linux-kernel - Re: general protection fault in native_write

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20180402190936.GB59810@gmail.com>
Date:   Mon, 2 Apr 2018 12:09:36 -0700
From:   Eric Biggers <ebiggers3@...il.com>
To:     Dmitry Vyukov <dvyukov@...gle.com>
Cc:     "Christopherson, Sean J" <sean.j.christopherson@...el.com>,
        Wanpeng Li <kernellwp@...il.com>,
        syzbot 
        <bot+ab09454bf4b7a7f8ce7e5e8d97e644d3314a0799@...kaller.appspotmail.com>,
        "H. Peter Anvin" <hpa@...or.com>, kvm <kvm@...r.kernel.org>,
        LKML <linux-kernel@...r.kernel.org>,
        Ingo Molnar <mingo@...hat.com>,
        Paolo Bonzini <pbonzini@...hat.com>,
        Radim Krcmar <rkrcmar@...hat.com>,
        "syzkaller-bugs@...glegroups.com" <syzkaller-bugs@...glegroups.com>,
        Thomas Gleixner <tglx@...utronix.de>,
        the arch/x86 maintainers <x86@...nel.org>,
        Jim Mattson <jmattson@...gle.com>
Subject: Re: general protection fault in native_write_cr4

On Mon, Apr 02, 2018 at 08:04:24PM +0200, 'Dmitry Vyukov' via syzkaller-bugs wrote:
> On Mon, Apr 2, 2018 at 6:36 PM, Christopherson, Sean J
> <sean.j.christopherson@...el.com> wrote:
> > On Sat, 2018-03-31, Dmitry Vyukov wrote:
> >> On Wed, Dec 27, 2017 at 7:31 PM, Dmitry Vyukov <dvyukov@...gle.com> wrote:
> >> > On Tue, Dec 26, 2017 at 9:52 AM, Dmitry Vyukov <dvyukov@...gle.com> wrote:
> >> >> On Wed, Dec 20, 2017 at 8:54 AM, Wanpeng Li <kernellwp@...il.com> wrote:
> >> >>> 2017-12-20 15:49 GMT+08:00 syzbot
> >> >>> <bot+ab09454bf4b7a7f8ce7e5e8d97e644d3314a0799@...kaller.appspotmail.com>:
> >> >>>> Hello,
> >> >>>>
> >> >>>> syzkaller hit the following crash on
> >> >>>> f6f3732162b5ae3c771b9285a5a32d72b8586920
> >> >>>> git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/master
> >> >>>> compiler: gcc (GCC) 7.1.1 20170620
> >> >>>> .config is attached
> >> >>>> Raw console output is attached.
> >> >>>> C reproducer is attached
> >> >>>> syzkaller reproducer is attached. See https://goo.gl/kgGztJ
> >> >>>> for information about syzkaller reproducers
> >> >>>>
> >> >>>>
> >> >>>
> >> >>> I will have a look again, you continue to run it in kvm guest, right?
> >> >>
> >> >>
> >> >> Our test machines are GCE VMs, so yes, the kernel that catches GPF is
> >> >> run as kvm guest.
> >> >
> >> > up
> >> >
> >> > one of top crashers with 50K crashes
> >>
> >>
> >> This sets a new record of 130000 crashed machines on syzbot infrastructure:
> >>
> >> https://syzkaller.appspot.com/bug?id=2bf7b7983c2398ec6f0c4c6c87cb50223e8873f8
> >
> > This is more than likely a known bug in the GCE kernel, i.e. the L0
> > kernel.  The fix that Haozhong referenced needs to be applied to the
> > L0 kernel (GCE), the L1 kernel (Syzkaller) is irrelevant.  You said
> > that you double checked an upstream kernel, but I'm assuming you were
> > referring to patching the L1 kernel (Syzkaller).
> >
> > https://lkml.org/lkml/2017/10/31/432
> 
> Hi Sean,
> 
> Thanks! Either I did not associate these 2 threads as we shuffle
> hundreds of bugs, or I did not realize that this needs to be applied
> to L0. Anyway...
> 
> I will check with GCE folks.
> 

Some hosts have already been updated with the referenced commit but not all yet.
So assuming that was really the problem, syzbot should stop hitting this crash
eventually.  (For any Googlers following along, see Google-Bug-Id 72171735.)

Eric