syzbot

EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
==================================================================
BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru

read-write to 0xffff888237c2aca8 of 1 bytes by task 5665 on cpu 0:
 folio_batch_add include/linux/pagevec.h:77 [inline]
 __folio_batch_add_and_move mm/swap.c:225 [inline]
 folio_add_lru+0xa3/0x1f0 mm/swap.c:513
 folio_add_lru_vma+0x48/0x60 mm/swap.c:532
 wp_page_copy mm/memory.c:3421 [inline]
 do_wp_page+0x17a5/0x2340 mm/memory.c:3745
 handle_pte_fault mm/memory.c:5782 [inline]
 __handle_mm_fault mm/memory.c:5909 [inline]
 handle_mm_fault+0xc47/0x2aa0 mm/memory.c:6077
 do_user_addr_fault arch/x86/mm/fault.c:1389 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x296/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
 __put_user_nocheck_4+0x7/0x20 arch/x86/lib/putuser.S:95
 ____sys_recvmsg+0x1a3/0x280 net/socket.c:2814
 ___sys_recvmsg net/socket.c:2843 [inline]
 do_recvmmsg+0x2aa/0x6d0 net/socket.c:2938
 __sys_recvmmsg net/socket.c:3012 [inline]
 __do_sys_recvmmsg net/socket.c:3035 [inline]
 __se_sys_recvmmsg net/socket.c:3028 [inline]
 __x64_sys_recvmmsg+0xe2/0x170 net/socket.c:3028
 x64_sys_call+0x2a9a/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:300
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237c2aca8 of 1 bytes by task 3321 on cpu 1:
 folio_batch_count include/linux/pagevec.h:56 [inline]
 cpu_needs_drain mm/swap.c:772 [inline]
 __lru_add_drain_all+0x136/0x3f0 mm/swap.c:866
 lru_add_drain_all+0x10/0x20 mm/swap.c:882
 invalidate_bdev+0x47/0x70 block/bdev.c:101
 ext4_put_super+0x571/0x840 fs/ext4/super.c:1356
 generic_shutdown_super+0xe5/0x220 fs/super.c:642
 kill_block_super+0x2a/0x70 fs/super.c:1710
 ext4_kill_sb+0x44/0x80 fs/ext4/super.c:7379
 deactivate_locked_super+0x7d/0x1c0 fs/super.c:473
 deactivate_super+0x9f/0xb0 fs/super.c:506
 cleanup_mnt+0x268/0x2e0 fs/namespace.c:1373
 __cleanup_mnt+0x19/0x20 fs/namespace.c:1380
 task_work_run+0x13a/0x1a0 kernel/task_work.c:239
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xa8/0x120 kernel/entry/common.c:218
 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x19 -> 0x1a

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
==================================================================