syzbot


KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (3)

Status: auto-closed as invalid on 2020/07/30 20:33
Subsystems: kvm
[Documentation on labels]
First crash: 1400d, last: 1400d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (2) kvm 8 1423d 1551d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (6) kvm 4 1166d 1195d 0/26 auto-closed as invalid on 2021/03/21 16:27
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (4) kvm 3 1306d 1340d 0/26 auto-closed as invalid on 2020/11/01 19:43
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (7) kvm 1 1113d 1113d 0/26 auto-closed as invalid on 2021/05/17 10:12
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end kvm 2 1626d 1627d 0/26 auto-closed as invalid on 2020/01/21 09:46
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (5) kvm 1 1234d 1234d 0/26 auto-closed as invalid on 2021/01/12 10:00

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end

write to 0xffffc900010da190 of 8 bytes by task 16311 on cpu 1:
 kvm_mmu_notifier_invalidate_range_end+0x58/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:460
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:480 [inline]
 __split_huge_pmd+0x6a1/0x910 mm/huge_memory.c:2248
 split_huge_pmd_address+0x15b/0x180 mm/huge_memory.c:2273
 vma_adjust_trans_huge+0xac/0x210 mm/huge_memory.c:2289
 __vma_adjust+0x420/0x14c0 mm/mmap.c:794
 __split_vma+0x24b/0x320 include/linux/mm.h:2518
 __do_munmap+0x2de/0xbf0 mm/mmap.c:2791
 do_munmap+0x2c/0x40 mm/mmap.c:2844
 mremap_to mm/mremap.c:570 [inline]
 __do_sys_mremap mm/mremap.c:703 [inline]
 __se_sys_mremap+0x7fd/0xc50 mm/mremap.c:644
 __x64_sys_mremap+0x63/0x70 mm/mremap.c:644
 do_syscall_64+0x71/0x120 arch/x86/entry/common.c:359
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffc900010da190 of 8 bytes by task 16299 on cpu 0:
 kvm_mmu_notifier_invalidate_range_end+0x6c/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:463
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_end include/linux/mmu_notifier.h:473 [inline]
 try_to_unmap_one+0x12bb/0x16d0 mm/rmap.c:1716
 rmap_walk_file+0x260/0x4d0 mm/rmap.c:1928
 rmap_walk mm/rmap.c:1946 [inline]
 try_to_munlock+0xe7/0x150 mm/rmap.c:1797
 __munlock_isolated_page mm/mlock.c:138 [inline]
 __munlock_pagevec+0x488/0x760 mm/mlock.c:346
 munlock_vma_pages_range+0x513/0x6b0 mm/mlock.c:499
 munlock_vma_pages_all mm/internal.h:343 [inline]
 exit_mmap+0x118/0x3a0 mm/mmap.c:3134
 __mmput+0x78/0x1f0 kernel/fork.c:1093
 mmput+0x38/0x40 kernel/fork.c:1114
 exit_mm+0x2dd/0x330 kernel/exit.c:482
 do_exit+0x415/0x16e0 kernel/exit.c:792
 do_group_exit+0xcb/0x180 kernel/exit.c:903
 get_signal+0xdee/0x1520 kernel/signal.c:2739
 do_signal+0x25/0x270 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:212 [inline]
 __prepare_exit_to_usermode+0x129/0x230 arch/x86/entry/common.c:246
 __syscall_return_slowpath arch/x86/entry/common.c:329 [inline]
 do_syscall_64+0xb9/0x120 arch/x86/entry/common.c:368
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 16299 Comm: syz-executor.4 Not tainted 5.8.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/25 20:30 upstream 908f7d12d3ba adb7d9e6 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.