==================================================================
BUG: KCSAN: data-race in pollwake / pollwake

write to 0xffffc9000157f9e0 of 4 bytes by interrupt on cpu 1:
 __pollwake fs/select.c:195 [inline]
 pollwake+0xb6/0x100 fs/select.c:215
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up_sync_key+0x4f/0x80 kernel/sched/wait.c:173
 sock_def_readable+0x70/0x190 net/core/sock.c:3583
 tcp_data_ready+0x1ae/0x290 net/ipv4/tcp_input.c:5246
 tcp_data_queue+0x15b0/0x3270 net/ipv4/tcp_input.c:5336
 tcp_rcv_established+0xa0f/0xef0 net/ipv4/tcp_input.c:6308
 tcp_v4_do_rcv+0x672/0x740 net/ipv4/tcp_ipv4.c:1925
 tcp_v4_rcv+0x1bd7/0x1f60 net/ipv4/tcp_ipv4.c:2363
 ip_protocol_deliver_rcu+0x397/0x780 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x184/0x220 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:317 [inline]
 ip_local_deliver+0xe8/0x1c0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:469 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:578 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:627 [inline]
 ip_sublist_rcv+0x56b/0x650 net/ipv4/ip_input.c:635
 ip_list_rcv+0x261/0x290 net/ipv4/ip_input.c:669
 __netif_receive_skb_list_ptype net/core/dev.c:6020 [inline]
 __netif_receive_skb_list_core+0x4dc/0x500 net/core/dev.c:6067
 __netif_receive_skb_list net/core/dev.c:6119 [inline]
 netif_receive_skb_list_internal+0x487/0x600 net/core/dev.c:6210
 gro_normal_list include/net/gro.h:532 [inline]
 napi_complete_done+0x1a3/0x410 net/core/dev.c:6580
 virtqueue_napi_complete drivers/net/virtio_net.c:737 [inline]
 virtnet_poll+0x189f/0x1d10 drivers/net/virtio_net.c:3053
 __napi_poll+0x66/0x3a0 net/core/dev.c:7414
 napi_poll net/core/dev.c:7478 [inline]
 net_rx_action+0x391/0x830 net/core/dev.c:7605
 handle_softirqs+0xb7/0x290 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0x3a/0xc0 kernel/softirq.c:680
 common_interrupt+0x83/0x90 arch/x86/kernel/irq.c:285
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
 kcsan_setup_watchpoint+0x415/0x430 kernel/kcsan/core.c:705
 __tlb_remove_folio_pages_size mm/mmu_gather.c:179 [inline]
 __tlb_remove_folio_pages+0x2e/0x220 mm/mmu_gather.c:208
 zap_present_folio_ptes mm/memory.c:1530 [inline]
 zap_present_ptes mm/memory.c:1586 [inline]
 do_zap_pte_range mm/memory.c:1687 [inline]
 zap_pte_range mm/memory.c:1731 [inline]
 zap_pmd_range mm/memory.c:1823 [inline]
 zap_pud_range mm/memory.c:1852 [inline]
 zap_p4d_range mm/memory.c:1873 [inline]
 unmap_page_range+0x1583/0x29a0 mm/memory.c:1894
 unmap_single_vma+0x138/0x1d0 mm/memory.c:1940
 unmap_vmas+0x18a/0x2b0 mm/memory.c:1984
 exit_mmap+0x1b0/0x6c0 mm/mmap.c:1284
 __mmput+0x28/0x1c0 kernel/fork.c:1381
 mmput+0x40/0x50 kernel/fork.c:1404
 exit_mm+0xe4/0x190 kernel/exit.c:595
 do_exit+0x569/0x16f0 kernel/exit.c:947
 do_group_exit+0xff/0x140 kernel/exit.c:1108
 get_signal+0xe59/0xf70 kernel/signal.c:3034
 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop+0x7a/0x100 kernel/entry/common.c:111
 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
 do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffffc9000157f9e0 of 4 bytes by task 22296 on cpu 0:
 __pollwake fs/select.c:195 [inline]
 pollwake+0xb6/0x100 fs/select.c:215
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up_sync_key+0x4f/0x80 kernel/sched/wait.c:173
 anon_pipe_write+0x8ba/0xaa0 fs/pipe.c:595
 io_write+0x612/0xd40 io_uring/rw.c:1160
 __io_issue_sqe+0xfe/0x2e0 io_uring/io_uring.c:1730
 io_issue_sqe+0x53/0x970 io_uring/io_uring.c:1753
 io_queue_sqe io_uring/io_uring.c:1960 [inline]
 io_submit_sqe io_uring/io_uring.c:2216 [inline]
 io_submit_sqes+0x667/0xfd0 io_uring/io_uring.c:2329
 __do_sys_io_uring_enter io_uring/io_uring.c:3396 [inline]
 __se_sys_io_uring_enter+0x1c1/0x1b70 io_uring/io_uring.c:3330
 __x64_sys_io_uring_enter+0x78/0x90 io_uring/io_uring.c:3330
 x64_sys_call+0x28c8/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:427
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 22296 Comm: syz.5.7687 Tainted: G        W           6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================