==================================================================
BUG: KCSAN: data-race in internal_add_timer / update_process_times

write to 0xffff888237c176d8 of 8 bytes by interrupt on cpu 1:
 enqueue_timer kernel/time/timer.c:598 [inline]
 internal_add_timer+0x14f/0x280 kernel/time/timer.c:611
 add_timer_on+0x262/0x2a0 kernel/time/timer.c:1182
 clocksource_watchdog+0xa74/0xac0 kernel/time/clocksource.c:478
 call_timer_fn+0x2e/0x1d0 kernel/time/timer.c:1421
 expire_timers+0x135/0x240 kernel/time/timer.c:1466
 __run_timers+0x378/0x440 kernel/time/timer.c:1734
 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1747
 __do_softirq+0x12c/0x26e kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu kernel/softirq.c:636 [inline]
 irq_exit_rcu+0x4e/0xa0 kernel/softirq.c:648
 sysvec_apic_timer_interrupt+0x69/0x80 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20
 fast_dput+0x115/0x1c0
 dput+0x26/0x360 fs/dcache.c:875
 path_umount+0xde/0xa70 fs/namespace.c:1756
 ksys_umount fs/namespace.c:1776 [inline]
 __do_sys_umount fs/namespace.c:1781 [inline]
 __se_sys_umount fs/namespace.c:1779 [inline]
 __x64_sys_umount+0xb5/0xe0 fs/namespace.c:1779
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888237c176d8 of 8 bytes by interrupt on cpu 0:
 run_local_timers kernel/time/timer.c:1761 [inline]
 update_process_times+0x8c/0x150 kernel/time/timer.c:1784
 tick_sched_handle kernel/time/tick-sched.c:226 [inline]
 tick_sched_timer+0x191/0x210 kernel/time/tick-sched.c:1421
 __run_hrtimer+0x160/0x480 kernel/time/hrtimer.c:1685
 __hrtimer_run_queues kernel/time/hrtimer.c:1749 [inline]
 hrtimer_interrupt+0x380/0xaf0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x6f/0x1c0 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x2d/0x80 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20
 get_ctx kernel/kcsan/core.c:202 [inline]
 check_access kernel/kcsan/core.c:631 [inline]
 __tsan_read4+0x106/0x180 kernel/kcsan/core.c:854
 skb_push+0x4a/0xa0 net/core/skbuff.c:1997
 packet_rcv+0x1e3/0xa20 net/packet/af_packet.c:2101
 deliver_skb net/core/dev.c:2212 [inline]
 deliver_ptype_list_skb net/core/dev.c:2227 [inline]
 __netif_receive_skb_core+0x155f/0x1f20 net/core/dev.c:5387
 __netif_receive_skb_list_core+0x118/0x460 net/core/dev.c:5512
 __netif_receive_skb_list+0x29a/0x310 net/core/dev.c:5579
 netif_receive_skb_list_internal+0xde/0x340 net/core/dev.c:5670
 gro_normal_list net/core/dev.c:5824 [inline]
 napi_complete_done+0x1b2/0x3c0 net/core/dev.c:6562
 virtqueue_napi_complete drivers/net/virtio_net.c:337 [inline]
 virtnet_poll+0x6c3/0x9c0 drivers/net/virtio_net.c:1540
 __napi_poll+0x65/0x3a0 net/core/dev.c:6986
 napi_poll net/core/dev.c:7053 [inline]
 net_rx_action+0x29f/0x680 net/core/dev.c:7140
 __do_softirq+0x12c/0x26e kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu kernel/softirq.c:636 [inline]
 irq_exit_rcu+0x4e/0xa0 kernel/softirq.c:648
 common_interrupt+0x78/0x90 arch/x86/kernel/irq.c:240
 asm_common_interrupt+0x1e/0x40
 check_access kernel/kcsan/core.c:635 [inline]
 __tsan_unaligned_write8+0x15f/0x190 kernel/kcsan/core.c:855
 ptep_get_and_clear_full arch/x86/include/asm/pgtable.h:1065 [inline]
 zap_pte_range+0x328/0xe20 mm/memory.c:1346
 zap_pmd_range mm/memory.c:1481 [inline]
 zap_pud_range mm/memory.c:1510 [inline]
 zap_p4d_range mm/memory.c:1531 [inline]
 unmap_page_range+0x2dc/0x3d0 mm/memory.c:1552
 unmap_single_vma+0x157/0x210 mm/memory.c:1597
 unmap_vmas+0xd0/0x180 mm/memory.c:1629
 exit_mmap+0x23d/0x470 mm/mmap.c:3171
 __mmput+0x27/0x1d0 kernel/fork.c:1115
 mmput+0x3d/0x50 kernel/fork.c:1136
 exit_mm+0x2ec/0x3e0 kernel/exit.c:501
 do_exit+0x3ef/0x14a0 kernel/exit.c:812
 do_group_exit+0xce/0x1a0 kernel/exit.c:922
 get_signal+0xf93/0x15d0 kernel/signal.c:2868
 arch_do_signal_or_restart+0x8c/0x280 arch/x86/kernel/signal.c:865
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x109/0x190 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300
 do_syscall_64+0x50/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000000100046ac0 -> 0x000000010004691c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 26691 Comm: syz-executor.5 Not tainted 5.15.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================