syzbot


KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (3)

Status: auto-closed as invalid on 2020/08/31 17:17
Subsystems: kvm
[Documentation on labels]
First crash: 1405d, last: 1367d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (2) kvm 5 1431d 1538d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start kvm 7 1614d 1643d 0/26 auto-closed as invalid on 2020/02/01 21:57
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (4) kvm 1 1332d 1332d 0/26 auto-closed as invalid on 2020/10/06 00:28
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (5) kvm 17 1106d 1234d 0/26 auto-closed as invalid on 2021/05/19 10:43

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start

write to 0xffffc9001e0ca190 of 8 bytes by task 17270 on cpu 1:
 kvm_mmu_notifier_invalidate_range_start+0x61/0x1c0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:429
 mn_hlist_invalidate_range_start mm/mmu_notifier.c:493 [inline]
 __mmu_notifier_invalidate_range_start+0x23a/0x390 mm/mmu_notifier.c:525
 mmu_notifier_invalidate_range_start include/linux/mmu_notifier.h:447 [inline]
 wp_page_copy+0x2b8/0x1640 mm/memory.c:2687
 do_wp_page+0x9b3/0xd30 arch/x86/include/asm/atomic.h:97
 handle_pte_fault mm/memory.c:4243 [inline]
 __handle_mm_fault mm/memory.c:4357 [inline]
 handle_mm_fault+0x16f5/0x1930 mm/memory.c:4394
 do_user_addr_fault+0x393/0x810 arch/x86/mm/fault.c:1295
 handle_page_fault arch/x86/mm/fault.c:1365 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1418
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:542

read to 0xffffc9001e0ca190 of 8 bytes by task 17260 on cpu 0:
 kvm_mmu_notifier_invalidate_range_end+0x6c/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:463
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:480 [inline]
 wp_page_copy+0x9bd/0x1640 mm/memory.c:2764
 do_wp_page+0x9b3/0xd30 arch/x86/include/asm/atomic.h:97
 handle_pte_fault mm/memory.c:4243 [inline]
 __handle_mm_fault mm/memory.c:4357 [inline]
 handle_mm_fault+0x16f5/0x1930 mm/memory.c:4394
 do_user_addr_fault+0x393/0x810 arch/x86/mm/fault.c:1295
 handle_page_fault arch/x86/mm/fault.c:1365 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1418
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:542

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 17260 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/27 17:13 upstream 92ed30191993 cb93dc6a .config console log report ci2-upstream-kcsan-gce
2020/07/09 21:34 upstream 2a89b99f5803 edf162e8 .config console log report ci2-upstream-kcsan-gce
2020/07/02 17:18 upstream cd77006e01b3 f30c14bf .config console log report ci2-upstream-kcsan-gce
2020/06/19 02:31 upstream 5e857ce6eae7 bc258b50 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.