syzbot


KCSAN: data-race in kvm_mmu_notifier_change_pte / tdp_page_fault (2)

Status: auto-closed as invalid on 2020/03/26 12:43
Subsystems: kvm-x86
[Documentation on labels]
First crash: 2101d, last: 2051d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kvm_mmu_notifier_change_pte / tdp_page_fault kvm-x86 6 1 2123d 2123d 0/29 closed as invalid on 2019/11/19 13:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_change_pte / tdp_page_fault

read to 0xffffc9000295b150 of 8 bytes by task 30550 on cpu 0:
 tdp_page_fault+0x204/0x570 arch/x86/kvm/mmu/mmu.c:4299
 kvm_mmu_page_fault+0xf9/0xbc0 arch/x86/kvm/mmu/mmu.c:5539
 handle_ept_violation+0x1e5/0x340 arch/x86/kvm/vmx/vmx.c:5163
 vmx_handle_exit+0x1c2/0xdb0 arch/x86/kvm/vmx/vmx.c:5921
 vcpu_enter_guest+0xc25/0x3860 arch/x86/kvm/x86.c:8290
 vcpu_run arch/x86/kvm/x86.c:8354 [inline]
 kvm_arch_vcpu_ioctl_run+0x2a8/0xdf0 arch/x86/kvm/x86.c:8561
 kvm_vcpu_ioctl+0x758/0xa30 arch/x86/kvm/../../../virt/kvm/kvm_main.c:2847
 vfs_ioctl fs/ioctl.c:47 [inline]
 file_ioctl fs/ioctl.c:545 [inline]
 do_vfs_ioctl+0x84f/0xcf0 fs/ioctl.c:732
 ksys_ioctl+0xbd/0xe0 fs/ioctl.c:749
 __do_sys_ioctl fs/ioctl.c:756 [inline]
 __se_sys_ioctl fs/ioctl.c:754 [inline]
 __x64_sys_ioctl+0x4c/0x60 fs/ioctl.c:754
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffffc9000295b150 of 8 bytes by task 30552 on cpu 1:
 kvm_mmu_notifier_change_pte+0x69/0xf0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:394
 __mmu_notifier_change_pte+0xb0/0x140 mm/mmu_notifier.c:417
 mmu_notifier_change_pte include/linux/mmu_notifier.h:429 [inline]
 wp_page_copy+0xf37/0x1040 mm/memory.c:2470
 do_wp_page+0x192/0xeb0 mm/memory.c:2724
 handle_pte_fault mm/memory.c:3961 [inline]
 __handle_mm_fault+0x1d16/0x2e00 mm/memory.c:4075
 handle_mm_fault+0x21b/0x530 mm/memory.c:4112
 do_user_addr_fault arch/x86/mm/fault.c:1441 [inline]
 __do_page_fault+0x456/0x8d0 arch/x86/mm/fault.c:1506
 do_page_fault+0x38/0x194 arch/x86/mm/fault.c:1530
 page_fault+0x34/0x40 arch/x86/entry/entry_64.S:1203

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 30552 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/16 12:42 https://github.com/google/ktsan.git kcsan 245a43005292 3de7aabb .config console log report ci2-upstream-kcsan-gce
2019/11/27 10:13 https://github.com/google/ktsan.git kcsan ef798c30ba4e 1048481f .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.