================================================================== BUG: KCSAN: data-race in do_sys_poll / pollwake read to 0xffffc90005c53bd0 of 4 bytes by task 3182 on cpu 1: poll_schedule_timeout fs/select.c:240 [inline] do_poll fs/select.c:958 [inline] do_sys_poll+0x9f1/0xc80 fs/select.c:1009 __do_sys_ppoll fs/select.c:1115 [inline] __se_sys_ppoll+0x1b5/0x1f0 fs/select.c:1095 __x64_sys_ppoll+0x67/0x80 fs/select.c:1095 x64_sys_call+0x2c89/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:272 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f write to 0xffffc90005c53bd0 of 4 bytes by interrupt on cpu 0: __pollwake fs/select.c:195 [inline] pollwake+0xc1/0x110 fs/select.c:215 __wake_up_common kernel/sched/wait.c:89 [inline] __wake_up_common_lock kernel/sched/wait.c:106 [inline] __wake_up+0x65/0xb0 kernel/sched/wait.c:127 bpf_ringbuf_notify+0x22/0x30 kernel/bpf/ringbuf.c:155 irq_work_single kernel/irq_work.c:221 [inline] irq_work_run_list kernel/irq_work.c:252 [inline] irq_work_run+0xe1/0x2d0 kernel/irq_work.c:261 __sysvec_irq_work+0x23/0x1a0 arch/x86/kernel/irq_work.c:22 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline] sysvec_irq_work+0x66/0x80 arch/x86/kernel/irq_work.c:17 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738 native_apic_mem_write arch/x86/include/asm/apic.h:101 [inline] __default_send_IPI_shortcut arch/x86/kernel/apic/ipi.c:167 [inline] default_send_IPI_self+0x38/0x80 arch/x86/kernel/apic/ipi.c:248 __apic_send_IPI_self arch/x86/include/asm/apic.h:455 [inline] arch_irq_work_raise+0x48/0x50 arch/x86/kernel/irq_work.c:31 irq_work_raise kernel/irq_work.c:84 [inline] __irq_work_queue_local+0x82/0x1d0 kernel/irq_work.c:112 irq_work_queue+0x85/0x120 kernel/irq_work.c:124 bpf_ringbuf_commit kernel/bpf/ringbuf.c:-1 [inline] ____bpf_ringbuf_discard kernel/bpf/ringbuf.c:525 [inline] bpf_ringbuf_discard+0xcd/0xf0 kernel/bpf/ringbuf.c:523 bpf_prog_fe0ed97373b08409+0x47/0x4b bpf_dispatcher_nop_func include/linux/bpf.h:1316 [inline] __bpf_prog_run include/linux/filter.h:718 [inline] bpf_prog_run include/linux/filter.h:725 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2363 [inline] bpf_trace_run3+0x10e/0x1d0 kernel/trace/bpf_trace.c:2405 __do_trace_kmem_cache_free include/trace/events/kmem.h:114 [inline] trace_kmem_cache_free include/trace/events/kmem.h:114 [inline] kmem_cache_free+0x243/0x2e0 mm/slub.c:4747 kfree_skbmem net/core/skbuff.c:-1 [inline] __kfree_skb+0x102/0x150 net/core/skbuff.c:1177 consume_skb+0x49/0x160 net/core/skbuff.c:1408 netlink_broadcast_filtered+0xaea/0xbf0 net/netlink/af_netlink.c:1524 xfrm_send_state_notify+0xd43/0xf90 net/xfrm/xfrm_user.c:-1 km_state_notify+0x5f/0xa0 net/xfrm/xfrm_state.c:2725 xfrm_add_sa+0x2562/0x2640 net/xfrm/xfrm_user.c:1012 xfrm_user_rcv_msg+0x59d/0x6a0 net/xfrm/xfrm_user.c:3459 netlink_rcv_skb+0x12f/0x230 net/netlink/af_netlink.c:2534 xfrm_netlink_rcv+0x47/0x60 net/xfrm/xfrm_user.c:3481 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x605/0x6c0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x609/0x720 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:727 ____sys_sendmsg+0x350/0x4e0 net/socket.c:2566 ___sys_sendmsg net/socket.c:2620 [inline] __sys_sendmsg+0x1a0/0x240 net/socket.c:2652 __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0x46/0x50 net/socket.c:2655 x64_sys_call+0x26f3/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000001 -> 0x00000000 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3255 Comm: syz.3.14872 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 ==================================================================