syzbot


KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init
Status: upstream: reported C repro on 2020/04/07 20:06
Reported-by: syzbot+d889b59b2bb87d4047a2@syzkaller.appspotmail.com
Fix commit: b6467ab1 KVM: Check validity of resolved slot when searching memslots
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-usb], missing on: [ci2-upstream-kcsan-gce]
First crash: 60d, last: 11d

Cause bisection: introduced by (bisect log):

commit 36947254e5f981aeeedab1c7dfa35fc34d330e80
Author: Sean Christopherson <sean.j.christopherson@intel.com>
Date: Tue Feb 18 21:07:32 2020 +0000

  KVM: Dynamically size memslot array based on number of used slots

Crash: KASAN: slab-out-of-bounds Read in __kvm_gfn_to_hva_cache_init (log)
Repro: C syz .config
duplicates (6):
Title Repro Bisected Count Last Reported Patched Status
KASAN: slab-out-of-bounds Read in gfn_to_memslot C cause 7 42d 50d 0/17 closed as dup on 2020/04/14 03:20
KASAN: slab-out-of-bounds Read in kvm_vcpu_gfn_to_memslot C cause 24153 11d 56d 0/17 closed as dup on 2020/04/08 01:09
KASAN: slab-out-of-bounds Read in kvm_read_guest_page C cause 9 28d 56d 0/17 closed as dup on 2020/04/08 01:08
KASAN: slab-out-of-bounds Read in gfn_to_pfn 7 39d 53d 0/17 closed as dup on 2020/04/10 17:50
KASAN: slab-out-of-bounds Read in __kvm_map_gfn C cause 9 20d 56d 0/17 closed as dup on 2020/04/08 01:08
KASAN: slab-out-of-bounds Read in gfn_to_hva C cause 29 15d 53d 0/17 closed as dup on 2020/04/10 17:54

Sample crash report:

Crashes (1537):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce 2020/04/17 09:59 upstream 7a56db02 18397578 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-smack-root 2020/04/17 09:06 upstream 7a56db02 18397578 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-smack-root 2020/04/11 04:21 upstream ab6f762f a8c6a3f8 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce 2020/04/09 14:51 upstream ae46d2aa a8c6a3f8 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce 2020/04/09 13:04 upstream ae46d2aa a8c6a3f8 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-smack-root 2020/04/03 15:41 upstream bef7b2a7 5ed396e6 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce 2020/04/03 13:09 upstream bef7b2a7 5ed396e6 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-386 2020/04/19 07:14 upstream 50cc09c1 365fba24 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-386 2020/04/15 22:15 upstream 8632e9b5 3f3c5574 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-386 2020/04/12 10:41 upstream b032227c a8c6a3f8 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-386 2020/04/12 08:58 upstream b032227c a8c6a3f8 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-386 2020/04/12 03:48 upstream 5b8b9d0c a8c6a3f8 .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/07 02:46 linux-next ac935d22 4618eb2d .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/04/29 01:00 linux-next ac935d22 e3ecea2e .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/04/28 23:10 linux-next ac935d22 e3ecea2e .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/04/28 19:50 linux-next ac935d22 e3ecea2e .config log report syz C kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-selinux-root 2020/04/03 15:04 upstream bef7b2a7 5ed396e6 .config log report syz kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce 2020/04/22 12:18 upstream 189522da 2e44d63e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-smack-root 2020/04/22 06:57 upstream 189522da 2e44d63e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-selinux-root 2020/04/21 23:13 upstream 189522da 2e44d63e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-root 2020/04/21 22:03 upstream 189522da 2e44d63e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce 2020/04/03 11:16 upstream bef7b2a7 5ed396e6 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-kasan-gce-386 2020/04/22 11:16 upstream 189522da 2e44d63e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/22 12:19 linux-next ac935d22 5afa2ddd .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/22 11:06 linux-next ac935d22 5afa2ddd .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/22 09:58 linux-next ac935d22 5afa2ddd .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/22 05:23 linux-next ac935d22 5afa2ddd .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/22 00:34 linux-next ac935d22 1f30020f .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 21:26 linux-next ac935d22 1f30020f .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 20:07 linux-next ac935d22 1f30020f .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 17:24 linux-next ac935d22 1f30020f .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 16:54 linux-next ac935d22 1f30020f .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 13:29 linux-next ac935d22 1f30020f .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 10:27 linux-next ac935d22 c61086ab .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/21 08:51 linux-next ac935d22 c61086ab .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 22:55 linux-next ac935d22 1255f02a .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 20:32 linux-next ac935d22 1255f02a .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 17:29 linux-next ac935d22 1255f02a .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 16:28 linux-next ac935d22 1255f02a .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 13:49 linux-next ac935d22 1255f02a .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 10:18 linux-next ac935d22 67fa1f59 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 08:19 linux-next ac935d22 67fa1f59 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 04:53 linux-next ac935d22 67fa1f59 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/20 01:25 linux-next ac935d22 67fa1f59 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/19 20:37 linux-next ac935d22 6d882fd2 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/19 18:28 linux-next ac935d22 6d882fd2 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/19 14:54 linux-next ac935d22 6d882fd2 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/19 09:59 linux-next ac935d22 684d3606 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/19 05:35 linux-next ac935d22 684d3606 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/19 03:39 linux-next ac935d22 684d3606 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 18:55 linux-next ac935d22 684d3606 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 17:58 linux-next ac935d22 684d3606 .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 11:35 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 10:15 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 08:46 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 07:39 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 05:18 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 03:04 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/18 01:43 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/17 23:40 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/17 05:05 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/17 00:58 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/16 21:52 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/16 10:21 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/16 08:26 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com
ci-upstream-linux-next-kasan-gce-root 2020/05/16 02:59 linux-next ac935d22 37bccd4e .config log report kvm@vger.kernel.org, linux-kernel@vger.kernel.org, pbonzini@redhat.com