syzbot

==================================================================
BUG: KCSAN: data-race in ovl_write_iter / security_file_permission

read to 0xffff88812512bd68 of 2 bytes by task 3654 on cpu 0:
 fsnotify_perm include/linux/fsnotify.h:82 [inline]
 security_file_permission+0x157/0x280 security/security.c:1379
 rw_verify_area+0xe1/0x250 fs/read_write.c:399
 do_iter_read+0x19d/0x3d0 fs/read_write.c:928
 vfs_readv+0x9c/0xf0 fs/read_write.c:997
 kernel_readv fs/splice.c:365 [inline]
 default_file_splice_read+0x358/0x590 fs/splice.c:422
 do_splice_to+0xf2/0x130 fs/splice.c:892
 splice_direct_to_actor+0x1b6/0x540 fs/splice.c:971
 do_splice_direct+0x161/0x1e0 fs/splice.c:1080
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x12a/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88812512bd68 of 2 bytes by task 3671 on cpu 1:
 ovl_copyattr fs/overlayfs/overlayfs.h:385 [inline]
 ovl_write_iter+0x127/0x550 fs/overlayfs/file.c:267
 call_write_iter include/linux/fs.h:1902 [inline]
 new_sync_write+0x388/0x4a0 fs/read_write.c:483
 __vfs_write+0xb1/0xc0 fs/read_write.c:496
 __kernel_write+0xb8/0x240 fs/read_write.c:515
 write_pipe_buf+0xb6/0xf0 fs/splice.c:809
 splice_from_pipe_feed fs/splice.c:512 [inline]
 __splice_from_pipe+0x295/0x4a0 fs/splice.c:636
 splice_from_pipe+0xbb/0x100 fs/splice.c:671
 default_file_splice_write+0x45/0x90 fs/splice.c:821
 do_splice_from fs/splice.c:863 [inline]
 direct_splice_actor+0xa0/0xc0 fs/splice.c:1037
 splice_direct_to_actor+0x22b/0x540 fs/splice.c:992
 do_splice_direct+0x161/0x1e0 fs/splice.c:1080
 do_sendfile+0x384/0x7f0 fs/read_write.c:1464
 __do_sys_sendfile64 fs/read_write.c:1525 [inline]
 __se_sys_sendfile64 fs/read_write.c:1511 [inline]
 __x64_sys_sendfile64+0x12a/0x140 fs/read_write.c:1511
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 3671 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================