On 06.02.20 11:08, David Hildenbrand wrote: > >>>> >>>> switch (mop->op) { >>>> case KVM_S390_MEMOP_LOGICAL_READ: >>>> + if (kvm_s390_pv_is_protected(vcpu->kvm)) { >>>> + r = -EINVAL; >>>> + break; >>>> + } >>> >>> Race with PV_VM_DESTROY (freeing sidad) >> >> As I said in my other mail, the sida is freed in PV_CPU_DESTROY and this ioctl is locked against MEMOP. >> > > Missed that, thanks! will add a comment. (and also use your checks as we only need 2 )