================================================================== BUG: KCSAN: data-race in tick_nohz_next_event / tick_sched_timer write to 0xffffffff86fc1220 of 4 bytes by interrupt on cpu 0: tick_sched_do_timer kernel/time/tick-sched.c:191 [inline] tick_sched_timer+0x1e7/0x200 kernel/time/tick-sched.c:1369 __run_hrtimer+0x133/0x420 kernel/time/hrtimer.c:1519 __hrtimer_run_queues kernel/time/hrtimer.c:1583 [inline] hrtimer_interrupt+0x36e/0xa10 kernel/time/hrtimer.c:1645 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1085 [inline] __sysvec_apic_timer_interrupt+0x6f/0x200 arch/x86/kernel/apic/apic.c:1102 asm_call_irq_on_stack+0xf/0x20 __run_sysvec_on_irqstack arch/x86/include/asm/irq_stack.h:37 [inline] run_sysvec_on_irqstack_cond arch/x86/include/asm/irq_stack.h:89 [inline] sysvec_apic_timer_interrupt+0x52/0x90 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628 __sanitizer_cov_trace_const_cmp8+0x4/0x90 kernel/kcov.c:292 pfn_valid include/linux/mmzone.h:1358 [inline] __virt_addr_valid+0x97/0x1a0 arch/x86/mm/physaddr.c:65 check_heap_object mm/usercopy.c:228 [inline] __check_object_size+0xa8/0x310 mm/usercopy.c:286 check_object_size include/linux/thread_info.h:169 [inline] check_copy_size include/linux/thread_info.h:202 [inline] copy_to_iter include/linux/uio.h:134 [inline] simple_copy_to_iter+0x3e/0x60 net/core/datagram.c:519 __skb_datagram_iter+0x231/0x4f0 net/core/datagram.c:448 skb_copy_datagram_iter+0x39/0xf0 net/core/datagram.c:533 skb_copy_datagram_msg include/linux/skbuff.h:3532 [inline] tcp_recvmsg+0xb37/0x1d00 net/ipv4/tcp.c:2203 inet_recvmsg+0xa3/0x210 net/ipv4/af_inet.c:848 sock_recvmsg_nosec net/socket.c:885 [inline] sock_recvmsg net/socket.c:903 [inline] sock_read_iter+0x19e/0x1e0 net/socket.c:976 call_read_iter include/linux/fs.h:1897 [inline] new_sync_read fs/read_write.c:415 [inline] vfs_read+0x552/0x5c0 fs/read_write.c:496 ksys_read+0xce/0x180 fs/read_write.c:634 __do_sys_read fs/read_write.c:644 [inline] __se_sys_read fs/read_write.c:642 [inline] __x64_sys_read+0x3e/0x50 fs/read_write.c:642 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 read to 0xffffffff86fc1220 of 4 bytes by task 0 on cpu 1: tick_nohz_next_event+0x217/0x300 kernel/time/tick-sched.c:802 tick_nohz_get_sleep_length+0x121/0x270 kernel/time/tick-sched.c:1155 menu_select+0x2fa/0xf40 drivers/cpuidle/governors/menu.c:283 cpuidle_select+0x3d/0x50 drivers/cpuidle/cpuidle.c:322 cpuidle_idle_call kernel/sched/idle.c:232 [inline] do_idle+0x15f/0x230 kernel/sched/idle.c:299 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:396 secondary_startup_64_no_verify+0xb0/0xbb Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.10.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ==================================================================