From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.2 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS, USER_AGENT_SANE_1 autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3AA46C2D0BF for ; Thu, 5 Dec 2019 10:34:51 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 1A4BD2464F for ; Thu, 5 Dec 2019 10:34:51 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729303AbfLEKeu (ORCPT ); Thu, 5 Dec 2019 05:34:50 -0500 Received: from www262.sakura.ne.jp ([202.181.97.72]:62946 "EHLO www262.sakura.ne.jp" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728707AbfLEKeu (ORCPT ); Thu, 5 Dec 2019 05:34:50 -0500 Received: from fsav303.sakura.ne.jp (fsav303.sakura.ne.jp [153.120.85.134]) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTP id xB5AUvCo044363; Thu, 5 Dec 2019 19:30:57 +0900 (JST) (envelope-from penguin-kernel@i-love.sakura.ne.jp) Received: from www262.sakura.ne.jp (202.181.97.72) by fsav303.sakura.ne.jp (F-Secure/fsigk_smtp/550/fsav303.sakura.ne.jp); Thu, 05 Dec 2019 19:30:57 +0900 (JST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/fsav303.sakura.ne.jp) Received: from [192.168.1.9] (softbank126040062084.bbtec.net [126.40.62.84]) (authenticated bits=0) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTPSA id xB5AUqmd044301 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=NO); Thu, 5 Dec 2019 19:30:57 +0900 (JST) (envelope-from penguin-kernel@i-love.sakura.ne.jp) Subject: Re: KASAN: slab-out-of-bounds Read in fbcon_get_font To: Dmitry Vyukov , Paolo Bonzini Cc: syzbot , Andrey Ryabinin , Bartlomiej Zolnierkiewicz , Daniel Thompson , Daniel Vetter , DRI , ghalat@redhat.com, Gleb Natapov , gwshan@linux.vnet.ibm.com, "H. Peter Anvin" , James Morris , kasan-dev , KVM list , Linux Fbdev development list , LKML , linux-security-module , Maarten Lankhorst , Ingo Molnar , Michael Ellerman , Russell Currey , Sam Ravnborg , "Serge E. Hallyn" , stewart@linux.vnet.ibm.com, syzkaller-bugs , Kentaro Takeda , Thomas Gleixner , the arch/x86 maintainers References: <0000000000003e640e0598e7abc3@google.com> <41c082f5-5d22-d398-3bdd-3f4bf69d7ea3@redhat.com> From: Tetsuo Handa Message-ID: <811afcac-ec6e-3ff0-1a4e-c83b98540f0d@i-love.sakura.ne.jp> Date: Thu, 5 Dec 2019 19:30:53 +0900 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 2019/12/05 19:16, Dmitry Vyukov wrote: > On Thu, Dec 5, 2019 at 11:13 AM Paolo Bonzini wrote: >> >> On 04/12/19 22:41, syzbot wrote: >>> syzbot has bisected this bug to: >>> >>> commit 2de50e9674fc4ca3c6174b04477f69eb26b4ee31 >>> Author: Russell Currey >>> Date: Mon Feb 8 04:08:20 2016 +0000 >>> >>> powerpc/powernv: Remove support for p5ioc2 >>> >>> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=127a042ae00000 >>> start commit: 76bb8b05 Merge tag 'kbuild-v5.5' of >>> git://git.kernel.org/p.. >>> git tree: upstream >>> final crash: https://syzkaller.appspot.com/x/report.txt?x=117a042ae00000 >>> console output: https://syzkaller.appspot.com/x/log.txt?x=167a042ae00000 >>> kernel config: https://syzkaller.appspot.com/x/.config?x=dd226651cb0f364b >>> dashboard link: >>> https://syzkaller.appspot.com/bug?extid=4455ca3b3291de891abc >>> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11181edae00000 >>> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=105cbb7ae00000 >>> >>> Reported-by: syzbot+4455ca3b3291de891abc@syzkaller.appspotmail.com >>> Fixes: 2de50e9674fc ("powerpc/powernv: Remove support for p5ioc2") >>> >>> For information about bisection process see: >>> https://goo.gl/tpsmEJ#bisection >>> >> >> Why is everybody being CC'd, even if the bug has nothing to do with the >> person's subsystem? > > The To list should be intersection of 2 groups of emails: result of > get_maintainers.pl on the file identified as culprit in the crash > message + emails extracted from the bisected to commit. > There is "#syz uncc" command but it is too hard to utilize? From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tetsuo Handa Date: Thu, 05 Dec 2019 10:30:53 +0000 Subject: Re: KASAN: slab-out-of-bounds Read in fbcon_get_font Message-Id: <811afcac-ec6e-3ff0-1a4e-c83b98540f0d@i-love.sakura.ne.jp> List-Id: References: <0000000000003e640e0598e7abc3@google.com> <41c082f5-5d22-d398-3bdd-3f4bf69d7ea3@redhat.com> In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable To: Dmitry Vyukov , Paolo Bonzini Cc: Linux Fbdev development list , KVM list , Daniel Vetter , "H. Peter Anvin" , DRI , ghalat@redhat.com, Russell Currey , Sam Ravnborg , syzbot , Kentaro Takeda , stewart@linux.vnet.ibm.com, Daniel Thompson , Michael Ellerman , the arch/x86 maintainers , James Morris , kasan-dev , Ingo Molnar , Andrey Ryabinin , "Serge E. Hallyn" , Bartlomiej Zolnierkiewicz , Gleb Natapov , syzkaller-bugs , gwshan@linux.vnet.ibm.com, Thomas Gleixner , LKML , linux-security-module On 2019/12/05 19:16, Dmitry Vyukov wrote: > On Thu, Dec 5, 2019 at 11:13 AM Paolo Bonzini wrote: >> >> On 04/12/19 22:41, syzbot wrote: >>> syzbot has bisected this bug to: >>> >>> commit 2de50e9674fc4ca3c6174b04477f69eb26b4ee31 >>> Author: Russell Currey >>> Date: Mon Feb 8 04:08:20 2016 +0000 >>> >>> powerpc/powernv: Remove support for p5ioc2 >>> >>> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=127a042ae0= 0000 >>> start commit: 76bb8b05 Merge tag 'kbuild-v5.5' of >>> git://git.kernel.org/p.. >>> git tree: upstream >>> final crash: https://syzkaller.appspot.com/x/report.txt?x=117a042ae0= 0000 >>> console output: https://syzkaller.appspot.com/x/log.txt?x=167a042ae00000 >>> kernel config: https://syzkaller.appspot.com/x/.config?x=DD226651cb0f3= 64b >>> dashboard link: >>> https://syzkaller.appspot.com/bug?extidD55ca3b3291de891abc >>> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11181edae00= 000 >>> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=105cbb7ae00000 >>> >>> Reported-by: syzbot+4455ca3b3291de891abc@syzkaller.appspotmail.com >>> Fixes: 2de50e9674fc ("powerpc/powernv: Remove support for p5ioc2") >>> >>> For information about bisection process see: >>> https://goo.gl/tpsmEJ#bisection >>> >> >> Why is everybody being CC'd, even if the bug has nothing to do with the >> person's subsystem? >=20 > The To list should be intersection of 2 groups of emails: result of > get_maintainers.pl on the file identified as culprit in the crash > message + emails extracted from the bisected to commit. >=20 There is "#syz uncc" command but it is too hard to utilize? From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.2 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS, USER_AGENT_SANE_1 autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id DA030C43603 for ; Fri, 6 Dec 2019 08:17:47 +0000 (UTC) Received: from gabe.freedesktop.org (gabe.freedesktop.org [131.252.210.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 81E0C2467A for ; Fri, 6 Dec 2019 08:17:47 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 81E0C2467A Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=i-love.sakura.ne.jp Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=dri-devel-bounces@lists.freedesktop.org Received: from gabe.freedesktop.org (localhost [127.0.0.1]) by gabe.freedesktop.org (Postfix) with ESMTP id D94946EB13; Fri, 6 Dec 2019 08:17:34 +0000 (UTC) Received: from www262.sakura.ne.jp (www262.sakura.ne.jp [202.181.97.72]) by gabe.freedesktop.org (Postfix) with ESMTPS id 44BE26F5FF for ; Thu, 5 Dec 2019 10:34:14 +0000 (UTC) Received: from fsav303.sakura.ne.jp (fsav303.sakura.ne.jp [153.120.85.134]) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTP id xB5AUvCo044363; Thu, 5 Dec 2019 19:30:57 +0900 (JST) (envelope-from penguin-kernel@i-love.sakura.ne.jp) Received: from www262.sakura.ne.jp (202.181.97.72) by fsav303.sakura.ne.jp (F-Secure/fsigk_smtp/550/fsav303.sakura.ne.jp); Thu, 05 Dec 2019 19:30:57 +0900 (JST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/fsav303.sakura.ne.jp) Received: from [192.168.1.9] (softbank126040062084.bbtec.net [126.40.62.84]) (authenticated bits=0) by www262.sakura.ne.jp (8.15.2/8.15.2) with ESMTPSA id xB5AUqmd044301 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=NO); Thu, 5 Dec 2019 19:30:57 +0900 (JST) (envelope-from penguin-kernel@i-love.sakura.ne.jp) Subject: Re: KASAN: slab-out-of-bounds Read in fbcon_get_font To: Dmitry Vyukov , Paolo Bonzini References: <0000000000003e640e0598e7abc3@google.com> <41c082f5-5d22-d398-3bdd-3f4bf69d7ea3@redhat.com> From: Tetsuo Handa Message-ID: <811afcac-ec6e-3ff0-1a4e-c83b98540f0d@i-love.sakura.ne.jp> Date: Thu, 5 Dec 2019 19:30:53 +0900 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US X-Mailman-Approved-At: Fri, 06 Dec 2019 08:17:33 +0000 X-BeenThere: dri-devel@lists.freedesktop.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Direct Rendering Infrastructure - Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Linux Fbdev development list , KVM list , Daniel Vetter , "H. Peter Anvin" , DRI , ghalat@redhat.com, Russell Currey , Sam Ravnborg , syzbot , Kentaro Takeda , stewart@linux.vnet.ibm.com, Daniel Thompson , Michael Ellerman , the arch/x86 maintainers , James Morris , kasan-dev , Ingo Molnar , Andrey Ryabinin , "Serge E. Hallyn" , Bartlomiej Zolnierkiewicz , Gleb Natapov , syzkaller-bugs , gwshan@linux.vnet.ibm.com, Thomas Gleixner , LKML , linux-security-module Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" T24gMjAxOS8xMi8wNSAxOToxNiwgRG1pdHJ5IFZ5dWtvdiB3cm90ZToKPiBPbiBUaHUsIERlYyA1 LCAyMDE5IGF0IDExOjEzIEFNIFBhb2xvIEJvbnppbmkgPHBib256aW5pQHJlZGhhdC5jb20+IHdy b3RlOgo+Pgo+PiBPbiAwNC8xMi8xOSAyMjo0MSwgc3l6Ym90IHdyb3RlOgo+Pj4gc3l6Ym90IGhh cyBiaXNlY3RlZCB0aGlzIGJ1ZyB0bzoKPj4+Cj4+PiBjb21taXQgMmRlNTBlOTY3NGZjNGNhM2M2 MTc0YjA0NDc3ZjY5ZWIyNmI0ZWUzMQo+Pj4gQXV0aG9yOiBSdXNzZWxsIEN1cnJleSA8cnVzY3Vy QHJ1c3NlbGwuY2M+Cj4+PiBEYXRlOiAgIE1vbiBGZWIgOCAwNDowODoyMCAyMDE2ICswMDAwCj4+ Pgo+Pj4gICAgIHBvd2VycGMvcG93ZXJudjogUmVtb3ZlIHN1cHBvcnQgZm9yIHA1aW9jMgo+Pj4K Pj4+IGJpc2VjdGlvbiBsb2c6ICBodHRwczovL3N5emthbGxlci5hcHBzcG90LmNvbS94L2Jpc2Vj dC50eHQ/eD0xMjdhMDQyYWUwMDAwMAo+Pj4gc3RhcnQgY29tbWl0OiAgIDc2YmI4YjA1IE1lcmdl IHRhZyAna2J1aWxkLXY1LjUnIG9mCj4+PiBnaXQ6Ly9naXQua2VybmVsLm9yZy9wLi4KPj4+IGdp dCB0cmVlOiAgICAgICB1cHN0cmVhbQo+Pj4gZmluYWwgY3Jhc2g6ICAgIGh0dHBzOi8vc3l6a2Fs bGVyLmFwcHNwb3QuY29tL3gvcmVwb3J0LnR4dD94PTExN2EwNDJhZTAwMDAwCj4+PiBjb25zb2xl IG91dHB1dDogaHR0cHM6Ly9zeXprYWxsZXIuYXBwc3BvdC5jb20veC9sb2cudHh0P3g9MTY3YTA0 MmFlMDAwMDAKPj4+IGtlcm5lbCBjb25maWc6ICBodHRwczovL3N5emthbGxlci5hcHBzcG90LmNv bS94Ly5jb25maWc/eD1kZDIyNjY1MWNiMGYzNjRiCj4+PiBkYXNoYm9hcmQgbGluazoKPj4+IGh0 dHBzOi8vc3l6a2FsbGVyLmFwcHNwb3QuY29tL2J1Zz9leHRpZD00NDU1Y2EzYjMyOTFkZTg5MWFi Ywo+Pj4gc3l6IHJlcHJvOiAgICAgIGh0dHBzOi8vc3l6a2FsbGVyLmFwcHNwb3QuY29tL3gvcmVw cm8uc3l6P3g9MTExODFlZGFlMDAwMDAKPj4+IEMgcmVwcm9kdWNlcjogICBodHRwczovL3N5emth bGxlci5hcHBzcG90LmNvbS94L3JlcHJvLmM/eD0xMDVjYmI3YWUwMDAwMAo+Pj4KPj4+IFJlcG9y dGVkLWJ5OiBzeXpib3QrNDQ1NWNhM2IzMjkxZGU4OTFhYmNAc3l6a2FsbGVyLmFwcHNwb3RtYWls LmNvbQo+Pj4gRml4ZXM6IDJkZTUwZTk2NzRmYyAoInBvd2VycGMvcG93ZXJudjogUmVtb3ZlIHN1 cHBvcnQgZm9yIHA1aW9jMiIpCj4+Pgo+Pj4gRm9yIGluZm9ybWF0aW9uIGFib3V0IGJpc2VjdGlv biBwcm9jZXNzIHNlZToKPj4+IGh0dHBzOi8vZ29vLmdsL3Rwc21FSiNiaXNlY3Rpb24KPj4+Cj4+ Cj4+IFdoeSBpcyBldmVyeWJvZHkgYmVpbmcgQ0MnZCwgZXZlbiBpZiB0aGUgYnVnIGhhcyBub3Ro aW5nIHRvIGRvIHdpdGggdGhlCj4+IHBlcnNvbidzIHN1YnN5c3RlbT8KPiAKPiBUaGUgVG8gbGlz dCBzaG91bGQgYmUgaW50ZXJzZWN0aW9uIG9mIDIgZ3JvdXBzIG9mIGVtYWlsczogcmVzdWx0IG9m Cj4gZ2V0X21haW50YWluZXJzLnBsIG9uIHRoZSBmaWxlIGlkZW50aWZpZWQgYXMgY3VscHJpdCBp biB0aGUgY3Jhc2gKPiBtZXNzYWdlICsgZW1haWxzIGV4dHJhY3RlZCBmcm9tIHRoZSBiaXNlY3Rl ZCB0byBjb21taXQuCj4gCgpUaGVyZSBpcyAiI3N5eiB1bmNjIiBjb21tYW5kIGJ1dCBpdCBpcyB0 b28gaGFyZCB0byB1dGlsaXplPwpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXwpkcmktZGV2ZWwgbWFpbGluZyBsaXN0CmRyaS1kZXZlbEBsaXN0cy5mcmVlZGVz a3RvcC5vcmcKaHR0cHM6Ly9saXN0cy5mcmVlZGVza3RvcC5vcmcvbWFpbG1hbi9saXN0aW5mby9k cmktZGV2ZWw=