==================================================================
BUG: KCSAN: data-race in do_sys_poll / pollwake

write to 0xffffc9000dc6fbd0 of 4 bytes by interrupt on cpu 1:
 __pollwake fs/select.c:195 [inline]
 pollwake+0xbe/0x110 fs/select.c:215
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up+0x65/0xb0 kernel/sched/wait.c:127
 bpf_ringbuf_notify+0x22/0x30 kernel/bpf/ringbuf.c:154
 irq_work_single kernel/irq_work.c:221 [inline]
 irq_work_run_list kernel/irq_work.c:252 [inline]
 irq_work_run+0xdf/0x2c0 kernel/irq_work.c:261
 __sysvec_irq_work+0x23/0x1a0 arch/x86/kernel/irq_work.c:22
 instr_sysvec_irq_work arch/x86/kernel/irq_work.c:17 [inline]
 sysvec_irq_work+0x66/0x80 arch/x86/kernel/irq_work.c:17
 asm_sysvec_irq_work+0x1a/0x20 arch/x86/include/asm/idtentry.h:738
 native_apic_mem_write arch/x86/include/asm/apic.h:101 [inline]
 __default_send_IPI_shortcut arch/x86/kernel/apic/ipi.c:166 [inline]
 default_send_IPI_self+0x38/0x80 arch/x86/kernel/apic/ipi.c:247
 __apic_send_IPI_self arch/x86/include/asm/apic.h:455 [inline]
 arch_irq_work_raise+0x48/0x50 arch/x86/kernel/irq_work.c:31
 irq_work_raise kernel/irq_work.c:84 [inline]
 __irq_work_queue_local+0x82/0x1d0 kernel/irq_work.c:112
 irq_work_queue+0x85/0x120 kernel/irq_work.c:124
 ____bpf_ringbuf_discard kernel/bpf/ringbuf.c:532 [inline]
 bpf_ringbuf_discard+0xcd/0xf0 kernel/bpf/ringbuf.c:530
 bpf_prog_fe0ed97373b08409+0x47/0x4b
 bpf_dispatcher_nop_func include/linux/bpf.h:1257 [inline]
 __bpf_prog_run include/linux/filter.h:701 [inline]
 bpf_prog_run include/linux/filter.h:708 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:2318 [inline]
 bpf_trace_run3+0x10c/0x1d0 kernel/trace/bpf_trace.c:2360
 trace_kmem_cache_free include/trace/events/kmem.h:114 [inline]
 kmem_cache_free+0x237/0x2d0 mm/slub.c:4681
 mempool_free_slab+0x1d/0x30 mm/mempool.c:566
 mempool_free+0x74/0x140 mm/mempool.c:548
 bio_free+0x153/0x1f0 block/bio.c:237
 bio_put+0x127/0x480
 mpage_read_end_io+0x225/0x300 fs/mpage.c:54
 bio_endio+0x369/0x410 block/bio.c:1708
 submit_bio_noacct+0x61f/0x9a0 block/blk-core.c:861
 submit_bio+0x218/0x230 block/blk-core.c:896
 mpage_bio_submit_read fs/mpage.c:75 [inline]
 do_mpage_readpage+0xc94/0xcb0 fs/mpage.c:307
 mpage_read_folio+0x5b/0xd0 fs/mpage.c:392
 isofs_read_folio+0x1c/0x30 fs/isofs/inode.c:1147
 filemap_read_folio+0x2a/0x110 mm/filemap.c:2367
 filemap_fault+0x613/0xb30 mm/filemap.c:3435
 __do_fault+0xb6/0x200 mm/memory.c:4876
 do_cow_fault mm/memory.c:5312 [inline]
 do_fault mm/memory.c:5418 [inline]
 do_pte_missing mm/memory.c:3965 [inline]
 handle_pte_fault mm/memory.c:5751 [inline]
 __handle_mm_fault mm/memory.c:5894 [inline]
 handle_mm_fault+0x1219/0x2a80 mm/memory.c:6062
 faultin_page mm/gup.c:1187 [inline]
 __get_user_pages+0xf2c/0x2670 mm/gup.c:1485
 populate_vma_page_range mm/gup.c:1923 [inline]
 __mm_populate+0x25b/0x3b0 mm/gup.c:2026
 mm_populate include/linux/mm.h:3371 [inline]
 vm_mmap_pgoff+0x1d6/0x290 mm/util.c:593
 ksys_mmap_pgoff+0x286/0x330 mm/mmap.c:542
 x64_sys_call+0x1884/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffc9000dc6fbd0 of 4 bytes by task 24232 on cpu 0:
 poll_schedule_timeout fs/select.c:240 [inline]
 do_poll fs/select.c:964 [inline]
 do_sys_poll+0x986/0xc10 fs/select.c:1015
 __do_sys_ppoll fs/select.c:1121 [inline]
 __se_sys_ppoll+0x1af/0x1f0 fs/select.c:1101
 __x64_sys_ppoll+0x67/0x80 fs/select.c:1101
 x64_sys_call+0xe71/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:272
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 24232 Comm: syz.4.9105 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================