syzbot


WARNING in kvm_arch_vcpu_ioctl_run (5)

Status: fixed on 2023/10/12 12:47
Subsystems: kvm
[Documentation on labels]
Reported-by: syzbot+5feef0b9ee9c8e9e5689@syzkaller.appspotmail.com
Fix commit: 26a0652cb453 KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
First crash: 543d, last: 452d
Cause bisection: failed (error log, bisect log)
  
Duplicate bugs (1)
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
WARNING in __load_segment_descriptor kvm C done 8 513d 509d 0/28 closed as dup on 2023/07/13 15:57
Discussions (3)
Title Replies (including bot) Last reply
[PATCH 0/3] KVM: x86: CR0 vs. KVM_SET_SREGS and !URG 7 (7) 2023/07/29 15:04
[syzbot] Monthly kvm report (Jul 2023) 1 (2) 2023/07/10 20:28
[syzbot] [kvm?] WARNING in kvm_arch_vcpu_ioctl_run (5) 1 (2) 2023/06/12 23:52
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in kvm_arch_vcpu_ioctl_run (4) kvm C error 288 544d 627d 22/28 fixed on 2023/06/08 14:41
upstream WARNING in kvm_arch_vcpu_ioctl_run (2) kvm C 61018 2500d 2588d 4/28 fixed on 2018/03/13 09:44
upstream WARNING in kvm_arch_vcpu_ioctl_run C 20284 2625d 2690d 3/28 fixed on 2017/09/26 01:38
linux-4.14 WARNING in kvm_arch_vcpu_ioctl_run C inconclusive 71 811d 1987d 0/1 upstream: reported C repro on 2019/06/25 23:07
upstream WARNING in kvm_arch_vcpu_ioctl_run (3) kvm C done error 16157 648d 2442d 22/28 fixed on 2023/02/24 13:50
linux-4.19 WARNING in kvm_arch_vcpu_ioctl_run C error 116 720d 1996d 0/1 upstream: reported C repro on 2019/06/17 10:07
linux-5.15 WARNING in kvm_arch_vcpu_ioctl_run origin:lts-only C inconclusive 579 21h17m 604d 0/3 upstream: reported C repro on 2023/04/09 03:02
linux-6.1 WARNING in kvm_arch_vcpu_ioctl_run origin:lts-only C done 282 20h24m 621d 0/3 upstream: reported C repro on 2023/03/23 13:22

Sample crash report:
kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
kvm: vcpu 1: requested 128 ns lapic timer period limited to 200000 ns
kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5004 at arch/x86/kvm/x86.c:11099 kvm_arch_vcpu_ioctl_run+0x2379/0x2820 arch/x86/kvm/x86.c:11099
Modules linked in:
CPU: 1 PID: 5004 Comm: syz-executor120 Not tainted 6.4.0-rc5-syzkaller-00245-g64569520920a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2379/0x2820 arch/x86/kvm/x86.c:11099
Code: fc ff ff e8 19 64 71 00 44 89 e6 48 c7 c7 40 8a 42 8a c6 05 cd e9 51 0d 01 e8 53 1f 39 00 0f 0b e9 2a fc ff ff e8 f7 63 71 00 <0f> 0b e9 26 fb ff ff e8 eb 63 71 00 0f b6 1d aa e9 51 0d 31 ff 89
RSP: 0018:ffffc90003a8fcb8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888015b9d940 RSI: ffffffff8112e2e9 RDI: 0000000000000001
RBP: ffff88807dae8000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900015a7918
R13: ffffc900015a7908 R14: 0000000000000000 R15: ffff88807dae82ec
FS:  00005555572d6300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020fe9008 CR3: 000000007be99000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 kvm_vcpu_ioctl+0x574/0xea0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4106
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0464e7ec99
Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffded877408 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0464e7ec99
RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
RBP: 00007f0464e426f0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0464e42780
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Crashes (343):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/06/10 10:38 upstream 64569520920a 7086cdb9 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/06/09 16:19 linux-next 715abedee4cd 7086cdb9 .config strace log report syz C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kvm_arch_vcpu_ioctl_run
2023/09/08 11:19 upstream 4a0fc73da97e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/08 02:52 upstream 4a0fc73da97e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/07 22:24 upstream 7ba2090ca64e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/07 22:24 upstream 7ba2090ca64e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in kvm_arch_vcpu_ioctl_run
2023/09/07 19:44 upstream 7ba2090ca64e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/07 08:31 upstream 744a759492b5 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/06 04:22 upstream 7733171926cc 8bc9053e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in kvm_arch_vcpu_ioctl_run
2023/09/05 17:34 upstream 3f86ed6ec0b3 8bc9053e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/05 15:54 upstream 3f86ed6ec0b3 8bc9053e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/05 14:24 upstream 3f86ed6ec0b3 8bc9053e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/05 09:13 upstream 3f86ed6ec0b3 8bc9053e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/04 08:39 upstream db906f0ca6bb 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/04 02:39 upstream db906f0ca6bb 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/04 00:33 upstream db906f0ca6bb 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/03 16:21 upstream 92901222f83d 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in kvm_arch_vcpu_ioctl_run
2023/09/03 08:28 upstream 92901222f83d 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/02 21:05 upstream 0468be89b3fa 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in kvm_arch_vcpu_ioctl_run
2023/09/02 07:17 upstream 29aa98d0fe01 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/01 08:16 upstream b97d64c72259 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/01 01:02 upstream b97d64c72259 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in kvm_arch_vcpu_ioctl_run
2023/08/31 20:58 upstream b97d64c72259 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/31 14:20 upstream ef2a0b7cdbc5 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/31 09:06 upstream ef2a0b7cdbc5 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/31 00:56 upstream 6c1b980a7e79 84803932 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/09/07 12:15 upstream 7ba2090ca64e 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in kvm_arch_vcpu_ioctl_run
2023/09/03 07:06 upstream 92901222f83d 696ea0d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in kvm_arch_vcpu_ioctl_run
2023/09/07 10:41 upstream 744a759492b5 72324844 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in kvm_arch_vcpu_ioctl_run
2023/08/30 05:58 upstream d68b4b6f307d b42ca3a7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/29 19:53 upstream 1c59d383390f 7ba13a15 .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in kvm_arch_vcpu_ioctl_run
2023/08/28 23:30 upstream 727dbda16b83 7ba13a15 .config console log report info ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/27 19:32 upstream 28f20a19294d 7ba13a15 .config console log report info ci-qemu-upstream WARNING in kvm_arch_vcpu_ioctl_run
2023/08/27 09:25 upstream 28f20a19294d 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/26 16:54 upstream 7d2f353b2682 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/26 06:07 upstream 382d4cd18475 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/26 02:54 upstream 382d4cd18475 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in kvm_arch_vcpu_ioctl_run
2023/08/25 23:14 upstream 4f9e7fabf864 7ba13a15 .config console log report info ci-qemu-upstream WARNING in kvm_arch_vcpu_ioctl_run
2023/08/25 21:41 upstream 4f9e7fabf864 03d9c195 .config console log report info ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/25 01:19 upstream b5cc3833f13a 49be837e .config console log report info ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/24 14:24 upstream 93f5de5f648d 4d7ae7ab .config console log report info ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/24 00:14 upstream a5e505a99ca7 4d7ae7ab .config console log report info ci-upstream-kasan-gce-selinux-root WARNING in kvm_arch_vcpu_ioctl_run
2023/08/23 21:49 upstream 89bf6209cad6 4d7ae7ab .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in kvm_arch_vcpu_ioctl_run
2023/08/23 06:13 upstream 53663f4103ff b81ca3f6 .config console log report info ci-qemu-upstream WARNING in kvm_arch_vcpu_ioctl_run
2023/08/21 23:17 upstream f7757129e3de 6b415825 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/20 19:56 upstream b320441c04c9 d216d8a0 .config console log report info ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/20 16:54 upstream b320441c04c9 d216d8a0 .config console log report info ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/20 15:05 upstream b320441c04c9 d216d8a0 .config console log report info ci-qemu-upstream WARNING in kvm_arch_vcpu_ioctl_run
2023/08/20 08:44 upstream 9e6c269de404 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/20 03:25 upstream 9e6c269de404 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in kvm_arch_vcpu_ioctl_run
2023/08/27 03:03 upstream 3b35375f19fe 7ba13a15 .config console log report info ci-qemu-upstream-386 WARNING in kvm_arch_vcpu_ioctl_run
2023/08/12 16:14 linux-next 21ef7b1e17d0 39990d51 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in kvm_arch_vcpu_ioctl_run
* Struck through repros no longer work on HEAD.