14 upstream 1d18101a644e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/01 17:55 upstream 7d0a66e4bb90 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in raw_ioctl
2025/12/01 10:28 upstream 7d0a66e4bb90 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in raw_ioctl
2025/12/07 14:35 upstream 50471f8b7371 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in raw_ioctl
2025/12/05 04:14 upstream fa5ef105618a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in raw_ioctl
2025/12/01 11:59 upstream 7d0a66e4bb90 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in raw_ioctl
2025/12/07 12:39 upstream c06c303832ec d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/07 09:43 upstream c06c303832ec d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 22:00 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 19:03 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 16:25 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 14:35 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 13:27 upstream 416f99c3b16f d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 08:05 upstream d1d36025a617 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/06 04:39 upstream d1d36025a617 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/05 02:11 upstream 6dfafbd0299a d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/05 00:39 upstream 6dfafbd0299a d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/04 22:55 upstream 6dfafbd0299a d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/04 16:51 upstream cc25df3e2e22 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/04 14:19 upstream cc25df3e2e22 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/04 10:50 upstream cc25df3e2e22 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/04 03:30 upstream 3f9f0252130e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/04 01:55 upstream 3f9f0252130e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/03 12:30 upstream 44fc84337b6e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/03 06:57 upstream 44fc84337b6e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/03 04:44 upstream 44fc84337b6e d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/01 21:54 upstream 7d0a66e4bb90 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/01 16:15 upstream 7d0a66e4bb90 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/12/01 14:35 upstream 7d0a66e4bb90 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root WARNING in raw_ioctl
2025/11/22 20:39 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in raw_ioctl
2025/11/10 02:32 linux-next 9c0826a5d9aa 4e1406b4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in raw_ioctl
* Struck through repros no longer work on HEAD.