==================================================================
BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq

read-write to 0xffff888102674b88 of 8 bytes by interrupt on cpu 0:
 rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline]
 rtc_pie_update_irq+0x93/0xf0 drivers/rtc/interface.c:672
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x20c/0x5a0 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x21a/0x460 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 arch_atomic_add_negative arch/x86/include/asm/atomic.h:79 [inline]
 raw_atomic_add_negative include/linux/atomic/atomic-arch-fallback.h:2319 [inline]
 atomic_add_negative include/linux/atomic/atomic-instrumented.h:1421 [inline]
 __folio_remove_rmap mm/rmap.c:1699 [inline]
 folio_remove_rmap_ptes+0x48/0x1a0 mm/rmap.c:1804
 zap_present_folio_ptes mm/memory.c:1523 [inline]
 zap_present_ptes mm/memory.c:1581 [inline]
 do_zap_pte_range mm/memory.c:1682 [inline]
 zap_pte_range mm/memory.c:1726 [inline]
 zap_pmd_range mm/memory.c:1818 [inline]
 zap_pud_range mm/memory.c:1847 [inline]
 zap_p4d_range mm/memory.c:1868 [inline]
 unmap_page_range+0x155b/0x2680 mm/memory.c:1889
 unmap_single_vma mm/memory.c:1932 [inline]
 unmap_vmas+0x23d/0x3a0 mm/memory.c:1976
 exit_mmap+0x1b0/0x6c0 mm/mmap.c:1280
 __mmput+0x28/0x1c0 kernel/fork.c:1129
 mmput+0x40/0x50 kernel/fork.c:1152
 exit_mm+0xe4/0x190 kernel/exit.c:582
 do_exit+0x417/0x15c0 kernel/exit.c:949
 do_group_exit+0x139/0x140 kernel/exit.c:1102
 __do_sys_exit_group kernel/exit.c:1113 [inline]
 __se_sys_exit_group kernel/exit.c:1111 [inline]
 __x64_sys_exit_group+0x1f/0x20 kernel/exit.c:1111
 x64_sys_call+0x2fe2/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888102674b88 of 8 bytes by task 3159 on cpu 1:
 rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198
 vfs_poll include/linux/poll.h:82 [inline]
 __io_arm_poll_handler+0x1ee/0xb70 io_uring/poll.c:581
 io_poll_add+0x69/0xe0 io_uring/poll.c:901
 __io_issue_sqe+0xfb/0x2e0 io_uring/io_uring.c:1771
 io_issue_sqe+0x53/0x970 io_uring/io_uring.c:1794
 io_queue_sqe io_uring/io_uring.c:2023 [inline]
 io_req_task_submit+0xa1/0x100 io_uring/io_uring.c:1413
 io_poll_task_func+0x68b/0x970 io_uring/poll.c:-1
 io_handle_tw_list+0xcc/0x1c0 io_uring/io_uring.c:1098
 tctx_task_work_run+0x6d/0x1a0 io_uring/io_uring.c:1163
 tctx_task_work+0x3f/0x80 io_uring/io_uring.c:1181
 task_work_run+0x131/0x1a0 kernel/task_work.c:227
 get_signal+0xe13/0xf70 kernel/signal.c:2807
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x7a/0x100 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000000923c0 -> 0x00000000000924c0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3159 Comm: syz.0.10726 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
==================================================================
==================================================================
BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq

read-write to 0xffff888102674b88 of 8 bytes by interrupt on cpu 0:
 rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline]
 rtc_pie_update_irq+0x93/0xf0 drivers/rtc/interface.c:672
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x20c/0x5a0 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x21a/0x460 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
 pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:757
 default_idle_call+0x3d/0x70 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:190 [inline]
 do_idle+0xcb/0x240 kernel/sched/idle.c:330
 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:428
 rest_init+0xee/0xf0 init/main.c:744
 start_kernel+0x4d7/0x510 init/main.c:1097
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:307
 x86_64_start_kernel+0xfc/0x100 arch/x86/kernel/head64.c:288
 common_startup_64+0x13e/0x147

read to 0xffff888102674b88 of 8 bytes by task 3159 on cpu 1:
 rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198
 vfs_poll include/linux/poll.h:82 [inline]
 __io_arm_poll_handler+0x1ee/0xb70 io_uring/poll.c:581
 io_poll_add+0x69/0xe0 io_uring/poll.c:901
 __io_issue_sqe+0xfb/0x2e0 io_uring/io_uring.c:1771
 io_issue_sqe+0x53/0x970 io_uring/io_uring.c:1794
 io_queue_sqe io_uring/io_uring.c:2023 [inline]
 io_req_task_submit+0xa1/0x100 io_uring/io_uring.c:1413
 io_poll_task_func+0x68b/0x970 io_uring/poll.c:-1
 io_handle_tw_list+0xcc/0x1c0 io_uring/io_uring.c:1098
 tctx_task_work_run+0x6d/0x1a0 io_uring/io_uring.c:1163
 tctx_task_work+0x3f/0x80 io_uring/io_uring.c:1181
 task_work_run+0x131/0x1a0 kernel/task_work.c:227
 get_signal+0xe13/0xf70 kernel/signal.c:2807
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x7a/0x100 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000000033fdc0 -> 0x000000000033fec0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3159 Comm: syz.0.10726 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
==================================================================
==================================================================
BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq

read-write to 0xffff888102674b88 of 8 bytes by interrupt on cpu 0:
 rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline]
 rtc_pie_update_irq+0x93/0xf0 drivers/rtc/interface.c:672
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x20c/0x5a0 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x21a/0x460 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
 pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:757
 default_idle_call+0x3d/0x70 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:190 [inline]
 do_idle+0xcb/0x240 kernel/sched/idle.c:330
 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:428
 rest_init+0xee/0xf0 init/main.c:744
 start_kernel+0x4d7/0x510 init/main.c:1097
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:307
 x86_64_start_kernel+0xfc/0x100 arch/x86/kernel/head64.c:288
 common_startup_64+0x13e/0x147

read to 0xffff888102674b88 of 8 bytes by task 3159 on cpu 1:
 rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198
 vfs_poll include/linux/poll.h:82 [inline]
 io_poll_check_events io_uring/poll.c:262 [inline]
 io_poll_task_func+0x177/0x970 io_uring/poll.c:317
 io_handle_tw_list+0xcc/0x1c0 io_uring/io_uring.c:1098
 tctx_task_work_run+0x6d/0x1a0 io_uring/io_uring.c:1163
 tctx_task_work+0x3f/0x80 io_uring/io_uring.c:1181
 task_work_run+0x131/0x1a0 kernel/task_work.c:227
 get_signal+0xe13/0xf70 kernel/signal.c:2807
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x7a/0x100 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000006d53c0 -> 0x00000000006d54c0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3159 Comm: syz.0.10726 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
==================================================================
==================================================================
BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq

read-write to 0xffff888102674b88 of 8 bytes by interrupt on cpu 0:
 rtc_handle_legacy_irq drivers/rtc/interface.c:624 [inline]
 rtc_pie_update_irq+0x93/0xf0 drivers/rtc/interface.c:672
 __run_hrtimer kernel/time/hrtimer.c:1761 [inline]
 __hrtimer_run_queues+0x20c/0x5a0 kernel/time/hrtimer.c:1825
 hrtimer_interrupt+0x21a/0x460 kernel/time/hrtimer.c:1887
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
 pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81
 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline]
 default_idle+0x13/0x20 arch/x86/kernel/process.c:757
 default_idle_call+0x3d/0x70 kernel/sched/idle.c:122
 cpuidle_idle_call kernel/sched/idle.c:190 [inline]
 do_idle+0xcb/0x240 kernel/sched/idle.c:330
 cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:428
 rest_init+0xee/0xf0 init/main.c:744
 start_kernel+0x4d7/0x510 init/main.c:1097
 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:307
 x86_64_start_kernel+0xfc/0x100 arch/x86/kernel/head64.c:288
 common_startup_64+0x13e/0x147

read to 0xffff888102674b88 of 8 bytes by task 3159 on cpu 1:
 rtc_dev_poll+0x78/0xb0 drivers/rtc/dev.c:198
 vfs_poll include/linux/poll.h:82 [inline]
 __io_arm_poll_handler+0x1ee/0xb70 io_uring/poll.c:581
 io_poll_add+0x69/0xe0 io_uring/poll.c:901
 __io_issue_sqe+0xfb/0x2e0 io_uring/io_uring.c:1771
 io_issue_sqe+0x53/0x970 io_uring/io_uring.c:1794
 io_queue_sqe io_uring/io_uring.c:2023 [inline]
 io_req_task_submit+0xa1/0x100 io_uring/io_uring.c:1413
 io_poll_task_func+0x68b/0x970 io_uring/poll.c:-1
 io_handle_tw_list+0xcc/0x1c0 io_uring/io_uring.c:1098
 tctx_task_work_run+0x6d/0x1a0 io_uring/io_uring.c:1163
 tctx_task_work+0x3f/0x80 io_uring/io_uring.c:1181
 task_work_run+0x131/0x1a0 kernel/task_work.c:227
 get_signal+0xe13/0xf70 kernel/signal.c:2807
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x7a/0x100 kernel/entry/common.c:40
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000988fc0 -> 0x00000000009890c0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3159 Comm: syz.0.10726 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
==================================================================