syzbot


KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (6)

Status: auto-closed as invalid on 2021/03/21 16:27
Subsystems: kvm
[Documentation on labels]
First crash: 1194d, last: 1165d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (2) kvm 8 1423d 1550d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (3) kvm 1 1399d 1399d 0/26 auto-closed as invalid on 2020/07/30 20:33
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (4) kvm 3 1305d 1339d 0/26 auto-closed as invalid on 2020/11/01 19:43
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (7) kvm 1 1112d 1112d 0/26 auto-closed as invalid on 2021/05/17 10:12
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end kvm 2 1625d 1626d 0/26 auto-closed as invalid on 2020/01/21 09:46
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (5) kvm 1 1233d 1233d 0/26 auto-closed as invalid on 2021/01/12 10:00

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end

write to 0xffffc900011aa1b8 of 8 bytes by task 11893 on cpu 1:
 kvm_mmu_notifier_invalidate_range_end+0x58/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:516
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_end include/linux/mmu_notifier.h:479 [inline]
 try_to_unmap_one+0x12ac/0x1670 mm/rmap.c:1715
 rmap_walk_file+0x260/0x4f0 mm/rmap.c:1927
 try_to_unmap+0x20a/0x310 mm/rmap.c:1956
 shrink_page_list+0xdb6/0x24d0 mm/vmscan.c:1305
 reclaim_pages+0x40c/0x540 mm/vmscan.c:2156
 madvise_cold_or_pageout_pte_range+0xc13/0x1250 mm/madvise.c:473
 walk_pmd_range mm/pagewalk.c:89 [inline]
 walk_pud_range mm/pagewalk.c:160 [inline]
 walk_p4d_range mm/pagewalk.c:193 [inline]
 walk_pgd_range mm/pagewalk.c:229 [inline]
 __walk_page_range+0xa61/0x13e0 mm/pagewalk.c:331
 walk_page_range+0x111/0x2e0 mm/pagewalk.c:427
 madvise_vma mm/madvise.c:520 [inline]
 do_madvise+0x61e/0xdc0 mm/madvise.c:1132
 __do_sys_madvise mm/madvise.c:1158 [inline]
 __se_sys_madvise mm/madvise.c:1156 [inline]
 __x64_sys_madvise+0x5d/0x70 mm/madvise.c:1156
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffffc900011aa1b8 of 8 bytes by task 11914 on cpu 0:
 kvm_mmu_notifier_invalidate_range_end+0x6c/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:519
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_end include/linux/mmu_notifier.h:479 [inline]
 try_to_unmap_one+0x12ac/0x1670 mm/rmap.c:1715
 rmap_walk_file+0x260/0x4f0 mm/rmap.c:1927
 try_to_unmap+0x20a/0x310 mm/rmap.c:1956
 __unmap_and_move+0x371/0x690 mm/migrate.c:1122
 unmap_and_move+0x131/0x690 mm/migrate.c:1194
 migrate_pages+0x2f7/0xfa0 mm/migrate.c:1466
 compact_zone+0x1596/0x1d60 mm/compaction.c:2358
 compact_node+0xe4/0x1e0 mm/compaction.c:2634
 compact_nodes mm/compaction.c:2650 [inline]
 sysctl_compaction_handler+0x47/0x90 mm/compaction.c:2671
 proc_sys_call_handler+0x3d3/0x520 fs/proc/proc_sysctl.c:591
 proc_sys_write+0x1e/0x30 fs/proc/proc_sysctl.c:617
 call_write_iter include/linux/fs.h:1901 [inline]
 new_sync_write fs/read_write.c:518 [inline]
 vfs_write+0x6f0/0x7e0 fs/read_write.c:605
 ksys_write+0xce/0x180 fs/read_write.c:658
 __do_sys_write fs/read_write.c:670 [inline]
 __se_sys_write fs/read_write.c:667 [inline]
 __x64_sys_write+0x3e/0x50 fs/read_write.c:667
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 11914 Comm: syz-executor.5 Not tainted 5.11.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/14 16:24 upstream 358feceebbf6 98682e5e .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end
2021/01/28 16:57 upstream 76c057c84d28 eefc07f2 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end
2021/01/23 23:43 upstream e1ae4b0be158 52e37319 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end
2021/01/16 06:56 upstream 1d94330a437a 65a7a854 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.