================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff888103f19b98 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:651 [inline] rtc_pie_update_irq+0x7b/0xd0 drivers/rtc/interface.c:699 __run_hrtimer kernel/time/hrtimer.c:1785 [inline] __hrtimer_run_queues+0x218/0x4f0 kernel/time/hrtimer.c:1849 hrtimer_interrupt+0x269/0x810 kernel/time/hrtimer.c:1911 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline] __sysvec_apic_timer_interrupt+0x5f/0x1f0 arch/x86/kernel/apic/apic.c:1062 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 check_kcov_mode kernel/kcov.c:185 [inline] write_comp_data kernel/kcov.c:246 [inline] __sanitizer_cov_trace_const_cmp8+0x36/0x90 kernel/kcov.c:321 pmd_pfn_mask arch/x86/include/asm/pgtable_types.h:453 [inline] pmd_flags_mask arch/x86/include/asm/pgtable_types.h:461 [inline] pmd_flags arch/x86/include/asm/pgtable_types.h:466 [inline] pmd_bad arch/x86/include/asm/pgtable.h:1035 [inline] __pte_offset_map mm/pgtable-generic.c:299 [inline] pte_offset_map_rw_nolock+0xb9/0x200 mm/pgtable-generic.c:328 handle_pte_fault mm/memory.c:6302 [inline] __handle_mm_fault mm/memory.c:6455 [inline] handle_mm_fault+0x721/0x3020 mm/memory.c:6624 do_user_addr_fault+0x3fd/0x1050 arch/x86/mm/fault.c:1385 handle_page_fault arch/x86/mm/fault.c:1474 [inline] exc_page_fault+0x62/0xa0 arch/x86/mm/fault.c:1527 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 rep_movs_alternative+0x30/0x90 arch/x86/lib/copy_user_64.S:53 copy_user_generic arch/x86/include/asm/uaccess_64.h:126 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:141 [inline] _inline_copy_from_user include/linux/uaccess.h:185 [inline] _copy_from_user+0x6f/0xb0 lib/usercopy.c:18 copy_from_user include/linux/uaccess.h:223 [inline] copy_msghdr_from_user net/socket.c:2522 [inline] recvmsg_copy_msghdr net/socket.c:2778 [inline] ___sys_recvmsg+0xaa/0x3b0 net/socket.c:2850 do_recvmmsg+0x1ef/0x560 net/socket.c:2949 __sys_recvmmsg net/socket.c:3023 [inline] __do_sys_recvmmsg net/socket.c:3046 [inline] __se_sys_recvmmsg net/socket.c:3039 [inline] __x64_sys_recvmmsg+0xe5/0x170 net/socket.c:3039 x64_sys_call+0x80f/0x3020 arch/x86/include/generated/asm/syscalls_64.h:300 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffff888103f19b98 of 8 bytes by task 6190 on cpu 0: rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] io_poll_check_events io_uring/poll.c:281 [inline] io_poll_task_func+0x13b/0x800 io_uring/poll.c:341 io_handle_tw_list+0x121/0x230 io_uring/tw.c:72 tctx_task_work_run+0x42/0x170 io_uring/tw.c:132 tctx_task_work+0x3f/0x80 io_uring/tw.c:150 task_work_run+0x130/0x1a0 kernel/task_work.c:233 get_signal+0xe0e/0xf60 kernel/signal.c:2807 arch_do_signal_or_restart+0x96/0x450 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x6a/0x6f0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x249/0x370 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000000585c0 -> 0x00000000000586c0 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 6190 Comm: syz.7.684 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff888103f19b98 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:651 [inline] rtc_pie_update_irq+0x7b/0xd0 drivers/rtc/interface.c:699 __run_hrtimer kernel/time/hrtimer.c:1785 [inline] __hrtimer_run_queues+0x218/0x4f0 kernel/time/hrtimer.c:1849 hrtimer_interrupt+0x269/0x810 kernel/time/hrtimer.c:1911 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline] __sysvec_apic_timer_interrupt+0x5f/0x1f0 arch/x86/kernel/apic/apic.c:1062 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:62 arch_safe_halt arch/x86/kernel/process.c:766 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x3b/0x60 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x17f/0x2b0 kernel/sched/idle.c:352 cpu_startup_entry+0x24/0x30 kernel/sched/idle.c:451 start_secondary+0x95/0xa0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x147 read to 0xffff888103f19b98 of 8 bytes by task 6190 on cpu 0: rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] __io_arm_poll_handler+0x1ec/0xc30 io_uring/poll.c:586 io_poll_add+0x69/0xf0 io_uring/poll.c:904 __io_issue_sqe+0xfd/0x2d0 io_uring/io_uring.c:1384 io_issue_sqe+0x206/0xc00 io_uring/io_uring.c:1407 io_queue_sqe io_uring/io_uring.c:1634 [inline] io_req_task_submit+0x46/0xa0 io_uring/io_uring.c:1044 io_poll_task_func+0x60b/0x800 io_uring/poll.c:-1 io_handle_tw_list+0x121/0x230 io_uring/tw.c:72 tctx_task_work_run+0x42/0x170 io_uring/tw.c:132 tctx_task_work+0x3f/0x80 io_uring/tw.c:150 task_work_run+0x130/0x1a0 kernel/task_work.c:233 get_signal+0xe0e/0xf60 kernel/signal.c:2807 arch_do_signal_or_restart+0x96/0x450 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x6a/0x6f0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x249/0x370 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000123fc0 -> 0x00000000001240c0 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 6190 Comm: syz.7.684 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq read-write to 0xffff888103f19b98 of 8 bytes by interrupt on cpu 1: rtc_handle_legacy_irq drivers/rtc/interface.c:651 [inline] rtc_pie_update_irq+0x7b/0xd0 drivers/rtc/interface.c:699 __run_hrtimer kernel/time/hrtimer.c:1785 [inline] __hrtimer_run_queues+0x218/0x4f0 kernel/time/hrtimer.c:1849 hrtimer_interrupt+0x269/0x810 kernel/time/hrtimer.c:1911 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline] __sysvec_apic_timer_interrupt+0x5f/0x1f0 arch/x86/kernel/apic/apic.c:1062 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:62 arch_safe_halt arch/x86/kernel/process.c:766 [inline] default_idle+0x9/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x3b/0x60 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x17f/0x2b0 kernel/sched/idle.c:352 cpu_startup_entry+0x24/0x30 kernel/sched/idle.c:451 start_secondary+0x95/0xa0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x147 read to 0xffff888103f19b98 of 8 bytes by task 6190 on cpu 0: rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198 vfs_poll include/linux/poll.h:82 [inline] __io_arm_poll_handler+0x1ec/0xc30 io_uring/poll.c:586 io_poll_add+0x69/0xf0 io_uring/poll.c:904 __io_issue_sqe+0xfd/0x2d0 io_uring/io_uring.c:1384 io_issue_sqe+0x206/0xc00 io_uring/io_uring.c:1407 io_queue_sqe io_uring/io_uring.c:1634 [inline] io_req_task_submit+0x46/0xa0 io_uring/io_uring.c:1044 io_poll_task_func+0x60b/0x800 io_uring/poll.c:-1 io_handle_tw_list+0x121/0x230 io_uring/tw.c:72 tctx_task_work_run+0x42/0x170 io_uring/tw.c:132 tctx_task_work+0x3f/0x80 io_uring/tw.c:150 task_work_run+0x130/0x1a0 kernel/task_work.c:233 get_signal+0xe0e/0xf60 kernel/signal.c:2807 arch_do_signal_or_restart+0x96/0x450 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x6a/0x6f0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x249/0x370 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000002445c0 -> 0x00000000002446c0 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 6190 Comm: syz.7.684 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ==================================================================