================================================================== BUG: KCSAN: data-race in add_input_randomness / add_input_randomness write to 0xffffffff89812bb4 of 1 bytes by interrupt on cpu 0: add_input_randomness+0x66/0x2a0 drivers/char/random.c:1210 input_handle_event+0x6b7/0xd50 drivers/input/input.c:378 input_event+0x7d/0xa0 drivers/input/input.c:446 hidinput_hid_event+0xb4b/0xcd0 drivers/hid/hid-input.c:1403 hid_process_event+0x2f3/0x3c0 drivers/hid/hid-core.c:1519 hid_input_field drivers/hid/hid-core.c:1563 [inline] hid_report_raw_event+0x8b4/0xbd0 drivers/hid/hid-core.c:1783 hid_input_report+0x2c9/0x330 drivers/hid/hid-core.c:1850 hid_irq_in+0x2cb/0x3d0 drivers/hid/usbhid/hid-core.c:284 __usb_hcd_giveback_urb+0x244/0x2e0 drivers/usb/core/hcd.c:1656 usb_hcd_giveback_urb+0xae/0x200 drivers/usb/core/hcd.c:1726 dummy_timer+0x513/0x24a0 drivers/usb/gadget/udc/dummy_hcd.c:1971 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1417 expire_timers+0x116/0x260 kernel/time/timer.c:1462 __run_timers+0x358/0x3f0 kernel/time/timer.c:1731 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1744 __do_softirq+0x13c/0x2c3 kernel/softirq.c:343 asm_call_irq_on_stack+0xf/0x20 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] do_softirq_own_stack+0x32/0x40 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:226 [inline] __irq_exit_rcu+0xb4/0xc0 kernel/softirq.c:420 sysvec_apic_timer_interrupt+0x74/0x90 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 read to 0xffffffff89812bb4 of 1 bytes by interrupt on cpu 1: add_input_randomness+0x35/0x2a0 drivers/char/random.c:1207 input_handle_event+0x6b7/0xd50 drivers/input/input.c:378 input_event+0x7d/0xa0 drivers/input/input.c:446 hidinput_hid_event+0xb4b/0xcd0 drivers/hid/hid-input.c:1403 hid_process_event+0x2f3/0x3c0 drivers/hid/hid-core.c:1519 hid_input_field drivers/hid/hid-core.c:1563 [inline] hid_report_raw_event+0x8b4/0xbd0 drivers/hid/hid-core.c:1783 hid_input_report+0x2c9/0x330 drivers/hid/hid-core.c:1850 hid_irq_in+0x2cb/0x3d0 drivers/hid/usbhid/hid-core.c:284 __usb_hcd_giveback_urb+0x244/0x2e0 drivers/usb/core/hcd.c:1656 usb_hcd_giveback_urb+0xae/0x200 drivers/usb/core/hcd.c:1726 dummy_timer+0x513/0x24a0 drivers/usb/gadget/udc/dummy_hcd.c:1971 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1417 expire_timers+0x116/0x260 kernel/time/timer.c:1462 __run_timers+0x358/0x3f0 kernel/time/timer.c:1731 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1744 __do_softirq+0x13c/0x2c3 kernel/softirq.c:343 asm_call_irq_on_stack+0xf/0x20 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] do_softirq_own_stack+0x32/0x40 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:226 [inline] __irq_exit_rcu+0xb4/0xc0 kernel/softirq.c:420 sysvec_apic_timer_interrupt+0x74/0x90 arch/x86/kernel/apic/apic.c:1100 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635 arch_atomic_dec_and_test arch/x86/include/asm/atomic.h:123 [inline] atomic_dec_and_test include/asm-generic/atomic-instrumented.h:749 [inline] page_ref_dec_and_test include/linux/page_ref.h:148 [inline] put_page_testzero include/linux/mm.h:724 [inline] release_pages+0x1b7/0xa80 mm/swap.c:901 free_pages_and_swap_cache+0x1db/0x1f0 mm/swap_state.c:355 tlb_batch_pages_flush mm/mmu_gather.c:49 [inline] tlb_flush_mmu_free mm/mmu_gather.c:242 [inline] tlb_flush_mmu+0x597/0x5f0 mm/mmu_gather.c:249 zap_pte_range+0x1168/0x13e0 mm/memory.c:1330 zap_pmd_range mm/memory.c:1368 [inline] zap_pud_range mm/memory.c:1397 [inline] zap_p4d_range mm/memory.c:1418 [inline] unmap_page_range+0x560/0x660 mm/memory.c:1439 unmap_single_vma+0x157/0x210 mm/memory.c:1484 unmap_vmas+0xbf/0x150 mm/memory.c:1516 exit_mmap+0x1c7/0x400 mm/mmap.c:3220 __mmput+0xa2/0x220 kernel/fork.c:1082 mmput+0x38/0x40 kernel/fork.c:1103 exit_mm+0x33f/0x430 kernel/exit.c:501 do_exit+0x41f/0x1690 kernel/exit.c:812 do_group_exit+0xce/0x180 kernel/exit.c:922 get_signal+0xdce/0x14e0 kernel/signal.c:2773 arch_do_signal_or_restart+0x2a/0x270 arch/x86/kernel/signal.c:811 handle_signal_work kernel/entry/common.c:147 [inline] exit_to_user_mode_loop kernel/entry/common.c:171 [inline] exit_to_user_mode_prepare+0x11a/0x1b0 kernel/entry/common.c:201 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline] syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:294 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56 entry_SYSCALL_64_after_hwframe+0x44/0xae Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 7200 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ==================================================================