================================================================== BUG: KCSAN: data-race in pollwake / pollwake write to 0xffffc90000f2fc20 of 4 bytes by interrupt on cpu 1: __pollwake fs/select.c:198 [inline] pollwake+0xbe/0x110 fs/select.c:218 __wake_up_common kernel/sched/wait.c:89 [inline] __wake_up_common_lock kernel/sched/wait.c:106 [inline] __wake_up_sync_key+0x50/0x80 kernel/sched/wait.c:173 sock_def_readable+0x70/0x1b0 net/core/sock.c:3342 tcp_data_ready+0x1aa/0x280 net/ipv4/tcp_input.c:5143 tcp_data_queue+0x11cb/0x2d70 net/ipv4/tcp_input.c:5223 tcp_rcv_established+0x8fc/0xef0 net/ipv4/tcp_input.c:6170 tcp_v4_do_rcv+0x2d4/0x630 net/ipv4/tcp_ipv4.c:1906 tcp_v4_rcv+0x1ab0/0x1d40 net/ipv4/tcp_ipv4.c:2329 ip_protocol_deliver_rcu+0x356/0x6d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x13c/0x1b0 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] ip_local_deliver+0xec/0x1c0 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:461 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline] ip_sublist_rcv+0x4e7/0x5b0 net/ipv4/ip_input.c:639 ip_list_rcv+0x25e/0x290 net/ipv4/ip_input.c:674 __netif_receive_skb_list_ptype net/core/dev.c:5577 [inline] __netif_receive_skb_list_core+0x356/0x460 net/core/dev.c:5625 __netif_receive_skb_list net/core/dev.c:5677 [inline] netif_receive_skb_list_internal+0x4e6/0x660 net/core/dev.c:5768 gro_normal_list include/net/gro.h:439 [inline] napi_complete_done+0x1cb/0x450 net/core/dev.c:6108 virtqueue_napi_complete drivers/net/virtio_net.c:465 [inline] virtnet_poll+0x7e5/0xc10 drivers/net/virtio_net.c:2211 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 common_interrupt+0x81/0x90 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:640 crc32_body lib/crc32.c:112 [inline] crc32_le_generic lib/crc32.c:179 [inline] __crc32c_le_base+0x15d/0x520 lib/crc32.c:201 chksum_update+0x32/0x50 crypto/crc32c_generic.c:88 crypto_shash_update+0x46/0x50 crypto/shash.c:70 ext4_chksum fs/ext4/ext4.h:2476 [inline] ext4_inode_bitmap_csum_set+0x129/0x240 fs/ext4/bitmap.c:51 ext4_free_inode+0x520/0x810 fs/ext4/ialloc.c:330 ext4_evict_inode+0xb20/0xdc0 fs/ext4/inode.c:303 evict+0x1aa/0x410 fs/inode.c:665 iput_final fs/inode.c:1739 [inline] iput+0x42c/0x5c0 fs/inode.c:1765 d_delete_notify include/linux/fsnotify.h:301 [inline] vfs_rmdir+0x274/0x2f0 fs/namei.c:4222 do_rmdir+0x194/0x320 fs/namei.c:4268 __do_sys_unlinkat fs/namei.c:4444 [inline] __se_sys_unlinkat fs/namei.c:4438 [inline] __x64_sys_unlinkat+0xa4/0xb0 fs/namei.c:4438 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b write to 0xffffc90000f2fc20 of 4 bytes by task 26776 on cpu 0: __pollwake fs/select.c:198 [inline] pollwake+0xbe/0x110 fs/select.c:218 __wake_up_common kernel/sched/wait.c:89 [inline] __wake_up_common_lock kernel/sched/wait.c:106 [inline] __wake_up_sync_key+0x50/0x80 kernel/sched/wait.c:173 pipe_write+0x962/0xd20 fs/pipe.c:612 call_write_iter include/linux/fs.h:2087 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0x760/0x8d0 fs/read_write.c:590 ksys_write+0xeb/0x1a0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x42/0x50 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b value changed: 0x00000000 -> 0x00000001 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 26776 Comm: syz-fuzzer Not tainted 6.8.0-rc7-syzkaller-00260-gfa4b851b4ad6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 ==================================================================