==================================================================
BUG: KCSAN: data-race in can_receive / can_receive

read-write to 0xffff8881220279e8 of 8 bytes by interrupt on cpu 1:
 can_receive+0x62/0x1f0 net/can/af_can.c:650
 canfd_rcv+0xe7/0x180 net/can/af_can.c:702
 __netif_receive_skb_one_core net/core/dev.c:5493 [inline]
 __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5607
 process_backlog+0x21f/0x380 net/core/dev.c:5935
 __napi_poll+0x60/0x3b0 net/core/dev.c:6498
 napi_poll net/core/dev.c:6565 [inline]
 net_rx_action+0x32b/0x750 net/core/dev.c:6698
 __do_softirq+0xc1/0x265 kernel/softirq.c:553
 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921
 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164
 kthread+0x1d7/0x210 kernel/kthread.c:389
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

read-write to 0xffff8881220279e8 of 8 bytes by interrupt on cpu 0:
 can_receive+0x62/0x1f0 net/can/af_can.c:650
 canfd_rcv+0xe7/0x180 net/can/af_can.c:702
 __netif_receive_skb_one_core net/core/dev.c:5493 [inline]
 __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5607
 process_backlog+0x21f/0x380 net/core/dev.c:5935
 __napi_poll+0x60/0x3b0 net/core/dev.c:6498
 napi_poll net/core/dev.c:6565 [inline]
 net_rx_action+0x32b/0x750 net/core/dev.c:6698
 __do_softirq+0xc1/0x265 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x6d/0x80 arch/x86/kernel/apic/apic.c:1109
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
 is_atomic kernel/kcsan/core.c:249 [inline]
 should_watch kernel/kcsan/core.c:277 [inline]
 check_access kernel/kcsan/core.c:752 [inline]
 __tsan_read4+0xe4/0x180 kernel/kcsan/core.c:1024
 css_put include/linux/cgroup_refcnt.h:78 [inline]
 uncharge_folio+0x24d/0x310 mm/memcontrol.c:7208
 __mem_cgroup_uncharge_list+0x4c/0x90 mm/memcontrol.c:7238
 mem_cgroup_uncharge_list include/linux/memcontrol.h:706 [inline]
 release_pages+0x7a8/0x7f0 mm/swap.c:1041
 free_pages_and_swap_cache+0x6e/0x80 mm/swap_state.c:317
 tlb_batch_pages_flush mm/mmu_gather.c:97 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:292 [inline]
 tlb_flush_mmu+0x2e2/0x360 mm/mmu_gather.c:299
 zap_pte_range mm/memory.c:1514 [inline]
 zap_pmd_range mm/memory.c:1563 [inline]
 zap_pud_range mm/memory.c:1592 [inline]
 zap_p4d_range mm/memory.c:1613 [inline]
 unmap_page_range+0x1a69/0x1e60 mm/memory.c:1634
 unmap_single_vma+0x142/0x1d0 mm/memory.c:1680
 unmap_vmas+0x157/0x200 mm/memory.c:1719
 exit_mmap+0x15b/0x5e0 mm/mmap.c:3108
 __mmput+0x28/0x1c0 kernel/fork.c:1351
 mmput+0x49/0x60 kernel/fork.c:1373
 exit_mm+0xe4/0x180 kernel/exit.c:567
 do_exit+0x580/0x1670 kernel/exit.c:861
 do_group_exit+0x141/0x150 kernel/exit.c:1024
 __do_sys_exit_group kernel/exit.c:1035 [inline]
 __se_sys_exit_group kernel/exit.c:1033 [inline]
 __x64_sys_exit_group+0x1f/0x20 kernel/exit.c:1033
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00000000000042d1 -> 0x00000000000042d2

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10081 Comm: syz-executor.1 Tainted: G        W          6.4.0-syzkaller-01761-g6aeadf7896bf #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
==================================================================