Re: [syzbot] [fuse?] KASAN: slab-use-after-free Read in iov_iter_revert

Re: [syzbot] [fuse?] KASAN: slab-use-after-free Read in iov_iter_revert

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com
Tested-by: syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com

Tested on:

commit:         7a4f5418 fuse: fix direct io folio offset and length c..
git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git
console output: https://syzkaller.appspot.com/x/log.txt?x=129af818580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=a0669984e46cc674
dashboard link: https://syzkaller.appspot.com/bug?extid=2625ce08c2659fb9961a
compiler:       gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40

Note: no patches were applied.
Note: testing is done by a robot and is best-effort only.

Re: [syzbot] [fuse?] KASAN: slab-use-after-free Read in iov_iter_revert

[Miklos Szeredi]

#syz dup: KASAN: null-ptr-deref Read in fuse_copy_do

On Thu, 2 Jan 2025 at 21:51, syzbot
<syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com> wrote:
>
> Hello,
>
> syzbot has tested the proposed patch and the reproducer did not trigger any issue:
>
> Reported-by: syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com
> Tested-by: syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com
>
> Tested on:
>
> commit:         7a4f5418 fuse: fix direct io folio offset and length c..
> git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git
> console output: https://syzkaller.appspot.com/x/log.txt?x=129af818580000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=a0669984e46cc674
> dashboard link: https://syzkaller.appspot.com/bug?extid=2625ce08c2659fb9961a
> compiler:       gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
>
> Note: no patches were applied.
> Note: testing is done by a robot and is best-effort only.

Re: [syzbot] [netfs?] KASAN: slab-use-after-free Read in iov_iter_revert

[Joanne Koong]

On Fri, Jan 3, 2025 at 3:11 PM syzbot
<syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com> wrote:
>
> > On Thu, Jan 2, 2025 at 12:19 PM syzbot
> > <syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com> wrote:
> >>
> >> > #syz test git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git
> >>
> >> want either no args or 2 args (repo, branch), got 1
> >>
> >> > 7a4f5418
> >
> > Sorry for the late reply on this Miklos, didn't realize this was
> > related to my "convert direct io to use folios" change.
> >
> > I think Bernd's fix in 78f2560fc ("fuse: Set *nbytesp=0 in
> > fuse_get_user_pages on allocation failure") should have fixed this?
> >
> > #syz test git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git
>
> want either no args or 2 args (repo, branch), got 1
>
> > for-next

#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git
for-next

(added a missing ":" after test)

Re: [syzbot] [fuse?] KASAN: slab-use-after-free Read in iov_iter_revert

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com
Tested-by: syzbot+2625ce08c2659fb9961a@syzkaller.appspotmail.com

Tested on:

commit:         78f2560f fuse: Set *nbytesp=0 in fuse_get_user_pages o..
git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git for-next
console output: https://syzkaller.appspot.com/x/log.txt?x=16eeb418580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=a0669984e46cc674
dashboard link: https://syzkaller.appspot.com/bug?extid=2625ce08c2659fb9961a
compiler:       gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40

Note: no patches were applied.
Note: testing is done by a robot and is best-effort only.