================================================================== BUG: KCSAN: data-race in vti_tunnel_xmit / vti_tunnel_xmit read to 0xffff8880a8227198 of 8 bytes by interrupt on cpu 0: vti_xmit net/ipv4/ip_vti.c:202 [inline] vti_tunnel_xmit+0x461/0xa50 net/ipv4/ip_vti.c:279 __netdev_start_xmit include/linux/netdevice.h:4413 [inline] netdev_start_xmit include/linux/netdevice.h:4427 [inline] xmit_one net/core/dev.c:3199 [inline] dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3215 __dev_queue_xmit+0x14ab/0x1b40 net/core/dev.c:3792 dev_queue_xmit+0x21/0x30 net/core/dev.c:3825 neigh_direct_output+0x1f/0x30 net/core/neighbour.c:1530 neigh_output include/net/neighbour.h:511 [inline] ip_finish_output2+0x4af/0xe40 net/ipv4/ip_output.c:228 __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x23a/0x490 net/ipv4/ip_output.c:290 ip_finish_output+0x41/0x160 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0xdf/0x210 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x74/0x90 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x3a8/0xa40 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x60 include/net/ip.h:237 __tcp_transmit_skb+0xe81/0x1d60 net/ipv4/tcp_output.c:1169 tcp_transmit_skb net/ipv4/tcp_output.c:1185 [inline] __tcp_retransmit_skb+0x4bd/0x15d0 net/ipv4/tcp_output.c:2976 tcp_retransmit_skb+0x36/0x1a0 net/ipv4/tcp_output.c:2999 tcp_retransmit_timer+0x719/0x16d0 net/ipv4/tcp_timer.c:516 tcp_write_timer_handler+0x42d/0x510 net/ipv4/tcp_timer.c:599 tcp_write_timer+0xd1/0xf0 net/ipv4/tcp_timer.c:619 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786 __do_softirq+0x115/0x33f kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0xbb/0xe0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830 mark_page_accessed+0x1cb/0x5a0 mm/swap.c:397 zap_pte_range mm/memory.c:1059 [inline] zap_pmd_range mm/memory.c:1166 [inline] zap_pud_range mm/memory.c:1195 [inline] zap_p4d_range mm/memory.c:1216 [inline] unmap_page_range+0x1301/0x18d0 mm/memory.c:1237 unmap_single_vma+0x144/0x200 mm/memory.c:1282 unmap_vmas+0xda/0x1a0 mm/memory.c:1314 exit_mmap+0x13e/0x300 mm/mmap.c:3161 __mmput kernel/fork.c:1079 [inline] mmput+0xea/0x280 kernel/fork.c:1100 exit_mm kernel/exit.c:485 [inline] do_exit+0x4c9/0x18f0 kernel/exit.c:804 do_group_exit+0xb4/0x1c0 kernel/exit.c:921 __do_sys_exit_group kernel/exit.c:932 [inline] __se_sys_exit_group kernel/exit.c:930 [inline] __x64_sys_exit_group+0x2e/0x30 kernel/exit.c:930 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 write to 0xffff8880a8227198 of 8 bytes by interrupt on cpu 1: vti_xmit net/ipv4/ip_vti.c:202 [inline] vti_tunnel_xmit+0x478/0xa50 net/ipv4/ip_vti.c:279 __netdev_start_xmit include/linux/netdevice.h:4413 [inline] netdev_start_xmit include/linux/netdevice.h:4427 [inline] xmit_one net/core/dev.c:3199 [inline] dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3215 __dev_queue_xmit+0x14ab/0x1b40 net/core/dev.c:3792 dev_queue_xmit+0x21/0x30 net/core/dev.c:3825 neigh_direct_output+0x1f/0x30 net/core/neighbour.c:1530 neigh_output include/net/neighbour.h:511 [inline] ip_finish_output2+0x4af/0xe40 net/ipv4/ip_output.c:228 __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x23a/0x490 net/ipv4/ip_output.c:290 ip_finish_output+0x41/0x160 net/ipv4/ip_output.c:318 NF_HOOK_COND include/linux/netfilter.h:294 [inline] ip_output+0xdf/0x210 net/ipv4/ip_output.c:432 dst_output include/net/dst.h:436 [inline] ip_local_out+0x74/0x90 net/ipv4/ip_output.c:125 __ip_queue_xmit+0x3a8/0xa40 net/ipv4/ip_output.c:532 ip_queue_xmit+0x45/0x60 include/net/ip.h:237 __tcp_transmit_skb+0xe81/0x1d60 net/ipv4/tcp_output.c:1169 tcp_transmit_skb net/ipv4/tcp_output.c:1185 [inline] __tcp_retransmit_skb+0x4bd/0x15d0 net/ipv4/tcp_output.c:2976 tcp_retransmit_skb+0x36/0x1a0 net/ipv4/tcp_output.c:2999 tcp_retransmit_timer+0x719/0x16d0 net/ipv4/tcp_timer.c:516 tcp_write_timer_handler+0x42d/0x510 net/ipv4/tcp_timer.c:599 tcp_write_timer+0xd1/0xf0 net/ipv4/tcp_timer.c:619 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786 __do_softirq+0x115/0x33f kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0xbb/0xe0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830 matching_access kernel/kcsan/encoding.h:89 [inline] find_watchpoint kernel/kcsan/core.c:106 [inline] check_access kernel/kcsan/core.c:453 [inline] __tsan_read8+0x31/0x100 kernel/kcsan/core.c:596 compound_head include/linux/page-flags.h:174 [inline] get_page include/linux/mm.h:1018 [inline] copy_one_pte mm/memory.c:772 [inline] copy_pte_range mm/memory.c:823 [inline] copy_pmd_range mm/memory.c:874 [inline] copy_pud_range mm/memory.c:908 [inline] copy_p4d_range mm/memory.c:930 [inline] copy_page_range+0xc98/0x1a80 mm/memory.c:992 dup_mmap kernel/fork.c:601 [inline] dup_mm+0x74a/0xba0 kernel/fork.c:1361 copy_mm kernel/fork.c:1417 [inline] copy_process+0x36f3/0x3b50 kernel/fork.c:2012 _do_fork+0xfe/0x6e0 kernel/fork.c:2366 __do_sys_clone kernel/fork.c:2521 [inline] __se_sys_clone kernel/fork.c:2502 [inline] __x64_sys_clone+0x12b/0x160 kernel/fork.c:2502 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 31553 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ==================================================================