================================================================== BUG: KCSAN: data-race in detach_buf_split / virtqueue_add read to 0xffff888101a7a72c of 4 bytes by task 27173 on cpu 0: virtqueue_add_split drivers/virtio/virtio_ring.c:575 [inline] virtqueue_add+0x75a/0x20e0 drivers/virtio/virtio_ring.c:2133 virtqueue_add_inbuf+0x53/0x80 drivers/virtio/virtio_ring.c:2212 request_entropy drivers/char/hw_random/virtio-rng.c:61 [inline] copy_data drivers/char/hw_random/virtio-rng.c:74 [inline] virtio_read+0x1c5/0x3f0 drivers/char/hw_random/virtio-rng.c:92 rng_get_data drivers/char/hw_random/core.c:197 [inline] rng_dev_read+0x1a7/0x5e0 drivers/char/hw_random/core.c:234 vfs_read+0x19e/0x580 fs/read_write.c:468 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read-write to 0xffff888101a7a72c of 4 bytes by interrupt on cpu 1: detach_buf_split+0x316/0x570 drivers/virtio/virtio_ring.c:760 virtqueue_get_buf_ctx_split drivers/virtio/virtio_ring.c:835 [inline] virtqueue_get_buf_ctx+0x3c2/0x5b0 drivers/virtio/virtio_ring.c:2327 virtqueue_get_buf+0x1f/0x30 drivers/virtio/virtio_ring.c:2333 random_recv_done+0x4c/0x90 drivers/char/hw_random/virtio-rng.c:42 vring_interrupt+0x150/0x170 drivers/virtio/virtio_ring.c:2501 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 __sanitizer_cov_trace_pc+0x8/0x60 kernel/kcov.c:203 from_kuid+0x27/0x340 kernel/user_namespace.c:428 i_uid_read include/linux/fs.h:1299 [inline] ext4_fill_raw_inode+0x1bc/0xe60 fs/ext4/inode.c:4250 ext4_do_update_inode fs/ext4/inode.c:5083 [inline] ext4_mark_iloc_dirty+0x2e9/0xe10 fs/ext4/inode.c:5715 __ext4_mark_inode_dirty+0x314/0x440 fs/ext4/inode.c:5919 ext4_evict_inode+0x819/0xdc0 fs/ext4/inode.c:251 evict+0x1aa/0x410 fs/inode.c:665 iput_final fs/inode.c:1747 [inline] iput+0x42c/0x5b0 fs/inode.c:1773 do_unlinkat+0x2b9/0x4f0 fs/namei.c:4400 __do_sys_unlink fs/namei.c:4441 [inline] __se_sys_unlink fs/namei.c:4439 [inline] __x64_sys_unlink+0x30/0x40 fs/namei.c:4439 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x000000ff -> 0x000000fe Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3065 Comm: syz-executor.1 Not tainted 6.4.0-rc4-syzkaller-00268-g51f269a6ecc7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 ================================================================== ================================================================== BUG: KCSAN: data-race in detach_buf_split / virtqueue_add read to 0xffff888101a7a748 of 4 bytes by task 27272 on cpu 0: virtqueue_add_split drivers/virtio/virtio_ring.c:553 [inline] virtqueue_add+0x4b3/0x20e0 drivers/virtio/virtio_ring.c:2133 virtqueue_add_inbuf+0x53/0x80 drivers/virtio/virtio_ring.c:2212 request_entropy drivers/char/hw_random/virtio-rng.c:61 [inline] copy_data drivers/char/hw_random/virtio-rng.c:74 [inline] virtio_read+0x1c5/0x3f0 drivers/char/hw_random/virtio-rng.c:92 rng_get_data drivers/char/hw_random/core.c:197 [inline] rng_dev_read+0x1a7/0x5e0 drivers/char/hw_random/core.c:234 vfs_read+0x19e/0x580 fs/read_write.c:468 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read-write to 0xffff888101a7a748 of 4 bytes by interrupt on cpu 1: detach_buf_split+0x2fc/0x570 drivers/virtio/virtio_ring.c:757 virtqueue_get_buf_ctx_split drivers/virtio/virtio_ring.c:835 [inline] virtqueue_get_buf_ctx+0x3c2/0x5b0 drivers/virtio/virtio_ring.c:2327 virtqueue_get_buf+0x1f/0x30 drivers/virtio/virtio_ring.c:2333 random_recv_done+0x4c/0x90 drivers/char/hw_random/virtio-rng.c:42 vring_interrupt+0x150/0x170 drivers/virtio/virtio_ring.c:2501 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] acpi_safe_halt+0x20/0x30 drivers/acpi/processor_idle.c:112 acpi_idle_do_entry+0x19/0x30 drivers/acpi/processor_idle.c:573 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:711 cpuidle_enter_state+0xc6/0x260 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x40/0x60 drivers/cpuidle/cpuidle.c:388 call_cpuidle kernel/sched/idle.c:134 [inline] cpuidle_idle_call kernel/sched/idle.c:215 [inline] do_idle+0x194/0x230 kernel/sched/idle.c:282 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379 start_secondary+0x7c/0x80 arch/x86/kernel/smpboot.c:269 secondary_startup_64_no_verify+0xf5/0xfb value changed: 0x00000000 -> 0x00000002 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.4.0-rc4-syzkaller-00268-g51f269a6ecc7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 ==================================================================