==================================================================
BUG: KCSAN: data-race in vti_tunnel_xmit / vti_tunnel_xmit

read to 0xffff88809fda1190 of 8 bytes by interrupt on cpu 1:
 vti_xmit net/ipv4/ip_vti.c:202 [inline]
 vti_tunnel_xmit+0x461/0xa50 net/ipv4/ip_vti.c:279
 __netdev_start_xmit include/linux/netdevice.h:4447 [inline]
 netdev_start_xmit include/linux/netdevice.h:4461 [inline]
 xmit_one net/core/dev.c:3420 [inline]
 dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3436
 __dev_queue_xmit+0x14e9/0x1ba0 net/core/dev.c:4013
 dev_queue_xmit+0x21/0x30 net/core/dev.c:4046
 neigh_direct_output+0x1f/0x30 net/core/neighbour.c:1530
 neigh_output include/net/neighbour.h:511 [inline]
 ip_finish_output2+0x408/0xea0 net/ipv4/ip_output.c:228
 __ip_finish_output net/ipv4/ip_output.c:308 [inline]
 __ip_finish_output+0x23a/0x490 net/ipv4/ip_output.c:290
 ip_finish_output+0x41/0x160 net/ipv4/ip_output.c:318
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xfe/0x230 net/ipv4/ip_output.c:432
 dst_output include/net/dst.h:436 [inline]
 ip_local_out+0x74/0x90 net/ipv4/ip_output.c:125
 __ip_queue_xmit+0x3a8/0xa40 net/ipv4/ip_output.c:532
 ip_queue_xmit+0x45/0x60 include/net/ip.h:237
 __tcp_transmit_skb+0xea3/0x1df0 net/ipv4/tcp_output.c:1170
 tcp_transmit_skb net/ipv4/tcp_output.c:1186 [inline]
 __tcp_retransmit_skb+0x4bd/0x15d0 net/ipv4/tcp_output.c:2977
 tcp_retransmit_skb+0x36/0x1a0 net/ipv4/tcp_output.c:3000
 tcp_retransmit_timer+0x70e/0x16e0 net/ipv4/tcp_timer.c:522
 tcp_write_timer_handler+0x42d/0x510 net/ipv4/tcp_timer.c:605
 tcp_write_timer+0x176/0x1c0 net/ipv4/tcp_timer.c:625
 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:752 [inline]
 kcsan_setup_watchpoint+0x1d4/0x460 kernel/kcsan/core.c:429
 check_access kernel/kcsan/core.c:459 [inline]
 __tsan_read8+0xc6/0x100 kernel/kcsan/core.c:589
 find_inode_bit.isra.0+0x2cf/0x300 fs/ext4/ialloc.c:719
 __ext4_new_inode+0xd45/0x2f10 fs/ext4/ialloc.c:909
 ext4_symlink+0x31c/0x9b0 fs/ext4/namei.c:3275
 vfs_symlink fs/namei.c:4131 [inline]
 vfs_symlink+0x218/0x310 fs/namei.c:4117
 do_symlinkat+0x1a5/0x1e0 fs/namei.c:4158
 __do_sys_symlink fs/namei.c:4177 [inline]
 __se_sys_symlink fs/namei.c:4175 [inline]
 __x64_sys_symlink+0x3f/0x50 fs/namei.c:4175
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88809fda1190 of 8 bytes by interrupt on cpu 0:
 vti_xmit net/ipv4/ip_vti.c:202 [inline]
 vti_tunnel_xmit+0x478/0xa50 net/ipv4/ip_vti.c:279
 __netdev_start_xmit include/linux/netdevice.h:4447 [inline]
 netdev_start_xmit include/linux/netdevice.h:4461 [inline]
 xmit_one net/core/dev.c:3420 [inline]
 dev_hard_start_xmit+0xef/0x430 net/core/dev.c:3436
 __dev_queue_xmit+0x14e9/0x1ba0 net/core/dev.c:4013
 dev_queue_xmit+0x21/0x30 net/core/dev.c:4046
 neigh_direct_output+0x1f/0x30 net/core/neighbour.c:1530
 neigh_output include/net/neighbour.h:511 [inline]
 ip_finish_output2+0x408/0xea0 net/ipv4/ip_output.c:228
 __ip_finish_output net/ipv4/ip_output.c:308 [inline]
 __ip_finish_output+0x23a/0x490 net/ipv4/ip_output.c:290
 ip_finish_output+0x41/0x160 net/ipv4/ip_output.c:318
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xfe/0x230 net/ipv4/ip_output.c:432
 dst_output include/net/dst.h:436 [inline]
 ip_local_out+0x74/0x90 net/ipv4/ip_output.c:125
 __ip_queue_xmit+0x3a8/0xa40 net/ipv4/ip_output.c:532
 ip_queue_xmit+0x45/0x60 include/net/ip.h:237
 __tcp_transmit_skb+0xea3/0x1df0 net/ipv4/tcp_output.c:1170
 tcp_transmit_skb net/ipv4/tcp_output.c:1186 [inline]
 __tcp_retransmit_skb+0x4bd/0x15d0 net/ipv4/tcp_output.c:2977
 tcp_retransmit_skb+0x36/0x1a0 net/ipv4/tcp_output.c:3000
 tcp_retransmit_timer+0x70e/0x16e0 net/ipv4/tcp_timer.c:522
 tcp_write_timer_handler+0x42d/0x510 net/ipv4/tcp_timer.c:605
 tcp_write_timer+0x176/0x1c0 net/ipv4/tcp_timer.c:625
 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1404
 expire_timers kernel/time/timer.c:1449 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0xc0c/0xcd0 kernel/time/timer.c:1786
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 arch_local_irq_enable arch/x86/include/asm/paravirt.h:762 [inline]
 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
 _raw_spin_unlock_irq+0x4e/0x80 kernel/locking/spinlock.c:199
 spin_unlock_irq include/linux/spinlock.h:388 [inline]
 process_one_work+0x3b5/0x890 kernel/workqueue.c:2237
 worker_thread+0xa0/0x800 kernel/workqueue.c:2410
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 7905 Comm: kworker/0:3 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: rcu_gp process_srcu
==================================================================