==================================================================
BUG: KCSAN: data-race in __queue_work / wq_worker_running

read-write to 0xffff888237c2d164 of 4 bytes by task 9 on cpu 0:
 wq_worker_running+0x98/0x120 kernel/workqueue.c:1265
 schedule_timeout+0xcc/0x230 kernel/time/timer.c:2183
 schedule_timeout_uninterruptible kernel/time/timer.c:2217 [inline]
 msleep+0x52/0x70 kernel/time/timer.c:2338
 nsim_fib6_rt_add drivers/net/netdevsim/fib.c:693 [inline]
 nsim_fib6_rt_insert drivers/net/netdevsim/fib.c:759 [inline]
 nsim_fib6_event drivers/net/netdevsim/fib.c:856 [inline]
 nsim_fib_event drivers/net/netdevsim/fib.c:889 [inline]
 nsim_fib_event_work+0x1fee/0x2250 drivers/net/netdevsim/fib.c:1492
 process_one_work kernel/workqueue.c:2633 [inline]
 process_scheduled_works+0x5b8/0xa40 kernel/workqueue.c:2706
 worker_thread+0x525/0x730 kernel/workqueue.c:2787
 kthread+0x1d7/0x210 kernel/kthread.c:388
 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:243

read to 0xffff888237c2d164 of 4 bytes by interrupt on cpu 1:
 need_more_worker kernel/workqueue.c:835 [inline]
 kick_pool kernel/workqueue.c:1118 [inline]
 __queue_work+0x7ce/0xbb0 kernel/workqueue.c:1803
 queue_work_on+0x95/0xf0 kernel/workqueue.c:1837
 srcu_delay_timer+0x3d/0x50 kernel/rcu/srcutree.c:792
 call_timer_fn+0x37/0x2f0 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x448/0x630 kernel/time/timer.c:2038
 run_timer_softirq+0x1d/0x40 kernel/time/timer.c:2051
 __do_softirq+0xc4/0x27b kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
 __sanitizer_cov_trace_const_cmp4+0x0/0x90 kernel/kcov.c:299
 __folio_remove_rmap mm/rmap.c:1551 [inline]
 folio_remove_rmap_ptes+0xdc/0x180 mm/rmap.c:1590
 zap_pte_range mm/memory.c:1478 [inline]
 zap_pmd_range mm/memory.c:1597 [inline]
 zap_pud_range mm/memory.c:1626 [inline]
 zap_p4d_range mm/memory.c:1647 [inline]
 unmap_page_range+0xe0f/0x1e60 mm/memory.c:1668
 unmap_single_vma+0x142/0x1d0 mm/memory.c:1714
 unmap_vmas+0x18d/0x2b0 mm/memory.c:1758
 exit_mmap+0x1a2/0x6e0 mm/mmap.c:3279
 __mmput+0x28/0x1c0 kernel/fork.c:1343
 mmput+0x4c/0x60 kernel/fork.c:1365
 exit_mm+0xe3/0x180 kernel/exit.c:569
 do_exit+0x585/0x16d0 kernel/exit.c:858
 do_group_exit+0x101/0x150 kernel/exit.c:1020
 get_signal+0xf4e/0x10a0 kernel/signal.c:2893
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:105 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:201 [inline]
 syscall_exit_to_user_mode+0x58/0x120 kernel/entry/common.c:212
 do_syscall_64+0xda/0x1d0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 31381 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-00120-g87adedeba51a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
==================================================================