Junichi Nomura
bc6024b427
block: check bi_size overflow before merge
[ Upstream commit e3a5d8e386 ]
__bio_try_merge_page() may merge a page to bio without bio_full() check
and cause bi_size overflow.
The overflow typically ends up with sd_init_command() warning on zero
segment request with call trace like this:
------------[ cut here ]------------
WARNING: CPU: 2 PID: 1986 at drivers/scsi/scsi_lib.c:1025 scsi_init_io+0x156/0x180
CPU: 2 PID: 1986 Comm: kworker/2:1H Kdump: loaded Not tainted 5.4.0-rc7 #1
Workqueue: kblockd blk_mq_run_work_fn
RIP: 0010:scsi_init_io+0x156/0x180
RSP: 0018:ffffa11487663bf0 EFLAGS: 00010246
RAX: 00000000002be0a0 RBX: ffff8e6e9ff30118 RCX: 0000000000000000
RDX: 00000000ffffffe1 RSI: 0000000000000000 RDI: ffff8e6e9ff30118
RBP: ffffa11487663c18 R08: ffffa11487663d28 R09: ffff8e6e9ff30150
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8e6e9ff30000
R13: 0000000000000001 R14: ffff8e74a1cf1800 R15: ffff8e6e9ff30000
FS: 0000000000000000(0000) GS:ffff8e6ea7680000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff18cf0fe8 CR3: 0000000659f0a001 CR4: 00000000001606e0
Call Trace:
sd_init_command+0x326/0xb40 [sd_mod]
scsi_queue_rq+0x502/0xaa0
? blk_mq_get_driver_tag+0xe7/0x120
blk_mq_dispatch_rq_list+0x256/0x5a0
? elv_rb_del+0x24/0x30
? deadline_remove_request+0x7b/0xc0
blk_mq_do_dispatch_sched+0xa3/0x140
blk_mq_sched_dispatch_requests+0xfb/0x170
__blk_mq_run_hw_queue+0x81/0x130
blk_mq_run_work_fn+0x1b/0x20
process_one_work+0x179/0x390
worker_thread+0x4f/0x3e0
kthread+0x105/0x140
? max_active_store+0x80/0x80
? kthread_bind+0x20/0x20
ret_from_fork+0x35/0x40
---[ end trace f9036abf5af4a4d3 ]---
blk_update_request: I/O error, dev sdd, sector 2875552 op 0x1:(WRITE) flags 0x0 phys_seg 0 prio class 0
XFS (sdd1): writeback error on sector 2875552
__bio_try_merge_page() should check the overflow before actually doing
merge.
Fixes: 07173c3ec2 ("block: enable multipage bvecs")
Reviewed-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Ming Lei <ming.lei@redhat.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Jun'ichi Nomura <j-nomura@ce.jp.nec.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-12-13 08:48:35 +01:00
..
2019-07-15 11:03:02 -03:00
2019-04-30 16:11:57 -06:00
2019-06-20 10:32:35 -06:00
2019-11-24 08:16:59 +01:00
2019-06-25 09:07:34 -06:00
2019-04-30 16:11:59 -06:00
2019-07-11 20:01:21 -06:00
2019-12-13 08:48:35 +01:00
2019-11-12 19:27:04 +01:00
2019-07-10 14:18:01 -06:00
2019-04-30 16:12:03 -06:00
2019-10-05 15:12:29 +02:00
2019-07-15 09:20:27 -03:00
2018-11-15 12:17:28 -07:00
2019-07-16 10:06:39 -06:00
2018-11-14 08:17:18 -07:00
2019-06-20 10:29:22 -06:00
2019-07-03 07:20:40 -06:00
2019-05-31 15:12:34 -06:00
2019-01-17 21:21:40 -07:00
2019-07-09 10:45:06 -07:00
2019-06-13 03:00:30 -06:00
2019-05-31 15:12:34 -06:00
2019-05-31 15:12:34 -06:00
2019-10-11 18:36:47 +02:00
2019-07-23 07:25:09 -06:00
2019-05-07 18:14:36 -07:00
2019-07-02 21:03:27 -06:00
2017-11-14 15:32:19 -08:00
2019-05-31 15:12:34 -06:00
2019-10-29 09:21:32 +01:00
2019-07-10 14:18:01 -06:00
2018-11-15 12:17:28 -07:00
2018-11-15 12:17:28 -07:00
2019-10-17 13:47:13 -07:00
2019-10-29 09:22:47 +01:00
2019-07-26 12:50:57 -06:00
2018-11-15 12:13:25 -07:00
2019-04-30 16:12:03 -06:00
2018-12-12 06:47:51 -07:00
2019-08-12 08:14:11 -06:00
2019-10-05 15:12:06 +02:00
2019-04-30 16:12:03 -06:00
2019-10-17 13:47:13 -07:00
2018-07-09 09:07:54 -06:00
2019-07-11 20:04:40 -06:00
2019-10-11 18:36:47 +02:00
2019-04-30 09:26:13 -06:00
2019-05-31 15:12:34 -06:00
2019-04-30 16:11:57 -06:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2019-06-06 22:39:39 -06:00
2019-07-16 10:16:33 -06:00
2019-04-30 16:12:03 -06:00
2019-07-15 09:20:27 -03:00
2019-07-15 11:03:02 -03:00
2019-07-15 09:20:27 -03:00
2019-07-02 21:03:27 -06:00
2018-11-07 13:42:32 -07:00
2019-10-05 15:12:29 +02:00
2019-06-29 10:34:08 -06:00
2019-04-22 09:48:12 -06:00
2019-04-30 16:11:57 -06:00
2019-06-29 10:34:08 -06:00
2019-04-30 16:11:57 -06:00