Christian A. Ehrhardt 8fc8087410 block: Fix WARNING in _copy_from_iter ... [ Upstream commit 13f3956eb5681a4045a8dfdef48df5dc4d9f58a6 ] Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to generate a request with a transfer direction of SG_DXFER_TO_FROM_DEV. This instructs the kernel to copy user buffers into the kernel, read into the copied buffers and then copy the data back to user space. Thus the iovec is used in both directions. Detect this situation in the block layer and construct a new iterator with the correct direction for the copy-in. Reported-by: syzbot+a532b03fdfee2c137666@syzkaller.appspotmail.com Closes: https://lore.kernel.org/lkml/0000000000009b92c10604d7a5e9@google.com/t/ Reported-by: syzbot+63dec323ac56c28e644f@syzkaller.appspotmail.com Closes: https://lore.kernel.org/lkml/0000000000003faaa105f6e7c658@google.com/T/ Signed-off-by: Christian A. Ehrhardt <lk@c--e.de> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20240121202634.275068-1-lk@c--e.de Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-03-01 13:26:25 +01:00
..
partitions	block: Move checking GENHD_FL_NO_PART to bdev_add_partition()	2024-01-31 16:17:11 -08:00
Kconfig	…
Kconfig.iosched	…
Makefile	…
badblocks.c	…
bdev.c	block: update the stable_writes flag in bdev_add	2024-01-10 17:10:32 +01:00
bfq-cgroup.c	block, bfq: fix uaf for bfqq in bic_set_bfqq()	2023-02-09 11:28:06 +01:00
bfq-iosched.c	block, bfq: Fix division by zero error on zero wsum	2023-05-24 17:32:38 +01:00
bfq-iosched.h	…
bfq-wf2q.c	…
bio-integrity.c	block: factor out a bvec_set_page helper	2023-09-23 11:11:08 +02:00
bio.c	block: prevent an integer overflow in bvec_try_merge_hw_page	2024-02-05 20:12:53 +00:00
blk-cgroup-fc-appid.c	…
blk-cgroup-rwstat.c	…
blk-cgroup-rwstat.h	…
blk-cgroup.c	blk-cgroup: bypass blkcg_deactivate_policy after destroying	2023-12-20 17:00:21 +01:00
blk-cgroup.h	…
blk-core.c	block: treat poll queue enter similarly to timeouts	2024-02-16 19:06:31 +01:00
blk-crypto-fallback.c	blk-crypto: dynamically allocate fallback profile	2023-08-23 17:52:39 +02:00
blk-crypto-internal.h	blk-mq: release crypto keyslot before reporting I/O complete	2023-05-11 23:03:00 +09:00
blk-crypto-profile.c	blk-crypto: use dynamic lock class for blk_crypto_profile::lock	2023-07-23 13:49:21 +02:00
blk-crypto-sysfs.c	…
blk-crypto.c	blk-crypto: make blk_crypto_evict_key() more robust	2023-05-11 23:03:01 +09:00
blk-flush.c	…
blk-ia-ranges.c	…
blk-integrity.c	…
blk-ioc.c	…
blk-iocost.c	blk-iocost: Fix an UBSAN shift-out-of-bounds warning	2024-02-16 19:06:29 +01:00
blk-iolatency.c	…
blk-ioprio.c	…
blk-ioprio.h	…
blk-lib.c	…
blk-map.c	block: Fix WARNING in _copy_from_iter	2024-03-01 13:26:25 +01:00
blk-merge.c	blk-mq: release crypto keyslot before reporting I/O complete	2023-05-11 23:03:00 +09:00
blk-mq-cpumap.c	…
blk-mq-debugfs-zoned.c	…
blk-mq-debugfs.c	blk-mq: fix potential io hang by wrong 'wake_batch'	2023-07-19 16:20:55 +02:00
blk-mq-debugfs.h	…
blk-mq-pci.c	…
blk-mq-rdma.c	…
blk-mq-sched.c	blk-mq: correct stale comment of .get_budget	2023-03-10 09:32:44 +01:00
blk-mq-sched.h	…
blk-mq-sysfs.c	blk-mq: fix possible memleak when register 'hctx' failed	2022-12-31 13:33:03 +01:00
blk-mq-tag.c	blk-mq: fix potential io hang by wrong 'wake_batch'	2023-07-19 16:20:55 +02:00
blk-mq-tag.h	…
blk-mq-virtio.c	…
blk-mq.c	block: fix partial zone append completion handling in req_bio_endio()	2024-02-23 09:12:49 +01:00
blk-mq.h	blk-mq: fix potential io hang by wrong 'wake_batch'	2023-07-19 16:20:55 +02:00
blk-pm.c	…
blk-pm.h	…
blk-rq-qos.c	…
blk-rq-qos.h	…
blk-settings.c	block: make BLK_DEF_MAX_SECTORS unsigned	2024-01-25 15:27:30 -08:00
blk-stat.c	blk-stat: fix QUEUE_FLAG_STATS clear	2023-05-11 23:03:00 +09:00
blk-stat.h	…
blk-sysfs.c	block: fix use-after-free of q->q_usage_counter	2023-10-10 22:00:37 +02:00
blk-throttle.c	blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!"	2023-12-20 17:00:21 +01:00
blk-throttle.h	…
blk-timeout.c	…
blk-wbt.c	…
blk-wbt.h	…
blk-zoned.c	…
blk.h	block: Revert "block: Do not reread partition table on exclusively open device"	2023-03-17 08:50:20 +01:00
bounce.c	…
bsg-lib.c	…
bsg.c	…
disk-events.c	block: increment diskseq on all media change events	2023-07-19 16:21:47 +02:00
elevator.c	…
elevator.h	…
fops.c	block: Don't invalidate pagecache for invalid falloc modes	2024-01-10 17:10:20 +01:00
genhd.c	block: add check of 'minors' and 'first_minor' in device_add_disk()	2024-01-25 15:27:28 -08:00
holder.c	…
ioctl.c	block: Move checking GENHD_FL_NO_PART to bdev_add_partition()	2024-01-31 16:17:11 -08:00
ioprio.c	…
kyber-iosched.c	…
mq-deadline.c	block/mq-deadline: use correct way to throttling write requests	2023-09-13 09:42:42 +02:00
opal_proto.h	…
sed-opal.c	…
t10-pi.c	…