KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range

KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (3)
Status: auto-closed as invalid on 2020/08/31 17:17
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 407d, last: 369d

similar bugs (4):
Kernel	Title	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (2)	5	433d	540d	0/22	closed as invalid on 2020/06/18 14:24
upstream	KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start	7	616d	645d	0/22	auto-closed as invalid on 2020/02/01 21:57
upstream	KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (4)	1	334d	334d	0/22	auto-closed as invalid on 2020/10/06 00:28
upstream	KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start (5)	17	108d	236d	0/22	auto-closed as invalid on 2021/05/19 10:43

Sample crash report:

==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_start

write to 0xffffc9001e0ca190 of 8 bytes by task 17270 on cpu 1:
 kvm_mmu_notifier_invalidate_range_start+0x61/0x1c0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:429
 mn_hlist_invalidate_range_start mm/mmu_notifier.c:493 [inline]
 __mmu_notifier_invalidate_range_start+0x23a/0x390 mm/mmu_notifier.c:525
 mmu_notifier_invalidate_range_start include/linux/mmu_notifier.h:447 [inline]
 wp_page_copy+0x2b8/0x1640 mm/memory.c:2687
 do_wp_page+0x9b3/0xd30 arch/x86/include/asm/atomic.h:97
 handle_pte_fault mm/memory.c:4243 [inline]
 __handle_mm_fault mm/memory.c:4357 [inline]
 handle_mm_fault+0x16f5/0x1930 mm/memory.c:4394
 do_user_addr_fault+0x393/0x810 arch/x86/mm/fault.c:1295
 handle_page_fault arch/x86/mm/fault.c:1365 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1418
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:542

read to 0xffffc9001e0ca190 of 8 bytes by task 17260 on cpu 0:
 kvm_mmu_notifier_invalidate_range_end+0x6c/0xa0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:463
 mn_hlist_invalidate_end mm/mmu_notifier.c:560 [inline]
 __mmu_notifier_invalidate_range_end+0x18e/0x210 mm/mmu_notifier.c:580
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:480 [inline]
 wp_page_copy+0x9bd/0x1640 mm/memory.c:2764
 do_wp_page+0x9b3/0xd30 arch/x86/include/asm/atomic.h:97
 handle_pte_fault mm/memory.c:4243 [inline]
 __handle_mm_fault mm/memory.c:4357 [inline]
 handle_mm_fault+0x16f5/0x1930 mm/memory.c:4394
 do_user_addr_fault+0x393/0x810 arch/x86/mm/fault.c:1295
 handle_page_fault arch/x86/mm/fault.c:1365 [inline]
 exc_page_fault+0xb8/0x330 arch/x86/mm/fault.c:1418
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:542

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 17260 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report
ci2-upstream-kcsan-gce	2020/07/27 17:13	upstream	92ed30191993	cb93dc6a	.config	log	report
ci2-upstream-kcsan-gce	2020/07/09 21:34	upstream	2a89b99f5803	edf162e8	.config	log	report
ci2-upstream-kcsan-gce	2020/07/02 17:18	upstream	cd77006e01b3	f30c14bf	.config	log	report
ci2-upstream-kcsan-gce	2020/06/19 02:31	upstream	5e857ce6eae7	bc258b50	.config	log	report