syzbot


KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end

Status: auto-closed as invalid on 2020/01/21 09:46
Subsystems: kvm
[Documentation on labels]
First crash: 1620d, last: 1620d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (2) kvm 8 1417d 1544d 0/26 closed as invalid on 2020/06/18 14:24
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (3) kvm 1 1394d 1394d 0/26 auto-closed as invalid on 2020/07/30 20:33
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (6) kvm 4 1160d 1189d 0/26 auto-closed as invalid on 2021/03/21 16:27
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (4) kvm 3 1300d 1334d 0/26 auto-closed as invalid on 2020/11/01 19:43
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (7) kvm 1 1107d 1107d 0/26 auto-closed as invalid on 2021/05/17 10:12
upstream KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end (5) kvm 1 1228d 1228d 0/26 auto-closed as invalid on 2021/01/12 10:00

Sample crash report:
==================================================================
BUG: KCSAN: data-race in kvm_mmu_notifier_invalidate_range_end / kvm_mmu_notifier_invalidate_range_end

write to 0xffffc9000280a138 of 8 bytes by task 29809 on cpu 0:
 kvm_mmu_notifier_invalidate_range_end+0x67/0xb0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:419
 __mmu_notifier_invalidate_range_end+0x144/0x1e0 mm/mmu_notifier.c:222
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:384 [inline]
 wp_page_copy+0x1023/0x1120 mm/memory.c:2418
 do_wp_page+0x192/0x11f0 mm/memory.c:2628
 handle_pte_fault mm/memory.c:3865 [inline]
 __handle_mm_fault+0x1ab1/0x2c70 mm/memory.c:3973
 handle_mm_fault+0x21b/0x530 mm/memory.c:4010
 do_user_addr_fault arch/x86/mm/fault.c:1441 [inline]
 __do_page_fault+0x3fb/0x9e0 arch/x86/mm/fault.c:1506
 do_page_fault+0x54/0x233 arch/x86/mm/fault.c:1530
 page_fault+0x34/0x40 arch/x86/entry/entry_64.S:1202

read to 0xffffc9000280a138 of 8 bytes by task 29800 on cpu 1:
 kvm_mmu_notifier_invalidate_range_end+0x7b/0xb0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:422
 __mmu_notifier_invalidate_range_end+0x144/0x1e0 mm/mmu_notifier.c:222
 mmu_notifier_invalidate_range_only_end include/linux/mmu_notifier.h:384 [inline]
 wp_page_copy+0x1023/0x1120 mm/memory.c:2418
 do_wp_page+0x192/0x11f0 mm/memory.c:2628
 handle_pte_fault mm/memory.c:3865 [inline]
 __handle_mm_fault+0x1ab1/0x2c70 mm/memory.c:3973
 handle_mm_fault+0x21b/0x530 mm/memory.c:4010
 do_user_addr_fault arch/x86/mm/fault.c:1441 [inline]
 __do_page_fault+0x3fb/0x9e0 arch/x86/mm/fault.c:1506
 do_page_fault+0x54/0x233 arch/x86/mm/fault.c:1530
 page_fault+0x34/0x40 arch/x86/entry/entry_64.S:1202

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 29800 Comm: syz-executor.5 Not tainted 5.4.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/12 09:37 https://github.com/google/ktsan.git kcsan 7f2955e0d056 048f2d49 .config console log report ci2-upstream-kcsan-gce
2019/11/11 21:34 https://github.com/google/ktsan.git kcsan 94c006602e13 377d77fa .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.