================================================================== BUG: KCSAN: data-race in __tpacket_v3_has_room / prb_retire_current_block write to 0xffff88809c458008 of 4 bytes by interrupt on cpu 0: prb_flush_block net/packet/af_packet.c:732 [inline] prb_close_block net/packet/af_packet.c:788 [inline] prb_retire_current_block+0x190/0x2f0 net/packet/af_packet.c:929 prb_retire_rx_blk_timer_expired+0x26e/0x290 net/packet/af_packet.c:674 call_timer_fn+0x58/0x2e0 kernel/time/timer.c:1405 expire_timers kernel/time/timer.c:1450 [inline] __run_timers kernel/time/timer.c:1774 [inline] __run_timers kernel/time/timer.c:1741 [inline] run_timer_softirq+0xb14/0xbd0 kernel/time/timer.c:1787 __do_softirq+0x118/0x34a kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0xb5/0xd0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:546 [inline] smp_apic_timer_interrupt+0xe2/0x270 arch/x86/kernel/apic/apic.c:1146 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline] kcsan_setup_watchpoint+0x242/0x420 kernel/kcsan/core.c:521 PageAnon include/linux/page-flags.h:464 [inline] mm_counter include/linux/mm.h:1665 [inline] zap_pte_range mm/memory.c:1079 [inline] zap_pmd_range mm/memory.c:1184 [inline] zap_pud_range mm/memory.c:1213 [inline] zap_p4d_range mm/memory.c:1234 [inline] unmap_page_range+0xabe/0x1a60 mm/memory.c:1255 unmap_single_vma+0x13c/0x1f0 mm/memory.c:1300 unmap_vmas+0xe2/0x1b0 mm/memory.c:1332 exit_mmap+0x13e/0x2f0 mm/mmap.c:3130 __mmput kernel/fork.c:1088 [inline] mmput+0xe2/0x260 kernel/fork.c:1109 exit_mm kernel/exit.c:485 [inline] do_exit+0x640/0x1880 kernel/exit.c:788 do_group_exit+0xae/0x1a0 kernel/exit.c:899 get_signal+0x2a7/0x1290 kernel/signal.c:2734 do_signal+0x2b/0x670 arch/x86/kernel/signal.c:813 exit_to_usermode_loop+0x24a/0x2c0 arch/x86/entry/common.c:160 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline] syscall_return_slowpath arch/x86/entry/common.c:278 [inline] do_syscall_64+0x36e/0x390 arch/x86/entry/common.c:304 entry_SYSCALL_64_after_hwframe+0x44/0xa9 read to 0xffff88809c458008 of 4 bytes by task 98 on cpu 1: prb_lookup_block net/packet/af_packet.c:1095 [inline] __tpacket_v3_has_room+0xe6/0x130 net/packet/af_packet.c:1226 __packet_rcv_has_room net/packet/af_packet.c:1251 [inline] __packet_rcv_has_room+0x1ad/0x1c0 net/packet/af_packet.c:1229 tpacket_rcv+0x26e/0x17c0 net/packet/af_packet.c:2210 dev_queue_xmit_nit+0x5ea/0x600 net/core/dev.c:2271 xmit_one net/core/dev.c:3466 [inline] dev_hard_start_xmit+0x3ed/0x420 net/core/dev.c:3486 __dev_queue_xmit+0x14c4/0x1b80 net/core/dev.c:4063 dev_queue_xmit+0x1e/0x30 net/core/dev.c:4096 neigh_hh_output include/net/neighbour.h:499 [inline] neigh_output include/net/neighbour.h:508 [inline] ip_finish_output2+0x87d/0xed0 net/ipv4/ip_output.c:228 __ip_finish_output net/ipv4/ip_output.c:306 [inline] __ip_finish_output+0x22f/0x460 net/ipv4/ip_output.c:288 ip_finish_output+0x3e/0x160 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip_output+0xf2/0x240 net/ipv4/ip_output.c:430 dst_output include/net/dst.h:436 [inline] ip_local_out+0x70/0x90 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x3a6/0xa40 net/ipv4/ip_output.c:530 ip_queue_xmit+0x3e/0x50 include/net/ip.h:237 __tcp_transmit_skb+0xe1f/0x1c90 net/ipv4/tcp_output.c:1234 tcp_transmit_skb net/ipv4/tcp_output.c:1250 [inline] tcp_connect+0x1b80/0x2210 net/ipv4/tcp_output.c:3657 tcp_v4_connect+0xad6/0xc80 net/ipv4/tcp_ipv4.c:311 __inet_stream_connect+0x1bc/0x830 net/ipv4/af_inet.c:655 inet_stream_connect+0x4e/0x80 net/ipv4/af_inet.c:719 rds_tcp_conn_path_connect+0x2e1/0x5d0 net/rds/tcp_connect.c:172 rds_connect_worker+0x10b/0x1a0 net/rds/threads.c:176 process_one_work+0x424/0x930 kernel/workqueue.c:2264 worker_thread+0x9a/0x7e0 kernel/workqueue.c:2410 kthread+0x1cb/0x1f0 kernel/kthread.c:255 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 98 Comm: kworker/u4:2 Not tainted 5.6.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: krdsd rds_connect_worker ==================================================================