==================================================================
BUG: KCSAN: data-race in pollwake / pollwake

write to 0xffffc9000141f9e0 of 4 bytes by interrupt on cpu 1:
 __pollwake fs/select.c:195 [inline]
 pollwake+0xb6/0x100 fs/select.c:215
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up_sync_key+0x52/0x80 kernel/sched/wait.c:173
 sock_def_readable+0x70/0x190 net/core/sock.c:3583
 tcp_data_ready+0x1ae/0x290 net/ipv4/tcp_input.c:5261
 tcp_data_queue+0x15b0/0x3290 net/ipv4/tcp_input.c:5351
 tcp_rcv_established+0xa0f/0xef0 net/ipv4/tcp_input.c:6323
 tcp_v4_do_rcv+0x672/0x740 net/ipv4/tcp_ipv4.c:1925
 tcp_v4_rcv+0x1bd7/0x1f60 net/ipv4/tcp_ipv4.c:2363
 ip_protocol_deliver_rcu+0x397/0x780 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x184/0x220 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:317 [inline]
 ip_local_deliver+0xe8/0x1c0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:469 [inline]
 ip_sublist_rcv_finish net/ipv4/ip_input.c:579 [inline]
 ip_list_rcv_finish net/ipv4/ip_input.c:628 [inline]
 ip_sublist_rcv+0x56b/0x650 net/ipv4/ip_input.c:636
 ip_list_rcv+0x261/0x290 net/ipv4/ip_input.c:670
 __netif_receive_skb_list_ptype net/core/dev.c:6020 [inline]
 __netif_receive_skb_list_core+0x4dc/0x500 net/core/dev.c:6067
 __netif_receive_skb_list net/core/dev.c:6119 [inline]
 netif_receive_skb_list_internal+0x487/0x600 net/core/dev.c:6210
 gro_normal_list include/net/gro.h:532 [inline]
 napi_complete_done+0x1a3/0x410 net/core/dev.c:6580
 virtqueue_napi_complete drivers/net/virtio_net.c:737 [inline]
 virtnet_poll+0x18c5/0x1d10 drivers/net/virtio_net.c:3076
 __napi_poll+0x63/0x3a0 net/core/dev.c:7414
 napi_poll net/core/dev.c:7478 [inline]
 net_rx_action+0x391/0x830 net/core/dev.c:7605
 handle_softirqs+0xb7/0x290 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0x3a/0xc0 kernel/softirq.c:680
 common_interrupt+0x83/0x90 arch/x86/kernel/irq.c:285
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
 kcsan_setup_watchpoint+0x415/0x430 kernel/kcsan/core.c:705
 string_nocheck lib/vsprintf.c:643 [inline]
 string+0x187/0x220 lib/vsprintf.c:721
 vsnprintf+0x532/0x890 lib/vsprintf.c:2874
 audit_log_vformat+0x210/0x4b0 kernel/audit.c:1978
 audit_log_format+0x8d/0xc0 kernel/audit.c:2012
 avc_audit_post_callback+0x162/0x520 security/selinux/avc.c:715
 common_lsm_audit+0x1bb/0x230 security/lsm_audit.c:454
 slow_avc_audit+0x104/0x140 security/selinux/avc.c:779
 avc_audit security/selinux/include/avc.h:127 [inline]
 avc_has_perm+0x128/0x150 security/selinux/avc.c:1198
 inode_has_perm security/selinux/hooks.c:1681 [inline]
 file_path_has_perm security/selinux/hooks.c:1731 [inline]
 selinux_file_open+0x2df/0x330 security/selinux/hooks.c:4117
 security_file_open+0x36/0x70 security/security.c:3114
 do_dentry_open+0x204/0xa20 fs/open.c:941
 vfs_open+0x37/0x1e0 fs/open.c:1094
 do_open fs/namei.c:3896 [inline]
 path_openat+0x1c5e/0x2170 fs/namei.c:4055
 do_filp_open+0x109/0x230 fs/namei.c:4082
 do_sys_openat2+0xa6/0x110 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1463
 x64_sys_call+0x1af/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffffc9000141f9e0 of 4 bytes by task 3309 on cpu 0:
 __pollwake fs/select.c:195 [inline]
 pollwake+0xb6/0x100 fs/select.c:215
 __wake_up_common kernel/sched/wait.c:89 [inline]
 __wake_up_common_lock kernel/sched/wait.c:106 [inline]
 __wake_up_sync_key+0x52/0x80 kernel/sched/wait.c:173
 anon_pipe_write+0x8ba/0xaa0 fs/pipe.c:594
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x49d/0x8e0 fs/read_write.c:686
 ksys_write+0xda/0x1a0 fs/read_write.c:738
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:746
 x64_sys_call+0x2cdd/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================