================================================================== BUG: KCSAN: data-race in pollwake / pollwake write to 0xffffc900005e7c30 of 4 bytes by interrupt on cpu 0: __pollwake fs/select.c:198 [inline] pollwake+0xbe/0x110 fs/select.c:218 __wake_up_common kernel/sched/wait.c:89 [inline] __wake_up_common_lock kernel/sched/wait.c:106 [inline] __wake_up_sync_key+0x50/0x80 kernel/sched/wait.c:173 sock_def_readable+0x70/0x1b0 net/core/sock.c:3338 tcp_data_ready+0x1aa/0x280 net/ipv4/tcp_input.c:5150 tcp_data_queue+0x11c9/0x2d70 net/ipv4/tcp_input.c:5230 tcp_rcv_established+0x8fc/0xef0 net/ipv4/tcp_input.c:6177 tcp_v4_do_rcv+0x2d4/0x630 net/ipv4/tcp_ipv4.c:1906 tcp_v4_rcv+0x1aae/0x1d40 net/ipv4/tcp_ipv4.c:2329 ip_protocol_deliver_rcu+0x356/0x6d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x13c/0x1a0 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] ip_local_deliver+0xec/0x1c0 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:461 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline] ip_sublist_rcv+0x4f0/0x5c0 net/ipv4/ip_input.c:639 ip_list_rcv+0x25e/0x290 net/ipv4/ip_input.c:674 __netif_receive_skb_list_ptype net/core/dev.c:5575 [inline] __netif_receive_skb_list_core+0x356/0x460 net/core/dev.c:5623 __netif_receive_skb_list net/core/dev.c:5675 [inline] netif_receive_skb_list_internal+0x4e6/0x660 net/core/dev.c:5766 gro_normal_list include/net/gro.h:439 [inline] napi_complete_done+0x1cb/0x450 net/core/dev.c:6106 virtqueue_napi_complete drivers/net/virtio_net.c:440 [inline] virtnet_poll+0x7c0/0xae0 drivers/net/virtio_net.c:2158 __napi_poll+0x60/0x3b0 net/core/dev.c:6536 napi_poll net/core/dev.c:6605 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6738 __do_softirq+0xc4/0x279 kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 common_interrupt+0x7f/0x90 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:640 rep_movs_alternative+0x4a/0x70 arch/x86/lib/copy_user_64.S:65 copy_user_generic arch/x86/include/asm/uaccess_64.h:112 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:133 [inline] copy_to_user_iter lib/iov_iter.c:25 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x137/0xb20 lib/iov_iter.c:186 copy_page_to_iter+0x171/0x2b0 lib/iov_iter.c:381 pipe_read+0x298/0x880 fs/pipe.c:337 call_read_iter include/linux/fs.h:2014 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x3c0/0x590 fs/read_write.c:470 ksys_read+0xeb/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b write to 0xffffc900005e7c30 of 4 bytes by task 3922 on cpu 1: __pollwake fs/select.c:198 [inline] pollwake+0xbe/0x110 fs/select.c:218 __wake_up_common kernel/sched/wait.c:89 [inline] __wake_up_common_lock kernel/sched/wait.c:106 [inline] __wake_up_sync_key+0x50/0x80 kernel/sched/wait.c:173 pipe_write+0x962/0xd20 fs/pipe.c:605 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x48a/0x790 fs/read_write.c:584 ksys_write+0xeb/0x1a0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x42/0x50 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b value changed: 0x00000000 -> 0x00000001 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3922 Comm: syz-fuzzer Not tainted 6.7.0-rc6-syzkaller-00168-g9a6b294ab496 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 ==================================================================