syzbot


KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (4)

Status: auto-closed as invalid on 2020/11/01 19:43
Subsystems: kvm
[Documentation on labels]
First crash: 1339d, last: 1305d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (2) kvm 8 1422d 1550d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (3) kvm 1 1399d 1399d 0/26 auto-closed as invalid on 2020/07/30 20:33
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (6) kvm 4 1165d 1194d 0/26 auto-closed as invalid on 2021/03/21 16:27
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (7) kvm 1 1112d 1112d 0/26 auto-closed as invalid on 2021/05/17 10:12
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end kvm 2 1625d 1626d 0/26 auto-closed as invalid on 2020/01/21 09:46
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (5) kvm 1 1233d 1233d 0/26 auto-closed as invalid on 2021/01/12 10:00

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end

write to 0xffffc90003308190 of 8 bytes by task 459 on cpu 0:
 kvm_mmu_notifier_invalidate_range_end+0x58/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:516
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:486 [inline]
 wp_page_copy+0x9c3/0x1710 mm/memory.c:2791
 do_wp_page+0x4c6/0x740 arch/x86/include/asm/atomic.h:95
 handle_pte_fault mm/memory.c:4241 [inline]
 __handle_mm_fault mm/memory.c:4358 [inline]
 handle_mm_fault+0x1899/0x1af0 mm/memory.c:4456
 do_user_addr_fault+0x380/0x770 arch/x86/mm/fault.c:1372
 handle_page_fault arch/x86/mm/fault.c:1429 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1482
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538

read to 0xffffc90003308190 of 8 bytes by task 473 on cpu 1:
 kvm_mmu_notifier_invalidate_range_end+0x6c/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:519
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:486 [inline]
 wp_page_copy+0x9c3/0x1710 mm/memory.c:2791
 do_wp_page+0x4c6/0x740 arch/x86/include/asm/atomic.h:95
 handle_pte_fault mm/memory.c:4241 [inline]
 __handle_mm_fault mm/memory.c:4358 [inline]
 handle_mm_fault+0x1899/0x1af0 mm/memory.c:4456
 do_user_addr_fault+0x380/0x770 arch/x86/mm/fault.c:1372
 handle_page_fault arch/x86/mm/fault.c:1429 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1482
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 473 Comm: syz-executor.4 Not tainted 5.9.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/27 19:36 upstream a1bffa48745a 5dd8aee8 .config console log report info ci2-upstream-kcsan-gce
2020/09/16 19:19 upstream fc4f28bb3daf 77507d02 .config console log report info ci2-upstream-kcsan-gce
2020/08/24 14:33 upstream d012a7190fc1 67b599d1 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.