==================================================================
BUG: KCSAN: data-race in pollwake / pollwake

write to 0xffffc900006ebc30 of 4 bytes by interrupt on cpu 0:
 __pollwake fs/select.c:198 [inline]
 pollwake+0xbe/0x110 fs/select.c:218
 __wake_up_common+0xb3/0x130 kernel/sched/wait.c:107
 __wake_up_common_lock kernel/sched/wait.c:138 [inline]
 __wake_up_sync_key+0x82/0xc0 kernel/sched/wait.c:213
 sock_def_readable+0x70/0x1b0 net/core/sock.c:3324
 tcp_data_ready+0x1aa/0x280 net/ipv4/tcp_input.c:5034
 tcp_data_queue+0x1327/0x2b80 net/ipv4/tcp_input.c:5114
 tcp_rcv_established+0x60c/0xea0 net/ipv4/tcp_input.c:6053
 tcp_v4_do_rcv+0x2d4/0x630 net/ipv4/tcp_ipv4.c:1728
 tcp_v4_rcv+0x1ade/0x1d60 net/ipv4/tcp_ipv4.c:2150
 ip_protocol_deliver_rcu+0x356/0x6d0 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x13c/0x1a0 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:304 [inline]
 ip_local_deliver+0xec/0x1c0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:468 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline]
 ip_sublist_rcv+0x4f0/0x5c0 net/ipv4/ip_input.c:639
 ip_list_rcv+0x25e/0x290 net/ipv4/ip_input.c:674
 __netif_receive_skb_list_ptype net/core/dev.c:5570 [inline]
 __netif_receive_skb_list_core+0x356/0x460 net/core/dev.c:5618
 __netif_receive_skb_list net/core/dev.c:5670 [inline]
 netif_receive_skb_list_internal+0x4e6/0x660 net/core/dev.c:5761
 gro_normal_list include/net/gro.h:439 [inline]
 napi_complete_done+0x1cb/0x450 net/core/dev.c:6101
 virtqueue_napi_complete drivers/net/virtio_net.c:440 [inline]
 virtnet_poll+0x7f4/0xb40 drivers/net/virtio_net.c:2155
 __napi_poll+0x60/0x3b0 net/core/dev.c:6531
 napi_poll net/core/dev.c:6598 [inline]
 net_rx_action+0x32b/0x750 net/core/dev.c:6731
 __do_softirq+0xc1/0x265 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644
 common_interrupt+0x7f/0x90 arch/x86/kernel/irq.c:247
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636
 clear_page_erms+0xb/0x10 arch/x86/lib/clear_page_64.S:49
 clear_page arch/x86/include/asm/page_64.h:53 [inline]
 clear_highpage_kasan_tagged include/linux/highmem.h:248 [inline]
 kernel_init_pages mm/page_alloc.c:1071 [inline]
 post_alloc_hook mm/page_alloc.c:1534 [inline]
 prep_new_page+0x5a/0x1a0 mm/page_alloc.c:1543
 get_page_from_freelist+0x1375/0x13c0 mm/page_alloc.c:3170
 __alloc_pages+0x193/0x340 mm/page_alloc.c:4426
 vma_alloc_folio+0x6a3/0x8c0 mm/mempolicy.c:2258
 wp_page_copy mm/memory.c:3070 [inline]
 do_wp_page+0x677/0x1ee0 mm/memory.c:3449
 handle_pte_fault mm/memory.c:4994 [inline]
 __handle_mm_fault mm/memory.c:5119 [inline]
 handle_mm_fault+0xe2a/0x2cc0 mm/memory.c:5284
 do_user_addr_fault arch/x86/mm/fault.c:1364 [inline]
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x3ff/0x6c0 arch/x86/mm/fault.c:1561
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570

write to 0xffffc900006ebc30 of 4 bytes by task 3092 on cpu 1:
 __pollwake fs/select.c:198 [inline]
 pollwake+0xbe/0x110 fs/select.c:218
 __wake_up_common+0xb3/0x130 kernel/sched/wait.c:107
 __wake_up_common_lock kernel/sched/wait.c:138 [inline]
 __wake_up_sync_key+0x82/0xc0 kernel/sched/wait.c:213
 pipe_write+0x9db/0xdb0 fs/pipe.c:595
 call_write_iter include/linux/fs.h:1956 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x4ab/0x7d0 fs/read_write.c:584
 ksys_write+0xeb/0x1a0 fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __x64_sys_write+0x42/0x50 fs/read_write.c:646
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 3092 Comm: syz-fuzzer Not tainted 6.6.0-rc6-syzkaller-00045-g7cf4bea77ab6 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
==================================================================