================================================================== BUG: KCSAN: data-race in virtqueue_disable_cb / vring_interrupt write to 0xffff888103222252 of 1 bytes by interrupt on cpu 1: vring_interrupt+0x128/0x170 drivers/virtio/virtio_ring.c:2497 __handle_irq_event_percpu+0x91/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x64/0xf0 kernel/irq/handle.c:210 handle_edge_irq+0x167/0x590 kernel/irq/chip.c:819 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq arch/x86/kernel/irq.c:231 [inline] __common_interrupt+0x3c/0xb0 arch/x86/kernel/irq.c:250 common_interrupt+0x7a/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] acpi_safe_halt+0x20/0x30 drivers/acpi/processor_idle.c:112 acpi_idle_do_entry+0x19/0x30 drivers/acpi/processor_idle.c:573 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:711 cpuidle_enter_state+0xc6/0x260 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x40/0x60 drivers/cpuidle/cpuidle.c:388 call_cpuidle kernel/sched/idle.c:134 [inline] cpuidle_idle_call kernel/sched/idle.c:215 [inline] do_idle+0x194/0x230 kernel/sched/idle.c:282 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379 start_secondary+0x7c/0x80 arch/x86/kernel/smpboot.c:269 secondary_startup_64_no_verify+0xf5/0xfb read to 0xffff888103222252 of 1 bytes by interrupt on cpu 0: virtqueue_disable_cb_split drivers/virtio/virtio_ring.c:862 [inline] virtqueue_disable_cb+0x92/0x180 drivers/virtio/virtio_ring.c:2352 start_xmit+0xf0/0xae0 drivers/net/virtio_net.c:2038 __netdev_start_xmit include/linux/netdevice.h:4915 [inline] netdev_start_xmit include/linux/netdevice.h:4929 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x11b/0x3f0 net/core/dev.c:3594 sch_direct_xmit+0x1b0/0x570 net/sched/sch_generic.c:342 __dev_xmit_skb net/core/dev.c:3805 [inline] __dev_queue_xmit+0xe5f/0x1d10 net/core/dev.c:4210 dev_queue_xmit include/linux/netdevice.h:3085 [inline] neigh_hh_output include/net/neighbour.h:528 [inline] neigh_output include/net/neighbour.h:542 [inline] ip_finish_output2+0x700/0x840 net/ipv4/ip_output.c:229 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:292 [inline] ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:431 dst_output include/net/dst.h:458 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] __ip_queue_xmit+0xa4d/0xa70 net/ipv4/ip_output.c:533 ip_queue_xmit+0x38/0x40 net/ipv4/ip_output.c:547 __tcp_transmit_skb+0x1194/0x16e0 net/ipv4/tcp_output.c:1399 __tcp_send_ack+0x1de/0x2d0 net/ipv4/tcp_output.c:3983 tcp_send_ack+0x27/0x30 net/ipv4/tcp_output.c:3989 __tcp_ack_snd_check+0x2d5/0x500 net/ipv4/tcp_input.c:5536 tcp_ack_snd_check net/ipv4/tcp_input.c:5582 [inline] tcp_rcv_established+0x6ac/0xea0 net/ipv4/tcp_input.c:6022 tcp_v4_do_rcv+0x2d4/0x630 net/ipv4/tcp_ipv4.c:1722 tcp_v4_rcv+0x1913/0x1b70 net/ipv4/tcp_ipv4.c:2144 ip_protocol_deliver_rcu+0x356/0x6d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x13c/0x1a0 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:303 [inline] ip_local_deliver+0xec/0x1c0 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:468 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:630 [inline] ip_sublist_rcv+0x4e1/0x5b0 net/ipv4/ip_input.c:638 ip_list_rcv+0x25e/0x290 net/ipv4/ip_input.c:673 __netif_receive_skb_list_ptype net/core/dev.c:5534 [inline] __netif_receive_skb_list_core+0x356/0x460 net/core/dev.c:5582 __netif_receive_skb_list net/core/dev.c:5634 [inline] netif_receive_skb_list_internal+0x4e6/0x660 net/core/dev.c:5725 gro_normal_list include/net/gro.h:433 [inline] napi_complete_done+0x1cb/0x450 net/core/dev.c:6065 virtqueue_napi_complete drivers/net/virtio_net.c:406 [inline] virtnet_poll+0x763/0xab0 drivers/net/virtio_net.c:1856 __napi_poll+0x60/0x3b0 net/core/dev.c:6496 napi_poll net/core/dev.c:6563 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6696 __do_softirq+0xc1/0x265 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x57/0xa0 kernel/softirq.c:650 common_interrupt+0x7f/0x90 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] acpi_safe_halt+0x20/0x30 drivers/acpi/processor_idle.c:112 acpi_idle_do_entry+0x19/0x30 drivers/acpi/processor_idle.c:573 acpi_idle_enter+0x96/0xb0 drivers/acpi/processor_idle.c:711 cpuidle_enter_state+0xc6/0x260 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x40/0x60 drivers/cpuidle/cpuidle.c:388 call_cpuidle kernel/sched/idle.c:134 [inline] cpuidle_idle_call kernel/sched/idle.c:215 [inline] do_idle+0x194/0x230 kernel/sched/idle.c:282 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379 rest_init+0xf3/0x100 init/main.c:735 arch_call_rest_init+0x9/0x10 init/main.c:834 start_kernel+0x582/0x5e0 init/main.c:1088 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:556 x86_64_start_kernel+0x94/0xa0 arch/x86/kernel/head64.c:537 secondary_startup_64_no_verify+0xf5/0xfb value changed: 0x00 -> 0x01 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc3-syzkaller-00017-g9d646009f65d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 ==================================================================