================================================================== BUG: KCSAN: data-race in detach_buf_split / virtqueue_add read to 0xffff88810221fe2c of 4 bytes by task 21748 on cpu 0: virtqueue_add_split drivers/virtio/virtio_ring.c:575 [inline] virtqueue_add+0x75a/0x20e0 drivers/virtio/virtio_ring.c:2133 virtqueue_add_inbuf+0x53/0x80 drivers/virtio/virtio_ring.c:2212 request_entropy drivers/char/hw_random/virtio-rng.c:61 [inline] copy_data drivers/char/hw_random/virtio-rng.c:74 [inline] virtio_read+0x1c5/0x3f0 drivers/char/hw_random/virtio-rng.c:92 rng_get_data drivers/char/hw_random/core.c:197 [inline] rng_dev_read+0x1a7/0x5e0 drivers/char/hw_random/core.c:234 vfs_read+0x19e/0x580 fs/read_write.c:468 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read-write to 0xffff88810221fe2c of 4 bytes by interrupt on cpu 1: detach_buf_split+0x316/0x570 drivers/virtio/virtio_ring.c:760 virtqueue_get_buf_ctx_split drivers/virtio/virtio_ring.c:835 [inline] virtqueue_get_buf_ctx+0x3c2/0x5b0 drivers/virtio/virtio_ring.c:2327 virtqueue_get_buf+0x1f/0x30 drivers/virtio/virtio_ring.c:2333 random_recv_done+0x4c/0x90 drivers/char/hw_random/virtio-rng.c:42 vring_interrupt+0x150/0x170 drivers/virtio/virtio_ring.c:2501 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 __crc32c_le_base+0xb/0x520 lib/crc32.c:200 chksum_update+0x32/0x50 crypto/crc32c_generic.c:88 crypto_shash_update+0x136/0x1a0 crypto/shash.c:134 ext4_chksum fs/ext4/ext4.h:2399 [inline] ext4_inode_csum+0x153/0x4b0 fs/ext4/inode.c:62 ext4_inode_csum_set fs/ext4/inode.c:115 [inline] ext4_fill_raw_inode+0xd22/0xe60 fs/ext4/inode.c:4329 ext4_do_update_inode fs/ext4/inode.c:5083 [inline] ext4_mark_iloc_dirty+0x2e9/0xe10 fs/ext4/inode.c:5715 __ext4_mark_inode_dirty+0x314/0x440 fs/ext4/inode.c:5919 ext4_evict_inode+0xaf0/0xdc0 fs/ext4/inode.c:299 evict+0x1aa/0x410 fs/inode.c:665 iput_final fs/inode.c:1747 [inline] iput+0x42c/0x5b0 fs/inode.c:1773 do_unlinkat+0x2b9/0x4f0 fs/namei.c:4400 __do_sys_unlink fs/namei.c:4441 [inline] __se_sys_unlink fs/namei.c:4439 [inline] __x64_sys_unlink+0x30/0x40 fs/namei.c:4439 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x000000ff -> 0x000000fe Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3082 Comm: syz-executor.2 Not tainted 6.4.0-rc6-syzkaller-00026-gfb054096aea0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 ================================================================== ================================================================== BUG: KCSAN: data-race in detach_buf_split / virtqueue_add read to 0xffff88810221fe48 of 4 bytes by task 21775 on cpu 0: virtqueue_add_split drivers/virtio/virtio_ring.c:553 [inline] virtqueue_add+0x4b3/0x20e0 drivers/virtio/virtio_ring.c:2133 virtqueue_add_inbuf+0x53/0x80 drivers/virtio/virtio_ring.c:2212 request_entropy drivers/char/hw_random/virtio-rng.c:61 [inline] copy_data drivers/char/hw_random/virtio-rng.c:74 [inline] virtio_read+0x1c5/0x3f0 drivers/char/hw_random/virtio-rng.c:92 rng_get_data drivers/char/hw_random/core.c:197 [inline] rng_dev_read+0x1a7/0x5e0 drivers/char/hw_random/core.c:234 vfs_read+0x19e/0x580 fs/read_write.c:468 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read-write to 0xffff88810221fe48 of 4 bytes by interrupt on cpu 1: detach_buf_split+0x2fc/0x570 drivers/virtio/virtio_ring.c:757 virtqueue_get_buf_ctx_split drivers/virtio/virtio_ring.c:835 [inline] virtqueue_get_buf_ctx+0x3c2/0x5b0 drivers/virtio/virtio_ring.c:2327 virtqueue_get_buf+0x1f/0x30 drivers/virtio/virtio_ring.c:2333 random_recv_done+0x4c/0x90 drivers/char/hw_random/virtio-rng.c:42 vring_interrupt+0x150/0x170 drivers/virtio/virtio_ring.c:2501 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 __sanitizer_cov_trace_pc+0x0/0x60 ptep_get_and_clear_full arch/x86/include/asm/pgtable.h:1085 [inline] zap_pte_range mm/memory.c:1413 [inline] zap_pmd_range mm/memory.c:1563 [inline] zap_pud_range mm/memory.c:1592 [inline] zap_p4d_range mm/memory.c:1613 [inline] unmap_page_range+0x7a4/0x1e60 mm/memory.c:1634 unmap_single_vma+0x142/0x1d0 mm/memory.c:1680 unmap_vmas+0x157/0x200 mm/memory.c:1719 exit_mmap+0x15b/0x5e0 mm/mmap.c:3111 __mmput+0x28/0x1c0 kernel/fork.c:1351 mmput+0x49/0x60 kernel/fork.c:1373 exit_mm+0xe4/0x180 kernel/exit.c:567 do_exit+0x580/0x1670 kernel/exit.c:861 do_group_exit+0x101/0x150 kernel/exit.c:1024 get_signal+0xeb7/0xff0 kernel/signal.c:2876 arch_do_signal_or_restart+0x89/0x2a0 arch/x86/kernel/signal.c:306 exit_to_user_mode_loop+0x6f/0xe0 kernel/entry/common.c:168 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:297 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x00000001 -> 0x00000002 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 21785 Comm: syz-executor.2 Not tainted 6.4.0-rc6-syzkaller-00026-gfb054096aea0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 ==================================================================