================================================================== BUG: KCSAN: data-race in tick_sched_do_timer / tick_sched_do_timer write to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 1: tick_sched_do_timer+0xb4/0xd0 kernel/time/tick-sched.c:141 tick_sched_timer+0x3f/0xd0 kernel/time/tick-sched.c:1313 __run_hrtimer kernel/time/hrtimer.c:1520 [inline] __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1584 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1646 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline] smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1138 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 arch_local_irq_restore arch/x86/include/asm/paravirt.h:759 [inline] kcsan_setup_watchpoint+0x25a/0x440 kernel/kcsan/core.c:542 trylock_clear_pending kernel/locking/qspinlock_paravirt.h:121 [inline] pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:435 [inline] __pv_queued_spin_lock_slowpath+0x1f4/0x5c0 kernel/locking/qspinlock.c:508 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:645 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:50 [inline] queued_spin_lock include/asm-generic/qspinlock.h:81 [inline] do_raw_spin_lock include/linux/spinlock.h:182 [inline] __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline] _raw_spin_lock_bh+0x5b/0x70 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] lock_sock_nested+0x2e/0xa0 net/core/sock.c:2959 lock_sock include/net/sock.h:1574 [inline] tcp_recvmsg+0xa8/0x1ba0 net/ipv4/tcp.c:1973 inet_recvmsg+0xc1/0x250 net/ipv4/af_inet.c:838 sock_recvmsg_nosec net/socket.c:886 [inline] sock_recvmsg net/socket.c:904 [inline] sock_recvmsg+0x8e/0xb0 net/socket.c:900 sock_read_iter+0x185/0x230 net/socket.c:982 call_read_iter include/linux/fs.h:1901 [inline] new_sync_read+0x416/0x450 fs/read_write.c:415 __vfs_read+0x9e/0xb0 fs/read_write.c:428 vfs_read fs/read_write.c:462 [inline] vfs_read+0x13e/0x2b0 fs/read_write.c:447 ksys_read+0x16a/0x1a0 fs/read_write.c:588 __do_sys_read fs/read_write.c:598 [inline] __se_sys_read fs/read_write.c:596 [inline] __x64_sys_read+0x49/0x60 fs/read_write.c:596 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x44/0xa9 read to 0xffffffff8764e210 of 4 bytes by interrupt on cpu 0: tick_sched_do_timer+0x2e/0xd0 kernel/time/tick-sched.c:137 tick_sched_timer+0x3f/0xd0 kernel/time/tick-sched.c:1313 __run_hrtimer kernel/time/hrtimer.c:1520 [inline] __hrtimer_run_queues+0x271/0x600 kernel/time/hrtimer.c:1584 hrtimer_interrupt+0x226/0x490 kernel/time/hrtimer.c:1646 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 [inline] smp_apic_timer_interrupt+0xd8/0x270 arch/x86/kernel/apic/apic.c:1138 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 rep_nop arch/x86/include/asm/vdso/processor.h:13 [inline] cpu_relax arch/x86/include/asm/vdso/processor.h:18 [inline] pv_wait_node kernel/locking/qspinlock_paravirt.h:308 [inline] __pv_queued_spin_lock_slowpath+0x390/0x5c0 kernel/locking/qspinlock.c:473 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:645 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:50 [inline] queued_spin_lock include/asm-generic/qspinlock.h:81 [inline] do_raw_spin_lock include/linux/spinlock.h:182 [inline] __raw_spin_lock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_lock+0x5b/0x70 kernel/locking/spinlock.c:151 tcp_v4_rcv+0x1ae2/0x1e10 net/ipv4/tcp_ipv4.c:1997 ip_protocol_deliver_rcu+0x4b/0x410 net/ipv4/ip_input.c:204 ip_local_deliver_finish+0xf3/0x120 net/ipv4/ip_input.c:231 NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ip_local_deliver+0x135/0x220 net/ipv4/ip_input.c:252 dst_input include/net/dst.h:441 [inline] ip_sublist_rcv_finish+0xf0/0x140 net/ipv4/ip_input.c:550 ip_list_rcv_finish net/ipv4/ip_input.c:600 [inline] ip_sublist_rcv+0x3f8/0x530 net/ipv4/ip_input.c:608 ip_list_rcv+0x2f3/0x321 net/ipv4/ip_input.c:643 __netif_receive_skb_list_ptype net/core/dev.c:5230 [inline] __netif_receive_skb_list_ptype net/core/dev.c:5219 [inline] __netif_receive_skb_list_core+0x368/0x5c0 net/core/dev.c:5278 __netif_receive_skb_list net/core/dev.c:5330 [inline] netif_receive_skb_list_internal+0x5c7/0x810 net/core/dev.c:5425 gro_normal_list.part.0+0x37/0xa0 net/core/dev.c:5536 gro_normal_list net/core/dev.c:5549 [inline] gro_normal_one+0x14c/0x160 net/core/dev.c:5548 napi_skb_finish net/core/dev.c:5876 [inline] napi_gro_receive+0x27d/0x2f0 net/core/dev.c:5908 receive_buf+0x24c/0x3420 drivers/net/virtio_net.c:1073 virtnet_receive drivers/net/virtio_net.c:1335 [inline] virtnet_poll+0x343/0x790 drivers/net/virtio_net.c:1440 napi_poll net/core/dev.c:6571 [inline] net_rx_action+0x3ad/0xac0 net/core/dev.c:6639 __do_softirq+0x118/0x34a kernel/softirq.c:292 run_ksoftirqd+0x41/0x60 kernel/softirq.c:604 smpboot_thread_fn+0x374/0x4a0 kernel/smpboot.c:165 kthread+0x203/0x230 kernel/kthread.c:268 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.7.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ==================================================================