==================================================================
BUG: KCSAN: data-race in inet_csk_complete_hashdance / sk_clone

write to 0xffff88810499de40 of 8 bytes by interrupt on cpu 0:
 inet_csk_reqsk_queue_add net/ipv4/inet_connection_sock.c:1402 [inline]
 inet_csk_complete_hashdance+0x52a/0x740 net/ipv4/inet_connection_sock.c:1444
 tcp_check_req+0x1099/0x1150 net/ipv4/tcp_minisocks.c:944
 tcp_v4_rcv+0xefe/0x1c10 net/ipv4/tcp_ipv4.c:2164
 ip_protocol_deliver_rcu+0x395/0x790 net/ipv4/ip_input.c:207
 ip_local_deliver_finish+0x1fc/0x2f0 net/ipv4/ip_input.c:241
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ip_local_deliver+0xe8/0x1e0 net/ipv4/ip_input.c:262
 dst_input include/net/dst.h:480 [inline]
 ip_rcv_finish+0x188/0x1a0 net/ipv4/ip_input.c:492
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ip_rcv+0x62/0x160 net/ipv4/ip_input.c:612
 __netif_receive_skb_one_core net/core/dev.c:6202 [inline]
 __netif_receive_skb net/core/dev.c:6315 [inline]
 process_backlog+0x341/0x670 net/core/dev.c:6666
 __napi_poll+0x61/0x300 net/core/dev.c:7733
 napi_poll net/core/dev.c:7796 [inline]
 net_rx_action+0x452/0x930 net/core/dev.c:7953
 handle_softirqs+0xb9/0x280 kernel/softirq.c:622
 do_softirq+0x45/0x60 kernel/softirq.c:523
 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:912 [inline]
 __dev_queue_xmit+0x1396/0x1ec0 net/core/dev.c:4905
 dev_queue_xmit include/linux/netdevice.h:3418 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0x705/0x8c0 net/ipv4/ip_output.c:237
 __ip_finish_output net/ipv4/ip_output.c:-1 [inline]
 ip_finish_output+0x112/0x290 net/ipv4/ip_output.c:325
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip_output+0xbd/0x1c0 net/ipv4/ip_output.c:438
 dst_output include/net/dst.h:470 [inline]
 ip_local_out net/ipv4/ip_output.c:131 [inline]
 __ip_queue_xmit+0xb68/0xba0 net/ipv4/ip_output.c:534
 ip_queue_xmit+0x39/0x50 net/ipv4/ip_output.c:548
 __tcp_transmit_skb+0x1c2a/0x20b0 net/ipv4/tcp_output.c:1715
 tcp_transmit_skb net/ipv4/tcp_output.c:1733 [inline]
 tcp_write_xmit+0x129e/0x36a0 net/ipv4/tcp_output.c:3061
 __tcp_push_pending_frames+0x6d/0x1b0 net/ipv4/tcp_output.c:3244
 tcp_push_pending_frames include/net/tcp.h:2360 [inline]
 __tcp_sock_set_cork net/ipv4/tcp.c:3653 [inline]
 tcp_sock_set_cork+0xe1/0x100 net/ipv4/tcp.c:3660
 rds_tcp_xmit_path_complete+0x3b/0x50 net/rds/tcp_send.c:52
 rds_send_xmit+0x128c/0x16f0 net/rds/send.c:480
 rds_send_worker+0x44/0x1b0 net/rds/threads.c:200
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397
 worker_thread+0x58a/0x780 kernel/workqueue.c:3478
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff88810499da84 of 2428 bytes by interrupt on cpu 1:
 sock_copy net/core/sock.c:2223 [inline]
 sk_clone+0xce/0xa40 net/core/sock.c:2487
 sk_clone_lock include/net/sock.h:1848 [inline]
 inet_csk_clone_lock+0x28/0x270 net/ipv4/inet_connection_sock.c:1199
 tcp_create_openreq_child+0x32/0x1300 net/ipv4/tcp_minisocks.c:551
 tcp_v4_syn_recv_sock+0xbf/0xab0 net/ipv4/tcp_ipv4.c:1694
 tcp_v6_syn_recv_sock+0xa8/0xbf0 net/ipv6/tcp_ipv6.c:1388
 tcp_check_req+0xddf/0x1150 net/ipv4/tcp_minisocks.c:926
 tcp_v4_rcv+0xefe/0x1c10 net/ipv4/tcp_ipv4.c:2164
 ip_protocol_deliver_rcu+0x395/0x790 net/ipv4/ip_input.c:207
 ip_local_deliver_finish+0x1fc/0x2f0 net/ipv4/ip_input.c:241
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ip_local_deliver+0xe8/0x1e0 net/ipv4/ip_input.c:262
 dst_input include/net/dst.h:480 [inline]
 ip_rcv_finish+0x188/0x1a0 net/ipv4/ip_input.c:492
 NF_HOOK include/linux/netfilter.h:318 [inline]
 ip_rcv+0x62/0x160 net/ipv4/ip_input.c:612
 __netif_receive_skb_one_core net/core/dev.c:6202 [inline]
 __netif_receive_skb net/core/dev.c:6315 [inline]
 process_backlog+0x341/0x670 net/core/dev.c:6666
 __napi_poll+0x61/0x300 net/core/dev.c:7733
 napi_poll net/core/dev.c:7796 [inline]
 net_rx_action+0x452/0x930 net/core/dev.c:7953
 handle_softirqs+0xb9/0x280 kernel/softirq.c:622
 do_softirq+0x45/0x60 kernel/softirq.c:523
 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:912 [inline]
 __dev_queue_xmit+0x1396/0x1ec0 net/core/dev.c:4905
 dev_queue_xmit include/linux/netdevice.h:3418 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0x705/0x8c0 net/ipv4/ip_output.c:237
 __ip_finish_output net/ipv4/ip_output.c:-1 [inline]
 ip_finish_output+0x112/0x290 net/ipv4/ip_output.c:325
 NF_HOOK_COND include/linux/netfilter.h:307 [inline]
 ip_output+0xbd/0x1c0 net/ipv4/ip_output.c:438
 dst_output include/net/dst.h:470 [inline]
 ip_local_out net/ipv4/ip_output.c:131 [inline]
 __ip_queue_xmit+0xb68/0xba0 net/ipv4/ip_output.c:534
 ip_queue_xmit+0x39/0x50 net/ipv4/ip_output.c:548
 __tcp_transmit_skb+0x1c2a/0x20b0 net/ipv4/tcp_output.c:1715
 tcp_transmit_skb net/ipv4/tcp_output.c:1733 [inline]
 tcp_write_xmit+0x129e/0x36a0 net/ipv4/tcp_output.c:3061
 __tcp_push_pending_frames+0x6d/0x1b0 net/ipv4/tcp_output.c:3244
 tcp_push_pending_frames include/net/tcp.h:2360 [inline]
 __tcp_sock_set_cork net/ipv4/tcp.c:3653 [inline]
 tcp_sock_set_cork+0xe1/0x100 net/ipv4/tcp.c:3660
 rds_tcp_xmit_path_complete+0x3b/0x50 net/rds/tcp_send.c:52
 rds_send_xmit+0x128c/0x16f0 net/rds/send.c:480
 rds_send_worker+0x44/0x1b0 net/rds/threads.c:200
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397
 worker_thread+0x58a/0x780 kernel/workqueue.c:3478
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 5208 Comm: kworker/u8:10 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: krds_cp_wq#5/0 rds_send_worker
==================================================================