================================================================== BUG: KCSAN: data-race in detach_buf_split / virtqueue_add read to 0xffff888101f13c48 of 4 bytes by task 6168 on cpu 0: virtqueue_add_split drivers/virtio/virtio_ring.c:553 [inline] virtqueue_add+0x4b3/0x20e0 drivers/virtio/virtio_ring.c:2133 virtqueue_add_inbuf+0x53/0x80 drivers/virtio/virtio_ring.c:2212 request_entropy drivers/char/hw_random/virtio-rng.c:61 [inline] copy_data drivers/char/hw_random/virtio-rng.c:74 [inline] virtio_read+0x1c5/0x3f0 drivers/char/hw_random/virtio-rng.c:92 rng_get_data drivers/char/hw_random/core.c:197 [inline] rng_dev_read+0x1a7/0x5e0 drivers/char/hw_random/core.c:234 vfs_read+0x19e/0x580 fs/read_write.c:468 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read-write to 0xffff888101f13c48 of 4 bytes by interrupt on cpu 1: detach_buf_split+0x2fc/0x570 drivers/virtio/virtio_ring.c:757 virtqueue_get_buf_ctx_split drivers/virtio/virtio_ring.c:835 [inline] virtqueue_get_buf_ctx+0x3c2/0x5b0 drivers/virtio/virtio_ring.c:2327 virtqueue_get_buf+0x1f/0x30 drivers/virtio/virtio_ring.c:2333 random_recv_done+0x4c/0x90 drivers/char/hw_random/virtio-rng.c:42 vring_interrupt+0x150/0x170 drivers/virtio/virtio_ring.c:2501 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 memset_orig+0x42/0xac arch/x86/lib/memset_64.S:70 slab_post_alloc_hook+0x75/0x2d0 mm/slab.h:713 slab_alloc_node mm/slab.c:3256 [inline] slab_alloc mm/slab.c:3265 [inline] __kmem_cache_alloc_lru mm/slab.c:3442 [inline] kmem_cache_alloc+0x17b/0x260 mm/slab.c:3451 getname_flags+0x85/0x360 fs/namei.c:140 __se_sys_unlinkat fs/namei.c:4429 [inline] __x64_sys_unlinkat+0x77/0xb0 fs/namei.c:4429 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x00000001 -> 0x00000002 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3066 Comm: syz-executor.0 Not tainted 6.4.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 ================================================================== ================================================================== BUG: KCSAN: data-race in detach_buf_split / virtqueue_add read to 0xffff888101f13c2c of 4 bytes by task 6168 on cpu 0: virtqueue_add_split drivers/virtio/virtio_ring.c:575 [inline] virtqueue_add+0x75a/0x20e0 drivers/virtio/virtio_ring.c:2133 virtqueue_add_inbuf+0x53/0x80 drivers/virtio/virtio_ring.c:2212 request_entropy drivers/char/hw_random/virtio-rng.c:61 [inline] copy_data drivers/char/hw_random/virtio-rng.c:74 [inline] virtio_read+0x1c5/0x3f0 drivers/char/hw_random/virtio-rng.c:92 rng_get_data drivers/char/hw_random/core.c:197 [inline] rng_dev_read+0x1a7/0x5e0 drivers/char/hw_random/core.c:234 vfs_read+0x19e/0x580 fs/read_write.c:468 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read-write to 0xffff888101f13c2c of 4 bytes by interrupt on cpu 1: detach_buf_split+0x316/0x570 drivers/virtio/virtio_ring.c:760 virtqueue_get_buf_ctx_split drivers/virtio/virtio_ring.c:835 [inline] virtqueue_get_buf_ctx+0x3c2/0x5b0 drivers/virtio/virtio_ring.c:2327 virtqueue_get_buf+0x1f/0x30 drivers/virtio/virtio_ring.c:2333 random_recv_done+0x4c/0x90 drivers/char/hw_random/virtio-rng.c:42 vring_interrupt+0x150/0x170 drivers/virtio/virtio_ring.c:2501 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 jbd2_write_access_granted fs/jbd2/transaction.c:1214 [inline] jbd2_journal_get_write_access+0x195/0x1c0 fs/jbd2/transaction.c:1243 __ext4_journal_get_write_access+0x176/0x450 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x14e/0x200 fs/ext4/inode.c:5737 __ext4_mark_inode_dirty+0x8e/0x440 fs/ext4/inode.c:5911 ext4_ext_truncate+0x58/0x1a0 fs/ext4/extents.c:4400 ext4_truncate+0x76f/0xb30 fs/ext4/inode.c:4153 ext4_evict_inode+0x8b3/0xdc0 fs/ext4/inode.c:258 evict+0x1aa/0x410 fs/inode.c:665 iput_final fs/inode.c:1747 [inline] iput+0x42c/0x5b0 fs/inode.c:1773 d_delete_notify include/linux/fsnotify.h:261 [inline] vfs_rmdir+0x274/0x2f0 fs/namei.c:4211 do_rmdir+0x194/0x310 fs/namei.c:4257 __do_sys_unlinkat fs/namei.c:4435 [inline] __se_sys_unlinkat fs/namei.c:4429 [inline] __x64_sys_unlinkat+0xa4/0xb0 fs/namei.c:4429 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x000000ff -> 0x000000fe Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3073 Comm: syz-executor.1 Not tainted 6.4.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 ==================================================================