================================================================== BUG: KCSAN: data-race in __stop_tty / pty_write write to 0xffff8881180c89bc of 1 bytes by task 3492 on cpu 0: __stop_tty+0x42/0x90 drivers/tty/tty_io.c:747 n_tty_ioctl_helper+0x223/0x240 drivers/tty/tty_ioctl.c:955 n_tty_ioctl+0xfd/0x200 drivers/tty/n_tty.c:2521 tty_ioctl+0x87a/0xbe0 drivers/tty/tty_io.c:2811 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0xc9/0x140 fs/ioctl.c:892 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:892 x64_sys_call+0x1690/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffff8881180c89bc of 1 bytes by task 293 on cpu 1: pty_write+0x26/0xa0 drivers/tty/pty.c:115 tty_put_char+0x8d/0xc0 drivers/tty/tty_io.c:3167 n_tty_process_echo_ops drivers/tty/n_tty.c:664 [inline] __process_echoes+0x3a3/0x6b0 drivers/tty/n_tty.c:709 flush_echoes drivers/tty/n_tty.c:807 [inline] __receive_buf drivers/tty/n_tty.c:1642 [inline] n_tty_receive_buf_common+0x8ea/0xbd0 drivers/tty/n_tty.c:1739 n_tty_receive_buf2+0x33/0x40 drivers/tty/n_tty.c:1785 tty_ldisc_receive_buf+0x63/0x100 drivers/tty/tty_buffer.c:387 tty_port_default_receive_buf+0x59/0x90 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x1ce/0x410 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3319 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3400 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00 -> 0x01 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 293 Comm: kworker/u8:5 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events_unbound flush_to_ldisc ==================================================================