From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pj1-f71.google.com (mail-pj1-f71.google.com [209.85.216.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E2BEF42FCBB for ; Mon, 27 Jul 2026 17:25:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.216.71 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785173137; cv=none; b=ptxCVixkKGtqIIVLGKd50YXKGeJBEVZ0dTTGtdCodihwChr4yhJzwVxDLJjahp8L73AY8MoJkB4XZSQK1erkDgLII5uW0Q39HSkoQS01MlNN44Fs+yeOMO/9FxoRkIV9C1QRWN7/+80SMmzSPPazkdued2qUjjbZFilLp/2Gro0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785173137; c=relaxed/simple; bh=YNik/2kAFKnD2XU6/6tGAxyI6N2IY7/nfpf7BnctEv8=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=LXd5FAi0xCb4eLoAspP8kHgMyUn5Ige8pU1asD5+rNS0zwzfWtxXzE8oARxAnvDai4zFjE8ImbgTW891qrXRltNckdATOEvAtReq0egvMnrQJBc0DvQvR7CM1adcf+iDwAWeAewU69KoTe1e2G7WL+Uz7kcD5PO881VjT8qDPG4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=ILyGdY/V; arc=none smtp.client-ip=209.85.216.71 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="ILyGdY/V" Received: by mail-pj1-f71.google.com with SMTP id 98e67ed59e1d1-3811279d51aso5450528a91.1 for ; Mon, 27 Jul 2026 10:25:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1785173131; x=1785777931; darn=vger.kernel.org; h=content-type:cc:to:from:subject:message-id:references:mime-version :in-reply-to:date:from:to:cc:subject:date:message-id:reply-to :content-type; bh=PpatV9FqL7ZNUKotJnKpSjIDLMSpQzbVaOxRBxvStwM=; b=ILyGdY/V127AABJT21rGnEMkgYvfJBeC7mvMAJpGPbYc9nXYgaqdpJkbuUpc/oAHn2 Ex2cY6CHr2mp4oZWaQK7m6djFD/8fsJWtDyT3tChLBPZ7IHzV4kz1sM3bxl9jC1u10jZ 5s6JxYUcE/eHWlQ29e9vTqfs+y6wUtali2ttcnTpeCLSdKTJOfkAMvlv1/244J4UZGTW OcY4pRGo6UlKjUx64vJXoqdRBgW/C327T7f6RhisQtAFz38XKo8blIp/MmZc9AoH3Z8Z 4iwoHN6TWxxc2iRDBcGrTv+IBv1eTGfd4/2hkXLxWgSlgQwgAeHe4ShQHfFtNr2FD/uO 5sRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785173131; x=1785777931; h=content-type:cc:to:from:subject:message-id:references:mime-version :in-reply-to:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=PpatV9FqL7ZNUKotJnKpSjIDLMSpQzbVaOxRBxvStwM=; b=gCmS90xZvmirvDg+kjJw4blAwIi/KBQXyWtguaz5WTVpBuyAdoVN5ZcmyhHsu6OzpS x9PYixyttMBjV2aTdgIZ6/xLbTFinkERe13MH5w1JAWwpyWiSOo59kY1L0xDN3kMLwjq BUX/nBTkCsSBycJyfpqax/P9QtrlT3C1K6Hb8koE8LGm+Wbzh0A803MlnHjR/MpUNE8P Bzt6X45Iagh+vaJB5kKL2AvPO8cYXzHTv9bC5xf5sOcH/gtz1vOhNvN1cYRV2p5tbvUe rcUqmhDOaywwzRZANDkLSjwmCUB0oXoRhK2/kYF0to7pYBdOYIm7lfskf19X8f/JEblt EhbQ== X-Forwarded-Encrypted: i=1; AHgh+Rpi372MzmWDhOHNCU+4MBbhkCxjx98KSDtHsy8aCdsQ0QwdKse7am+beajjxX0ISGN8Un1yr3XIUtZ7sjE=@vger.kernel.org X-Gm-Message-State: AOJu0YwJR1AtYlWA4oMQ4sl3S6TxI6Jo5F6wYI1KpAF3VpE1OEsDIPoB eu/TK4jL3+Mdk+H5/C88kdu0wstbe0NUIR73BTk7mn5rkHEOk2sDDas7+Fc9NRH7ZIDNtzsi56W CEtJPGA== X-Received: from pjbqx13.prod.google.com ([2002:a17:90b:3e4d:b0:383:7b51:b1cd]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a17:90b:3904:b0:38e:6f90:eabd with SMTP id 98e67ed59e1d1-38f293cf251mr8744135a91.5.1785173130813; Mon, 27 Jul 2026 10:25:30 -0700 (PDT) Date: Mon, 27 Jul 2026 10:25:30 -0700 In-Reply-To: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20260520111325.693807-1-aha310510@gmail.com> Message-ID: Subject: Re: [PATCH] KVM: pfncache: track HVA invalidations for HVA-based caches From: Sean Christopherson To: Jeongjun Park Cc: Paolo Bonzini , David Woodhouse , Paul Durrant , kvm@vger.kernel.org, linux-kernel@vger.kernel.org, syzbot+0948c82180d475ad24e2@syzkaller.appspotmail.com Content-Type: text/plain; charset="us-ascii" On Mon, Jul 27, 2026, Jeongjun Park wrote: > Hi, > > Sean Christopherson wrote: > > > > On Wed, May 20, 2026, Jeongjun Park wrote: > > > HVA-based gfn_to_pfn caches are not necessarily backed by a KVM memslot. > > > When an MMU notifier invalidation targets such an HVA, KVM's global > [....] > > > > > > Reported-by: syzbot+0948c82180d475ad24e2@syzkaller.appspotmail.com > > > Closes: https://lore.kernel.org/all/6a0c5f2c.a00a0220.2c7954.0000.GAE@google.com > > > > Given that there's no reproducer, how did you test this? > > > > For some unknown reason, repro was not generated in syzbot, so I analyzed > the KASAN logs separately to predict a sequence similar to the race > sequence you suggested, and then wrote the repro code myself to test it. Can you provide the reproducer? That would be super helpful for reviewing and iterating on this fix, and probably as a regression test for future changes as well. Thanks!